Last updated: November 2026
1. Who we are
VitaNetShop.eu is a trade name of Vitamin Hub B.V., Stadionstraat 11, 4815 NC Breda, the Netherlands (KvK 75226472). We are responsible for the processing of your personal data as described in this policy.
Contact: contact@vitanetshop.eu
2. What data we collect
When you order or create an account, we collect:
- Name, delivery and billing address, phone number and email address
- Order history and customer service messages
- Payment details, which are handled by our payment providers (we do not store your full card details)
- Technical data such as IP address, device and browser type and the pages you visit, collected through cookies
- Your marketing preferences
We do not ask for health information.
3. Why we use your data
- We only use your data for the purposes below, each based on a legal ground under the GDPR:
- To process and deliver your order, handle payments and provide customer service (performance of a contract)
- To keep our accounts, issue invoices and meet tax obligations (legal obligation)
- To keep the website secure, prevent fraud and improve our products and services (legitimate interest)
- To measure website traffic and show you relevant ads through analytics and advertising cookies (your consent)
- To send you promotional emails about products and offers (your consent, which you can withdraw at any time through the unsubscribe link or by contacting us)
4. Who we share your data with
We do not sell or rent your personal data. We only share it with companies that help us run the shop, and only to the extent needed for their task.
These are:
- Our online store and payment platform (Shopify) and payment providers (Klarna, Paypal, Quickpay, Pensopay, Mollie and Airwallex).
- Our warehouse and order management system and shipping companies (such as DPD, GLS, Bring and PostNL and other), so your order can be delivered.
- Our accounting software and email provider.
- Analytics and advertising providers (such as Google, Trustpilot, Klarna, Pricerunner, and Meta).
- Authorities, if we are legally required to.
These companies act on our instructions under data processing agreements, or are independently responsible for their own part under the GDPR.
5. Transfers outside the EU/EEA
Some of our providers are based outside the EU/EEA, for example in the United States. In those cases we rely on an EU adequacy decision (such as the EU-US Data Privacy Framework) or on the European Commission's standard contractual clauses.
6. How long we keep your data
We keep your customer data for up to 2 years after your last order or interaction, unless you delete your account earlier. Some data must be kept longer by law: invoices and order records are kept for 7 years under Dutch tax law. Marketing data is kept until you withdraw your consent. Analytics data is kept for the period set in our analytics tool.
You can delete your account at any time by logging in and choosing "GDPR - Delete Account". Deleted data cannot be recovered. Data we must keep by law is retained for the legally required period only.
7. Cookies
We use cookies to make the website work, understand how it is used and, with your consent, to show relevant ads. A cookie is a small file stored on your device.
Necessary cookies keep the shop working (for example your shopping cart and checkout). They do not need consent.
Analytics cookies (Google Analytics) tell us how many visitors we have, where they come from and which pages they use. We use this only to improve the website.
Marketing cookies (such as Google and Meta) let us show our ads on other websites and measure how well they work (remarketing). They are only set if you consent.
You can change or withdraw your cookie choice at any time through the cookie settings on our website, and you can delete cookies in your browser. You can also manage ad personalisation in your Google Ads settings and your Meta ad preferences.
8. Security
We protect your data with appropriate technical and organisational measures. Data you send to us is encrypted in transit (TLS/SSL), and access is limited to the staff who need it for their work.
9. Your rights
Under the GDPR you have the right to:
- Access the data we hold about you, free of charge
- Have incorrect or incomplete data corrected
- Have your data erased
- Restrict the processing of your data
- Receive your data in a portable format
- Object to processing, including for direct marketing
- Withdraw your consent at any time
To use these rights, email contact@vitanetshop.eu. We will respond within one month. If you are not satisfied with our response, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl) or to the data protection authority in your own country.
10. Data breaches
If a data breach occurs, we will report it to the Dutch Data Protection Authority within 72 hours where required. If the breach is likely to put your rights at serious risk, we will also inform you without undue delay.
11. Links to other websites
Our website may contain links to other websites. We have no control over those websites and this policy does not apply to them. Please read their privacy policies.
12. Changes to this policy
We may update this policy from time to time. The latest version is always on this page, with the date above.
13. Contact
Questions about this policy or your data: contact@vitanetshop.eu
