1. Introduction
BIOVIT (“we”, “us”, or “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share personal data when you visit our website at biovit.com, submit enquiries, request samples, download content, or otherwise interact with us.
BIOVIT is a United Kingdom–registered business-to-business (B2B) natural vitamin and mineral ingredient supplier. We do not sell products directly through our website. Our website is informational, designed to help food, drink, and nutrition businesses learn about our ingredients, services, and research.
This policy applies to all visitors to our website, whether you are a prospective business partner, an existing customer, or a general visitor. By using our website, you acknowledge that you have read and understood this Privacy Policy.
2. Data Controller
For the purposes of UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller responsible for your personal data is:
BIOVIT
Email: hello@biovit.com
Website: biovit.com
If you have any questions about how we handle your personal data, please contact us using the details above.
3. What Data We Collect
We may collect and process the following categories of personal data:
3.1 Information You Provide to Us
When you submit an enquiry form, request a sample, book a meeting, download gated content, or sign up for our newsletter, we may collect:
- Your name and job title
- Your business email address
- Your company name and business address
- Your telephone number
- Details of your enquiry, including product type, target market, and project brief
- Your ingredient or formulation requirements
3.2 Information We Collect Automatically
When you visit our website, we may automatically collect certain technical data, including:
- Your IP address and approximate geographic location
- Browser type and version, operating system, and device type
- Pages visited, time spent on pages, and navigation patterns
- Referring website or source (how you found us)
- Cookie and similar technology identifiers (see Section 8 below)
3.3 Information from Third Parties
We may receive limited personal data from third-party sources, including LinkedIn (where you interact with our company page or team members’ content), trade event organisers (where you have opted in to share your details with exhibitors), and prospect data providers used for outbound business development. In all cases, we only process data obtained lawfully and in accordance with applicable regulations.
4. How We Use Your Data
We use your personal data for the following purposes:
- Responding to enquiries: To reply to your questions, provide product information, and follow up on sample requests or meeting bookings.
- Lead nurturing: To send you relevant follow-up communications based on the nature of your enquiry, such as case studies, technical data, or invitations to book a call.
- Newsletter and industry insights: To send you our periodic industry insights newsletter, where you have opted in to receive it.
- Website improvement: To analyse how visitors use our website, identify popular content, and improve the user experience.
- Business development: To identify and contact potential business partners who may benefit from our ingredient supply or consultancy services.
- Compliance and legal obligations: To comply with any legal or regulatory obligations applicable to our business.
We will never sell your personal data to third parties. We do not use your data for automated decision-making or profiling.
5. Legal Basis for Processing
Under the UK GDPR, we rely on the following legal bases to process your personal data:
- Consent: Where you have given clear consent for us to process your data for a specific purpose, such as subscribing to our newsletter. You may withdraw consent at any time by contacting us or using the unsubscribe link in any email.
- Legitimate interests: Where processing is necessary for our legitimate business interests, such as responding to enquiries, conducting business development, and improving our website. We always balance our interests against your rights and will not process data where the impact on you would override our interests.
- Contractual necessity: Where processing is necessary to take steps at your request prior to entering into a commercial agreement, such as providing samples or technical consultations.
- Legal obligation: Where processing is required to comply with a legal or regulatory requirement.
6. Who We Share Your Data With
We may share your personal data with the following categories of recipients, and only to the extent necessary for the purposes described in this policy:
- Service providers: Third-party providers who support our website hosting, email marketing, CRM, analytics, and IT infrastructure. These providers process data on our behalf and under our instructions.
- Professional advisers: Our legal, accounting, and compliance advisers, where necessary for the operation of our business.
- Marketing and analytics partners: Third-party analytics tools (such as Google Analytics) that help us understand website traffic and user behaviour. These tools use anonymised or pseudonymised data where possible.
- Regulatory bodies: Government authorities or regulators, where we are required by law to disclose information.
