Privacy Policy

This policy explains what Vitality Stacks, LLC ("Vitality Stacks", "we") collects when you take the consultation, build a pack, place an order or use your account; why we collect it; who receives it; and the choices you have. Our Consumer Health Data Privacy Policy covers your health information in more detail.

The short version

• We collect what we need to recommend, make and ship your packs, and to run your account.
• We treat your consultation answers and the supplements in your pack as health information, and use them only to give you what you asked for.
• We don't sell your information, and we never use your health information for advertising.
• Card details go straight to our payment processor, Stripe. We never see your full card number.
• You can see, correct, download or delete your information. Email hello@vitalitystacks.com.

What we collect

What you tell us

• Consultation answers. Depending on the consultation you choose: your sex and age group; your sleep, energy, stress, focus and mood; how your body feels; your activity and diet. Some consultations also ask about prescription medications, GLP-1 treatment and its side effects, mental health, recovery from substance use, injuries and pain, or military service.
• Your pack. The supplements you choose or we recommend, and your pack size.
• Account and order details. Your name, email address, delivery and billing address, the password you create, and an optional phone number that we use only if there's a problem with a delivery.
• Messages. What you send through our contact form or by email, including your name, email address and, if you give it, your phone number.

Payment details

You enter your card into a secure form run by Stripe, and the details go to Stripe directly. We receive only what we need to manage billing, such as the card type, its last four digits and its expiry date.

What we collect automatically

• With each order: the campaign tags in the link you arrived from (for example, which newsletter or ad), and your browser type.
• With a contact form message: your IP address, your browser and the page you wrote from, so we can stop spam.
• Site and server logs: your IP address, browser, the pages you visit and the site that referred you. Our hosting and network providers keep these to run and secure the site.
• Cookies and storage on your device: a sign-in cookie, so you stay signed in (it's essential, and scripts on the page can't read it); the pack you build, saved in your browser so it's there when you come back; and the pack you're checking out and your order reference, kept only until you close the tab.

Analytics

We may use an analytics service, such as Google Analytics, to count visits and see which pages people use. If we do, it sets its own cookies and receives the pages you visit and general events, such as that a consultation question was answered or a pack size was chosen. It never receives your answers, the supplements in your pack or your order details, and we don't turn on its advertising features. You can block these cookies in your browser, or install Google's opt-out add-on.

How we use it

• To recommend a pack from your consultation answers.
• To take payment, then make, pack and ship your orders and run your subscription.
• To run your account, answer your questions, and send service emails such as receipts, renewal reminders and delivery updates.
• To prevent fraud and keep the site secure.
• To understand, in aggregate, how the site is used, so we can improve it.
• To send marketing email, only if you sign up. Every one has an unsubscribe link.
• To meet our legal, tax and accounting obligations.

Your health information

Your consultation answers and the contents of your pack can say something about your health, so we hold them to a stricter standard:

• We use them only to recommend, make and ship your packs, and to help you when you contact us.
• We never sell them, and never use or share them for advertising.
• We keep them out of anything our analytics receives, and remove your pack from your browser's address bar as soon as a page has read it.
• We don't save your consultation answers. Your browser sends them to our site, which passes them to our recommendation service from our own server, so that service never sees your IP address or who you are. Our site keeps the recommendation for 24 hours, filed under a scrambled fingerprint of the answers, so asking again returns the same result.
• "Save this stack" and "share your pack" links carry your answers or your pack after a # sign, which browsers never send to a server. Anyone you give such a link to can see what it holds.

Our Consumer Health Data Privacy Policy lists the health information we collect, who receives it and your rights over it.

Who receives your information

We share information only with companies that help us run Vitality Stacks, under contracts that limit their use of it to that work:

We may also share information when the law requires it, to protect someone's safety, to enforce our terms, or with a buyer if the business is sold. A buyer must keep the promises in this policy.

We don't sell personal information, and we don't share it for cross-context behavioral advertising.

Your rights and choices

Wherever you live, you can ask us to:

• Tell you what information we hold about you, and give you a copy.
• Correct it.
• Delete it, unless we must keep it, such as records of your payments.
• Stop using your health information for anything beyond filling your orders.

Email hello@vitalitystacks.com to make a request. We'll confirm it's you before we act, and reply within 45 days. If we turn down a request, you can appeal by replying to our answer. We won't treat you differently for using these rights.

In your account you can update your details, change your pack, skip, pause or cancel your subscription, and delete your account. We honor Global Privacy Control signals.

How long we keep it

• Account and order records: while your account is open. When you delete your account, we delete your details and your order history, except records we must keep for tax and accounting, such as Stripe's records of your payments.
• Consultation answers: not kept. The recommendation they produced is kept for 24 hours, as described above.
• Contact form messages: as long as we need them to answer you and keep a record of the conversation. Ask, and we'll delete them.
• Server logs: kept by our hosting providers for a limited time, to run and secure the site.

Security

Every page is served over an encrypted connection (HTTPS), and your sign-in cookie only travels over that connection. Stripe handles card data, and access to customer records is limited to the people who need it. No system is perfectly secure, so use a strong password you don't use anywhere else.

Age

Vitality Stacks is for adults 18 and over. We don't knowingly collect information from anyone under 18. If you think we have, email hello@vitalitystacks.com and we'll delete it.

Where your information is processed

In the United States, by us and our service providers.

Changes to this policy

We'll post any update here with a new effective date. If a change matters, such as a new use of your health information, we'll email customers before it takes effect.

Contact us

Vitality Stacks, LLC. Email hello@vitalitystacks.com.