Privacy policy

1) Information about personal data and who is responsible

Vital Reliefwear LLC operates this website and is the controller for the processing of personal data. “Personal data” means any information that can identify you directly or indirectly.

Controller details
Vital Reliefwear LLC
Number 8, The Green, Suite A
Dover, Delaware 19901
✉️ support@vitalreliefwear.com

For security, our website uses SSL or TLS encryption. You can recognize this by “https://” and the lock icon in your browser.

2) Data collected when visiting our website

If you use our site for information only, we collect the data your browser sends to our server, the “server log files.” This includes: the page visited on our site, date and time of access, amount of data sent, the referrer URL, browser used, operating system used, and IP address, which may be stored in anonymized form.

Processing is based on Article 6(1)(f) GDPR, our legitimate interest in stability, security, and functionality. We do not pass this data on unless required by law. We may check log files later if there are concrete indications of unlawful use.

Currency and location
By using our website, you agree that third parties may process your IP address to estimate your location for currency conversion. The selected currency may be stored in a session cookie so that prices remain consistent while you browse. The session cookie is removed when you close your browser.

3) Cookies

We use cookies to make your visit pleasant, to enable certain functions, and to analyze use. Session cookies are deleted after you close your browser. Persistent cookies remain on your device for a defined period. Cookies may store browser data, approximate location, and IP values. In some cases, cookies simplify orders by remembering your cart.

Where personal data is processed, processing is based on Article 6(1)(b) GDPR to perform a contract, or Article 6(1)(f) GDPR for our legitimate interest in a functional, user-friendly site. We may also use third-party cookies from partners for analytics and marketing. If we use such partners, we will provide details in this policy or a cookie banner.

You can configure your browser to inform you about cookies, to accept them in specific cases, or to reject them generally. If you do not accept cookies, some site functions may be limited.

Help pages for cookie settings:

4) Contact

When you contact us by form or email, we collect the data you provide. We process this to answer your request and for technical administration. Legal basis is Article 6(1)(f) GDPR, our legitimate interest in customer support. If your request aims to conclude a contract, Article 6(1)(b) GDPR applies. We delete contact data once your request is resolved unless legal retention duties apply.

5) Customer accounts and contract processing

We collect personal data when you create an account or place an order, to perform the contract and manage your account, Article 6(1)(b) GDPR. Required fields are indicated in the relevant forms. You can request deletion of your account at any time via the contact details above. After full performance of the contract, we restrict processing, then delete data after statutory retention periods.

6) Single sign-on

If we offer social logins in the future, we will only process the data necessary to create and authenticate your account, and only with your consent where required, Article 6(1)(a) GDPR. Details for any specific provider will be shown at the time of use. If you do not wish data to be shared, do not use social login and register with email instead.

7) Direct marketing and newsletters

If you subscribe to our email newsletter, we will send you updates about offers relevant to healthcare professionals. Required field is your email address. We use double opt-in. Legal basis is your consent, Article 6(1)(a) GDPR. We store your IP, date, and time of signup to document consent. You can unsubscribe at any time via the link in each email or by contacting us. After unsubscribing, your email is removed from the distribution list without delay.

8) Order processing and payments

8.1 Shipping

To deliver your order, we share necessary data with the selected carrier, Article 6(1)(b) GDPR. This includes name, address, and tracking information.

8.2 Payments

To process payments we share necessary data with the selected payment provider, Article 6(1)(b) GDPR. Depending on availability on our store, this may include:

  • Stripe
    Stripe Payments Europe, Ltd. receives the data needed to process the transaction, for example name, billing address, card details, amount, currency, and transaction ID. More on Stripe privacy: https://stripe.com/privacy

  • PayPal
    PayPal (Europe) S.à r.l. et Cie, S.C.A. receives the data needed to process the transaction. PayPal may run its own risk and credit checks under its legitimate interests. More on PayPal privacy is available on PayPal’s website.

  • Klarna or SOFORT (if offered)
    If you choose these options, Klarna Group will process your personal data to evaluate eligibility and to provide the payment method. See the provider’s privacy notice for details.

We only transmit what is necessary for payment and fraud prevention. You can object to provider-specific checks directly with the provider, but payment may then not be possible.

9) Your rights

You have the following rights under the GDPR regarding your personal data:

  • Access Article 15

  • Rectification Article 16

  • Erasure Article 17

  • Restriction Article 18

  • Notification Article 19

  • Data portability Article 20

  • Withdraw consent Article 7(3)

  • Lodge a complaint Article 77 with a supervisory authority, in particular where you live or work or where the alleged infringement occurred

Right to object

Where we process data based on our legitimate interests, Article 6(1)(f) GDPR, you may object at any time on grounds relating to your situation. If you object to direct marketing, we will stop processing for that purpose immediately.

To exercise your rights, contact us at support@vitalreliefwear.com.

10) Storage duration

We store personal data for as long as necessary to fulfill the purposes described, to perform the contract, and to meet legal retention periods. After these periods, data is deleted or anonymized unless further processing is required for the establishment, exercise, or defense of legal claims.