Privacy Policy

Effective Date: September 1, 2026

1. Introduction

Welcome to Vitala ("Vitala," "we," "us," or "our").

We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, disclose, and otherwise process your personal information when you visit or make a purchase from our website, interact with our services, or communicate with us.

Vitala is an online health and wellness store that sells products to customers internationally through a dropshipping business model.

For purposes of applicable data protection laws, including the General Data Protection Regulation ("GDPR"), Vitala may act as the data controller of your personal data where we determine the purposes and means of processing that information.

Business Name: Vitala
Business Address: 7120 Hayman Street, Groves, Texas, United States
Email: thevitala.shop@gmail.com

Please read this Privacy Policy carefully. By using our website or purchasing our products, you acknowledge the practices described in this Policy.

2. Personal Data We Collect

Depending on how you interact with Vitala, we may collect the following categories of personal data.

A. Information You Provide Directly

When you place an order, contact us, create an account, subscribe to communications, or otherwise interact with us, we may collect:

• Your full name;

• Email address;

• Billing address;

• Shipping address;

• Telephone number;

• Account information, where applicable;

• Order and transaction information;

• Communications you send to us;

• Information you provide when requesting customer support; and

• Any other information you voluntarily provide to us.

B. Payment Information

When you make a purchase, payments may be processed through third-party payment providers and payment methods available through our website, which may include:

• Credit and debit cards;

• PayPal;

• Klarna;

• Afterpay;

• Tap to Pay; and

• Google Pay.

We generally do not intentionally store complete payment card numbers or other sensitive payment credentials when those details are processed directly by our authorized payment service providers.

Your payment information is handled according to the applicable privacy policies and security practices of the relevant payment provider.

C. Automatically Collected Information

When you visit our website, we may automatically collect certain technical and usage information, including:

• Internet Protocol (IP) address;

• Browser type and version;

• Device type;

• Operating system;

• Approximate geographic location;

• Pages viewed;

• Dates and times of visits;

• Referring and exit pages;

• Website interactions;

• Session and browsing information; and

• Information collected through cookies and similar technologies.

D. Information From Third Parties

We may receive information from third-party service providers, including payment processors, website service providers, advertising providers, analytics providers, shipping providers, and dropshipping suppliers, where permitted by applicable law.

3. How We Use Your Personal Data

We may use your personal data for the following purposes:

To Process and Fulfill Orders

We use personal information to:

• Process purchases;

• Confirm orders;

• Process payments;

• Arrange shipping and delivery;

• Provide order updates;

• Handle returns, refunds, and customer service requests; and

• Communicate with you regarding your purchase.

To Operate and Improve Our Website

We may use information to:

• Maintain and operate our website;

• Improve website functionality and user experience;

• Analyze website usage and performance;

• Troubleshoot technical issues; and

• Protect the security and integrity of our services.

To Communicate With You

We may use your contact information to:

• Respond to your inquiries;

• Provide customer support;

• Send transactional communications;

• Send important service-related notices; and

• Where permitted by law, send marketing and promotional communications.

You may opt out of marketing communications at any time by following the unsubscribe instructions included in the communication or by contacting us.

To Protect Our Business and Customers

We may process personal information to:

• Prevent fraud;

• Detect and investigate suspicious or unlawful activity;

• Protect our rights and property;

• Enforce our policies and agreements; and

• Comply with applicable legal obligations.

4. Legal Bases for Processing Under the GDPR

Where the GDPR applies, we process your personal data only when we have a lawful basis to do so.

Depending on the circumstances, our legal bases may include:

Contractual Necessity

We process personal data when necessary to perform a contract with you or to take steps at your request before entering into a contract, including processing orders and delivering purchased products.

Legitimate Interests

We may process personal data when necessary for our legitimate business interests, provided those interests are not overridden by your fundamental rights and freedoms.

Examples may include:

• Improving our website and services;

• Preventing fraud;

• Maintaining security;

• Managing our business operations; and

• Understanding how customers use our website.

Consent

Where required by law, we may rely on your consent, including for certain cookies and marketing communications.

You may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before consent was withdrawn.

Legal Obligations

We may process personal data when necessary to comply with legal, regulatory, accounting, tax, or other legal obligations.

