Privacy Policy

Vivo Store Limited Privacy Notice

19th July 2021

Here at Vivo Life, we care about your privacy, meaning that we treat all your information securely and do not keep any data we don’t need to. In order for us to provide you with our goods or services, we do need to process your personal information.

Vivo Store Limited (“Vivo Life”, "We", “Us” and “Our”) remain fully committed to the protection of your privacy at all times. The information contained in this privacy notice has been published to inform you of the way in which any Personal Data (as defined below) you provide us with, or we collect from you will be used. Please read this information carefully in order to fully understand how we treat such Personal Data.

We will collect, store, use and disclose Personal Data in accordance with all applicable laws relating to the protection of Personal Data, including the EU General Data Protection Regulation 2016/679, the EU ePrivacy Directive 2002/58/EC as amended by Directive 2009/136/EC, as amended or superseded from time to time, and any national implementing legislation (“Data Protection Laws”). For customers from the state of California we also comply with the California Consumer Privacy Act please see our separate CCPA Privacy Policy.

This privacy notice covers the Personal Data for which we collect and use we act as data controller.

Personal Data we collect from you.

“Personal data” means any information relating to an identified or identifiable natural person. Personal data can be factual (for example, a name, address or date of birth) or it can be an opinion about that person, their actions and behaviour.


We may obtain and use the following Personal Data about you and anyone you chose to add to our service:

  • Marketing preferences and communications together with your email address, phone number and home address.
  • Usage Data includes information about how you use our website, products and services.
  • Technical Data including internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.

Cookies and IP Addresses

“Cookies” are small data files that may be placed on the hard drive of your computer when you visit the Vivo Life site. Cookies permit us to identify your browser whenever you interact with the Vivo Life site.


Vivo Life may obtain information about your computer, which includes your IP address, browser type and operating system where available. This accumulation of data is used to assist system administration

We may also collect information regarding your browsing activity and interests through use of a cookie file. We use this data to help us improve the experience of users on our website and the Services, and to deliver a more personalised service with more relevant content. The collection of this data allows us to:

  • Store data indicative of your preferences, allowing us to adjust our website to appeal to your individual interests; estimate the size and usage patterns of our customer base;
  • Record the details of any transactions carried out by you through our website
  • Identify you upon your return to the relevant website; and/or
  • Increase the speed of your service and improve the products we offer.

Types of Cookies we use:

Strictly necessary cookies

These are cookies that are required for the operation of our website. They include, for example, cookies that enable you to log into secure areas of our website.

Analytical/performance cookies

They allow us to recognise and count the number of visitors and to see how visitors move around our website and Vivo Life services when they are using it. This helps us to improve the way our website and the Services works.

Functionality cookies

These are used to recognise you when you/they return to our website. This enables us to personalise our content for you, greet you by name and remember your preferences.

Targeting cookies.

These cookies record your visit to our website, the pages you have visited and the links you have followed. We will use this information to make our website and the advertising displayed on it (if any) more relevant to your interests. We may also share this information with third parties for this purpose.

Some of the Cookies we use:

 

Cookie

Description

ADroll

Allows us to customise your journey through our site and allows to present you with relevant products.

DoubleClick

Tells us what parts of our website you like to visit

Facebook

This cookie will help deliver our advertising to people who have already visited our website when they are on Facebook or a digital platform powered by Facebook Advertising.

Google

This cookie helps us present advertisement to you from the google platform

HotJar

This cookie allows us to understand how you move through our website

Vivolife / Shopify

We use a number of cookies to see how you came to us, how you move through the site and to maintain your basket of products

 

Please note that third parties (including, for example, advertising networks and providers of external services like web traffic analysis services) may also use cookies, over which we have no control. These cookies are likely to be analytical/performance cookies or targeting cookies. You and your Users remain entitled to refuse cookies by adjusting your browser settings accordingly. Doing so however may restrict your and your Users’ access to certain areas within our Website. Unless you adjust your browser settings to refuse cookies, our system will issue cookies when you log on to our Website.

Where We Store Personal Data

There are circumstances in which we will have to transfer your Personal Data out of the European Economic Area (“EEA”) for the purposes of carrying out the Services. Sometimes it is because we are using sub processors based outside the EEA (see below). Where the need for such a transfer arises we will always ensure that there are appropriate safeguards in place to protect your Personal Data such as:

  • the European Commission has issued a decision confirming that the country to which we transfer the Personal Data ensures an adequate level of protection for the data subjects’ rights and freedoms;
  • appropriate safeguards are in place such as binding corporate rules (BCR), standard contractual clauses approved by the European Commission, an approved code of conduct or a certification mechanism;
  • you have provided explicit consent to the proposed transfer after being informed of any potential risks; or
  • the personal data is being transferred to a company in the US which has self-certified its compliance with the EU-US Privacy Shield which has been found by the European Commission to provide an adequate level of protection to the Personal Data of EU citizens.

You can find more information about some of the individual third-party sub processors we use and the purposes for which we use them below. The current third-party sub processors which we use are as follows:

 

Sub - Processor

Purpose

Link

Shopify

The manage and control our Ecommerce Shop

Shopify.com

Ometria

CRM Software

Ometria.com

Gorgias

Helpdesk Software

Gorgias.com

Stripe

Payment Processor

Stripe.com

Paypal

Payment Processor

Paypal.com

 

How We Protect Your Personal Data

We will take reasonable steps to maintain appropriate technical and organisational measures to protect the Personal Data you provide to us against accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to your Personal Data.

