Privacy Policy

VYRALON.EU

Last updated: 15 July 2026

1. Data Controller

The controller of personal data processed in connection with the Vyralon.eu online store is:

VITALSHOP LTD
73 Penzance Road
Alvaston
Derby DE24 0NH
United Kingdom

Company Number: 17368919

Website: https://vyralon.eu
Privacy enquiries: customer@vyralon.eu

VITALSHOP LTD acts as controller where it determines the purposes and means of the relevant processing.

2. Scope

This Privacy Policy explains how we process personal data relating to:

visitors to Vyralon.eu;
customers placing orders;
customer account holders;
people contacting Customer Service;
people making returns, withdrawals or complaints; and
people receiving marketing communications where such communications are used.

3. Personal Data We May Process

Depending on how you use the Store, we may process:

identity data – first name, surname and customer account details;
contact data – email address, telephone number where provided or required for a particular delivery method, billing address, delivery address and country;
order data – order number, Products purchased, quantities, value, currency, status, returns, refunds and complaints;
payment data – selected payment method, payment status, transaction identifiers and limited or masked payment information;
technical data – IP address, device type, browser, operating system, session identifiers, security logs and approximate location derived from IP;
usage data – pages viewed, basket activity, clicks, referral source and cookie-related information;
communications with Customer Service, Returns or Complaints;
marketing preferences and consent records where marketing is used;
cookie and consent preferences.

Full payment-card credentials are generally processed by the relevant payment service provider rather than directly by Vyralon.

4. Information Required to Place an Order

Certain information, such as your name, delivery details, email address and information necessary to process the selected payment and delivery method, is required to enter into and perform a purchase contract.

If you do not provide information required for a particular order, payment or delivery method, we may be unable to accept or fulfil the order.

Other information is optional unless we clearly indicate otherwise.

5. Health and Special Category Data

Vyralon does not require health information for the normal purchase of Products.

Please do not provide medical or other special-category personal data unless it is genuinely necessary for a specific request, complaint or product-safety matter.

Where such information is voluntarily provided and must be processed, we will use it only as necessary for the relevant matter and under an appropriate condition permitted by applicable data-protection law.

We do not use health information for advertising profiles.

6. Why We Use Personal Data

We may process personal data for the following purposes:

Order fulfilment
To accept orders, confirm purchases, process payments, prepare and deliver Products and communicate about orders.
Typical lawful basis: contract or steps before entering into a contract.

Delivery and customs processing
To arrange shipping, customs documentation and, where DDP applies to the relevant order, applicable duties, VAT or other import formalities.
Typical lawful basis: contract, legal obligation and legitimate interests where applicable.

Payments and fraud prevention
To authorise transactions, process refunds, prevent misuse and assess transaction risk.
Typical lawful basis: contract, legal obligation and legitimate interests.

Returns, withdrawals and complaints
To process cancellation requests, returns, Product issues, complaints, refunds and related communications.
Typical lawful basis: contract, legal obligation and legitimate interests.

Accounting, tax and compliance
To maintain records required by law and respond to tax, customs, consumer-protection, market-surveillance or other competent authorities.
Typical lawful basis: legal obligation.

Security
To protect customer accounts, transactions, systems and the Store against fraud, misuse and security threats.
Typical lawful basis: legitimate interests and, where applicable, legal obligation.

Store improvement and analytics
To understand how the Store is used, diagnose errors and improve performance and customer experience.
Typical lawful basis: consent where required; otherwise legitimate interests where permitted by applicable law.

Marketing
To send promotional communications or use advertising technologies.
Typical lawful basis: consent or another lawful basis only where permitted by applicable law.

7. Sources of Personal Data

We obtain personal data:

directly from you during checkout, account creation and communications;
automatically when you use Vyralon.eu;
from payment providers;
from carriers and logistics partners;
from fraud-prevention and security providers;
and from other technology or service providers involved in operating the Store.

