1. Introduction
This policy explains what personal data VitMax.uk collects, why we collect it, how we use it, and your rights under UK law. We operate under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Data Controller
VitMax operates vitmax.uk. For data protection questions, contact us at admin@vitmax.uk.
We are not registered with the Information Commissioner’s Office (ICO) as we do not process personal data at a scale that requires registration. If this changes, we will update this policy.
3. Data We Collect
Data you provide directly:
- Name and email address, if you subscribe to our newsletter
- Any information you include when contacting us via admin@vitmax.uk
Data collected automatically:
- IP address, for security and analytics
- Browser type, device type, and pages visited, via Google Analytics
- Cookie preferences, recorded by CookieYes
We do not collect sensitive personal data such as health conditions, financial details, or payment information.
4. Legal Basis for Processing
| Data | Purpose | Legal basis |
|---|---|---|
| Email address | Newsletter delivery | Consent (UK GDPR Art. 6(1)(a)) |
| IP address, usage data | Analytics | Legitimate interests (Art. 6(1)(f)) |
| Cookie preferences | Compliance with PECR | Legal obligation (Art. 6(1)(c)) |
| Contact enquiries | Responding to you | Legitimate interests (Art. 6(1)(f)) |
5. How We Use Your Data
We use data to:
- Analyse site traffic and improve content
- Deliver newsletters, if you have subscribed
- Respond to contact enquiries
- Record and honour your cookie preferences
We do not sell your data. We do not share it with third parties for advertising.
6. Third-Party Services
We use the following third-party services that process data on our behalf:
Google Analytics and Google Tag Manager — track site usage. Data is processed by Google LLC in the United States under Standard Contractual Clauses. See Google’s Privacy Policy at policies.google.com.
Amazon Associates — when you click an affiliate link, Amazon sets its own cookies and processes data under its own privacy policy at amazon.co.uk/privacy.
CookieYes — records your cookie consent preferences. See cookieyes.com/privacy-policy.
These services operate under their own privacy policies. We are not responsible for their data practices.
7. International Data Transfers
Google Analytics transfers data to the United States. Google applies Standard Contractual Clauses approved under UK GDPR to protect this data. We do not transfer your personal data to any other countries.
8. Data Retention
| Data | Retention period |
|---|---|
| Newsletter email addresses | Until you unsubscribe |
| Contact enquiry emails | 12 months |
| Analytics data (Google Analytics) | 14 months (default setting) |
| Cookie consent records | 12 months |
9. Your Rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data, where applicable
- Restrict or object to processing
- Withdraw consent at any time, without affecting the lawfulness of prior processing
- Lodge a complaint with the ICO at ico.org.uk or by calling 0303 123 1113
To exercise any of these rights, email admin@vitmax.uk. We respond within 30 days.
10. Cookies
We use cookies as described in our Cookie Policy at vitmax.uk/cookie-policy. You control cookie categories via the banner on your first visit or the cookie settings link in the footer.
11. Data Security
We use secure hosting and HTTPS encryption. No online system is completely immune to breaches. In the event of a breach that poses risk to your rights, we will notify affected individuals and the ICO as required by UK GDPR.
12. Changes to This Policy
We update this policy when our data practices change. The date at the top shows when we last made changes. We do not treat continued use of the site as consent to updated terms. Where changes are material, we will notify newsletter subscribers by email.
13. Contact
Email: admin@vitmax.uk Contact form: Contact us