Privacy Policy

Last updated: 27 August 2026

1. General Information

This Privacy Policy explains how VITRAIN LTD (Company No. 16394231) (“we”, “us”, “our”) collects, uses, stores, and protects your personal data when you visit our website endurancevitals.com, purchase our products, create an account, or otherwise interact with us. For the purposes of applicable data-protection law, VITRAIN LTD is the data controller responsible for your personal data.

We process your personal data in accordance with the UK GDPR, the Data Protection Act 2018, and other applicable privacy laws. Please read this Privacy Policy together with any other privacy notices we may provide on specific occasions, so that you are fully aware of how and why we use your data.

2. Types of Personal Data We Collect

Depending on how you interact with our website and services, we may collect and process the following categories of personal data:

  • Identity & Contact Data – name, address, email address, telephone number, and date of birth.
  • Financial Data – payment details necessary for processing payments and preventing fraud. We do not store your card numbers; these are processed securely by third-party payment providers.
  • Transaction Data – details of purchases, invoices, returns, refunds, and payment confirmations.
  • Technical Data – IP address, browser type and version, device identifiers, operating system, and time-zone settings.
  • Usage Data – browsing behaviour, products viewed, clickstream data, session length, and interactions with our site.
  • Account Data – login details, stored addresses, order history, favourites, reviews, and preferences.
  • Marketing & Communications Data – your preferences regarding newsletters and promotional offers.
  • Customer Support Data – information you provide when contacting us via forms, email, or telephone.

We also process aggregated and anonymised data for analytics, which cannot directly identify you. We do not intentionally collect special categories of data (sensitive information such as health data, religious beliefs, ethnicity, or criminal records).

3. How We Collect Your Personal Data

We may collect your personal data in the following ways:

  • Direct interactions – when you register, place an order, subscribe to newsletters, or contact our support team.
  • Automated technologies – through cookies and analytics tools that record how you use our website.
  • Third-party sources – such as payment processors, logistics companies, analytics platforms, and advertising networks.

4. Legal Bases for Processing

We rely on the following legal grounds to process your personal data:

  • Consent – when you subscribe to marketing communications or accept non-essential cookies.
  • Performance of a contract – when processing is necessary to fulfil your order and provide our services.
  • Legal obligations – to comply with accounting, tax, fraud-prevention, and regulatory requirements.
  • Legitimate interests – to improve our services, secure our systems, and understand customer behaviour, provided these interests are not overridden by your rights.

5. Purposes of Processing

We process your personal data in order to:

  • process and deliver your orders;
  • provide and manage your account;
  • deliver customer support and respond to your enquiries;
  • send service notifications and important updates;
  • improve and secure our website and services;
  • send marketing communications, where you have consented;
  • detect, investigate, and prevent fraud or misuse; and
  • comply with our legal obligations.

6. Disclosure of Personal Data

We do not sell your personal data. We may share it with:

  • Payment providers – to process payments securely.
  • Logistics and shipping partners – to fulfil deliveries.
  • IT and hosting providers – to operate our website securely.
  • Analytics and advertising partners – for performance and marketing purposes (only where you have consented).
  • Professional advisers – such as lawyers, accountants, or auditors.
  • Authorities and regulators – when required by law, court order, or regulation.

In the event of a business reorganisation, merger, or sale, your personal data may be transferred to the new owner under equivalent safeguards.

7. International Data Transfers

Some of our service providers may be located outside the UK or EU. Where such transfers occur, we ensure your data is protected by appropriate safeguards, such as Standard Contractual Clauses (SCCs), the UK International Data Transfer Agreement (IDTA), or other legally approved mechanisms.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, including any legal, accounting, or reporting obligations. Once your data is no longer required, it will be securely deleted or anonymised.

9. Security of Your Data

We apply appropriate technical and organisational measures to protect your personal data, including:

  • SSL encryption across our website;
  • AES-256 encryption for stored sensitive data;
  • 3-D Secure and Strong Customer Authentication (SCA) for payments;
  • restricting access to personal data to authorised staff only; and
  • regular monitoring of our systems for vulnerabilities.

While we take every reasonable step to protect your data, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

10. Cookies

Our website uses cookies and similar tracking technologies to:

  • enable core website functionality;
  • collect analytics to improve our services;
  • personalise your shopping experience; and
  • deliver relevant advertising, where you have consented.

You can control or disable cookies through your browser settings. Please note that some features of the site may not function correctly if cookies are disabled.

11. Your Rights

Under the UK GDPR, you have the right to:

  • request access to your personal data;
  • request correction of inaccurate or incomplete data;
  • request erasure of your data (the “right to be forgotten”);
  • request restriction of processing in certain circumstances;
  • object to processing, including for direct marketing;
  • request the transfer of your data (data portability);
  • withdraw your consent at any time, where processing is based on consent; and
  • lodge a complaint with a supervisory authority — in the UK, the Information Commissioner’s Office (ICO) at ico.org.uk.

You may exercise any of these rights by contacting us using the details in Section 14. We will respond within the timeframes required by law.

12. Children’s Privacy

Our website is not intended for children under the age of 16, and we do not knowingly collect personal data from minors. If you believe we have unintentionally collected personal data from a child, please contact us and we will delete it.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, regulatory, or business changes. Any updates will be posted on this page with a revised “Last updated” date. Where changes are significant, we may notify you directly.

14. Contact Information

If you have any questions or concerns about this Privacy Policy, or wish to exercise your data-protection rights, please contact us:

VITRAIN LTD

Company number: 16394231

Registered address:

167–169 Great Portland Street, 5th Floor, London, W1W 5PF, United Kingdom

Warehouse:

Ve Žlíbku 1800/77, 193 00, Praha 9 – Horní Počernice, Czech Republic

Email: info@endurancevitals.com