Important: This website provides general lifestyle and food education only. Vibrantherbnew is not a medical provider, licensed dietitian practice, or healthcare clinic. We do not offer medical advice, diagnosis, treatment, or promises of specific results. Always consult a qualified healthcare professional before making dietary changes.

Privacy Policy

How Vibrantherbnew collects, uses, and protects your personal information.

Effective date:

1. Introduction

This Privacy Policy describes how Vibrantherbnew ("we," "us," or "our") collects, uses, stores, and protects personal data when you visit our website at vibrantherbnew.world or use our non-medical lifestyle food education services. We are committed to protecting your privacy and processing your data in accordance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA) where applicable, and other relevant international privacy laws.

By using our website or services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, please refrain from using our website or submitting personal information through our contact forms.

2. Data Controller Information

The data controller responsible for your personal information is:

  • Business Name: Vibrantherbnew
  • Address: 108 Rivington St, New York, NY 10002, USA
  • Phone: +1 212-254-1531
  • Email: touch@vibrantherbnew.world
  • Website: vibrantherbnew.world

For any privacy-related inquiries, data subject requests, or concerns about how your information is handled, please contact us using the details above.

3. Categories of Personal Data We Collect

We collect personal data only when necessary to provide our services and operate our website. The categories of data we may collect include:

3.1 Information You Provide Directly

  • Contact Information: Name, email address, and phone number when you submit our contact form or communicate with us directly.
  • Communication Content: Messages, inquiries, and any other information you voluntarily include in correspondence with our team.
  • Session-Related Information: General lifestyle preferences, eating routine notes, and consultation topic interests shared during booking or sessions. We do not collect medical records, diagnoses, or clinical health data.
  • Consent Records: Documentation of your agreement to this Privacy Policy and cookie preferences.

3.2 Information Collected Automatically

  • Technical Data: IP address, browser type and version, operating system, device type, and screen resolution.
  • Usage Data: Pages visited, time spent on pages, referral sources, click patterns, and navigation paths within our website.
  • Cookie Data: Information stored through cookies and similar technologies as described in our Cookie Policy.

4. Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

  • Consent (Article 6(1)(a)): When you submit our contact form, accept cookies, or agree to receive communications from us.
  • Contract Performance (Article 6(1)(b)): When processing is necessary to schedule, deliver, and manage food education sessions you have requested.
  • Legitimate Interests (Article 6(1)(f)): For website security, fraud prevention, service improvement, and internal analytics where these interests are not overridden by your rights.
  • Legal Obligation (Article 6(1)(c)): When we are required to retain or disclose data to comply with applicable laws, regulations, or legal processes.

5. Purposes of Data Processing

We use your personal data for the following specific purposes:

  • Responding to inquiries submitted through our contact form
  • Scheduling and administering food education sessions
  • Providing session summaries and educational materials
  • Processing payments and managing billing records
  • Improving our website content, user experience, and service offerings
  • Complying with legal and regulatory requirements
  • Protecting the security and integrity of our website and services
  • Communicating service updates, policy changes, and administrative notices

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

6. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data to third parties for marketing purposes. We may share your information with the following categories of recipients only when necessary:

  • Service Providers: Third-party vendors who assist with website hosting, email delivery, payment processing, and analytics. These providers are contractually bound to process data only on our instructions and maintain appropriate security measures.
  • Legal Authorities: When required by law, court order, or governmental regulation.
  • Professional Advisors: Lawyers, accountants, or auditors when necessary for compliance or legal purposes.

Any international transfer of personal data outside the European Economic Area (EEA) is conducted with appropriate safeguards, including Standard Contractual Clauses approved by the European Commission.

7. Data Retention Periods

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:

  • Contact Form Inquiries: Retained for up to 24 months from the date of submission, unless a consultation relationship is established.
  • Client Session Records: Retained for up to 5 years after the last session to support follow-up inquiries and service continuity.
  • Payment Records: Retained for 7 years to comply with tax and accounting regulations.
  • Cookie Consent Records: Retained for 12 months from the date of consent.
  • Website Analytics Data: Aggregated and anonymized data may be retained indefinitely for statistical purposes.

When retention periods expire, personal data is securely deleted or anonymized so it can no longer be associated with you.

8. Security Measures

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • HTTPS encryption for all data transmitted between your browser and our servers
  • Access controls limiting data access to authorized personnel only
  • Regular security assessments and vulnerability monitoring
  • Secure storage systems with encryption at rest where applicable
  • Employee training on data protection practices and confidentiality obligations
  • Incident response procedures for detecting and addressing data breaches

While we strive to protect your personal data, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security but commit to notifying affected individuals and relevant authorities of any breach as required by applicable law.

9. Your Rights Under GDPR and Applicable Laws

Depending on your location, you may have the following rights regarding your personal data:

  • Right of Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete personal data.
  • Right to Erasure: Request deletion of your personal data when it is no longer necessary or when you withdraw consent.
  • Right to Restrict Processing: Request limitation of how we use your data in certain circumstances.
  • Right to Data Portability: Receive your data in a structured, commonly used, machine-readable format.
  • Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
  • Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing.
  • Right to Lodge a Complaint: File a complaint with a supervisory authority in your country of residence.

To exercise any of these rights, contact us at touch@vibrantherbnew.world. We will respond within 30 days of receiving a verifiable request.

10. Children's Privacy

Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a minor without parental consent, we will take steps to delete that information promptly.

11. Third-Party Links

Our website may contain links to external websites operated by third parties. We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policies of any external sites you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. The effective date at the top of this page indicates when the policy was last revised. Material changes will be communicated through a notice on our website or via email to registered clients where appropriate.

13. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or our data handling practices, please contact us:

  • Email: touch@vibrantherbnew.world
  • Phone: +1 212-254-1531
  • Address: 108 Rivington St, New York, NY 10002, USA