Last updated: October 31, 2026
SinaVita® is a brand of MIM Pharma AS (organisation number 911 618 397), Østensjøveien 18, 0661 Oslo, Norway. MIM Pharma AS is the data controller for the personal information described in this Privacy Policy. Our store is powered by Shopify. This Privacy Policy describes how we collect, use and disclose your personal information when you visit, use or make a purchase through our website or otherwise communicate with us (the "Services"). If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing and disclosure of your personal information.
Personal Information We Collect or Process
When we use the term "personal information," we mean information that identifies or can reasonably be linked to you. Depending on how you interact with the Services, we may collect or process the following categories of personal information:
- Contact details, including your name, billing address, shipping address, phone number and email address.
- Payment information, including payment method, transaction details and payment confirmation. Card details are processed by our payment providers and are not stored by us.
- Account information, including your username, password, preferences and settings.
- Order and subscription information, including the products you view, add to your cart, purchase, return or cancel, and your Smart Refill™ subscription details.
- Communications with us, including information you include when contacting customer support.
- Device and usage information, including your IP address, browser, device and how you navigate the Services.
- Health-related information, only if you choose to share it with us, for example in a quiz, survey or user program (see "Health-Related Information" below).
Personal Information Sources
We collect personal information directly from you, automatically through the Services (including through cookies and similar technologies, subject to your cookie choices), and from our service providers when they process information on our behalf.
How We Use Your Personal Information
- Provide and improve the Services: to process orders, payments and subscriptions, arrange delivery, handle returns, manage your account, provide customer support and improve our products and website.
- Marketing and advertising: to send you marketing emails if you have subscribed, and, with your cookie consent, to measure and show relevant advertising.
- Security and fraud prevention: to protect your account, secure payments and detect fraudulent or unlawful activity.
- Legal reasons: to comply with applicable laws, including accounting, consumer and product safety law, and to respond to lawful requests from authorities.
Legal Basis for Processing
We process your personal information on the following legal bases under the GDPR: to perform our contract with you (orders, subscriptions, delivery and customer service); to comply with legal obligations (accounting, product safety and consumer law); our legitimate interests (security, fraud prevention and improving our Services); and your consent (marketing emails, cookies for analytics and advertising, and any health-related information you choose to share). You can withdraw your consent at any time.
Health-Related Information
If you choose to share health-related information with us — for example by answering questions about migraine in a quiz, survey or user program — we only process it with your explicit consent and only for the purpose stated when you share it, such as recommending the right products or improving our support systems. We never share health-related information with advertising platforms such as Meta or TikTok, and we never include it in email subject lines. You can withdraw your consent and ask us to delete this information at any time.
Service Providers We Use
To provide our Services, we share personal information with trusted service providers acting on our behalf, including Shopify (store and payments), Recharge (subscription management), Klaviyo (email communication), HubSpot (customer and partner relations), our logistics partners in Norway and Sweden (warehousing and delivery), and, only with your cookie consent, Meta and TikTok (advertising measurement). These providers may only use your information to perform services for us. We may also disclose personal information within our corporate group, in connection with a business transaction such as a merger, or where required by law.
Relationship with Shopify
The Services are hosted by Shopify, which processes personal information about your access to and use of the Services in order to provide and improve them. To learn more about how Shopify uses personal information and your rights, visit privacy.shopify.com.
Third-Party Websites and Links
The Services may link to websites operated by third parties. We are not responsible for the privacy practices of those websites and recommend that you review their privacy policies.
Children's Data
Our Services are not directed at children. You must be at least 18 years old to place an order. If you believe a child has provided us with personal information, please contact us and we will delete it.
Security and Retention
We use appropriate technical and organisational measures to protect your personal information. No method of transmission or storage is completely secure, so we recommend that you do not send sensitive information through unsecure channels.
We keep order and accounting information for as long as required by Norwegian bookkeeping law (currently five years). Account and subscription information is kept while your account is active. Marketing data is kept until you unsubscribe or withdraw consent. Health-related information is deleted when it is no longer needed for the purpose you consented to, or when you ask us to delete it.
Your Rights
Under the GDPR you have the right to access, correct, delete and receive a copy of your personal information (data portability), to object to or restrict certain processing, and to withdraw your consent at any time without affecting processing carried out before the withdrawal. You can unsubscribe from marketing emails at any time using the link in each email; we may still send you service messages about your orders and account.
To exercise your rights, contact us at privacy@sinavita.com. We may need to verify your identity before processing your request, and we will respond within the time limits required by law. We will not discriminate against you for exercising your rights.
Complaints
If you have concerns about how we process your personal information, please contact us first. You also have the right to lodge a complaint with your local data protection authority. In Norway, this is the Norwegian Data Protection Authority (Datatilsynet), www.datatilsynet.no.
International Transfers
Some of our service providers may process personal information outside the European Economic Area. In that case, we rely on recognised safeguards such as the European Commission's Standard Contractual Clauses, or transfer data only to countries recognised as providing an adequate level of protection.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will post the updated version on this page and update the "Last updated" date.
Contact
MIM Pharma AS
Østensjøveien 18, 0661 Oslo, Norway
Organisation number: 911 618 397
Email: privacy@sinavita.com