LEGAL
Privacy policy
Last updated August 2026
Your privacy matters. We collect only what we need to fulfil your order. We never sell your data, and we never share your order contents with advertisers, social media platforms, or third-party marketing networks.
Information we collect
When you place an order we collect your name, email address, optional phone number, shipping address, and the contents of your order. If you submit a payment confirmation we also store the confirmation number, sender name, any note you add, and the screenshot or PDF you upload. We do not collect or store card numbers, bank credentials, or Zelle login details — payment happens entirely inside your own banking app.
How we use it
Your information is used solely to process, verify, pack and ship your order, to contact you about that order, and to meet our record-keeping obligations. We do not build advertising profiles and we do not send marketing email unless you explicitly ask us to.
Payment confirmations
Uploaded payment confirmations are stored in a private, access-controlled bucket. They are never publicly accessible. Only authorised staff can view them, and only through short-lived signed links generated at the moment of viewing.
Order links
Your order page is reachable through a long, randomly generated link rather than an account login. Anyone holding that link can view the order, so treat it as private and avoid posting it publicly. The link is not indexed by search engines.
Cookies
We use only the storage strictly necessary to make the site work — principally keeping your shopping cart contents in your own browser. We do not run advertising pixels, cross-site trackers, or third-party marketing tags.
Data sharing
We share your shipping address with the carrier delivering your parcel, and nothing more. We do not sell, rent, or trade personal information. We may disclose information where legally compelled to do so.
Retention
Order records are retained for as long as needed to service the order and to satisfy applicable legal and accounting requirements. Payment confirmation uploads are retained only while needed to verify and support the associated order.
Security
Data is stored in an access-controlled database with row-level security policies. Order and payment records are not readable by anonymous visitors, and administrative access is restricted to verified staff accounts.
Your rights
You may request a copy of the information we hold about you, ask us to correct it, or request deletion where we are not legally required to retain it. Email support@vitalhealer.com with your order number and we will respond within 30 days.
Contact
Questions about this policy can be sent to support@vitalhealer.com.