Privacy policy

2. Privacy Policy

Last updated: 26 August 2026

This Privacy Policy explains how Dremvu collects, uses, discloses, and protects personal information when you visit or make a purchase through https://nutrigeek.co.uk/, communicate with us, or otherwise use our services.

Dremvu is operated by Nexyra Health LLC, 2114 Peach Ln, Louviers, Colorado, United States. Nexyra Health LLC is the controller responsible for the personal information described in this policy.

Personal Information We Collect

Depending on how you use the store, we may collect:

Identity and contact data: Name, billing and delivery addresses, email address, and account details.
Order and transaction data: Products ordered, order value, currency, discounts, delivery status, returns, refunds, and communications about the order.
Payment-related data: Payment status, payment method type, and limited transaction identifiers. Full payment credentials are normally handled by authorised payment processors rather than stored directly by us.
Device and usage data: IP address, browser type, device identifiers, operating system, pages viewed, referring pages, approximate location derived from IP address, and interaction with the site.
Cookie and preference data: Cookie choices, shopping-cart activity, language, and other saved preferences.
Support and correspondence data: Messages, attachments, photographs, reviews, complaints, and records of our response.
Marketing data: Subscription status, campaign interaction, and advertising preferences where marketing features are used.
Security and fraud data: Risk signals, login activity, suspected misuse, and information needed to protect transactions and the website.

We receive information directly from you, automatically from your device, and from service providers involved in operating the store, processing payments, preventing fraud, delivering orders, and measuring site performance.

Why We Use Information and Our Lawful Bases

For individuals in the United Kingdom, we use the following UK GDPR lawful bases:

Purpose	Information normally used	Lawful basis
Process payment, confirm orders, arrange delivery, provide returns, and manage accounts	Identity, contact, order, transaction, and payment-related data	Performance of a contract or steps requested before entering a contract
Meet tax, accounting, consumer-protection, product-safety, customs, and other legal duties	Identity, contact, order, transaction, and correspondence data	Compliance with a legal obligation
Answer questions, resolve complaints, defend legal claims, and maintain business records	Contact, order, transaction, and correspondence data	Contract, legal obligation, and our legitimate interests in customer service and protecting legal rights
Secure the website, prevent fraud, enforce our terms, and protect customers	Device, usage, security, account, and transaction data	Our legitimate interests in security, fraud prevention, and service integrity; legal obligation where applicable
Improve the store, diagnose errors, and understand service performance	Device, usage, order, and support data	Our legitimate interests for essential operational measurement; consent where non-essential cookies or similar technologies are required
Send promotional email or personalise advertising	Contact, marketing, device, and usage data	Consent where required; any permitted existing-customer marketing will include a clear opt-out
Remember non-essential preferences and use analytics or marketing technologies	Cookie, device, usage, and marketing data	Consent

Where we rely on legitimate interests, we consider whether the use is necessary and balance our interests against your rights and reasonable expectations. You may object as described below.

Shopify and Other Service Providers

Our store uses Shopify as its e-commerce platform. Shopify and its affiliated infrastructure providers process information needed to host the storefront, operate checkout, support transactions, and provide platform security.

We may share personal information with service providers by category only as necessary for their work, including:

E-commerce hosting and infrastructure providers.
Payment processors and fraud-prevention services.
International suppliers, warehouses, delivery providers, customs agents, and logistics partners.
Customer-support and communications tools.
Analytics, cookie-management, and website-performance providers.
Advertising and marketing providers, where you have given any consent required by law.
Accountants, insurers, auditors, legal advisers, and other professional advisers.
Public authorities, regulators, courts, or law-enforcement bodies when disclosure is required or legally justified.

We may also disclose information in connection with a merger, financing, reorganisation, sale of assets, or similar business transaction, subject to appropriate confidentiality and legal safeguards.

We do not authorise service providers to use personal information for unrelated purposes. We do not sell personal information for money.

