Privacy Policy
We believe privacy is a right, not a privilege. This policy explains exactly what data we collect, why we collect it, and how you can control it.
Privacy at a Glance
We don't sell your data
Your personal information is never sold to third parties.
Cookies used
Analytics, advertising (AdSense), and essential site cookies.
Newsletter opt-in only
We only email you if you explicitly subscribe.
Overview
VitalBloom ("we", "us", "our") operates the website at vitalbloom.com (the "Site"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Site.
By accessing or using our Site, you agree to this Privacy Policy. If you do not agree, please discontinue use of the Site.
This policy applies to all visitors, registered users, newsletter subscribers, and anyone else who interacts with our Site.
Contact information:
VitalBloom · privacy@vitalbloom.com
For GDPR-related enquiries: dpo@vitalbloom.com
Information We Collect
We collect information in the following ways:
2.1 Information You Provide Directly
- Newsletter subscription — your email address when you subscribe.
- Contact form — your name, email address, and message content.
- Comments — your name, email address, and comment text if you leave a comment.
- Advertising enquiries — your name, email, company, and message via our advertise page.
2.2 Information Collected Automatically
When you visit our Site, certain information is collected automatically:
- Log data — IP address, browser type and version, pages visited, time and date, referring URL, and time spent on pages.
- Device information — device type, operating system, screen resolution, and language settings.
- Cookies and tracking technologies — see Section 4 for full details.
- Usage data — scroll depth, click patterns, and navigation paths (via analytics tools).
2.3 Information from Third Parties
- Analytics data from Google Analytics.
- Advertising data from Google AdSense.
- Social media interaction data when you share our content.
How We Use Your Information
We use the information we collect for the following purposes:
| Purpose | Data Used | Legal Basis (GDPR) |
|---|---|---|
| Delivering and improving the Site | Log data, usage data | Legitimate interest |
| Sending the newsletter | Email address | Consent |
| Responding to enquiries | Name, email, message | Contract / Consent |
| Displaying personalised ads | Cookies, device data | Consent |
| Analytics & site performance | Usage data, cookies | Legitimate interest |
| Preventing fraud & abuse | IP address, log data | Legitimate interest |
| Legal compliance | Any relevant data | Legal obligation |
We will never use your data for purposes incompatible with those listed above without obtaining your prior consent.
Advertising (Google AdSense)
We use Google AdSense to display advertisements on our Site. AdSense uses cookies and web beacons to serve ads based on your prior visits to our Site and other sites on the internet.
Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to our Site and/or other sites on the internet. You may opt out of personalised advertising by visiting Google Ads Settings.
What AdSense collects
- Your IP address (used to determine your approximate location for ad targeting).
- Browser type, operating system, and device information.
- Pages you visit and content you interact with on our Site.
- Your interests, inferred from your browsing history across the Google Display Network.
Your advertising choices
- Visit Google Ads Settings to opt out of personalised ads.
- Visit aboutads.info to opt out of interest-based advertising from participating companies.
- Visit Your Online Choices if you are in the EU/UK.
We do not control the content of advertisements delivered by Google AdSense. We are not responsible for the privacy practices of advertisers whose ads appear on our Site.
Third-Party Services
We integrate the following third-party services on our Site. Each has its own privacy policy:
| Service | Purpose | Privacy Policy |
|---|---|---|
| Google Analytics (GA4) | Site usage analytics | View → |
| Google AdSense | Display advertising | View → |
| Google Fonts | Web typography | View → |
| Mailchimp / ConvertKit | Newsletter delivery | View → |
| Cloudflare | CDN, DDoS protection | View → |
| Unsplash | Stock photography | View → |
Our Site may contain links to external websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review their privacy policies.
Data Sharing & Disclosure
We do not sell, rent, or trade your personal information to third parties. We may share data in the following limited circumstances:
- Service providers — trusted vendors who help us operate the Site (e.g., hosting, email delivery, analytics). These parties process data on our behalf under contractual data processing agreements.
- Legal compliance — if required by law, court order, or government authority.
- Protection of rights — to protect the rights, property, or safety of VitalBloom, our users, or others.
- Business transfer — in the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity. We will notify you via email and/or a prominent notice on the Site.
- Consent — with your explicit consent for any other purpose.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes described in this policy:
| Data Type | Retention Period |
|---|---|
| Newsletter email address | Until you unsubscribe |
| Contact form submissions | 24 months from receipt |
| Comment data | Duration of the published article |
| Server log files | 90 days |
| Analytics data (GA4) | 14 months (Google default) |
| Cookie consent records | 12 months |
After the retention period, data is securely deleted or anonymised. You may request earlier deletion — see Section 9.
Your Rights
Depending on your location, you may have the following rights regarding your personal data:
Right to Access
Request a copy of the personal data we hold about you.
Right to Rectification
Ask us to correct inaccurate or incomplete data.
Right to Erasure
Request deletion of your personal data ("right to be forgotten").
Right to Restrict Processing
Ask us to pause processing of your data in certain circumstances.
Right to Data Portability
Receive your data in a structured, machine-readable format.
Right to Object
Object to processing based on legitimate interest or for direct marketing.
Rights re: Automated Decisions
Not to be subject to decisions made solely by automated processing.
Right to Withdraw Consent
Withdraw consent at any time without affecting prior lawful processing.
To exercise any of these rights, contact us at privacy@vitalbloom.com. We will respond within 30 days. We may need to verify your identity before processing your request.
California residents (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to delete, the right to opt out of sale (we do not sell data), and the right to non-discrimination for exercising your rights.
To submit a CCPA request, email privacy@vitalbloom.com with the subject line "CCPA Request".
Children's Privacy
Our Site is not directed to children under the age of 13 (or 16 in the EU/UK). We do not knowingly collect personal information from children.
If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately at privacy@vitalbloom.com. We will delete the information promptly.
Security
We implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction:
- HTTPS / TLS encryption on all pages and data transmissions.
- Access controls — personal data is accessible only to authorised personnel on a need-to-know basis.
- Regular security audits and vulnerability scanning.
- Secure password hashing for any stored credentials.
- Data minimisation — we only collect what is strictly necessary.
International Data Transfers
Our Site is operated from the United States. If you access our Site from outside the US, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate.
For transfers from the European Economic Area (EEA) or UK, we rely on:
- Standard Contractual Clauses (SCCs) approved by the European Commission.
- Adequacy decisions where applicable.
- Your explicit consent where required.
By using our Site, you consent to the transfer of information to countries that may not provide the same level of data protection as your home country.
Policy Changes
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons.
When we make material changes, we will:
- Update the "Last Updated" date at the top of this page.
- Display a prominent notice on our Site.
- Notify newsletter subscribers by email for significant changes.
Your continued use of the Site after any changes constitutes your acceptance of the updated policy. We encourage you to review this page periodically.
June 8, 2026 — Current version (initial publication)
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out:
We aim to respond to all privacy enquiries within 5 business days and to data subject requests within 30 days as required by applicable law.