Transparent data practices • Practical choices • Clear privacy rights
Last Updated: September 18, 2026
Privacy Information
Data Choices
Privacy Rights
Privacy Support
Vital Nora is the data controller responsible for deciding how and why personal information collected through this website is processed.
Josep Corner 8.2-1, 25001 Lleida, Spain
ESY8389749F
We collect information that you provide directly, information generated when you use our website, and information necessary to process purchases and provide customer support.
Your name, billing and shipping address, email address, telephone number and account details.
Your orders, transaction details, delivery information and payment status. Payment providers process your complete payment-card details.
Your IP address, browser, device information, website activity and cookie preferences.
Messages, enquiries, reviews, feedback and other information you provide when communicating with us.
We use personal information only when we have a valid purpose and lawful basis for doing so.
To process purchases and provide the services requested by customers. Lawful basis: performance of a contract.
To answer questions and resolve issues relating to our products, orders and services. Lawful basis: contract or legitimate interests.
To protect customers, accounts, payments and our website from fraud or misuse. Lawful basis: legitimate interests.
To send optional marketing communications and understand website usage where you have provided consent. Lawful basis: consent.
To improve the reliability, usability and performance of our website and services. Lawful basis: legitimate interests.
To meet legal, accounting and regulatory requirements. Lawful basis: legal obligation or legitimate interests.
We share personal information only when necessary to operate our store, complete transactions, deliver orders, meet legal obligations or protect our legitimate interests.
Payment and transaction information is shared with Stripe or other payment providers available during checkout. Vital Nora does not store complete payment-card details.
Your name, delivery address, contact details and relevant order information may be shared with fulfilment providers and delivery companies.
Trusted providers may process information for website hosting, security, email delivery, customer support, analytics and store administration.
We may disclose information when required by law, to respond to lawful requests, prevent fraud or protect the rights and safety of Vital Nora and others.
We do not sell personal information. Service providers may process information only for the services they provide to us and subject to applicable data-protection requirements.
Some of our service providers may process or store personal information outside the European Economic Area (EEA). When this happens, we use appropriate safeguards required by applicable data protection law.
Our payment, analytics, hosting, communication or technology providers may operate from countries outside the EEA.
Where required, transfers are protected using an adequacy decision, European Commission Standard Contractual Clauses or another legally approved safeguard.
You may contact us at info@vitalnora.com if you would like more information about international transfers and the safeguards that apply.
We retain personal information only for as long as necessary for the purposes described in this policy, including meeting legal, accounting, security and dispute-resolution requirements.
Order, payment-status, delivery, return and invoice records are retained for the periods required under applicable tax, accounting, consumer-protection and legal-claims requirements.
Account information is generally retained while the account remains active. After closure, information is deleted or anonymised unless continued retention is legally required.
Enquiries, complaints and privacy-rights requests are retained for as long as necessary to respond, document our compliance and resolve potential disputes.
Marketing information is retained until consent is withdrawn or the information is no longer needed. Cookie and consent records are retained according to the periods shown in our consent settings.
When information is no longer required, we delete or anonymise it securely. We may retain limited information for longer where necessary to comply with law, establish or defend legal claims, prevent fraud or honour an opt-out request.
We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse or disclosure.
Our website uses HTTPS encryption to protect information transmitted between your browser and our website.
Card and payment information is processed securely by the payment providers available during checkout.
Access to personal information is limited to authorised parties who require it for legitimate purposes.
We review and update appropriate security measures as our services and legal requirements develop.
We use necessary cookies to operate our website and optional cookies only with your consent. You can accept, reject or change your preferences at any time.
These cookies are necessary for the website and store to function and cannot be disabled through our consent settings.
These cookies help us understand website usage and improve performance. They are activated only when you provide consent.
These cookies may be used to measure campaigns or provide relevant advertising when such services are enabled. They are activated only with your consent.
You may withdraw or change your consent at any time by selecting “Manage consent.” Withdrawing consent does not affect processing that occurred before withdrawal.
You may exercise the rights available to you under applicable data-protection law.
Request confirmation of whether we process your personal information and obtain a copy of that information.
Where applicable, request certain information in a structured, commonly used and machine-readable format.
Request correction of personal information that is inaccurate or incomplete.
Request deletion of your personal information where applicable. Certain information may be retained when required by law or for legitimate legal purposes.
Withdraw your consent or request that we restrict certain processing of your personal information where applicable.
Object to processing based on legitimate interests or to the use of your information for direct marketing.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) or another competent supervisory authority. We may request reasonable information to verify your identity before completing a rights request.
CHILDREN’S PRIVACY
Our website and services are not directed to children under 18. Individuals under 18 should not create an account, place an order or provide personal information without the involvement of a parent or legal guardian.
We do not knowingly collect personal information directly from children. If you believe that a child has provided personal information to us without appropriate permission, please contact us at info@vitalnora.com. We will review the request and delete or restrict the information where required by law.We may update this Privacy Policy when our services, legal obligations or data-processing practices change. The revised version will be published on this page, and the “Last Updated” date at the top will be changed accordingly.
If an update materially affects how we use your personal information, we will provide an additional notice or request new consent where required by law. We encourage you to review this policy periodically.
If you have questions about this Privacy Policy, how we handle your personal information or how to exercise your privacy rights, please contact us.
We’re committed to protecting your privacy and being transparent about how we use your data. We explain how we handle personal information and use appropriate safeguards to protect it.
