Privacy Policy

Last updated July 28, 2026

This Privacy Policy explains how Vitamus (“Vitamus,” “we,” “us,” or “our”) collects, uses, stores, and shares your personal information when you browse or use our Services, make a purchase on this website, or contact us.

In this Policy, “Services” means our website, online store, and related services.

Please read this Privacy Policy carefully. By accessing or using our Services, you acknowledge that we handle your personal information as described in this Policy.

Where consent is required as the legal basis for processing, we obtain your consent in accordance with applicable law.

Data Controller

Vitamus is the controller of personal information collected through this website.

For the seller’s legal name, address, and other legally required information, please see our Legal Notice or our Disclosures Under the Act on Specified Commercial Transactions.

For questions about this Privacy Policy or how we handle your personal information, email contact@tryvitamus.com.

Personal Information We Collect or Handle

In this Policy, “personal information” means information that directly identifies you or can reasonably be linked to you. It excludes anonymized or aggregated information that cannot reasonably be used to identify an individual.

Depending on how you use our Services, where you live, and applicable law, we may collect or handle the following personal information.

• Contact details such as your name, address, billing address, shipping address, phone number, and email address
• Payment and transaction information processed by payment service providers in connection with your purchases
• Account information such as your username, password, and security information
• Information about products you view, add to your cart, purchase, return, exchange, or cancel
• Information about past orders, payments, refunds, and transactions
• Customer support inquiries, emails, and other communications
• Device, browser, and network connection information, IP addresses, cookie identifiers, and other online identifiers
• Information about how you use and interact with our website, product pages, emails, and advertisements
• Marketing and advertising preferences, consent records, and responses
• Reviews, ratings, photos, videos, and other content you voluntarily post or submit
• Information needed for fraud detection, identity verification, and security

We do not intentionally collect sensitive personal information, such as health information that is unnecessary for selling our products, except where permitted by applicable law.

How We Collect Personal Information

Information You Provide Directly

You may provide personal information directly to us when you do any of the following.

• Browse or use our Services
• Create an account
• Place an order or make a payment
• Contact customer support
• Request a return, refund, or exchange
• Sign up for marketing communications
• Post a product review or other content
• Provide information to us in another way

Some Services and transactions require specific information. If you choose to withhold required information, you may be unable to use certain features or complete a transaction, such as placing an order.

Information Collected Automatically When You Use the Services

We and our service providers may automatically collect information about how you interact with the Services. We may use cookies, pixels, tags, software development kits (SDKs), and similar technologies for this purpose.

This information may include website and service usage, device and browser information, IP addresses, network connections, pages visited, links clicked, referral sources, and interactions with advertisements.

Information We Obtain From Third Parties

We may obtain personal information from third parties that collect or process it on our behalf, including the following.

• Shopify, which provides our online store and Services
• Payment service providers
• Shipping carriers and logistics providers
• Analytics providers
• Advertising and marketing partners
• Fraud prevention and security service providers
• Customer support providers
• Other technology service providers we use in connection with our Services

We handle personal information obtained from third parties in accordance with this Privacy Policy and applicable law.

How We Use Personal Information

Providing Products and Services

• Processing payments
• Receiving, confirming, and processing orders
• Packing, shipping, and delivering products
• Creating and managing accounts
• Sending notifications about orders, deliveries, returns, exchanges, refunds, and other transactions
• Saving your settings and preferences
• Providing customer service
• Performing our contract with you

Marketing and Advertising

• Sending information about products, promotions, and services by email or other means where permitted by applicable law
• Showing advertisements based on your interests
• Measuring the effectiveness of advertising and marketing activities
• Managing marketing consent and opt-out preferences

Where consent is required, we obtain it before sending marketing communications or using advertising technologies.

Security and Fraud Prevention

• Detecting, investigating, and preventing fraudulent, unlawful, suspicious, or harmful activity
• Protecting accounts, transactions, our website, and our customers
• Assessing payment and order risks
• Responding to security issues

If you create an account, you are responsible for keeping your login credentials secure. Please contact us promptly if you suspect unauthorized use of your account or of your communications with us.

Communicating With You

• Responding to inquiries
• Providing customer support
• Contacting you about your account, orders, products, or Services
• Sending important operational or legal notices

Improving Our Services

• Analyzing how customers use our Services
• Evaluating the quality of our website, products, and Services
• Improving usability, marketing, and the customer experience
• Planning new products, features, and Services

Complying With Laws and Protecting Rights

• Meeting legal, accounting, and tax obligations
• Responding to valid legal proceedings or requests from public authorities
• Enforcing our Terms of Service and policies
• Establishing, exercising, or defending legal claims
• Protecting our rights and safety and those of our customers and third parties

Legal Bases for Processing in the EU, EEA, and UK

Where applicable law in the European Union (EU), European Economic Area (EEA), or United Kingdom (UK) requires a legal basis for processing, we rely primarily on the following grounds.