We require all third-party service providers to respect the security of your personal data and to treat it in accordance with applicable law. We do not allow our service providers to use your data for their own purposes and only permit them to process your data for specified purposes and in accordance with our instructions.
7. International Data Transfers
Some of our third-party service providers may be based outside the United Kingdom. Where we transfer your personal data outside the UK, we ensure that appropriate safeguards are in place to protect your data, including UK International Data Transfer Agreements (IDTAs), Standard Contractual Clauses approved by the Information Commissioner’s Office (ICO), or transfers to countries that have been deemed to provide an adequate level of data protection.
8. Cookies & Similar Technologies
Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyse website traffic, and understand how visitors interact with our content.
8.1 Types of Cookies We Use
- Strictly necessary cookies: Essential for the website to function. These cannot be switched off and do not require consent.
- Analytics cookies: Help us understand how visitors use the website by collecting anonymised data on page views, traffic sources, and user journeys. We use tools such as Google Analytics for this purpose.
- Functional cookies: Remember your preferences and settings to provide a more personalised experience.
- Marketing cookies: Used to track visitors across websites and display relevant content. We may use these in connection with LinkedIn advertising or remarketing campaigns.
8.2 Managing Cookies
When you first visit our website, you will be presented with a cookie consent banner allowing you to accept or decline non-essential cookies. You can also manage your cookie preferences at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of the website.
9. Data Retention
We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by law. Our general retention periods are as follows:
- Enquiry and sample request data: Retained for up to 3 years from the date of your last interaction with us, unless a commercial relationship is established, in which case data is retained for the duration of that relationship plus 6 years.
- Newsletter subscriber data: Retained until you unsubscribe or withdraw consent.
- Website analytics data: Anonymised analytics data may be retained indefinitely. Identifiable data linked to analytics is retained for up to 26 months.
- Business partner data: Retained for the duration of the commercial relationship plus 6 years, in accordance with our legal and regulatory obligations.
When personal data is no longer required, we will securely delete or anonymise it.
10. Your Rights
Under UK data protection law, you have the following rights in relation to your personal data:
- Right of access: You have the right to request a copy of the personal data we hold about you.
- Right to rectification: You have the right to ask us to correct any inaccurate or incomplete personal data.
- Right to erasure: You have the right to ask us to delete your personal data, subject to certain legal exceptions.
- Right to restrict processing: You have the right to ask us to restrict the processing of your data in certain circumstances.
- Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
- Right to object: You have the right to object to our processing of your personal data where we rely on legitimate interests as the legal basis. You also have the right to object to direct marketing at any time.
- Right to withdraw consent: Where we rely on consent to process your data, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, please contact us at hello@biovit.com. We will respond to your request within one month, as required by law. In certain circumstances, we may extend this period by a further two months, in which case we will inform you of the reason for the extension.
11. Data Security
We take the security of your personal data seriously and have implemented appropriate technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction. These measures include encryption of data in transit via SSL/TLS, access controls limiting data access to authorised personnel only, regular review of our data processing practices and security measures, and secure storage of data with reputable hosting and service providers.
While we take reasonable steps to protect your data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee the absolute security of your personal data, but we are committed to maintaining robust security standards.
12. Third-Party Links
Our website may contain links to third-party websites, including partner brands, industry directories, and research institutions. This Privacy Policy applies only to the BIOVIT website. We are not responsible for the privacy practices of any third-party websites and encourage you to read their privacy policies before providing any personal data.
13. Children’s Privacy
Our website and services are directed at business professionals and are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child, we will take steps to delete it promptly.
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. Any material changes will be published on this page with an updated effective date. We encourage you to review this policy periodically.
Where changes are significant, we may also notify you by email if you are an existing contact in our database.
15. How to Contact Us & Complaints
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:
BIOVIT
Email: hello@biovit.com
Website: biovit.com
If you are not satisfied with our response, or if you believe we are processing your personal data unlawfully, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection:
Information Commissioner’s Office
Website: ico.org.uk
Telephone: 0303 123 1113