5. Cookies and Similar Technologies

Vitala uses cookies and similar technologies to help operate our website and improve your experience.

Cookies are small files that may be stored on your device when you visit a website.

We may use cookies for purposes including:

• Essential website functionality;

• Security and fraud prevention;

• Remembering preferences;

• Maintaining shopping cart functionality;

• Understanding website performance;

• Analytics; and

• Marketing, where applicable and permitted by law.

Types of Cookies

Strictly Necessary Cookies

These cookies are necessary for the website to function properly and generally cannot be disabled through our website's cookie preference tools.

Functional Cookies

These cookies help remember your preferences and improve your browsing experience.

Analytics Cookies

These cookies help us understand how visitors interact with our website and assist us in improving its performance.

Marketing Cookies

Where used, these cookies may help measure advertising performance and deliver more relevant advertising.

Managing Cookies

Where required by applicable law, we will request your consent before placing non-essential cookies on your device.

You may also manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

6. Third-Party Service Providers

We use third-party service providers to help operate our business and provide services to our customers.

Depending on how you use our website, these providers may include:

Wix

Our website is built and hosted using Wix and related Wix services. Wix may process certain personal data on our behalf in connection with website hosting, website functionality, customer management, and related services.

Payment Providers

Payments may be processed through providers and services supporting:

• Credit and debit card payments;

• PayPal;

• Klarna;

• Afterpay;

• Tap to Pay; and

• Google Pay.

The specific payment options available to you may depend on your location, device, and the services available at checkout.

Dropshipping Suppliers and Fulfillment Partners

Because Vitala operates using a dropshipping model, we may share information necessary to fulfill your order with our suppliers, manufacturers, fulfillment partners, and shipping providers.

This information may include:

• Your name;

• Shipping address;

• Contact information, where necessary;

• Products ordered; and

• Other information required to process and deliver your order.

We require service providers, where appropriate, to handle personal data in accordance with applicable contractual and legal requirements.

Other Service Providers

We may also use third-party providers for:

• Website hosting and technology;

• Analytics;

• Email communications;

• Customer support;

• Fraud prevention;

• Shipping and logistics; and

• Business operations.

We do not sell your personal data in exchange for money.

7. How We Share Personal Data

We may share your personal data with:

• Website and technology service providers;

• Wix and related service providers;

• Payment processors;

• Dropshipping suppliers and fulfillment partners;

• Shipping and logistics providers;

• Analytics and marketing providers, where applicable;

• Professional advisers;

• Government authorities or law enforcement agencies when legally required; and

• Other parties in connection with a business transaction, merger, acquisition, restructuring, or sale of assets.

We share personal data only when reasonably necessary for the purposes described in this Privacy Policy or when otherwise required or permitted by law.

8. International Data Transfers

Vitala sells products and provides services to customers internationally. As a result, your personal data may be transferred to, stored in, or processed in countries outside your country of residence.

This may include transfers to the United States and other countries where our service providers, payment processors, dropshipping suppliers, fulfillment partners, or technology providers operate.

Where the GDPR applies and personal data is transferred outside the European Economic Area ("EEA"), the United Kingdom, or Switzerland, we will take appropriate steps to ensure that such transfers are made in accordance with applicable data protection laws.

Depending on the circumstances, appropriate safeguards may include:

• Transfers to countries recognized by the relevant authorities as providing an adequate level of data protection;

• Standard Contractual Clauses approved by the European Commission;

• The UK International Data Transfer Agreement or other applicable UK transfer mechanisms;

• Appropriate technical, organizational, and contractual safeguards; or

• Another lawful transfer mechanism permitted under applicable law.

Because Vitala uses Wix and other international service providers, personal information may be processed in multiple jurisdictions.

9. Data Retention

We retain personal data only for as long as reasonably necessary to fulfill the purposes for which it was collected, including:

• Processing and fulfilling orders;

• Providing customer support;

• Maintaining business and financial records;

• Complying with legal and tax obligations;

• Resolving disputes; and

• Enforcing our agreements.

The appropriate retention period depends on the type of information and the reason we process it.

