VitalBloom
Legal Document

Privacy Policy

We believe privacy is a right, not a privilege. This policy explains exactly what data we collect, why we collect it, and how you can control it.

Effective: June 8, 2026 Last Updated: June 8, 2026 ~12 min read

Privacy at a Glance

🚫

We don't sell your data

Your personal information is never sold to third parties.

🍪

Cookies used

Analytics, advertising (AdSense), and essential site cookies.

✉️

Newsletter opt-in only

We only email you if you explicitly subscribe.

01

Overview

VitalBloom ("we", "us", "our") operates the website at vitalbloom.com (the "Site"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Site.

By accessing or using our Site, you agree to this Privacy Policy. If you do not agree, please discontinue use of the Site.

This policy applies to all visitors, registered users, newsletter subscribers, and anyone else who interacts with our Site.

Contact information:
VitalBloom · privacy@vitalbloom.com
For GDPR-related enquiries: dpo@vitalbloom.com

02

Information We Collect

We collect information in the following ways:

2.1 Information You Provide Directly

  • Newsletter subscription — your email address when you subscribe.
  • Contact form — your name, email address, and message content.
  • Comments — your name, email address, and comment text if you leave a comment.
  • Advertising enquiries — your name, email, company, and message via our advertise page.

2.2 Information Collected Automatically

When you visit our Site, certain information is collected automatically:

  • Log data — IP address, browser type and version, pages visited, time and date, referring URL, and time spent on pages.
  • Device information — device type, operating system, screen resolution, and language settings.
  • Cookies and tracking technologies — see Section 4 for full details.
  • Usage data — scroll depth, click patterns, and navigation paths (via analytics tools).

2.3 Information from Third Parties

  • Analytics data from Google Analytics.
  • Advertising data from Google AdSense.
  • Social media interaction data when you share our content.
We do not collect sensitive personal data such as health records, financial details, government ID numbers, or biometric data.
03

How We Use Your Information

We use the information we collect for the following purposes:

PurposeData UsedLegal Basis (GDPR)
Delivering and improving the SiteLog data, usage dataLegitimate interest
Sending the newsletterEmail addressConsent
Responding to enquiriesName, email, messageContract / Consent
Displaying personalised adsCookies, device dataConsent
Analytics & site performanceUsage data, cookiesLegitimate interest
Preventing fraud & abuseIP address, log dataLegitimate interest
Legal complianceAny relevant dataLegal obligation

We will never use your data for purposes incompatible with those listed above without obtaining your prior consent.

04

Cookies & Tracking Technologies

We use cookies — small text files stored on your device — to make our Site function correctly, understand how it is used, and personalise advertising.

Types of cookies we use

Essential Cookies

Required for the Site to function. These cannot be disabled. Examples: session management, load balancing, CSRF protection.

Analytics Cookies

Help us understand how visitors interact with the Site. We use Google Analytics (GA4) with IP anonymisation enabled. Data is aggregated and cannot identify individuals.

Advertising Cookies

Set by Google AdSense to deliver relevant advertisements. These track browsing behaviour across sites to build an interest profile. You can opt out via Google's Ad Settings.

Preference Cookies

Remember your preferences such as font size, cookie consent choices, and newsletter opt-in state.

Managing cookies

You can control cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or receive warnings before a cookie is stored. Note that disabling certain cookies may affect Site functionality.

To opt out of Google Analytics tracking specifically, install the Google Analytics Opt-out Browser Add-on.

05

Advertising (Google AdSense)

We use Google AdSense to display advertisements on our Site. AdSense uses cookies and web beacons to serve ads based on your prior visits to our Site and other sites on the internet.

Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to our Site and/or other sites on the internet. You may opt out of personalised advertising by visiting Google Ads Settings.

What AdSense collects

  • Your IP address (used to determine your approximate location for ad targeting).
  • Browser type, operating system, and device information.
  • Pages you visit and content you interact with on our Site.
  • Your interests, inferred from your browsing history across the Google Display Network.

Your advertising choices

We do not control the content of advertisements delivered by Google AdSense. We are not responsible for the privacy practices of advertisers whose ads appear on our Site.