International Data Transfers

Dremvu operates from the United States, uses Shopify and other international service providers, and works with fulfilment partners in Asia.

Your personal information may therefore be accessed or processed outside the United Kingdom, including in countries whose data-protection laws may differ from those in your country.

Where UK law treats a disclosure as a restricted international transfer, we use a legally recognised mechanism as applicable. This may include UK adequacy regulations, the United Kingdom International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another safeguard permitted by law.

We also use contractual, organisational, and technical protections appropriate to the nature of the information and assess transfer risks where required.

You may contact help@storedremvu.com for information about the safeguard relevant to a particular transfer.

Cookies and Similar Technologies

The site may use cookies, pixels, local storage, and similar technologies in these categories:

Strictly necessary: Operate checkout, remember cart contents, maintain security, prevent fraud, and provide functions you request. These cannot normally be disabled through our consent tool.
Preferences: Remember optional choices such as language or display settings.
Analytics: Measure visits, interactions, errors, and store performance.
Marketing: Measure campaigns, create audiences, and personalise or limit advertising.

For visitors in the United Kingdom, non-essential preference, analytics, and marketing technologies are disabled until valid consent is given where consent is required.

You can accept, reject, or change non-essential cookie choices through the cookie controls available on the site. Withdrawing consent does not affect processing that occurred lawfully before withdrawal.

Browser settings may block cookies, but blocking strictly necessary technologies can prevent checkout or other requested functions from working.

Marketing Choices

We send promotional email only where we have a lawful basis to do so. Every promotional email provides an unsubscribe method.

You may also withdraw consent or object to direct marketing at any time by emailing help@storedremvu.com. Service messages about an order, security, a return, or a legal update are not promotional messages and may continue where necessary.

Retention

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected.

We consider the life of an account or customer relationship, order fulfilment, return and chargeback periods, tax and accounting duties, product-safety needs, fraud prevention, limitation periods for legal claims, consent records, and binding retention requirements.

When information is no longer needed, we delete or anonymise it, unless continued retention is required or permitted by law.

Backup copies may remain for a limited operational cycle and are protected from ordinary use until overwritten or securely deleted.

Your United Kingdom Data Rights

Subject to legal conditions and exemptions, you may ask us to:

Confirm whether we process your personal information and provide access to it.
Correct inaccurate or incomplete information.
Delete information.
Restrict certain processing.
Provide eligible information in a structured, commonly used, machine-readable format.
Object to processing based on legitimate interests.
Object at any time to direct marketing.
Withdraw consent at any time where processing relies on consent.

You also have rights relating to certain decisions made solely by automated means. We may use automated tools to flag fraud or security risks, but we do not intend to make decisions producing legal or similarly significant effects about you solely by automated means without protections required by law.

To exercise a right, email help@storedremvu.com. We may request information reasonably needed to verify your identity and protect your account.

We will respond within the period required by applicable law, ordinarily within one calendar month for a UK data-rights request. Some rights are not absolute. If we cannot fulfil a request, we will explain the applicable reason unless the law prevents us from doing so.

You may complain to the United Kingdom Information Commissioner’s Office. We encourage you to contact us first so we can try to resolve the concern.

Your Right to Object

You have the right to object to processing based on our legitimate interests.

If you object, we will stop that processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is needed for legal claims.

We will stop direct marketing when you object to it.

Children

The store is not directed to children under 16, and we do not knowingly collect personal information from children under 16.

Purchases must be made by an adult who is at least 18. If you believe a child has provided personal information, contact help@storedremvu.com.

Security

We use reasonable administrative, technical, and organisational measures designed to protect personal information.

No internet transmission or storage system is completely secure, so we cannot promise absolute security.

External Links

The site may link to websites operated by others. Their privacy practices are governed by their own notices, and we are not responsible for their handling of information.

Changes to This Policy

We may update this policy to reflect changes in our practices, technology, or legal obligations. The current version and its update date will be published on this page.

Where required, we will give additional notice or request fresh consent.