Privacy Policy

Last updated: 20/07/2026

This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website and shop with us. It applies to all Viking Supplements country websites.

1. Who we are (Data Controller)

The controller responsible for your personal data is:

Eco Supplements EOOD
Antim I Street, No. 14, fl. 2, law office, 1303 Sofia
Bulgaria
Company registration (EIK): 207958071
VAT: BG207958071
Email: support@vikingsupplements.eu

We operate the Viking Supplements online stores across the European Union. If you have any question about this policy or how we handle your data, contact us at the email above. We have not appointed a Data Protection Officer, as we are not legally required to; data protection enquiries are handled by our support team at the address above.

2. What data we collect

Depending on how you use our site, we may collect:

• Identity and contact data — name, billing and delivery address, email address, telephone number.
• Order data — the products you buy, order value, order history, and any discount codes used.
• Payment data — payment method and the information needed to process payment. Card and bank details are handled directly by our payment provider; we do not store full card numbers.
• Account data — if you create an account, your login details and saved preferences.
• Communications — messages you send us and our replies, including support tickets.
• Technical data — IP address, browser type, device information, and how you use our site, collected through cookies and similar technologies (see our Cookie Policy).
• Marketing data — your preferences for receiving marketing from us.

3. How and why we use your data (legal bases)

We only use your data where the law allows. The legal bases we rely on are:

Purpose	Legal basis
Processing and delivering your orders	Performance of a contract
Taking payment and preventing fraud	Performance of a contract; legal obligation; legitimate interests
Managing your account	Performance of a contract
Answering your questions and providing support	Legitimate interests; performance of a contract
Keeping records required by law (e.g. tax, accounting)	Legal obligation
Sending occasional newsletters to existing customers about similar products	Legitimate interests (soft opt-in)
Analytics and advertising cookies	Consent
Crediting affiliate partners who referred your visit	Consent

Marketing to existing customers. If you have bought from us, we may occasionally (typically once or twice) email you about similar products, sent through our email provider. You can opt out at any time using the unsubscribe link in every message, or by contacting us. We will not send you marketing if you have asked us not to.

4. Who we share your data with

We do not sell your personal data. We share it only with service providers who help us run our business, and only as needed. These providers act on our instructions and are bound to protect your data. They include:

• Mollie (Netherlands) — payment processing. Depending on the payment method you choose (for example card, iDEAL, Bancontact, Klarna, or others available in your country), the relevant payment provider processes your payment. Where you choose a “buy now, pay later” method, that provider may carry out its own identity or creditworthiness checks as an independent controller.
• Dextrum Fulfillment, a.s. (Czech Republic) — order fulfilment and shipping.
• Base (Poland) — order management.
• Kinsta (hosting, data centres in the Netherlands) — website hosting.
• Zoho (EU) — email handling.
• Brevo (France) — sending transactional emails (such as order confirmations) and newsletters.
• Responso (Poland) — handling customer support emails.
• Google (Ireland/USA) — advertising, and website analytics where enabled. These run only with your consent through our cookie banner.
• TradeTracker (Netherlands) and Partner-Ads (Denmark) — affiliate networks that credit partners who refer visitors to us. These run only with your consent.

We may also share data with couriers to deliver your order, with professional advisers (such as accountants and lawyers), and with public authorities where we are legally required to do so.

5. International transfers

Most of our providers are located within the European Economic Area (EEA), so your data stays in the EEA.

Where we use Google services (advertising and, in future, analytics), some data may be transferred to the United States. These transfers are protected by the EU–US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses, which provide safeguards recognised under EU law. These services run only if you give consent through our cookie banner.

6. How long we keep your data

We keep your data only as long as necessary:

• Order and transaction records — for as long as required by tax and accounting law (generally up to 10 years).
• Account data — for as long as your account is active, and then deleted or anonymised.
• Support communications — typically for up to 3 years after your enquiry is resolved.
• Marketing preferences — until you unsubscribe or object.
• Consent records — for as long as needed to demonstrate your consent, and then deleted.

When we no longer need your data, we securely delete or anonymise it.

7. Your rights

Under the General Data Protection Regulation (GDPR), you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct data that is inaccurate or incomplete.
• Erasure — ask us to delete your data in certain circumstances.
• Restriction — ask us to limit how we use your data.
• Portability — receive your data in a portable format, or have it sent to another provider.
• Object — object to processing based on our legitimate interests, and to direct marketing at any time.
• Withdraw consent — where we rely on consent, withdraw it at any time (this does not affect processing already carried out).

To exercise any of these rights, email us at support@vikingsupplements.eu. We will respond within one month. You will not usually have to pay a fee.

If you are unhappy with how we handle your data, you have the right to complain to your national data protection authority. Our lead supervisory authority is the Commission for Personal Data Protection in Bulgaria, but you may also complain to the authority in your own country.

8. Cookies

We use cookies and similar technologies. Non-essential cookies (analytics, advertising, and affiliate attribution) are used only with your consent, which you give through our cookie banner and can change at any time. For full details, see our [Cookie Policy].

9. Security

We take appropriate technical and organisational measures to protect your data against loss, misuse, and unauthorised access. Payments are processed over secure, encrypted connections, and access to personal data within our business is limited to those who need it.

10. Children

Our products and website are intended for adults. We do not knowingly collect data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the “last updated” date above and, where appropriate, notify you.

12. Contact

For any question about this policy or your personal data:

Eco Supplements EOOD
Email: support@vikingsupplements.eu