Privacy Policy

APN is a brand operated by Virtus Ventures BV (“Company,” “we,” “us,” or “our”). This Privacy Policy explains how we collect, use, share, and protect your personal data, and the rights you have over it.

1. Who we are (data controller)

The controller responsible for your personal data is:

Virtus Ventures BV

Van de Wervestraat 8, 2060 Antwerp, Belgium

Enterprise (KBO/BCE) number: 1018.396.466 · VAT: BE 1018.396.466

Privacy contact: infoy@athleteperformance-nutrition.com

2. The personal data we collect

Depending on how you interact with us, we collect:

• Identity and contact data — name, email address, postal/shipping address, phone number.
• Order and transaction data — products ordered, order value, delivery details, and a record of your purchases and returns.
• Payment data — payment is processed by our payment provider; we receive confirmation and limited transaction details but do not store full card numbers.
• Account data — login credentials and preferences, if you create an account.
• Communications — the content of messages you send us by email, contact form, WhatsApp, or social media.
• Marketing preferences — whether you have subscribed to the APN Club newsletter and your consent choices.
• Technical and usage data — IP address, browser and device type, and how you use the Site, collected via cookies and similar technologies (see Section 5).

3. How we use your data, and our legal basis

Under the EU/Belgian GDPR we must have a lawful basis for each use of your data. Our bases are:

• To process and deliver your orders, manage returns, and run your account — performance of our contract with you (Art. 6(1)(b)).
• To process payments and keep tax/accounting records — contract and our legal obligations (Art. 6(1)(b) and (c)).
• To send marketing emails and newsletters — your consent (Art. 6(1)(a)), which you can withdraw at any time.
• To respond to your enquiries and provide customer support — contract and our legitimate interests (Art. 6(1)(f)).
• To secure the Site, prevent fraud, and analyse and improve our services — our legitimate interests in running a safe, effective business (Art. 6(1)(f)).
• To use non-essential cookies and analytics — your consent (Art. 6(1)(a); see Section 5).
• To comply with the law and respond to lawful requests — our legal obligations (Art. 6(1)(c)).

4. Who we share your data with

We do not sell your personal data. We share it only with service providers who process it on our behalf under a data-processing agreement, and only as needed:

• E-commerce platform — to host the store and manage orders (e.g., Shopify).
• Payment processing — to take payment securely (e.g., Stripe).
• Fulfilment and shipping — to pick, pack, and deliver your order (e.g., Hive Technologies and the carriers it uses).
• Communications and messaging — email/newsletter and WhatsApp tools.
• Security — bot/spam protection on our forms (e.g., Google reCAPTCHA).

We may also disclose data to comply with the law or a lawful authority request, and in connection with a merger, acquisition, or sale of assets.

5. Cookies and tracking technologies

We use cookies and similar technologies that are strictly necessary to run the Site, and — only with your consent — cookies for analytics, personalisation, and advertising. When you first visit, our cookie banner lets you accept or reject non-essential cookies, and you can change your choice at any time via the cookie-settings link on the Site. Our newsletter sign-up and forms are protected by Google reCAPTCHA, which collects device and usage data subject to Google’s privacy terms.

6. International data transfers

Some of our service providers are located outside the European Economic Area (for example, in the United States). Where we transfer your data outside the EEA, we rely on appropriate safeguards — such as an adequacy decision, the EU–US Data Privacy Framework, or the European Commission’s Standard Contractual Clauses — to ensure your data remains protected. You can request more information using the contact details in Section 10.

7. How long we keep your data

We keep your data only as long as necessary for the purposes above:

• Order, invoice, and tax records — for the period required by Belgian tax and accounting law (generally 7–10 years).
• Account data — until you close your account or ask us to delete it.
• Marketing data — until you withdraw consent or unsubscribe.
• Support correspondence — for a reasonable period after your query is resolved.

8. Your rights

Subject to the conditions in the GDPR, you have the right to:

• access a copy of your personal data;
• have inaccurate data corrected;
• have your data erased (“right to be forgotten”), subject to our legal retention duties;
• restrict or object to certain processing, including direct marketing;
• receive your data in a portable format;
• withdraw consent at any time, without affecting processing already carried out; and
• lodge a complaint with a supervisory authority (see Section 11).

To exercise any right, contact us at privacy@athleteperformance-nutrition.com. We will respond within one month, as required by the GDPR.

9. Data security

We use appropriate technical and organisational measures — including encryption in transit, access controls, and vetted processors — to protect your data. No system is completely secure, so we cannot guarantee absolute security, but we maintain procedures to address any suspected data breach and will notify you and the supervisory authority where the law requires.

10. Third-party links

Our Site may link to third-party websites. We are not responsible for their privacy practices; please review their policies before sharing your information.

11. Children

Our Products and Site are intended for adults. We do not sell to, or knowingly collect personal data from, anyone under 18. If you believe a minor has provided us with data, contact us and we will delete it.

12. Contact and how to complain

Privacy enquiries: privacy@athleteperformance-nutrition.com · Virtus Ventures BV, Van de Wervestraat 8, 2060 Antwerp, Belgium.

If you are in the EU and believe we have not handled your data properly, you may complain to the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Drukpersstraat 35, 1000 Brussels — contact@apd-gba.be — or to the supervisory authority in your country of residence.

13. Changes to this Policy

We may update this Policy from time to time. The version in force is the one published here, with the “Last updated” date above. Material changes will be highlighted on this page.