When personal data is no longer necessary for the purposes described in this Privacy Policy, we will delete, anonymize, or securely dispose of it, unless a longer retention period is required or permitted by law.

10. Your Rights Under the GDPR

If the GDPR applies to you, you may have certain rights regarding your personal data.

These rights may include:

Right of Access

You may request confirmation of whether we process your personal data and request access to that information.

Right to Rectification

You may request that inaccurate or incomplete personal data be corrected.

Right to Erasure

You may request the deletion of your personal data in certain circumstances.

This is sometimes referred to as the "right to be forgotten."

Right to Restrict Processing

You may request that we restrict the processing of your personal data in certain circumstances.

Right to Data Portability

Where applicable, you may request a copy of certain personal data in a structured, commonly used, and machine-readable format and may request that it be transferred to another organization where technically feasible.

Right to Object

You may object to certain processing of your personal data, including processing based on legitimate interests.

You may also object to the processing of your personal data for direct marketing purposes.

Right to Withdraw Consent

Where we rely on your consent to process personal data, you may withdraw that consent at any time.

Withdrawal of consent does not affect the lawfulness of processing that occurred before consent was withdrawn.

Rights Related to Automated Decision-Making

You may have rights regarding decisions based solely on automated processing, including profiling, where such processing produces legal or similarly significant effects.

Vitala does not intentionally engage in solely automated decision-making that produces legal or similarly significant effects on customers unless otherwise disclosed and permitted by applicable law.

11. How to Exercise Your Privacy Rights

To exercise any applicable privacy rights, please contact us at:

Email: thevitala.shop@gmail.com

Please include sufficient information to allow us to verify your identity and process your request.

We may request additional information where reasonably necessary to confirm your identity and protect your personal data from unauthorized access.

We will respond to requests in accordance with applicable data protection laws.

12. Right to Lodge a Complaint

If you are located in the European Economic Area or another jurisdiction providing similar rights, you may have the right to lodge a complaint with a relevant data protection supervisory authority.

We encourage you to contact us first so that we may attempt to resolve your concerns directly.

However, your right to contact or lodge a complaint with a competent supervisory authority remains unaffected.

13. Data Security

We take reasonable and appropriate technical, administrative, and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, disclosure, or destruction.

However, no method of transmitting information over the internet or storing electronic information is completely secure.

While we strive to protect your personal information, we cannot guarantee absolute security.

You are also responsible for taking reasonable steps to protect your account credentials and devices.

14. Children's Privacy

Vitala is not intended for individuals who are under the age required to provide valid consent under applicable data protection laws.

We do not knowingly collect personal data from children in violation of applicable law.

If you believe that a child has provided us with personal information without appropriate authorization, please contact us at:

thevitala.shop@gmail.com

If required by applicable law, we will take appropriate steps to delete such information.

15. Health and Wellness Information

Vitala sells health and wellness products. Unless specifically stated otherwise, our website is not intended to collect sensitive health information or provide medical diagnosis or treatment.

Please do not submit sensitive medical information to us unless we specifically request it and have provided an appropriate lawful basis and privacy notice for processing that information.

Any health and wellness information provided on our website is intended for general informational and commercial purposes and should not be considered a substitute for professional medical advice.

16. Third-Party Websites

Our website may contain links to third-party websites, services, or platforms.

We are not responsible for the privacy practices, content, or security of third-party websites.

We encourage you to review the privacy policies of any third-party service before providing them with personal information.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

• Our business practices;

• Our services;

• Technology;

• Legal requirements; or

• Other operational reasons.

When we make changes, we will update the "Effective Date" at the top of this Privacy Policy.

We encourage you to review this Privacy Policy periodically.

Where required by law, we will provide additional notice or obtain consent before material changes take effect.

18. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our handling of your personal data, please contact us:

Vitala
7120 Hayman Street
Groves, Texas, United States

Email: thevitala.shop@gmail.com

19. Additional Information for International Customers

Because Vitala serves customers internationally, privacy laws may vary depending on your country or region.

We aim to process personal data in accordance with applicable data protection laws relevant to our operations and customers. Where additional privacy rights apply under local law, customers may contact us using the contact information provided above to request information about their rights.

Nothing in this Privacy Policy is intended to limit any rights that you may have under applicable law.