Privacy

This page summarizes practices that can be verified in the storefront code. It is not a complete statement of every service provider's practices or a promise about legal rights in every location. If you need details not stated here, contact Vitalitysupply@icloud.com.

Information and use

When you place an order or send a request, the storefront processes the information entered for that transaction or request. For example, the COA request form sends an email address, compound, and optional batch to the request system; the wholesale form sends the contact and inquiry details you provide. The application also stores newsletter email addresses with confirmation and unsubscribe state to manage requested mailings. These records support the feature you used; this page does not specify every access role or retention period.

Browser storage and analytics

The storefront uses browser storage for functions such as the cart, session and preference state, and a tab-scoped checkout draft. The checkout draft is limited to country, promotion, and referral selections, expires after 30 minutes, and is cleared on order creation, sign-out, or identity change. Contact and shipping form values are not written to that draft.

Optional analytics events are sent only when the storefront's analytics consent state allows collection. Event names and dimensions are bounded by the application; the configured dimensions exclude free-form customer text and direct contact fields. An analytics session identifier is stored in browser local storage and is replaced after 30 minutes of inactivity or 24 hours. The account page provides an analytics opt-out.

Account controls and unknown terms

Signed-in account holders can use the account privacy controls to download account data and delete saved preferences, profile details, credits, newsletter enrollment, and account-owned personalization. Existing anonymous storefront events remain in aggregate, while the retained privacy choice blocks future analytics. Paid-order and settlement records remain, and the sign-in account stays open after that deletion action. Contact support if you cannot use the account controls.

This page does not state a general retention schedule, all payment or email providers, provider-specific handling, cross-border transfer terms, or jurisdiction-specific privacy rights and procedures. Contact us for those details before providing information if you need them. No GDPR-compliance claim is made here.