06

Third-Party Services

We integrate the following third-party services on our Site. Each has its own privacy policy:

ServicePurposePrivacy Policy
Google Analytics (GA4) Site usage analytics View →
Google AdSense Display advertising View →
Google Fonts Web typography View →
Mailchimp / ConvertKit Newsletter delivery View →
Cloudflare CDN, DDoS protection View →
Unsplash Stock photography View →

Our Site may contain links to external websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review their privacy policies.

07

Data Sharing & Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share data in the following limited circumstances:

  • Service providers — trusted vendors who help us operate the Site (e.g., hosting, email delivery, analytics). These parties process data on our behalf under contractual data processing agreements.
  • Legal compliance — if required by law, court order, or government authority.
  • Protection of rights — to protect the rights, property, or safety of VitalBloom, our users, or others.
  • Business transfer — in the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity. We will notify you via email and/or a prominent notice on the Site.
  • Consent — with your explicit consent for any other purpose.
08

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy:

Data TypeRetention Period
Newsletter email addressUntil you unsubscribe
Contact form submissions24 months from receipt
Comment dataDuration of the published article
Server log files90 days
Analytics data (GA4)14 months (Google default)
Cookie consent records12 months

After the retention period, data is securely deleted or anonymised. You may request earlier deletion — see Section 9.

09

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

👁️

Right to Access

Request a copy of the personal data we hold about you.

✏️

Right to Rectification

Ask us to correct inaccurate or incomplete data.

🗑️

Right to Erasure

Request deletion of your personal data ("right to be forgotten").

⏸️

Right to Restrict Processing

Ask us to pause processing of your data in certain circumstances.

📦

Right to Data Portability

Receive your data in a structured, machine-readable format.

🚫

Right to Object

Object to processing based on legitimate interest or for direct marketing.

🤖

Rights re: Automated Decisions

Not to be subject to decisions made solely by automated processing.

↩️

Right to Withdraw Consent

Withdraw consent at any time without affecting prior lawful processing.

To exercise any of these rights, contact us at privacy@vitalbloom.com. We will respond within 30 days. We may need to verify your identity before processing your request.

EU/UK residents: You have the right to lodge a complaint with your local data protection authority — in the UK, the ICO; in the EU, your national supervisory authority.

California residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to delete, the right to opt out of sale (we do not sell data), and the right to non-discrimination for exercising your rights.

To submit a CCPA request, email privacy@vitalbloom.com with the subject line "CCPA Request".

10

Children's Privacy

Our Site is not directed to children under the age of 13 (or 16 in the EU/UK). We do not knowingly collect personal information from children.

If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately at privacy@vitalbloom.com. We will delete the information promptly.

11

Security

We implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction:

  • HTTPS / TLS encryption on all pages and data transmissions.
  • Access controls — personal data is accessible only to authorised personnel on a need-to-know basis.
  • Regular security audits and vulnerability scanning.
  • Secure password hashing for any stored credentials.
  • Data minimisation — we only collect what is strictly necessary.
Important: No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. If you believe your data has been compromised, contact us immediately.
12

International Data Transfers

Our Site is operated from the United States. If you access our Site from outside the US, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate.

For transfers from the European Economic Area (EEA) or UK, we rely on:

  • Standard Contractual Clauses (SCCs) approved by the European Commission.
  • Adequacy decisions where applicable.
  • Your explicit consent where required.

By using our Site, you consent to the transfer of information to countries that may not provide the same level of data protection as your home country.

13

Policy Changes

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons.

When we make material changes, we will:

  • Update the "Last Updated" date at the top of this page.
  • Display a prominent notice on our Site.
  • Notify newsletter subscribers by email for significant changes.

Your continued use of the Site after any changes constitutes your acceptance of the updated policy. We encourage you to review this page periodically.

Version history:
June 8, 2026 — Current version (initial publication)
14

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out:

We aim to respond to all privacy enquiries within 5 business days and to data subject requests within 30 days as required by applicable law.