Privacy Policy

Purpose and scope

This policy explains how we process personal data when you use this website, contact us, or place an inquiry related to Valix and other offerings. We process data in line with the EU General Data Protection Regulation (GDPR), the Norwegian Personal Data Act, and applicable ePrivacy rules where relevant.

Categories of data

We may process identification and contact details (name, email address, telephone number if provided), message content, technical data such as browser type, device category, approximate region derived from IP address, and cookie or similar identifiers when you consent to optional categories.

Purposes and legal bases

  • Responding to inquiries and operating pre-contractual steps: Art. 6(1)(b) GDPR.
  • Website security, fraud prevention, and server logs: Art. 6(1)(f) GDPR.
  • Cookie storage for strictly necessary functions: Art. 6(1)(f) GDPR and, where required, ePrivacy consent rules.
  • Optional analytics or marketing technologies: Art. 6(1)(a) GDPR when you provide consent through the cookie interface.
  • Compliance with accounting or tax obligations where applicable: Art. 6(1)(c) GDPR.

Retention

Contact records linked to inquiries are kept for up to twenty-four months unless a longer period is required by law or to establish or defend legal claims. Server logs are rotated on a short cycle compatible with security monitoring. Cookie lifetimes are described in the Cookie Policy.

Recipients and transfers

We use infrastructure and messaging providers that may process data in the EEA or in countries with an adequacy decision or appropriate safeguards such as Standard Contractual Clauses. A list of processor categories is available on request.

Security measures

We apply access controls, encrypted transport where supported, separation of environments, and staff instructions aligned with confidentiality duties. No method of transmission over the internet is entirely risk-free; we continually review our arrangements.

Your rights

Subject to conditions in the GDPR, you may request access, rectification, erasure, restriction of processing, data portability, and object to processing based on legitimate interests. You may withdraw consent at any time where processing is consent-based. You may lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet).

Geographic scope and language

This website is operated from Norway and is published in English. Our primary audience is adults in the European Economic Area who browse or order in Norwegian kroner as shown on the product page. If you access the site from another region, local rules on food supplements, advertising, and privacy may still apply to you; you are responsible for checking whether use or import is permitted where you live.

Online advertising and food supplements

Where we use paid advertising (including search or display networks), we aim to comply with the platform’s policies and with EU and Norwegian requirements for advertising food supplements. We do not target ads using messaging that suggests diagnosis or treatment of a disease, and we keep landing pages aligned with on-pack information and with this policy.

Contact

Privacy requests may be sent in writing to the postal address above or through the contact channels published in the site footer. Identify your request clearly so we can respond without undue delay.