Privacy Policy

Who we are

The Essential Vitamin Ltd. (“essentiVit”, “we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy describes how we collect, use, and protect your personal information when you visit or use our website at essentivit.com (“the Website”).

What personal data we collect and why we collect it

Information we collect

When you use the Website or interact with us, we may collect and process the following personal information about you:

• Information you provide to us, such as your name, email address, mailing address, and phone number, when you: create an account on the Website; make a purchase; sign up for newsletters or promotional materials; participate in surveys, contests, or promotions; contact our customer support.
• Information we automatically collect when you visit the Website, such as your IP address, browser type, operating system, and browsing behaviour.
• Information from third parties, such as social media platforms or payment service providers, when you connect or interact with us through these platforms.

How we use your information

We use your personal information for the following purposes:

• To provide, maintain, and improve the Website and our products and services;
• To process and fulfil orders, including shipping and billing;
• To communicate with you about your account, orders, and customer service inquiries;
• To send you newsletters, promotional materials, and other marketing communications;
• To analyse and monitor Website usage and improve user experience;
• To prevent and detect fraud, security breaches, and other potentially harmful activities;
• To comply with legal obligations and enforce our terms and conditions.

Legal basis for processing

We process your personal information on the following legal bases:

• Your consent, for example, when you sign up for our newsletters or agree to receive promotional materials;
• The performance of a contract, for example, to process and fulfill your orders;
• Our legitimate interests, such as improving our products and services, preventing fraud, and complying with legal obligations.

Contact Forms

On the Website, we provide a “Contact Us” form for users to reach out to us with their questions, concerns, or feedback. When submitting a contact form, users may be asked to provide personal data such as their name, email address, and any additional information they choose to include in the message field.

We use the information collected through the contact form solely for the purpose of responding to user inquiries and addressing their concerns. We retain contact form submissions for a period of 12 months to ensure effective customer service and to have a record of our communication. After the retention period, we securely delete the contact form data.

Please note that we do not use the information submitted through the contact form for marketing purposes, and we do not share this information with any third parties without the user’s explicit consent, unless required by law or to fulfil a specific request from the user.

Cookies

The Website uses cookies and similar technologies to provide certain functionality to the Site, to understand and measure its performance, and to deliver targeted advertising. Please see our Cookies List for further information about the cookies we use and how to amend your cookie settings.

Analytics

We use Google Analytics on the Website to collect anonymised data on user behaviour, helping us improve the site and enhance the user experience.

Who we share your data with

We may share your personal information with:

• Our service providers, who help us with tasks such as order fulfilment, shipping, payment processing, marketing, and data analysis;
• Law enforcement, regulators, or other parties when required by law or in order to protect our rights or the rights of others;
• Third parties in connection with a business transaction, such as a merger, acquisition, or bankruptcy.

We do not sell, rent, or otherwise share your personal information with third parties for their own marketing purposes without your consent.

How long we retain your data

We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. The specific retention period depends on the nature of the data and the context in which it was collected.

What rights you have over your data

Under the GDPR, you have the following rights with respect to your personal information:

• The right to access, correct, or delete your information;
• The right to restrict or object to the processing of your information;
• The right to data portability;
• The right to withdraw consent for processing based on consent;
• The right to lodge a complaint with a supervisory authority.

Where your data is sent

As we are based in Ireland, your personal information may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure that appropriate safeguards are in place to protect your information in accordance with GDPR requirements.

How we protect your data

We recognize the importance of data security and are committed to protecting your personal information. We have implemented a range of technical, administrative, and physical measures to ensure the safety and confidentiality of your data. These measures include:

• Encryption and secure communications: Data is encrypted when leaving the Website. This process involves the converting of information or data into a code to prevent unauthorized access. We employ secure methods such as SSL to protect customer data when in transit to and from the Website over a secure communications channel. This includes the protection of all credit and debit card transactions.
• Access control: We restrict access to your personal information to only those employees, contractors, and service providers who need it to perform their job functions.
• Regular security audits and updates: We conduct regular security audits to identify potential vulnerabilities and apply necessary updates to our systems and software. This includes maintaining up-to-date antivirus and anti-malware protection and implementing security patches as needed.

What data breach procedures we have in place

We take data security seriously and have established straightforward procedures to deal with potential or actual data breaches. Our data breach procedures include the following:

• Reporting: We collaborate with our third-party providers to create a clear reporting system for notifying us of any suspected data breaches or security incidents.
• Investigation: Upon receiving a report from a third-party provider, we will work closely with them to promptly investigate the incident, determine its nature and scope, and take appropriate measures to contain it.
• Notification: In compliance with GDPR requirements, we will notify affected users and relevant authorities within 72 hours of becoming aware of a data breach, ensuring that the third-party providers assist us in providing all necessary information.
• Remediation: After a data breach, we will coordinate with our third-party providers to fix any vulnerabilities, restore the integrity of our systems, and implement additional security measures.
• Improvement: We continuously learn from data breaches and collaborate with our third-party providers to enhance security measures and data protection practices.

Contact information

For any queries on our privacy policy, you may contact our data protection officer via any of the following:

Telephone: +353-1-4853319

Email: privacy@essentivit.com

Business Address:
The Essential Vitamin Ltd.
51 Bracken Road,
Sandyford Business Park,
Dublin, D18 CV48,
Ireland.