Privacy Policy
1. Who we are
This Privacy Policy explains how BoostVits, trading as BoostVits (“BoostVits”, “we”, “us” or “our”), collects, uses, shares and protects personal information when you visit boostvits.com (the “Site”), contact us, create an account, subscribe to marketing or place an order.
For UK data-protection law, www.boostvits.com is the data controller for the personal information described in this policy.
Privacy contact: sales@ashlux.co.uk
2. Personal information we collect
Information you provide
Identity and contact details, such as your name, billing and delivery addresses, email address and telephone number.
Account information, including your username, password in encrypted or hashed form, saved addresses and preferences.
Order and transaction information, such as products purchased, order value, discounts, delivery method, payment status, returns and guarantee claims.
Communications, including contact-form submissions, emails, customer-service messages, reviews, survey responses and competition entries.
Marketing preferences, including whether you have asked to receive or stop receiving emails or other marketing.
Information collected automatically
Technical data, such as IP address, browser type, device information, operating system, time zone, referring pages and security logs.
Usage data, such as pages viewed, links selected, products added to a basket, checkout activity and interactions with emails, subject to your cookie choices.
Cookie and similar-technology identifiers. See section 6 below.
Payment information
Payments are handled by our payment-service provider(s). We normally receive confirmation of payment, transaction identifiers and limited payment details, such as card type and the last digits of a payment card. We do not intend to store full payment-card numbers or security codes on our own systems.
Health information
We do not ask you to provide medical records or detailed health information when purchasing ordinary products. If you voluntarily include health information in a message to us, we will use it only as reasonably necessary to respond, protect your safety or meet legal obligations. Please do not send information that is not needed for your enquiry.
3. How we collect personal information
We collect personal information directly from you when you browse the Site, create an account, place an order, contact us, submit a review, make a return or guarantee claim, or subscribe to marketing. We also receive information from service providers involved in operating the Site and fulfilling orders, such as payment providers, ecommerce platforms, couriers, analytics services and fraud-prevention providers.
4. How and why we use personal information
To provide products and services — contract
We use identity, contact, account, order and transaction information to process payment, confirm orders, deliver products, manage accounts, provide customer service and handle returns, refunds and guarantee claims. This processing is necessary to perform our contract with you or to take steps at your request before entering into a contract.
To meet legal obligations — legal obligation
We use and retain information where necessary for tax and accounting records, consumer-protection duties, product-safety obligations, regulatory requests, fraud reporting, legal claims and the exercise or defence of legal rights.
To operate, secure and improve the business — legitimate interests
We may use information to secure the Site, prevent fraud and misuse, troubleshoot problems, understand performance, improve products and customer service, maintain records and establish or defend legal claims. We rely on our legitimate interests only where those interests are not overridden by your rights and freedoms.
Marketing and non-essential cookies — consent or permitted soft opt-in
Where required, we use consent for email marketing, text marketing and non-essential cookies. In limited circumstances, UK rules may allow us to send marketing about similar BoostVits products to an existing customer under the soft opt-in. Every marketing message will provide a simple way to opt out.
5. If you do not provide information
Some information is required to create an account, process an order or deliver products. If you do not provide it, we may be unable to accept or fulfil your order. Information requested only for marketing or optional features is voluntary.
6. Cookies and similar technologies
The Site uses cookies and similar technologies. Strictly necessary cookies support functions such as security, basket contents, checkout and account access. Other cookies may support preferences, analytics, advertising or embedded content.
We will not set non-essential cookies before obtaining consent where consent is required. You can adjust browser settings, although blocking essential cookies may prevent parts of the Site from working.
7. Marketing communications
You can unsubscribe at any time by using the link in a marketing email or contacting sales@ashlux.co.uk. Withdrawing consent does not affect processing already carried out lawfully. We may keep a minimal suppression record so that we can respect your opt-out request.
Service messages about orders, safety notices, account security or changes to contracted services are not marketing and may still be sent when necessary.
8. Who we share information with
We share personal information only where reasonably necessary and subject to appropriate contractual and security measures. Recipients may include:
website hosting, ecommerce, IT support and cybersecurity providers;
payment processors, banks and fraud-prevention providers;
warehouse, fulfilment, postal and courier providers;
email marketing, customer-support, survey and review platforms;
analytics and advertising providers, where permitted by your cookie choices;
accountants, insurers, auditors, lawyers and other professional advisers;
regulators, courts, law-enforcement bodies or other parties where disclosure is required or permitted by law; and
a buyer, seller or adviser involved in a genuine sale, merger, reorganisation or transfer of all or part of our business, subject to confidentiality and applicable law.
We do not sell personal information for money. If our use of advertising technology amounts to another regulated form of data sharing, we will provide the controls required by applicable law.
9. International transfers
Some service providers may process personal information outside the UK. Where a restricted transfer occurs, we will use a lawful transfer mechanism, such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another safeguard permitted by law. You may contact us for further information about relevant safeguards.
10. How long we keep information
We keep personal information only for as long as reasonably necessary for the purpose collected, including legal, accounting, safety, fraud-prevention and dispute-resolution requirements. Our usual periods are:
Order, payment, tax, refund and guarantee records: normally six years after the end of the relevant financial year or resolution of the matter.
Customer accounts: while active and ordinarily for up to two years after closure, except that transaction records may be kept longer as stated above.
Customer-service enquiries that do not lead to a transaction: ordinarily up to 24 months after the enquiry is closed.
Marketing records: until you unsubscribe or the record becomes inactive under our retention process; a minimal suppression record may be retained to honour your opt-out.
Security and access logs: ordinarily up to 12 months, unless needed longer to investigate an incident or meet a legal obligation.
Cookie-derived information: for the periods shown in the live cookie settings or cookie notice.
We may anonymise information so that it no longer identifies you and retain that anonymous information for analysis.
11. Security
We use appropriate technical and organisational measures designed to protect personal information against accidental or unlawful loss, access, alteration, disclosure or destruction. Access is limited to people and providers who need it for legitimate business purposes. No internet service is completely secure, so we cannot guarantee absolute security.
12. Your data-protection rights
Depending on the circumstances, UK data-protection law may give you rights to:
be informed about how your personal information is used;
request access to your personal information;
ask us to correct inaccurate or incomplete information;
ask us to erase information in certain circumstances;
ask us to restrict processing in certain circumstances;
object to processing based on legitimate interests and object at any time to direct marketing;
receive certain information in a portable format;
withdraw consent at any time where processing relies on consent; and
not be subject to certain decisions based solely on automated processing that produce legal or similarly significant effects.
These rights are not all absolute. To exercise a right, contact sales@ashlux.co.uk. We may ask for information needed to verify your identity. We normally respond within one month, subject to lawful extensions for complex or multiple requests.
13. Children
The Site and products are intended for adults. We do not knowingly collect personal information from children for the purpose of selling products to them. If you believe a child has provided personal information without appropriate involvement from a parent or guardian, contact sales@ashlux.co.uk
14. Third-party websites
The Site may contain links to websites operated by others. Their privacy practices are governed by their own notices. We encourage you to read those notices before providing personal information.
15. Changes to this policy
We may update this Privacy Policy to reflect changes in law, technology or our operations. The latest version will be posted on the Site with a revised date. Where a change is material, we will take reasonable steps to draw it to your attention.
16. Contact and complaints
Please contact us first if you have a question or concern about privacy:
www.boostvits.com, trading as BoostVits
sales@ashlux.co.uk
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data-protection regulator. Details are available at ico.org.uk/make-a-complaint or by calling 0303 123 1113. We would appreciate the opportunity to address your concern before you contact the ICO.