• Performing a contract or taking steps before entering into a contract, including processing orders and payments, arranging delivery, handling returns, and providing customer service
• Complying with tax, accounting, consumer protection, and other legal obligations
• Pursuing our legitimate interests or those of third parties, such as fraud prevention, security, service improvement, and business operations, unless your rights and freedoms take precedence
• Obtaining your consent for marketing, optional cookies, or other processing that requires consent
• Protecting your vital interests or those of another person where necessary

Where we process personal information based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing that took place before you withdrew your consent.

Sharing Personal Information and Outsourcing Processing

We may share personal information with the following parties or engage them to process it for the legitimate purposes described in this Policy.

• Shopify and other e-commerce, hosting, and technology service providers
• Payment and financial service providers
• Shipping, logistics, and order management providers
• Customer support providers
• Marketing and advertising partners
• Analytics providers
• Security and fraud prevention service providers
• Lawyers, accountants, insurers, and other professional advisers
• Organizations with which you ask or authorize us to share information
• Government agencies, regulators, or other relevant parties where required by law, legal proceedings, or a valid official request
• Parties involved in a merger, acquisition, financing, restructuring, or sale of all or part of our business

We may also share personal information with your consent, at your direction, or where permitted by applicable law.

When Japan’s Act on the Protection of Personal Information requires your consent before we disclose personal information to a third party, we obtain that consent before disclosure unless a legal exception applies.

We provide necessary and appropriate oversight of service providers that process personal information on our behalf, in accordance with applicable law.

Our Relationship With Shopify

Our online store and Services are hosted and operated through Shopify.

Shopify collects and processes personal information about your access to and use of the Services to provide, protect, and improve its platform and related services.

Information you submit through our Services may be transmitted to Shopify and its service providers and stored or processed outside your country of residence.

Depending on the services and settings enabled in our store, Shopify may process information to provide advanced features, analytics, security, or advertising functions.

For more information about how Shopify handles personal information, please review Shopify’s consumer privacy information and Privacy Policy.

Cookies and Similar Technologies

We and our service providers may use cookies, pixels, tags, and similar technologies for the following purposes.

• Providing the website and its purchasing features
• Keeping you signed in and preserving your shopping cart contents
• Maintaining security and preventing fraud
• Analyzing website usage and performance
• Saving your preferences
• Measuring or personalizing marketing and advertising

Essential cookies help the website function properly. Where applicable law requires consent for optional cookies used for analytics, advertising, or personalization, we use them after obtaining your consent.

You may be able to manage optional cookies through our cookie settings tool or your browser settings. Disabling cookies may affect how certain website features work.

We may provide a separate Cookie Policy or cookie settings page with details about cookie types, purposes, and retention periods.

Marketing and Advertising Choices

You can stop receiving promotional emails at any time by using the unsubscribe link in our marketing emails.

After you unsubscribe, we may continue to send emails needed for orders, payments, accounts, shipping, returns, or other transactions.

Depending on where you live and applicable law, you may have the right to object to targeted advertising, profiling, or certain sharing of personal information.

Where required, we provide privacy settings or an opt-out mechanism on our website.

Third-Party Websites and Links

Our Services may include links to websites or online platforms independently operated by third parties.

When you visit a website that is unaffiliated with us or outside our control, please review the third party’s privacy policy, security practices, and terms of use.

We are not responsible for the privacy or security practices of independent third-party websites, applications, or platforms. Information you provide to a third-party service is governed by that third party’s privacy policy.

Children’s Personal Information

Our Services are intended for individuals who are old enough to give valid consent on their own under applicable law.

We do not knowingly collect personal information from minors in violation of applicable law.

If you believe a minor has provided personal information inappropriately, a parent or legal guardian may contact us to request that we review or delete the information.

Where parental permission is required for a minor to give consent, we obtain the necessary consent in accordance with applicable law.

Information Security

No security system is completely secure or impervious to intrusion. We cannot guarantee absolute security, and information sent over the internet may be vulnerable while in transit. Please use secure channels to send sensitive information.

We take reasonable administrative, technical, and organizational measures to protect personal information from unauthorized access, loss, alteration, disclosure, and misuse.

We provide necessary and appropriate oversight of employees and service providers who handle personal information.

If a data breach or other security incident occurs and applicable law requires reporting or notification, we take the required steps to notify the relevant supervisory authorities and affected individuals.

How Long We Keep Personal Information

Retention periods depend on the type of information, why we use it, and our applicable legal obligations.

We keep personal information only for as long as reasonably necessary for the following purposes.

