Your Privacy, Our Commitment

Vitalbloom collects various types of information to provide and improve our personalized wellness services:

• Personal Identifiable Information (PII): When you register for our services, we collect information such as your name, email address, phone number, and postal address. This is used for account management, communication, and service delivery.
• Health and Wellness Data: For personalized program customization and coaching, we may collect data related to your fitness levels, dietary habits, wellness goals, and health progress. This data is handled with the utmost care and is often de-identified or aggregated for analytical purposes while remaining compliant with HIPAA standards where applicable.
• Website Usage Data & Analytics: We collect non-personal identification information about users whenever they interact with our Site. This may include browser name, the type of computer, and technical information about users’ means of connection to our Site, such as the operating system and the Internet service providers utilized and other similar information. This helps us optimize our platform.
• Communication Preferences: We record your preferences for receiving communications from Vitalbloom, allowing you to opt-in or opt-out of newsletters and promotional materials.

Our legal bases for processing data primarily include your consent, necessity for contractual obligations, and our legitimate interests in improving and securing our services.

Vitalbloom does not sell, trade, or rent Users' personal identification information to others. We may share generic aggregated demographic information not linked to any personal identification information regarding visitors and users with our business partners, trusted affiliates, and advertisers for the purposes outlined above. We may use third-party service providers to help us operate our business and the Site or administer activities on our behalf, such as sending out newsletters or surveys. We may share your information with these third parties for those limited purposes provided that you have given us your permission.

Specific instances where data may be shared, always under strict confidentiality agreements and for defined purposes, include:

• Service Providers: We utilize trusted third-party service providers (e.g., cloud hosting, email delivery, payment processing) who comply with our stringent privacy and security standards.
• Legal Compliance: We may disclose information when legally required to do so, for example, in response to a court order or subpoena, or to comply with law enforcement requests.
• Business Transfers: In the event of a merger, acquisition, or asset sale, your personal information may be transferred as part of the transaction, subject to the new entity adhering to this Privacy Policy.

For international data transfers, we employ standard contractual clauses or similar safeguards to ensure your data remains protected.

You have significant control over your personal data with Vitalbloom:

• Access and Portability: You have the right to request access to the personal information we hold about you and to receive a copy of that data in a structured, commonly used, and machine-readable format.
• Correction and Deletion: You can request that we correct any inaccurate personal information or delete your personal information, subject to certain exceptions.
• Opt-Out Options: You can manage your communication preferences and opt-out of marketing emails at any time by clicking the unsubscribe link in our emails or adjusting settings in your account.
• Account Deactivation: You may deactivate your Vitalbloom account at any time, which will initiate data anonymization or deletion processes according to our data retention policy.
• GDPR & CCPA: Vitalbloom is committed to complying with GDPR (General Data Protection Regulation for EU residents) and CCPA (California Consumer Privacy Act for California residents) where applicable, providing specific rights and protections to users governed by these regulations.

To exercise any of these rights, please contact our Privacy Officer at [email protected].

Vitalbloom adopts appropriate data collection, storage, and processing practices and security measures to protect against unauthorized access, alteration, disclosure, or destruction of your personal information, username, password, transaction information, and data stored on our Site.

Our commitment to security includes:

• Technical Safeguards: We employ industry-standard encryption (SSL/TLS) for data in transit, and robust encryption for data at rest. Regular penetration testing and vulnerability assessments are conducted to identify and address potential weaknesses.
• Access Controls & Training: Access to personal data is strictly limited to authorized personnel who undergo regular training on data privacy and security best practices.
• HIPAA Compliance: For health-related information, Vitalbloom adheres to HIPAA guidelines, implementing administrative, physical, and technical safeguards to ensure the confidentiality, integrity, and availability of protected health information (PHI).
• Incident Response: We have established a comprehensive incident response plan to promptly address and mitigate any potential security breaches, including timely notification to affected users as required by law.

Your trust is paramount, and we continually invest in sophisticated security technologies and practices.