Data controller: Varnorexkhit, Grote Koppel 14, 3813 AA Amersfoort, Netherlands. Contact: info@varnorexkhit.world, contact@varnorexkhit.world, support@varnorexkhit.world, help@varnorexkhit.world.

Geographic scope and topic

This website is operated from the Netherlands and is directed at users in the European Union and other territories where our services are available. The site concerns the promotion and sale of food supplements (dietary supplements) only. Our products are not medicines and are not intended to diagnose, treat, cure, or prevent any disease. We aim to comply with applicable advertising standards, including Google Ads policies for healthcare and medicines: we do not make unapproved health claims, guarantee results, or advertise prohibited substances.

1. Introduction

We process your personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Dutch law. This policy explains what data we collect, why we collect it, how we use it, how long we keep it, and what rights you have.

2. Data we collect

We may collect: name, email address, phone number (if provided), postal address (for orders), IP address, browser and device data, and messages you send via our contact or order forms. We do not collect special categories of data (e.g. health data) unless you voluntarily provide it in a message; in that case we use it only to respond to your request.

3. Purposes and legal basis

  • Order and contact requests: performance of a contract or steps at your request (Art. 6(1)(b) GDPR).
  • Newsletters and marketing (if applicable): your consent (Art. 6(1)(a) GDPR).
  • Website operation, security, analytics: legitimate interest (Art. 6(1)(f) GDPR) or consent where required (e.g. non-essential cookies).
  • Legal obligations: compliance with law (Art. 6(1)(c) GDPR).

4. Retention

We retain personal data only as long as necessary for the purposes above: typically up to 2 years after the last contact for enquiries and marketing consent; longer if required by law (e.g. tax and accounting). After that, data is deleted or anonymised.

5. Security

We use technical and organisational measures (e.g. HTTPS, access controls, secure storage) to protect your data against unauthorised access, loss or alteration. Data is processed within the EU/EEA where possible.

6. Your rights

You have the right to: access your data; rectify inaccurate data; erase data in certain cases; restrict processing; data portability where applicable; object to processing based on legitimate interest; withdraw consent at any time; lodge a complaint with a supervisory authority (e.g. the Dutch Autoriteit Persoonsgegevens). To exercise these rights, contact us using the details above.

7. Sharing data

We may share data with service providers (e.g. hosting, payment, email) who act as processors under our instructions and are bound by data processing agreements. Where we use online advertising (e.g. Google Ads), we may share pseudonymised or aggregated data with advertising platforms in accordance with their policies and our Cookie Policy. We do not sell your data to third parties.

8. Changes

We may update this policy from time to time. The "Last updated" date at the top will be revised. We encourage you to review this page periodically.