• Maintaining your account
• Providing products and Services
• Processing and recording orders and transactions
• Meeting legal, accounting, and tax obligations
• Handling returns, refunds, and guarantees
• Resolving disputes
• Preventing fraud
• Enforcing our contracts, Terms of Service, and policies
• Establishing, exercising, or defending legal claims

When we no longer reasonably need personal information, we delete, anonymize, or securely dispose of it in accordance with applicable law.

Your Rights

Depending on where you live and applicable law, you may have some or all of the following rights regarding your personal information.

• Request access to or a copy of the personal information we hold about you
• Request information about why we use your personal information, where we obtained it, and whom we shared it with
• Request that we correct, supplement, or remove inaccurate or incomplete personal information
• Request erasure of your personal information under certain conditions
• Request that we stop using, restrict processing of, or stop sharing your personal information with third parties
• Object to certain processing
• Withdraw consent for processing based on your consent
• Receive your personal information in a structured, commonly used, machine-readable format under certain conditions
• Request that we transfer your personal information to another controller where technically feasible
• Object to processing for direct marketing
• Lodge a complaint with a supervisory authority where permitted by applicable law

These rights may be subject to limitations and exceptions under applicable law.

To exercise your rights, email contact@tryvitamus.com.

Before processing a request, we may ask for information reasonably necessary to verify your identity.

Where applicable law allows, you may appoint an authorized agent to submit a request on your behalf. We may ask for proof of authorization and verification of your identity.

We do not unlawfully discriminate against you for exercising your privacy rights.

Rights of Customers in Japan

Where Japan’s Act on the Protection of Personal Information applies, you may be able to request the following in relation to personal data we hold, subject to the conditions of that law.

• Notification of the purposes for which we use your data
• Disclosure of your data
• Correction, addition, or deletion of data
• Suspension of use or erasure
• Suspension of disclosure to third parties
• Disclosure of records relating to disclosures to third parties

When we provide personal data to a third party outside Japan, we provide the required information, obtain your consent, or implement equivalent safeguards in accordance with Japan’s Act on the Protection of Personal Information.

For complaints about how we handle your personal information, email contact@tryvitamus.com.

You may also consult or lodge a complaint with Japan’s Personal Information Protection Commission or another competent authority.

Rights of Customers in the EU, EEA, and UK

Where the GDPR or UK data protection law applies, you may have the following rights, subject to the conditions of the applicable law.

• Access your personal information and receive a copy
• Correct inaccurate personal information
• Request erasure of your personal information under certain conditions
• Restrict the processing of your personal information
• Object to processing based on our legitimate interests
• Object at any time to processing for direct marketing
• Exercise the right to data portability under certain conditions
• Withdraw consent at any time
• Exercise the right not to be subject to a decision based solely on automated processing that produces legal effects or similarly significant effects
• Lodge a complaint with the data protection supervisory authority where you live or work, or where the issue occurred

In accordance with applicable law, we respond without undue delay and generally within one month of receiving your request.

If a request is complex or we receive numerous requests, we may extend the response period to the extent allowed by applicable law. If we do, we will tell you why and how long the extension will be.

Automated Processing

We or our service providers may use automated systems for fraud prevention, payment risk assessment, security, and advertising personalization.

If we make a decision based solely on automated processing that produces legal or similarly significant effects for you under applicable law, we provide the required information and, in accordance with applicable law, give you the right to request human review, express your point of view, or challenge the decision.

Complaints

If you have a complaint about how we handle your personal information, email contact@tryvitamus.com.

We will review your complaint and respond appropriately in accordance with applicable law.

You may have the right to lodge a complaint with the data protection or privacy authority where you live. Where possible, please contact us first so we have an opportunity to resolve the issue directly.

International Transfers of Personal Information

We operate an international e-commerce business and use service providers that may process personal information outside your country of residence. Your personal information may therefore be transferred to, stored in, or processed in another country.

When we transfer personal information outside the European Economic Area, we use safeguards that comply with applicable law, such as European Commission adequacy decisions, Standard Contractual Clauses, or other transfer mechanisms recognized under the GDPR.

When we provide personal data from Japan to a third party in another country, we comply with Japan’s Act on the Protection of Personal Information. Where required, we provide information about the destination country’s data protection system, the recipient’s safeguards, and other necessary details. We obtain your consent or take steps to ensure the recipient continues to handle the data appropriately, as required.

For more information about applicable international transfer safeguards, email contact@tryvitamus.com.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our operations, Services, technology, legal requirements, or regulatory obligations.

We will post the updated Privacy Policy on this website and revise the “Last updated” date.

Where required by applicable law, we will provide additional notice of material changes or obtain your consent again.

Contact Us

For questions about this Privacy Policy or how we handle personal information, or to exercise your privacy rights, email contact@tryvitamus.com.

© 2026 Vitamus. All rights reserved.