Vitality Hub
Vitality Hub Edinburgh · UK
Dark botanical leaves under warm light
Legal Document

Privacy Policy

How Vitality Hub collects, uses, and safeguards your personal information when you visit our site or place an order. We are committed to protecting your privacy in accordance with UK data protection laws.

Last updated: 28 August 2026 Read the full policy below

This Privacy Policy describes how Vitality Hub (vitalityhub.info) collects, uses, and discloses your personal information when you visit or make a purchase from our site.

We are committed to protecting the privacy of our users in accordance with UK data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy explains what data we collect, why we collect it, how long we keep it, and the choices you have.

01

Information We Collect

When you visit the site, we collect certain information about your device, your interaction with the site, and information necessary to process your purchases. We may also collect additional information if you contact us for customer support.

  • Contact details — your name, email address, phone number, shipping address, and billing address.
  • Transaction data — payment information needed to process your order, including billing details and order history.
  • Technical data — IP address, browser type, operating system, and pages you visit, collected automatically when you browse the site.
  • Communications — the content of messages you send us when you contact customer support or respond to our emails.

We do not collect more data than we need to operate the store, fulfill your orders, and respond to your enquiries. Where possible, we minimise the data collected during browsing and only request personal details at the point of checkout or when you choose to contact us.

02

How We Use Your Personal Information

We use your personal information to provide our services to you. This includes offering products for sale, processing payments, shipping and fulfillment of your order, and keeping you up to date on new products, services, and offers.

Performance of a contract

Processing your order, arranging delivery, and handling payments so we can supply the products you purchased.

Legal obligation

Keeping records for tax and accounting purposes as required under UK law.

Legitimate interests

Improving our site, preventing fraud, and sending you information about products and offers where you have agreed to receive marketing communications.

Consent

Where you have explicitly agreed to receive marketing emails or allow non-essential cookies. You can withdraw consent at any time.

We will not use your personal information for any purpose that is incompatible with the reasons for which it was originally collected. If we intend to use your data for a new purpose, we will update this policy and seek your consent where required.

03

Sharing Personal Information

We share your personal information with service providers to help us provide our services and fulfill our contracts with you, as described above. For example, we use payment processors and shipping companies to deliver your orders.

  • Payment processors — to handle card payments securely. We do not store full card details on our servers.
  • Shipping and logistics — couriers who deliver your order. They receive your name, address, and contact details.
  • Analytics providers — to help us understand how visitors use the site so we can improve it. Any data shared is aggregated or pseudonymised where possible.
  • Email service providers — to send order confirmations and, where you have consented, marketing communications.

We may also share your information to comply with applicable laws and regulations, to respond to a subpoena, search warrant, or other lawful request for information we receive, or to otherwise protect our rights.

We do not sell your personal information to third parties. Our service providers act on our instructions and are bound by obligations of confidentiality. We only share data with them as far as is necessary to deliver the service you have requested.

04

Your Rights Under UK Law

If you are a resident of the United Kingdom, you have the right to access the personal information we hold about you, to port it to a new service, and to ask that your personal information be corrected, updated, or erased.

  • Right of access — request a copy of the personal data we hold about you.
  • Right to rectification — ask us to correct inaccurate or incomplete data.
  • Right to erasure — ask us to delete your personal data where there is no compelling reason to continue processing it.
  • Right to data portability — receive your data in a structured, machine-readable format and transfer it to another service.
  • Right to object — object to processing based on legitimate interests or for direct marketing.
  • Right to withdraw consent — withdraw consent for marketing emails or non-essential cookies at any time.

If you would like to exercise any of these rights, please contact us through the contact information provided below. We will respond to your request within one month, as required by UK GDPR.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent authority for data protection. You can contact the ICO at ico.org.uk or by calling their helpline.

05

Data Retention

When you place an order through the site, we will retain your personal information for our records unless and until you ask us to erase this information. We maintain this data to facilitate future orders and to comply with tax and accounting regulations in the UK.

  • Order records — retained for up to six years to meet UK tax and accounting obligations.
  • Account data — kept for as long as your account is active, and deleted upon request if you close your account.
  • Marketing data — retained until you unsubscribe or withdraw consent, at which point it is removed from our marketing lists.
  • Support communications — kept for a reasonable period after your enquiry is resolved, then deleted.

You can ask us to erase your personal information at any time. We will comply with your request unless we are legally required to retain the data, for example to meet tax record obligations. When the retention period expires, we securely delete or anonymise the data.

06

Security of Your Data

We take reasonable precautions and follow industry best practices to make sure your personal information is not inappropriately lost, misused, accessed, disclosed, altered, or destroyed. Our website uses Secure Sockets Layer (SSL) technology to encrypt information during transmission.

In practice, this means:

  • All data sent between your browser and our site is encrypted using SSL during transit.
  • Payment card details are handled by our payment processor and are not stored on our own servers.
  • Access to personal data within our organisation is restricted to staff who need it to perform their duties.
  • We regularly review our systems and processes to identify and address potential vulnerabilities.

No method of transmission over the internet or electronic storage is completely secure. While we cannot guarantee absolute security, we work to protect your personal information using measures appropriate to the nature of the data and the risk involved.

07

Contact Us

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by email or by mail using the details provided below.

Postal Address

Vitality Hub
21 Princes Street
Edinburgh EH2 2BY
United Kingdom

Working Hours

Mon–Fri 09:00 — 18:00

Sat 10:00 — 16:00

Questions about your data?

If you have a question about how we handle your personal information or want to exercise one of your data protection rights, our team is ready to help.