Privacy Notice

Last updated: 2 August 2026.

This notice explains how MYVYTLS uses personal information when you visit the website, join the Launch List, create an account, complete an assessment, build or buy a stack, manage a subscription, contact us, or receive customer service.

Who is responsible for your information

MYVYTLS Ltd is the controller. Its company number is 17312788 and its registered office is 10 Carriers Way, East Hoathly, England, BN8 6AG. Contact us about privacy or your rights at info@myvytls.co.uk.

Information we collect

• Identity and contact details, such as your name, email address, delivery address and telephone number where supplied.
• Account, authentication, security and communication-preference information.
• Launch List consent, referral information, signup number and unsubscribe status.
• Assessment answers, goals, routines, preferences and relevant safety or health information you choose to provide.
• Your suggested or selected products, AM/PM stack, warnings acknowledged and changes you make.
• Order, subscription, fulfilment, dispatch, returns, complaint, recall and customer-service records.
• Payment references and status. Stripe handles complete card details rather than MYVYTLS.
• Technical, device, security, audit and limited usage information needed to operate and protect the service.

How and why we use information

• To create and secure accounts, provide requested assessments and stack-building tools, take payment, fulfil orders, manage subscriptions and provide support. The usual lawful basis is taking steps at your request or performing our contract with you.
• To meet food-safety, traceability, recall, tax, accounting, consumer-law and other legal obligations.
• To prevent fraud, secure and improve the service, maintain audit records and establish or defend legal claims where our legitimate interests apply and do not override your rights.
• To send marketing where you have consented or another lawful direct-marketing basis applies. You can opt out at any time.

Health and assessment information

Some answers may reveal health information, which is special-category personal data. Where MYVYTLS uses this information to provide the guided experience and associated safety handling, we ask for a separate, explicit and recorded consent in addition to the applicable Article 6 lawful basis.

You can withdraw that consent through your account or by contacting us. Withdrawal does not affect earlier lawful processing. It may mean we must delete an unfinished assessment or can no longer provide a health-data-dependent feature. We do not sell health information, use it for third-party advertising, or send detailed assessment answers to Stripe.

Automated personalisation

Start Personalising applies governed rules to your answers to generate three shopping suggestions and relevant suitability exclusions. You can remove suggested products, add from the complete customer-selectable library and review conflict alerts before ordering. MYVYTLS does not use this process to diagnose you or make a clinical decision. Contact us if you want help understanding the result or wish to challenge information used in your account.

We ask for your first name and email when you start a Stack so we can secure and personalise your journey. Marketing email is optional: we record it only where you actively select the separate marketing choice, together with the date and consent wording version. You can withdraw that consent at any time.

Who we share information with

We share only what is needed with service providers that help operate MYVYTLS, including Supabase for database and authentication, Vercel for hosting, Stripe for payments and billing, Resend and other governed email services for communications, and EQUIPACS LTD (company number 13189065), operating at 10 Carriers Way, East Hoathly, England, BN8 6AG, for approved packing and fulfilment activities.

We may also share information with professional advisers, insurers, regulators, law enforcement or another party where required by law, needed for a safety recall, or necessary to establish or defend legal rights. If the business is reorganised or sold, appropriate information may transfer under confidentiality and data-protection safeguards.

International processing

Some providers may process information outside the UK. Where UK law requires it, we use an adequacy regulation or approved contractual safeguards and assess the protection applied to the transfer. You can contact us for more information about relevant safeguards.

How long we keep information

We keep information only for as long as reasonably needed for the purpose collected and for applicable legal, tax, accounting, safety, traceability, recall, fraud-prevention and dispute periods. Draft assessments and inactive baskets are kept for shorter operational periods than completed order and safety records. Consent and audit evidence may be retained for as long as needed to demonstrate compliance. We securely delete or anonymise information when it is no longer required.

Cookies and similar technology

We use strictly necessary storage and similar technology for functions such as authentication, security, preferences and basket continuity. MYVYTLS will not activate non-essential advertising or analytics technology, including Meta or Google marketing pixels, before an appropriate consent mechanism is in place. If that changes, the site will provide clear information and a choice before non-essential technology is used.

Email and communications

Service, security, order, payment, subscription, dispatch and recall messages are sent because they are needed to operate your account or contract and are separate from marketing. Launch List and other marketing emails include an unsubscribe route. Unsubscribing from marketing does not prevent essential service or safety communications.

Your rights

Depending on the circumstances, UK data-protection law may give you rights to access, correct, erase, restrict or object to processing, and to receive certain information in a portable format. You can withdraw consent at any time and complain about how we use your information. Some rights are limited where we must retain records by law or for compelling safety or legal reasons.

To exercise a right, email info@myvytls.co.uk. We may need to verify your identity. You can also complain to the UK Information Commissioner's Office at ico.org.uk.

Security

We use technical and organisational controls designed to protect information, including access controls, authenticated customer and Admin areas, audit records, encryption provided by our platforms, data minimisation and controlled service-provider access. No system is completely risk-free; please keep your account access secure and contact us if you suspect misuse.

Children

MYVYTLS is intended for adults. We do not knowingly offer the personalised supplement service to children or ask them to provide health information through the assessment.

Updates

We may update this notice when the service, providers or law changes. The latest version will be published here with its update date. We will highlight material changes where appropriate.

Related terms

For ordering, subscriptions, cancellation and returns, see our Terms of Sale.