Privacy

Vitareve, Drumul Viilor 35, 800402 Galați, Romania, is the controller of the personal data described on this page. You can reach us about anything here at contact@vitareve.com.

• Order details — your name, delivery address, email address, phone number if you give one, and what you bought.
• Payment confirmation — the fact that a payment succeeded, the card type and the last four digits. Card numbers are handled entirely by our payment provider; we never see or store them.
• Subscription details — your plan, your renewal date, and the record of the consent you gave at checkout.
• Correspondence — emails you send us and our replies.
• Technical data — IP address, browser, device and pages visited, collected by the website platform to keep the store working and secure.

We do not ask for, and do not want, information about your health.

To take your order, deliver it, bill your renewals, answer your emails and handle refunds — all of which is necessary to perform our contract with you. To meet accounting and consumer-law obligations, which the law requires. To keep the store secure and working, which is our legitimate interest. And to send you marketing email only if you asked for it, which you can stop at any time from the link in any such email.

Only the companies that make an order actually happen, and only the part each one needs:

• Shopify — runs the store and processes checkout.
• Our fulfilment partner — receives your name and address to pack and label the parcel.
• Our subscription app — manages plans, renewals and the self-service portal.
• Carriers — USPS and FedEx, to deliver and to give you tracking.

We may also disclose data where the law requires it. We do not sell, rent or trade your personal data, and we do not share it with advertisers for their own purposes.

Because our store platform and fulfilment are based in the United States, data about EU and UK customers is transferred outside the EEA. Those transfers are made under the European Commission's Standard Contractual Clauses, or an equivalent approved safeguard, so the protection travels with the data.

Order and invoice records are kept for as long as tax and accounting law requires — generally up to ten years in Romania. Subscription consent records are kept for three years. Email correspondence is kept for two years. Marketing contacts are kept until you unsubscribe. After that it is deleted.

You can ask us for a copy of the data we hold about you, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable format. If you are in the EU or the UK these are rights under the GDPR; if you are in the United States, your state may give you comparable rights, including the right not to be discriminated against for using them.

Email contact@vitareve.com and we will respond within one month. We may need to confirm it is really you before we send anything.

If you are unhappy with how we have handled it, you can complain to your national data protection authority — in Romania that is the ANSPDCP.

The store uses cookies that are strictly necessary to keep your cart, your session and your checkout working. Any analytics or marketing cookies are optional and are only set where you have agreed to them; you can withdraw that agreement at any time in your browser settings.

This page is written to be understood. The complete, formal privacy policy — which is the one that governs on points of legal detail — is available at our full privacy policy. If the two ever disagree, the full version applies, and we would like to know about the discrepancy so we can fix it.