Privacy policy

PRIVACY POLICY

Last updated: April 20, 2026

DATA CONTROLLER & CONTACT DETAILS GREEN LIFE 08 LTD | UIC (ЕИК): 205419449 | VAT: BG205419449 Address: k.k. Slanchev bryag, kv. Kamelia 158, vh. 2, et. 5, ap. 21, 8240 Nesebar, Bulgaria Email: nutridirect@yahoo.com Supervisory Authority: Commission for Personal Data Protection (www.cpdp.bg)

SCOPE This Privacy Policy applies to all personal data processed via our website. We operate globally and ship from Bulgaria.

INFORMATION WE COLLECT Identity & Contact: name, billing and shipping address, email, phone number Order Data: purchased products, order value, transaction details Payment Data: processed securely by third parties; we do not store full card details Technical Data: IP address, browser type, device/usage data (subject to consent) Communication Data: emails and messages sent to us Important: We do NOT collect special categories of data (e.g., health data). Please do not include medical information in messages.

PURPOSE AND LEGAL BASES Contract (Art. 6(1)(b)): order processing and delivery Legal Obligation (Art. 6(1)(c)): tax and accounting compliance Legitimate Interests (Art. 6(1)(f)): security and fraud prevention Consent (Art. 6(1)(a)): marketing and non-essential cookies

DATA SHARING We share data only with: Shopify, payment processors, couriers, and professional advisers. We do NOT sell personal data or share it for advertising without consent.

INTERNATIONAL TRANSFERS Data may be processed outside the EEA. We rely on Standard Contractual Clauses and other legal safeguards to ensure protection.

YOUR RIGHTS You have the right to access, correct, delete, or object to processing. Contact: info@vitalor.eu

(Subject: Data Request). We respond within 30 days.

COOKIES We use essential cookies for functionality and non-essential cookies (analytics) only with your consent. Manage preferences via our banner. Info: shopify.com/legal/cookies

SECURITY We use SSL/TLS encryption and restrict access to authorized personnel to protect your data.

DATA RETENTION Order/Accounting: 10 years (Bulgarian law); Marketing: until consent withdrawal; Customer service: as necessary.

AUTOMATED PROCESSING We use Shopify fraud detection. These systems do not produce legal effects. You may request manual review.

CHANGES & COMPLAINTS Policy updates are posted on our website. For concerns, contact nutridirect@yahoo.com or the Commission for Personal Data Protection. Shopify Privacy: shopify.com/legal/privacy