Refund policy

# Privacy Policy

*Last updated: April 2026*

This policy explains how we collect, use, and protect your personal 
data when you visit our website or make a purchase.

## Who we are

The data controller responsible for your personal data is:

**HALLO MEDIA SHOP & BUSINESS LTD. Magyarországi 

**  
Registered address: 2724 Újlengyel, Petőfi Sándor utca 48. 
Company registration: 13 17 000231
Email: support@vitalo.site

Phone: +36 70 618 7579

As a Hungarian-registered business serving UK customers, we comply 
with both the EU General Data Protection Regulation (GDPR) and the 
UK GDPR.

## What data we collect

**When you place an order:**
- Name, email, phone number
- Shipping address and billing address
- Payment details (processed securely by our payment provider — 
  we never store your card number)
- Order history and delivery status

**When you visit our website:**
- Pages you view, time on site, device and browser type
- IP address (partially anonymised)
- Cookies and tracking pixels (see our Cookie Policy)

**When you sign up for marketing:**
- Email address and marketing preferences

## How we use your data

- To process and deliver your order
- To communicate with you about your order
- To respond to your support enquiries
- To send marketing emails (only with your explicit opt-in)
- To improve our website and products
- To comply with legal, tax, and accounting obligations

## Legal basis for processing

- **Contract:** to fulfil your order
- **Legal obligation:** to comply with tax, VAT, and accounting law
- **Legitimate interest:** to prevent fraud, improve our service
- **Consent:** for marketing communications and non-essential cookies

## Who we share your data with

We share your data only with trusted partners:

- **Shopify** (Canada) — our e-commerce platform
- **Stripe / Shopify Payments** (Ireland / US) — payment processing
- **Shipping partners** (Royal Mail, Evri, DPD or similar) — delivery
- **Email marketing platforms** (e.g. Klaviyo, US) — only if opted in
- **Analytics** (Google Analytics, Meta Pixel) — anonymised performance data
- **Hungarian tax authority (NAV)** — as required by law
- **UK tax authority (HMRC)** — if VAT-registered in the UK

All international data transfers (e.g. to the US) are protected by 
Standard Contractual Clauses (SCCs) or equivalent safeguards.

**We never sell your personal data.**

## How long we keep your data

- **Order data:** 8 years (Hungarian accounting law requirement)
- **Marketing data:** until you unsubscribe
- **Website analytics:** up to 26 months

## Your rights under UK GDPR and EU GDPR

You have the right to:

- Access a copy of your personal data
- Correct inaccurate data
- Request deletion ("right to be forgotten")
- Object to or restrict processing
- Data portability (receive your data in machine-readable format)
- Withdraw consent for marketing at any time
- Complain to:
  - The **UK Information Commissioner's Office (ICO)** — ico.org.uk
  - The **Hungarian Data Protection Authority (NAIH)** — naih.hu

To exercise any of these rights, email support@vitalo.site. We'll 
respond within 30 days.

## Cookies

We use cookies to make the site work, understand how visitors use 
it, and personalise your experience. See our [Cookie Policy](/pages/cookie-policy) 
for full details and to manage your preferences.

## Changes to this policy

We may update this policy from time to time. The "last updated" date 
at the top will always reflect the most recent version.