Privacy Policy
Written in plain English: what data VITANECTRA collects, why we collect it, who sees it and what you can do about it.
Last updated: 27 October 2026. VITANECTRA, 45 Albemarle Street, Mayfair, London W1S 4JL.
At a glance
This notice covers the VITANECTRA website, your VITANECTRA member account, the VITANECTRA app and related services (together, the "Services").
We collect what we need to run and improve the Services. We never sell your personal data. We do not use your health data or content to train AI models.
Who we are
VITANECTRA ("we", "us") of 45 Albemarle Street, Mayfair, London W1S 4JL is the controller of the personal data described in this notice.
The VITANECTRA app is powered by Nicoya Health, which processes data on our behalf to deliver the app. Where clinics or businesses provide VITANECTRA memberships to their patients or clients, their own privacy notice may also apply.
What we collect
Information you give us: account details (name, email, password), date of birth, sex, height and weight, health data (such as vitals, lab results, medication, sleep, activity, biometric and wellness data you enter, upload or sync), membership and payment details, enquiry forms and support messages.
Information collected automatically: device and connection data (IP address, browser, operating system, crash logs) and usage data (pages visited and feature interactions).
Information from connected services: if you connect a smartwatch, wearable or third-party health app, it may share health and demographic data with the app. That third party's privacy policy also applies.
We do not knowingly collect data from anyone under 18.
Why we use it and our lawful basis
Contract: to provide your membership, account and the Services you sign up for, and to take payment.
Explicit consent: to process your health data, which is special category data under UK GDPR Article 9. You can withdraw consent at any time.
Legitimate interests: security, fraud prevention, service improvement and limited marketing to existing members, balanced against your rights.
Consent: non-essential cookies and marketing emails.
Legal obligation: keeping financial records and responding to lawful requests.
Who we share it with
We do not sell your personal data. We share it only with service providers who help us run the Services, including Nicoya Health (app platform), our hosting and database provider, our payment processor and, if you choose it, Apple or Google sign-in.
If your membership is provided through a clinic or business, we share with them only what is needed to manage that arrangement. We do not send your health reports to anyone unless you choose to share them.
We may disclose data where required by law or to protect the rights and safety of our members and others.
International transfers
Some providers may process data outside the UK. Where this happens we rely on UK adequacy regulations or appropriate safeguards such as the International Data Transfer Agreement or Standard Contractual Clauses with the UK Addendum.
Security and retention
Health documents and reports are stored privately and linked to your account, with access controls and encryption in transit. No online system is ever completely secure.
We keep your data for as long as your account is active and as needed to provide the Services, then delete or anonymise it unless we must keep it longer for legal, tax or accounting reasons.
Your rights
Under UK data protection law you have the right to access, correct, erase, restrict or object to the use of your personal data, to data portability, and to withdraw consent at any time.
To exercise a right, contact us in writing at the address above or through the contact form on our website. We will verify your identity and respond within one month.
You can complain to the UK Information Commissioner's Office at ico.org.uk.
Changes to this notice
We may update this notice from time to time. Material changes will be communicated through the website or by email.