Privacy Policy

Vale Nutrition Ltd ("Vale Nutrition", "we", "us", "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store and protect information about you when you visit gracefulzymoveme.world (the "Site") or purchase our products.

This policy is issued under and complies with UK GDPR (the UK General Data Protection Regulation, as retained in UK law by the European Union (Withdrawal) Act 2018) and the Data Protection Act 2018.

1. Who We Are (Data Controller)

The data controller responsible for your personal data is:

Vale Nutrition Ltd
14 Clerkenwell Road, London, EC1M 5PA, United Kingdom
Company No. / VAT: 13847291
Email: info@gracefulzymoveme.world
Telephone: +44 20 3948 7700

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

• Identity data: your name.
• Contact data: telephone number, email address (where provided via the contact form).
• Order data: product ordered, price, UTM/gclid tracking parameters, order date.
• Technical data: IP address, browser type and version, time zone, browser plug-in types, operating system, device information, pages visited, referring URLs.
• Usage data: information about how you use our Site.
• Cookie and tracking data: see our Cookie Policy for full details.

We do not collect special categories of personal data (such as health, biometric or genetic data) through this Site.

3. How We Collect Your Data

• Directly from you - when you complete the order form, the contact form, or communicate with us by email or telephone.
• Automatically - via cookies and similar technologies when you browse the Site (subject to your consent preferences).
• From third parties - analytics providers (e.g. Google Analytics, where consented) and advertising platforms.

4. How We Use Your Data and Our Lawful Basis

We only process your personal data where we have a lawful basis under UK GDPR:

• Performance of a contract (Article 6(1)(b)): to process your order, arrange delivery, handle returns and communicate with you about your purchase.
• Legitimate interests (Article 6(1)(f)): to operate and improve our Site, detect fraud, carry out internal analytics, and ensure network security - where our interests do not override your rights.
• Consent (Article 6(1)(a)): for non-essential cookies and tracking technologies, and for marketing communications where you have opted in. You may withdraw consent at any time.
• Legal obligation (Article 6(1)(c)): to comply with applicable laws, including tax and accounting obligations.

5. Cookies and Consent Mode

We use cookies and similar technologies. By default, all non-essential cookies are denied until you provide explicit consent via our cookie banner. We implement Google Consent Mode v2 - advertising and analytics scripts operate in a restricted, cookieless mode until consent is granted. Full details are in our Cookie Policy.

6. Marketing Communications

We will only send you marketing communications if you have explicitly opted in. You may opt out at any time by contacting us at info@gracefulzymoveme.world.

7. Sharing Your Data

We do not sell your personal data. We may share your data with:

• Delivery and logistics partners - to fulfil and track your order.
• Payment processors - where applicable, to process payment on delivery.
• IT and hosting providers - who process data on our behalf under data processing agreements.
• Analytics and advertising platforms - only where you have consented (e.g. Google Analytics).
• Professional advisers - lawyers, accountants, auditors, where necessary.
• Regulatory authorities or law enforcement - where required by law.

All third-party processors are required to handle your data securely and in accordance with UK GDPR.

8. International Transfers

Some of our service providers (e.g. Google) are based outside the UK. Where personal data is transferred outside the UK, we ensure that appropriate safeguards are in place, such as the UK's International Data Transfer Agreements (IDTAs) or adequacy decisions, in accordance with Chapter V UK GDPR.

9. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Order and contract data: 7 years (for tax and accounting compliance).
• Contact enquiry data: up to 2 years from the date of enquiry.
• Cookie/analytics data: as set out in the Cookie Policy.

After the applicable retention period, data is securely deleted or anonymised.

10. Your Rights Under UK GDPR

You have the following rights in relation to your personal data:

• Right of access - to obtain a copy of your personal data (Subject Access Request).
• Right to rectification - to have inaccurate data corrected.
• Right to erasure ("right to be forgotten") - to request deletion where there is no legitimate reason for us to continue processing.
• Right to restriction - to restrict processing in certain circumstances.
• Right to data portability - to receive your data in a structured, machine-readable format.
• Right to object - to processing based on legitimate interests or for direct marketing.
• Rights related to automated decision-making - we do not carry out solely automated decision-making with legal or similarly significant effects.
• Right to withdraw consent - at any time where processing is based on consent, without affecting lawfulness of prior processing.

To exercise any of these rights, please contact us at info@gracefulzymoveme.world. We will respond within one calendar month.

11. Right to Complain to the ICO

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection:

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Telephone: 0303 123 1113
Website: ico.org.uk

We would, however, appreciate the opportunity to address your concerns before you contact the ICO, so please contact us in the first instance.

12. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or alteration. These include TLS encryption for data in transit, access controls and regular security reviews.

13. Third-Party Links

Our Site may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies.

14. Children

Our Site and products are intended for adults aged 18 and over. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us immediately.

15. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent revision. We encourage you to review this page periodically. Where changes are material, we will notify you via a prominent notice on the Site.

16. Contact

For any privacy-related queries, please contact our Data Controller at:

Vale Nutrition Ltd
14 Clerkenwell Road, London, EC1M 5PA
Email: info@gracefulzymoveme.world
Telephone: +44 20 3948 7700