Privacy & Data Protection Policy

At VitaWell, we are deeply committed to safeguarding your privacy and protecting your personal information. This Privacy & Data Protection Policy outlines how we collect, use, store, and share your data when you use our wellness services, visit our website, or engage with our programs. By accessing or using our platform, you acknowledge and consent to the practices described herein.

1. Information We Collect

We collect information necessary to deliver safe, personalized health and wellness services. The types of data we collect include:

• Personal Identification: Name, email address, phone number, postal address, and date of birth.
• Health & Wellness Data: Medical history, dietary preferences, fitness goals, sleep patterns, mental health assessments, and biometric data (shared voluntarily or through connected devices).
• Usage & Technical Data: IP address, browser type, device information, pages visited, session duration, and interaction logs.
• Payment Information: Billing details and transaction records. We do not store full credit card numbers; all payments are processed through PCI-DSS compliant third-party gateways.

2. How We Use Your Information

Your data is used solely to enhance your wellness experience, ensure service quality, and comply with legal obligations. Specifically, we use it to:

• Deliver and personalize nutrition, fitness, mental health, and sleep optimization programs
• Communicate appointment reminders, health recommendations, and service updates
• Process payments, manage subscriptions, and prevent fraudulent activity
• Analyze site performance and improve user experience
• Comply with healthcare regulations, audit requirements, and legal duties

3. Data Sharing & Disclosure

We may share your information only under the following strictly controlled circumstances:

• Service Providers: Trusted partners who assist with IT infrastructure, payment processing, secure email delivery, and analytics. All partners are contractually bound to confidentiality and data protection standards.
• Healthcare Professionals: If you explicitly consent, we may share relevant health data with licensed practitioners directly involved in your care plan.
• Legal & Regulatory Compliance: When required by law, court order, subpoena, or government request to protect rights, property, or public safety.
• Business Transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred as a business asset, with continued privacy obligations enforced.

4. Data Security

We implement industry-leading technical and organizational measures to protect your information:

• End-to-end encryption (TLS 1.3) for all data in transit
• AES-256 encryption for sensitive data at rest
• Strict role-based access controls and multi-factor authentication for staff
• Regular third-party security audits, penetration testing, and employee training
• Automatic session timeouts and secure data deletion protocols

While we strive to protect your data, no digital system is 100% immune to breaches. In the unlikely event of a data incident, we will notify affected individuals and relevant authorities in strict accordance with applicable privacy laws.

5. Your Rights & Choices

Depending on your jurisdiction (including GDPR, CCPA/CPRA, HIPAA, and other regional frameworks), you have the right to:

• Access: Request a detailed copy of the personal data we hold about you
• Correction: Update or rectify inaccurate or incomplete information
• Deletion: Request removal of your data (subject to legal retention and safety requirements)
• Portability: Receive your data in a structured, commonly used, machine-readable format
• Opt-Out: Unsubscribe from marketing communications at any time via email links or account settings
• Withdraw Consent: Change or revoke permissions for data processing without affecting prior lawful processing

To exercise these rights, contact our Data Protection Officer at privacy@vitawell.com. We will respond to valid requests within 30 calendar days.

6. Cookies & Tracking Technologies

Our website uses cookies, pixels, and similar technologies to enhance functionality, analyze traffic, and remember preferences. Categories include:

• Essential: Required for core site functionality, authentication, and security
• Analytics: Help us understand visitor behavior to improve content and navigation
• Preference: Remember language, region, display settings, and accessibility options
• Marketing: Used only with explicit opt-in consent to deliver relevant wellness content

You can manage, disable, or delete cookies through your browser settings. Please note that disabling essential cookies may limit certain platform features.

7. Children’s Privacy

VitaWell services are not intended for individuals under 16 years of age. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected information from a child under 16, we will take immediate steps to verify and delete it. Parents or guardians who suspect this has occurred should contact us right away.

8. Policy Updates

We may revise this Privacy & Data Protection Policy periodically to reflect changes in our services, technological advancements, or evolving legal requirements. Material changes will be communicated via email, in-app notification, or a prominent banner on our website. The "Last Updated" date at the top of this page will always reflect the current version. Continued use of our services after updates constitutes acceptance of the revised policy.