Privacy Policy
This Privacy Policy explains how VitaMercado collects, uses, stores and protects personal data when you visit our website, create an account, place an order or contact customer support.
Privacy at a Glance
- We use personal data only for clear and legitimate business purposes.
- We collect only the information reasonably necessary to provide our services.
- We do not sell personal data.
- Payment information is processed by supported payment providers and is not stored by VitaMercado unless legally required.
- You may exercise your GDPR rights using the contact details below.
1. Who Is Responsible for Your Data?
The data controller responsible for processing personal data through VitaMercado operates under the following business details:
32-020 Wieliczka
Małopolskie
Poland
support.vitamercado@gmail.com
Website: https://vitamercado.com/
2. Personal Data We Collect
Information you provide
- Identity data, such as first name and last name.
- Contact data, such as email address, telephone number, billing address and delivery address.
- Account data, such as username, account preferences and encrypted password credentials.
- Order data, such as products ordered, order value, delivery method and order history.
- Communications, such as messages sent through email, contact forms or customer support channels.
- Marketing preferences, where you choose to receive promotional communications.
Information collected automatically
- Technical data, such as IP address, browser type, device type, operating system and approximate location.
- Usage data, such as pages viewed, interactions, referral source and session activity.
- Cookie and similar-technology data, subject to your cookie choices where consent is required.
3. Why We Use Personal Data and Our Legal Bases
| Purpose | Typical data | Legal basis |
|---|---|---|
| Process and deliver orders | Identity, contact, order and payment-related data | Performance of a contract and steps requested before entering a contract |
| Provide customer support and handle returns or complaints | Identity, contact, order and communication data | Performance of a contract and legitimate interests in customer service |
| Process payments and prevent fraud | Transaction, device, identity and risk data | Performance of a contract, legal obligations and legitimate interests in fraud prevention |
| Maintain accounts and website security | Account, technical and security-log data | Performance of a contract and legitimate interests in securing our services |
| Meet tax, accounting and legal obligations | Identity, order, invoice and transaction data | Compliance with legal obligations |
| Send marketing communications | Name, email and marketing preferences | Consent, or legitimate interests where permitted by law |
| Measure and improve the website | Cookie, technical and usage data | Consent where required, and legitimate interests for strictly necessary operations |
4. Payment Processing
VitaMercado may offer payment methods processed by third-party payment providers. Depending on the country, order and checkout configuration, these may include Stripe, PayPal, bank transfer or other clearly identified providers.
Payment providers may process transaction data, billing details, device information and fraud-prevention data under their own privacy notices and legal obligations. VitaMercado does not receive or store full card numbers when card payments are handled directly by an independent payment provider.
5. Who May Receive Personal Data?
We may share personal data only where reasonably necessary with:
- Payment processors and banks.
- Delivery companies, postal operators and fulfilment partners.
- Website hosting, security, email and technical-service providers.
- Analytics and advertising providers, subject to cookie consent where required.
- Professional advisers, including accountants, auditors, insurers and legal advisers.
- Public authorities where disclosure is required by law or necessary to protect legal rights.
We require service providers acting on our behalf to process personal data only for agreed purposes and with appropriate confidentiality and security safeguards.
6. International Data Transfers
Some service providers may process personal data outside the European Economic Area. Where this occurs, we use a legally recognised transfer mechanism where required, such as an adequacy decision, Standard Contractual Clauses or another safeguard permitted under applicable data-protection law.
You may contact us for further information about the safeguards relevant to your personal data.
7. How Long We Keep Personal Data
We retain personal data only for as long as necessary for the purpose for which it was collected and to meet legal, accounting, tax, fraud-prevention and dispute-resolution obligations.
- Order and invoice data: for the period required by applicable tax, accounting and consumer-protection law.
- Customer-account data: while the account remains active and for a reasonable period afterwards.
- Customer-support communications: for as long as needed to resolve the request and manage potential disputes.
- Marketing data: until consent is withdrawn, an objection is made or the information is no longer needed.
- Security logs: for a limited period proportionate to security and fraud-prevention needs.
Data may be retained for longer where necessary to establish, exercise or defend legal claims.
8. Your Data-Protection Rights
Subject to applicable law, you may have the right to:
- Request access to your personal data.
- Request correction of inaccurate or incomplete data.
- Request deletion of personal data where legally permitted.
- Request restriction of processing.
- Object to processing based on legitimate interests or direct marketing.
- Request data portability where applicable.
- Withdraw consent at any time without affecting earlier lawful processing.
- Lodge a complaint with the President of the Personal Data Protection Office in Poland (UODO) or another competent supervisory authority.
To exercise your rights, contact shop@vitamercado.com or support.vitamercado@gmail.com. We may need to verify your identity before completing the request.
9. Cookies and Similar Technologies
VitaMercado uses essential cookies required for functions such as the shopping cart, account login, security and checkout. With your consent where required, we may also use analytics, preference and marketing cookies.
Non-essential cookies should not be activated until the user has made a valid choice through the cookie banner. Detailed information about cookie names, providers, purposes and durations should be maintained in a separate Cookie Policy and reflected in the consent-management tool.
10. Data Security
We use appropriate technical and organisational measures designed to protect personal data against accidental loss, misuse, unauthorised access, alteration or disclosure. These measures may include encrypted connections, access controls, security monitoring, backups and restricted staff access.
No internet-based service can guarantee absolute security. Customers are responsible for protecting account passwords and should contact us promptly if they suspect unauthorised account activity.
11. Children’s Privacy
VitaMercado is intended for customers who are legally able to enter into online purchase contracts. We do not knowingly collect personal data from children in circumstances where parental or guardian authorisation is legally required. If you believe a child has provided personal data unlawfully, please contact us.
12. Automated Decision-Making and Fraud Prevention
Payment and security providers may use automated tools to identify suspected fraud, abuse or security risks. Where a decision produces legal or similarly significant effects and applicable law provides a right to human review, you may contact us or the relevant provider for further information.
13. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our services, legal obligations or service providers. The latest version will be published on this page with an updated effective date. Material changes may also be communicated through the website or by email where appropriate.
14. Contact Us
For privacy questions or requests, contact:
32-020 Wieliczka
Małopolskie
Poland