Privacy Policy | Vantage Wellness

1. Who We Are

Data Controller: Vantage Wellness Ltd, 27 Cavendish Square, London W1G 0PU, United Kingdom. Company No. / VAT 14892367 · GB489236712.

Contact for data protection matters: info@flexvibrantlife.world

This Privacy Policy explains how Vantage Wellness Ltd ("we", "us", "our") collects, uses, stores, and shares your personal data when you visit flexvibrantlife.world or place an order for Wellaray Coffee.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) as retained in UK law by the Data Protection Act 2018, and, where applicable, the EU General Data Protection Regulation (EU GDPR) 2016/679.

2. Data We Collect

2.1 Data You Provide Directly

Order data: full name, telephone number, delivery address, quantity selected, and order value, collected when you submit the order form.
Enquiry data: name, email address, subject, and message, collected when you use the contact form.
Consent records: timestamp and choice recorded when you accept or reject cookies via our consent banner.

2.2 Data Collected Automatically

Technical data: IP address, browser type and version, operating system, referring URL, pages visited, time on page, and device type - collected via server logs and, where you have consented, analytics cookies.
Cookie data: see our Cookie Policy for full details of cookies we use.
UTM / advertising parameters: source, medium, campaign, content, and click identifiers (e.g. gclid) passed in the URL when you arrive from an advertising channel, collected only where you have consented to advertising cookies.

2.3 Data We Do Not Collect

We do not collect payment card data on this website. We do not collect sensitive personal data (special category data under UK/EU GDPR) such as health information, race, religion, or biometric data.

3. Legal Bases for Processing

Purpose	Legal Basis (UK/EU GDPR)
Processing and fulfilling your order	Article 6(1)(b) - performance of a contract
Responding to enquiries	Article 6(1)(b) - pre-contractual measures / Article 6(1)(f) - legitimate interests
Analytics and site improvement	Article 6(1)(a) - your consent (via cookie banner)
Advertising and remarketing	Article 6(1)(a) - your consent (via cookie banner)
Compliance with legal obligations	Article 6(1)(c) - legal obligation
Fraud prevention and security	Article 6(1)(f) - legitimate interests

4. How We Use Your Data

To confirm and process your order for Wellaray Coffee and arrange delivery.
To contact you by telephone or email regarding your order status, delivery, or enquiry.
To process any returns or refund requests.
To send transactional communications relating to your order (not marketing, unless you separately opt in).
To improve the performance and usability of our website using aggregated, anonymised analytics data (where consented).
To serve relevant advertising via Google Ads and similar platforms (where consented).
To comply with legal and regulatory obligations, including tax record-keeping.

5. Cookies and Consent Mode

We implement Google Consent Mode v2. On your first visit, all advertising and analytics cookies are denied by default. Cookies are only set for those categories where you explicitly click "Accept All" on our consent banner. You may change your preferences at any time by revisiting our Cookie Policy page. Full details of every cookie we use - name, provider, purpose, duration - are listed there.

6. Sharing Your Data

We do not sell your personal data. We may share it with the following categories of recipients:

Delivery and logistics partners - to fulfil your order (name and delivery address only).
Payment processors - where applicable, to process payments securely.
IT and hosting providers - who host or maintain our website under data processing agreements.
Analytics providers (e.g. Google Analytics) - only where you have consented to analytics cookies.
Advertising platforms (e.g. Google Ads) - only where you have consented to advertising cookies.
Legal and regulatory authorities - where required by law, court order, or to protect our legal rights.

All third-party processors are required to protect your data in accordance with UK/EU GDPR and are bound by data processing agreements.

7. International Transfers

Some third-party providers (e.g. Google LLC) are based in the United States. Where personal data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission and the UK International Data Transfer Agreement (IDTA), or reliance on an adequacy decision where applicable.

8. Retention Periods

Data Type	Retention Period
Order records (name, phone, address, quantity)	7 years (UK tax and accounting obligations)
Contact form enquiries	2 years from date of enquiry
Analytics data (where consented)	26 months (Google Analytics default)
Consent records	3 years
Server logs	90 days

9. Your Rights Under UK/EU GDPR

You have the following rights in relation to your personal data:

Right of access - to obtain a copy of the personal data we hold about you.
Right to rectification - to have inaccurate data corrected.
Right to erasure ("right to be forgotten") - to request deletion of your data where there is no longer a lawful basis for processing.
Right to restriction - to request that we limit how we use your data in certain circumstances.
Right to data portability - to receive your data in a structured, machine-readable format where processing is based on consent or contract.
Right to object - to object to processing based on legitimate interests.
Right to withdraw consent - where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
Rights related to automated decision-making - we do not carry out solely automated decision-making that produces legal or significant effects.

To exercise any of these rights, contact us at info@flexvibrantlife.world. We will respond within one calendar month.

10. Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the relevant supervisory authority:

UK: Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. Website: ico.org.uk. Helpline: 0303 123 1113.
EU: The data protection authority in the EU member state of your habitual residence, place of work, or where the alleged infringement occurred.

We would, however, appreciate the opportunity to address your concerns directly before you approach a supervisory authority - please contact us first.

11. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include HTTPS/TLS encryption for all data in transit, access controls, and regular security reviews. No method of transmission over the internet is entirely secure; we cannot guarantee absolute security, but we take our obligations seriously.

12. Children

Our website and products are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you believe a child has submitted data to us, please contact us and we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. The "last updated" date at the top of this page will change accordingly. Where changes are material, we will take reasonable steps to bring them to your attention.

14. Contact

For any privacy-related questions or to exercise your rights:
Vantage Wellness Ltd
27 Cavendish Square, London W1G 0PU, United Kingdom
Email: info@flexvibrantlife.world
Tel: +44 20 7946 0923