1. Controller

ISARDI LTD, a private company limited by shares registered in England and Wales under number 17398968, operates the ViraVie store and acts as controller of the personal data described in this policy.

Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. Privacy contact: support@vira-vie.com

Our products are offered to people resident in the United Kingdom. The UK GDPR and the Data Protection Act 2018 therefore apply to this processing.

2. Data we process

Depending on how you interact with the store, we may process:

• your contact details and your delivery and billing information;
• information relating to your orders, payments, returns and exchanges;
• messages sent to customer service;
• account information and preferences, if you create an account;
• technical and usage data, such as IP address, browser, device, pages viewed and cookie identifiers;
• your marketing and cookie choices.

Payments are handled by Shopify and by the payment providers enabled on the store. We do not necessarily receive your full card number.

3. Purposes and legal bases

• Performance of the contract: managing the basket, payment, order, delivery, customer service, returns and guarantees.
• Legal obligations: keeping accounting and tax records, preventing money laundering, and responding to lawful requests.
• Legitimate interests: securing the store, preventing fraud, improving the service, defending our rights and producing essential statistics, subject to your rights.
• Consent: using non-essential cookies and sending certain commercial communications where consent is required. You may withdraw it at any time.

4. Sources of data

We receive data directly from you, automatically as you use the site, and from providers involved in a transaction, such as Shopify, payment providers, carriers and fraud prevention tools.

5. Recipients

We share only the data that is necessary, with the following categories:

• our hosting provider, which provides the store infrastructure and processes data on our behalf;
• the payment providers enabled on the store;
• our fulfilment provider, responsible for picking and dispatching orders, which receives the data needed for delivery;
• the carriers handling parcel transport;
• security suppliers, customer service tools and authorised marketing providers;
• our professional advisers, and the authorities where the law requires it.

6. International transfers

ISARDI LTD is established in the United Kingdom and personal data is processed there.

Where a provider processes data outside the United Kingdom, we rely on a transfer mechanism recognised under the UK GDPR — an adequacy regulation made by the Secretary of State, or the ICO's International Data Transfer Agreement or Addendum — together with appropriate supplementary measures where required.

7. Retention

We keep data only for as long as is necessary for the purposes described. Order data and accounting records are generally kept for six years, or longer where a local obligation requires it. Customer service enquiries are kept for as long as it takes to handle the request and manage any subsequent claim. Data used with your consent is deleted or deactivated when you withdraw that consent, unless another legal obligation applies.

8. Cookies

The store uses cookies that are strictly necessary for the operation of the site, the basket, security and payment. With your agreement where this is required, it may also use cookies for audience measurement, personalisation or advertising. You can accept, refuse or change your choices through the store's privacy preference tool. Refusing non-essential cookies does not prevent you from purchasing.

9. Your rights

You may request access to your data, its rectification or erasure, restriction of processing, data portability, or object to certain processing. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out beforehand.

To exercise a right, write to support@vira-vie.com. We may ask for the information reasonably needed to verify your identity. We respond within one month, as required by the UK GDPR.

You may also lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO) — ico.org.uk, or 0303 123 1113.

10. Security

We implement reasonable technical and organisational measures to protect data. As no system can offer absolute security, please avoid sending sensitive information through an unsecured channel.

11. Children

The store is not directed at children and we do not knowingly collect their data without the required authorisation. A parent or legal guardian may contact us to request the deletion of data provided by a child.

12. Changes

We may update this policy to reflect changes to the service or to applicable law. The update date will be amended and further notice will be given where the law requires it.

Last updated: 27 August 2026.