How We Use Your Personal Data

The Personal Data we hold about you may be used in any of the following ways:

  • For research and analytics purposes (for example, to improve the quality of our products).
  • To ensure security for you.
  • To comply with applicable Laws, court orders, government and law enforcement agencies’ requests.
  • To send you further information about our products for which we think you may have an interest. This information will be supplied only where you have given consent.
  • To send you further information about our services based on a request we have received from you.
  • We aggregate and anonymise your Personal Data and use and share such aggregated and anonymised Personal Data with third parties for statistical purposes and for the purpose of data analytics, product development and to improve our Products and Services.

Our legal basis for collecting and processing your Personal Data for the purposes described above will depend on the Personal Data concerned and the specific context in which we collect it. However, we will normally collect Personal Data from you only where we have your consent to do so or where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms. In some cases, we may also have a legal obligation to collect personal information from you.

Third Party Integration Partners

We will never supply your, your Users’ or your systems (including, without limitation, Client Data) Personal Data to third parties unless under the conditions stated beneath this section of our privacy policy. Notwithstanding the foregoing, you acknowledge and agree that we may process, aggregate and anonymise your, and your Users, Personal Data (excluding, for the avoidance of doubt, Sensitive Personal Data) and use and share such aggregated and anonymised Personal Data with third parties for statistical purposes and for the purpose of data analytics, product development, Service improvement, providing the service, and/or in order to fulfil the obligations we have in relation to any contracts we have in place with you. Such use of products and services is optional and by using the services you agree to these terms.


You can find more information about some of the individual 3rd party sub processors we use for services and the purposes for which we use them below. Example of 3rd party used by us:

 

Sub- Processor

Purpose

DHL, UPS, Fedex

Shipping

 

Disclosure of Your Information

Disclosure of your data to third parties will only occur in any of the following events:

  • If we (or our assets) are acquired by another company, whether by merger, acquisition, bankruptcy or otherwise, that company would receive all information gathered by Vivo Life. In these circumstances, you will be notified in advance of any change in ownership, uses of your Personal Data, and choices you may have regarding your Personal Data.
  • If we are required to disclose your Personal Data in order to fulfil any legal obligation, or to protect the property, rights of Vivo Life, users of our services or others. In such case, information may be exchanged with third party companies or organisations in order to prevent fraud.

Our service providers have to follow our express instructions when processing the Personal Data you provide and must have in place appropriate technical and organisational security measures to safeguard such Personal Data, and we do not allow them to use this information for their own commercial purposes.

Your Rights

Under certain circumstances, and where we act as data controller, by law you have the right to:

  • Request access to your personal information (commonly known as a "data subject access request"). This enables you to receive a copy of the Personal Data we hold about you and to check that we are lawfully processing it.
  • Request correction of the Personal Data that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
  • Request erasure of your Personal Data. This enables you to ask us to delete or remove Personal Data where there is no legal basis for us continuing to process it. You also have the right to ask us to delete or remove your Personal Data where you have exercised your right to object to processing (see below).
  • Object to processing of your Personal Data. You also have the right to object where we are processing your Personal Data for direct marketing purposes.
  • Object to automated decision-making including profiling, that is not to be subject of any automated decision-making by us using your Personal Data or profiling of you.
  • Request the restriction of processing of your Personal Data. This enables you to ask us to suspend the processing of Personal Data about you, for example if you want us to establish its accuracy or the reason for processing it.
  • Request transfer of your personal information in an electronic and structured form to you or to another party (commonly known as a right to “data portability”). This enables you to take your data from us in an electronically useable format and to be able to transfer your data to another party in an electronically useable format.

Where we rely on consent as our legal basis for processing you may withdraw consent at any time by providing an unambiguous indication of your wishes by which you, by a statement or by a clear affirmative action, signify withdrawal of consent to the processing of personal data relating to you. If you have any queries relating to withdrawing your consent please contact our Data Protection Officer whose details are set out above.

Withdrawal of consent shall be without prejudice to the lawfulness of processing based on consent before its withdrawal.

We may at times provide links on our Website to third party websites, including without limitation those owned or managed by our partner networks, affiliates or advertisers. These websites have separate privacy policies, and we therefore cannot accept any responsibility for the content. As such, choosing to follow these links is a choice you make at your own risk, and we advise that you check these websites' individual privacy policies before submitting any personal data.


You may also lodge a complaint with the UK data protection regulator, the Information Commissioner should you be dissatisfied with the way that we handle your Personal Data.

How Long We Keep Your Personal Data 

We will keep your Personal Data for as long as is necessary to achieve the purposes set out above or until you withdrawn your consent. 


Personal data acquired with consent for marketing purposes will be kept for a maximum period of two years after a final interaction, unless consent is rescinded or we have been instructed to delete the personal data by you.

Changes to Our Privacy Policy

If at any time we make a change to this privacy notice, we will update this page to reflect such change. Where we feel it appropriate, we will notify you by email, however we recommend you review this page periodically to ensure you remain happy with the latest version.

Questions, Comments and Getting in Touch

We welcome any questions or comments in relation to this privacy policy, and advise you to send any such communication to privacy@vivolife.co.uk