Privacy notice
Last updated: 13 October 2026.
This notice explains how VITALTHERAPY WELLNESS LIMITED uses personal information when you visit vitaltherapyoffice.com, send a purchasing enquiry or use an existing website account.
Who is responsible for your information
VITALTHERAPY WELLNESS LIMITED is the controller of the personal information described in this notice. For privacy questions or requests, email info@vitaltherapyoffice.com, call +44 7805 061623, or write to our registered address: 2nd Floor Grove House, 55 Lowlands Road, Harrow, Middlesex, England, HA1 3AW.
Information we use
- Enquiries: your name, email address, optional company name and telephone number, your message, selected products and quantities, the catalogue prices recorded with the request, and the time and reference of your submission. We also record your acknowledgement of this notice and staff notes needed to handle the request.
- Existing accounts: the account and contact information needed to provide access, together with authentication and account-security information. Public account registration is currently closed.
- Website security: necessary connection and security information in server logs, and short-lived anti-abuse counters. The enquiry system uses protected summaries of network addresses and email addresses for rate limiting; it does not add your raw IP address to the enquiry record.
- Your browser: essential cookies and local storage described in our cookie and browser-storage notice.
Please provide only information relevant to your purchasing requirements. Do not send payment card details or personal health information through the website.
Why we use it and our lawful basis
- Responding to a quotation or product enquiry: taking steps at your request before entering into a contract, where that basis applies, and our legitimate interests in dealing with business purchasing enquiries and maintaining accurate correspondence.
- Providing and managing an existing account: carrying out the relevant account arrangements and our legitimate interests in providing secure access and maintaining appropriate business records.
- Preventing misuse and keeping the website secure: our legitimate interests in protecting customers, the website and our business.
- Meeting legal obligations: where applicable law requires us to retain or disclose information.
Acknowledging this notice on an enquiry form is not agreement to receive marketing. This website does not use advertising or audience-analytics trackers, or make automated decisions with legal or similarly significant effects about you.
How an enquiry is handled
An accepted website enquiry is saved for authorised staff to review. The on-screen reference confirms that the request was recorded; it does not confirm an order, a payment or delivery of an email. Automatic enquiry email notifications are currently disabled. Keep your reference if you need to contact us about your request.
Who may receive information
Access is limited to people authorised to handle enquiries and administer the website, and service providers that support hosting, security and website maintenance where necessary for those services. If you correspond by email, the email services involved also process that correspondence. We may disclose information where required by law or where necessary to establish, exercise or defend legal claims.
Contact us if you need further information about the service providers involved in your request, where they process information, or any applicable international-transfer safeguards.
How long information is kept
- Website enquiries and internal handling notes: kept for 180 days from submission and permanently removed by the next scheduled daily cleanup after that point. Editing a request does not restart this period.
- Backup copies: daily backups rotate over 14 retained copies. Information removed from the live site may therefore remain in a protected backup for up to 14 further days before that backup is replaced.
- Anti-abuse counters: used for hourly limits and removed during routine cleanup once their window expires.
- Existing account records and separate correspondence: kept for as long as needed to manage the account or business relationship, deal with the matter concerned and meet applicable legal requirements.
- Necessary server and security logs: kept for the period needed to operate the service, investigate or prevent misuse and meet relevant operational or legal requirements. You can ask us for information about the logs relevant to your request.
Your rights
Depending on the circumstances, you can ask to access your personal information, correct it, erase it, restrict its use or receive a portable copy. You can object to processing based on legitimate interests. Where processing relies on consent, you can withdraw that consent without affecting processing already carried out lawfully.
Contact us using the details above to make a request. We may need to check your identity and the information concerned before responding. Some rights have exceptions, including where information is needed to meet a legal obligation or deal with legal claims.
You can also complain to the UK Information Commissioner’s Office. Visit ico.org.uk/make-a-complaint for information about making a complaint.
Changes to this notice
We will update this notice if the website or the way enquiries are handled changes. The date at the top shows when this version was last updated.