Privacy policy
What we collect, why, and what you can ask us to do with it.
Last updated: 24 August 2026
VitaLab Limited is the data controller for personal data collected through this site. We are registered in England and Wales. This policy explains what we collect, how we use it, and your rights under the UK GDPR and the Data Protection Act 2018.
1. What we collect
| Contact detailsName, email, delivery and billing address | |
| Order informationWhat you bought, when, order value, subscription status | |
| Payment informationHandled by our payment processor. We never see or store full card numbers | |
| CorrespondenceMessages you send us and our replies | |
| Technical dataIP address, browser, device, pages viewed, referring site | |
| Marketing preferencesWhether you have opted in to emails |
We do not ask for or knowingly collect health information. Please don't send us medical details — if you have a health question, speak to your doctor or pharmacist.
2. Why we use it, and our lawful basis
- To fulfil your order — performance of a contract
- To manage subscriptions and take payment — performance of a contract
- To answer your questions — legitimate interests
- To send marketing emails — consent, which you can withdraw at any time
- To improve the site — consent for non-essential cookies
- To meet legal and accounting obligations — legal obligation
- To prevent fraud — legitimate interests
3. Who we share it with
We do not sell your data. We share it only with providers who need it to deliver our service: Shopify for the store and checkout; payment processors; Royal Mail and fulfilment partners; our email provider; and analytics and advertising providers where you have consented.
Some providers process data outside the UK or EEA. Where they do, transfers are protected by UK adequacy regulations or standard contractual clauses.
4. Cookies
Essential cookies keep the site and checkout working and cannot be switched off. Analytics and advertising cookies are used only with your consent, which you can change at any time through the cookie banner or your browser settings.
5. How long we keep it
| Order and transaction recordsTo meet HMRC requirements | 7 years |
| Account and marketing dataUntil you ask us to delete it | |
| Correspondence | 2 years |
| Analytics dataPer the provider's retention settings |
6. Your rights
You can ask us to give you a copy of your data, correct anything inaccurate, delete it where we have no obligation to keep it, restrict or object to how we use it, transfer it to another provider, or stop sending marketing at any time.
Email enquiries@vitalab.uk and we will respond within one month. If you are unhappy with our response you can complain to the Information Commissioner's Office at ico.org.uk.
7. Security
Data is transmitted over encrypted connections. Checkout runs through Shopify Payments, which is PCI DSS Level 1 compliant. Access to personal data within our business is limited to those who need it.
8. Children
Our products are for adults. We do not knowingly collect data from anyone under 18. If you believe we have, contact us and we will delete it.
9. Changes
We may update this policy. The date at the top shows when it last changed.
10. Contact
VitaLab Limited, 86–90 Paul Street, London EC2A 4NE, United Kingdom.
Email enquiries@vitalab.uk.
VitaLab products are food supplements and should not be used as a substitute for a varied, balanced diet and a healthy lifestyle.