GDPR Policy

Vital Life respects your rights under the General Data Protection Regulation (GDPR) and is committed to ensuring compliance with its principles. This GDPR Policy outlines how we handle your personal data in accordance with GDPR requirements.

  1. Lawful Basis for Processing: We collect and process your personal data for legitimate purposes, such as fulfilling orders, providing customer support, and improving our services. We may also process your data with your consent or to comply with legal obligations.

  2. Data Subject Rights: Under GDPR, you have the following rights regarding your personal data:

    • The right to access and obtain a copy of your data.
    • The right to rectify inaccurate or incomplete information.
    • The right to request erasure of your data under certain circumstances.
    • The right to restrict or object to the processing of your data.
    • The right to data portability, allowing you to receive your data in a structured, commonly used, and machine-readable format.
  3. Data Security Measures: We implement appropriate technical and organizational measures to ensure the security and confidentiality of your personal data, including encryption, access controls, and regular security audits.

  4. Data Transfers: We may transfer your personal data to third parties or service providers outside the European Economic Area (EEA) only if adequate safeguards are in place to ensure the protection of your data rights.

  5. Data Breach Notification: In the event of a data breach that poses a risk to your rights and freedoms, we will promptly notify you and the relevant supervisory authority in accordance with GDPR requirements.

  6. Data Retention: We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by law.

  7. Contact Information: If you have any questions or concerns regarding our GDPR compliance or wish to exercise your data rights, please contact us at info@vitallifestore.ca.

By using our website and providing your personal information, you consent to the processing of your data as described in this GDPR Policy.