Privacy Policy

1. Introduction

VitaGlobe International Ltd. ("VitaGlobe," "we," "us," or "our") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website vitaglobe.com, make a purchase, or interact with our services.

We comply with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws. Please read this policy carefully.

2. Information We Collect

2.1 Information You Provide Directly

• Account information: name, email address, password
• Purchase information: billing/shipping address, payment details (processed via Stripe; we do not store card numbers)
• Communications: messages, inquiries, and feedback you submit
• Newsletter subscriptions: email address and consent records

2.2 Information Collected Automatically

• Usage data: pages visited, time spent, clicks, referring URLs
• Device data: IP address, browser type, operating system, device identifiers
• Cookies and tracking technologies (see Section 7)

3. How We Use Your Information

We use collected information to:

• Process and fulfill your orders
• Communicate order status, shipping, and delivery updates
• Send marketing communications (with your consent)
• Improve our website, products, and services
• Comply with legal obligations and prevent fraud
• Respond to customer service inquiries
• Analyze website traffic and user behavior (analytics)

4. Legal Basis for Processing (GDPR)

Under GDPR, we process personal data under the following legal bases:

• Contract performance: Processing necessary to fulfill orders and provide our services
• Legitimate interests: Website analytics, fraud prevention, improving our services
• Consent: Marketing emails, non-essential cookies (you may withdraw consent at any time)
• Legal obligation: Tax records, regulatory compliance

5. Data Sharing and Disclosure

We do not sell your personal data. We share information with:

• Payment processors: Stripe (PCI DSS compliant)
• Shipping partners: FedEx, DHL, local postal services
• Email service providers: Mailchimp (newsletter only)
• Analytics providers: Google Analytics (with IP anonymization)
• Legal authorities: Where required by law or to protect our rights

All third-party service providers are bound by data processing agreements and may only process data for specified purposes.

6. Data Retention

We retain personal data for as long as necessary for the purposes outlined in this policy:

• Customer account data: Duration of account + 3 years after account closure
• Transaction records: 7 years (tax/legal compliance)
• Marketing data: Until you unsubscribe or withdraw consent
• Analytics data: 26 months (Google Analytics default)

7. Cookies

We use cookies and similar technologies. Please see our Cookie Policy for full details. You can manage your cookie preferences at any time via our cookie banner or your browser settings.

8. Your Rights

Depending on your location, you have the following rights regarding your personal data:

• Right of access: Request a copy of your personal data
• Right to rectification: Correct inaccurate or incomplete data
• Right to erasure: Request deletion of your data ("right to be forgotten")
• Right to portability: Receive your data in a machine-readable format
• Right to object: Object to processing based on legitimate interests or direct marketing
• Right to restrict processing: Request we limit how we use your data
• CCPA rights (California): Right to know, delete, opt-out of sale (we do not sell data), and non-discrimination

To exercise any right, contact us at: privacy@vitaglobe.com

9. International Data Transfers

If you are located in the European Economic Area (EEA), your data may be transferred to and processed in countries outside the EEA, including the United States. We use Standard Contractual Clauses (SCCs) approved by the European Commission to ensure adequate protection.

10. Security

We implement appropriate technical and organizational security measures including SSL/TLS encryption, access controls, regular security audits, and employee training. No method of internet transmission is 100% secure, and we cannot guarantee absolute security.

11. Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy periodically. When we make material changes, we will notify you by email or by posting a prominent notice on our website. The "Last updated" date at the top of this page indicates when this policy was last revised.

13. Contact Us

For privacy-related inquiries, contact our Data Protection Officer:

• Email: privacy@vitaglobe.com
• Postal: VitaGlobe International Ltd., 350 Fifth Avenue, Suite 6900, New York, NY 10118, USA

EU residents may also lodge a complaint with their national data protection supervisory authority.