8. Recipients of Personal Data

Personal data may be shared where reasonably necessary with:

payment service providers;
carriers and logistics operators;
customs-clearance and DDP-service providers where applicable;
hosting and IT infrastructure providers;
email and customer-support providers;
cybersecurity and backup providers;
analytics and marketing providers where used and lawfully enabled;
accountants, auditors, lawyers and tax advisers;
public authorities where disclosure is required by law.

Vyralon.eu uses PrestaShop software. Use of a self-hosted PrestaShop installation does not by itself mean that PrestaShop automatically receives customer personal data.

Data may nevertheless be processed by hosting providers and providers of installed modules where necessary for their operation.

We do not sell customer personal data to third parties.

9. International Transfers

VITALSHOP LTD is established in the United Kingdom and serves customers internationally. Personal data may therefore be processed in the United Kingdom and other countries.

Where personal data is transferred internationally, we apply safeguards required by applicable data-protection law.

Depending on the destination and service provider, these may include an adequacy decision, contractual safeguards or another legally recognised transfer mechanism.

10. Retention

We retain personal data only for as long as reasonably necessary for the relevant purpose and applicable legal requirements.

Indicative periods may include:

orders and transaction records – up to 6 years or longer where applicable law requires;
accounting and tax records – for the period required by applicable law;
customer accounts – while active and for a reasonable period afterwards;
Customer Service records – normally up to 24 months after closure unless longer retention is justified;
complaints and disputes – for the duration of the case and applicable limitation periods;
marketing information – until consent is withdrawn, an objection is made or the relevant lawful basis ends;
technical and security data – for a period proportionate to security and fraud-prevention needs;
cookie and consent information – according to the relevant cookie, consent record or configuration.

Legal, tax, regulatory, fraud-prevention or dispute requirements may justify longer retention in particular cases.

11. Your Rights

Depending on applicable law and the circumstances, you may have rights including:

access to personal data;
obtaining a copy of personal data;
rectification;
erasure;
restriction of processing;
data portability;
objection to processing;
withdrawal of consent;
rights relating to certain automated decisions.

Not every right applies in every situation.

Requests may be sent to:

customer@vyralon.eu

We may request information reasonably necessary to verify identity before acting on a request.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

12. Direct Marketing

You may opt out of direct marketing at any time using an unsubscribe link where provided or by contacting Vyralon.

After a valid objection or withdrawal, we may retain minimal suppression information where necessary to ensure that marketing is not sent again without an appropriate lawful basis.

13. Automated Decisions and Fraud Prevention

Vyralon does not intend to make solely automated decisions producing significant legal effects for customers without an appropriate lawful basis and applicable safeguards.

Payment, fraud-prevention or security providers may use automated risk assessment in accordance with their own policies and applicable law.

14. Children

Vyralon.eu is not specifically designed for children.

Where a person does not have legal capacity to enter into a purchase contract under applicable law, the purchase should be made with the appropriate involvement of a parent or guardian.

15. Security

We use appropriate technical and organisational measures designed to protect personal data.

Depending on the relevant system, these may include access controls, protected transmission, system-security measures, monitoring, backups and restrictions on access.

No internet-based system can guarantee absolute security.

16. Cookies and Similar Technologies

Vyralon.eu uses cookies and similar technologies.

Optional categories are managed through the Store’s cookie-consent mechanism.

Details about the technologies used, cookie categories and how preferences can be changed are provided in the Vyralon Cookie Policy.

17. Complaints About Personal Data

If you believe your personal data has been handled incorrectly, please contact:

customer@vyralon.eu

You may also have the right to complain to a competent data-protection supervisory authority.

In the United Kingdom, the supervisory authority is the Information Commissioner's Office (ICO).

Individuals in the European Union may also have the right to contact the competent supervisory authority in the Member State of their habitual residence, place of work or alleged infringement.

18. Changes to this Privacy Policy

We may update this Privacy Policy following changes in law, technology, providers or Store operations.

The current version will be published on Vyralon.eu together with its Last updated date.