Privacy notice
What we collect, why, and how long we keep it.
What browsing this site collects
Nothing. Your basket stays in your browser. We collect details only when you order or write to us.
Browsing collects nothing about you. No analytics data and no marketing data is collected anywhere on this site.
The basket stores only product slugs and quantities under the key nutrivessa.cart.v1 in your browser's local storage. It never leaves your device. No name, address, payment detail or health information is stored.
A message sent through the contact form is used only to reply to you.
Who the controller is
Nutrivessa is the controller for the personal data described in this notice.
Nutrivessa is the data controller for the personal data described in this notice. Privacy requests go through the contact page.
What we collect to fulfil an order
Name, address, email, the order itself, and a payment confirmation. Nothing about your health.
Placing an order requires:
- Your name, to address the parcel and the order record.
- A delivery address, to deliver it.
- An email address, for the order confirmation and any problem with it.
- The contents and value of the order.
- A payment confirmation from the payment provider, never the card number.
That is the minimum. We do not ask for a date of birth, a phone number or any health information to sell a food supplement.
Why, and the legal basis
Contract for your order, law for the records, consent for email, fair interest for fraud checks.
- Performance of a contract: taking, fulfilling and delivering your order, and handling returns.
- Legal obligation: keeping sale and tax records, and food business traceability records.
- Consent: marketing email, only if you ask for it, withdrawable at any time.
- Legitimate interests: preventing fraud and keeping the site working. We balance this against your interests.
How long data is kept
Order records for as long as UK law requires. Messages only until they are answered.
Order and tax records are kept for the period UK law requires. Marketing consent is kept until you withdraw it.
Messages sent through the contact form are kept only for as long as they are needed to answer them.
Your rights under UK GDPR
See it, correct it, erase it, move it, object to it, or withdraw consent at any time.
- Access a copy of the personal data held about you.
- Have inaccurate data corrected.
- Have data erased, where there is no overriding legal reason to keep it.
- Restrict or object to processing.
- Receive your data in a portable format.
- Withdraw consent for marketing at any time.
You can also complain to the Information Commissioner's Office, the UK supervisory authority, at ico.org.uk.
How to make a request
Free, in writing, answered within a month.
Requests go to the controller, in writing, free of charge, answered within one month.
Send your request through the contact page and we will answer within one month.
Changes to this notice
We may update this notice. The version published here is the one that applies.
We may update this notice from time to time, for example if we change a provider. The version published here is the one that applies.
The rest of the small print
Every support page, one click away.