Donate

Privacy Policy

This Privacy Policy was last updated on August 12, 2024.

Welcome to the website (the “Site”) of Vitamin Angel Alliance, Inc. and our affiliates (collectively, “Vitamin Angels,” “we,” “us,” or “our”). Vitamin Angels’ mission is to help at-risk populations in need – specifically pregnant women, new mothers, and children under five – gain access to life changing vitamins and minerals. Vitamin Angels promotes health and economic equity across the lifespan by ensuring nutritionally vulnerable, underserved populations have access to evidence-based nutrition interventions (collectively, including the Site, the “Service”).

This Privacy Policy explains what Personal Data we collect, how we use and share that data, and your choices concerning our data practices.

This Privacy Policy constitutes an integral part of our Terms of Use accessible at: https://www.vitaminangels.org/terms-of-use.

Please read this Privacy Policy before using our Site or submitting any Personal Data to Vitamin Angels and contact us if you have any questions. By using the Site or otherwise providing Personal Data to us, you agree to the practices described in this Privacy Policy. If you do not agree to this Privacy Policy, please do not access the Site or otherwise provide Personal Data to us.

1. INFORMATION WE COLLECT

When you contact us or otherwise interact with us, we collect personal data (“Personal Data”) as follows:

Personal Data You Provide In Correspondence and Through Forms: We collect Personal Data when you choose to interact with our Site by entering Personal Data into form fields, request information, ask to download content, sign up for events, or subscribe to emailing lists. You decide what Personal Data is provided to Vitamin Angels, but this typically includes your name, email address or other contact information, and any other information that you elect to share with us.

Personal Data You Provide When You Place an Order: We collect Personal Data when you place an order on the Site for prenatal vitamins and minerals, including your name, shipping address, city, zip code, email address and other information you choose to provide to us in connection with your order.

Surveys: We may collect information when you voluntarily respond to questionnaires, surveys or requests for market research seeking your opinion and feedback.  Providing this information is optional to you.

Entering Into Agreements With Us: When you enter into a contractual agreement with us (whether as a corporate partner, program partner or product supplier or manufacturer) we may collect certain details in respect of you or other representatives of your business or organization, such as name, contact details, company details, title, job function and address/location.

Making a Donation. When you make a donation on our Site, we collect Personal Data such as your name, email address, the financial information needed to process the donation, which may include your billing address, and information about your donation, including the amount of your donation. We also collect (but do not retain) credit card numbers which are processed by a third-party payment processor. If you use PayPal, Apple Pay or a similar service, their use of your information is based on their terms of service and policies, not ours, so we encourage you to review those policies carefully. When you make a donation in honor or memory of a loved one, we may collect name and last name of the recipient and, if you elect to provide this information, the mailing address of the recipient. We may also share your name, date of donation and donation value with the recipient.

Financial Information: If you make a donation as a corporate partner or if you sell us products, our payment processors will process certain payment and billing information, such as billing address, payment card details and bank account information. If you have questions about how our payment processors protect such information, please read our payment processors’ service agreements and privacy policies at paypal.com, authorize.net, and justgiving.com. 

Personal Data We Collect Through Our Social Media Pages: We have pages on social media sites like Instagram, Medium, Twitter, and LinkedIn (“Social Media Pages”). When you interact with our Social Media Pages, we will collect Personal Data that you elect to provide to us through your settings on the Social Media Site, such as your contact details. In addition, the companies that host our Social Media Pages may provide us with aggregate information and analytics regarding the use of our Social Media Pages.

Personal Data We Receive Automatically From Your Use of the Site: When you visit, use and interact with the Site, we may receive certain information about your visit, use or interactions. For example, we may monitor the number of people that visit our Site, peak hours of visits, which page(s) are visited on our Site, the domains our visitors come from (e.g., google.com, yahoo.com, etc.), and which browsers people use to access and visit our Site (e.g., Firefox, Microsoft Internet Explorer, etc.), broad geographical information, and Site-navigation pattern. In particular, the following information is created and automatically logged in our systems:

  • Log data: Information (“log data”) that your browser automatically sends whenever you visit the Site. Log data includes your Internet Protocol (“IP”) address (so we understand which country you are connecting from when you visit the Site), browser type and settings, the date and time of your request, and how you interacted with the Site.
  • Cookies: Please see the “Cookies” section below and refer to our Cookie Policy to learn more about how we use cookies and similar technologies.
  • Device information: Includes name of the device, operating system, and browser you are using. Information collected may depend on the type of device you use and its settings.
  • Usage Information: We collect information about how you use our Site, such as the types of content that you view or engage with, the features you use, the actions you take, and the time, frequency and duration of your activities.

2. HOW WE USE PERSONAL DATA

Service delivery. If you are a corporate partner, program partner or manufacturer, we use Personal Data that we collect from you (described above) as necessary for the purpose of fulfilling our contract with you.

Legitimate Business Purposes. We also process Personal Data for the following purposes and as necessary for the following legitimate interests:

  • To respond to your inquiries, comments, feedback or questions;
  • To manage and fulfill your orders for prenatal vitamins and minerals;
  • To send administrative information to you relating to our Service and changes to our terms, conditions, and policies, and asking you to leave a review or take a survey;
  • To process and fulfill your donations, contact you regarding any questions related to your donation, and notify your loved ones about your donation in their honor if you ask us to;
  • To operate the Service and our business, and to develop new products, features and services;
  • To analyze how you interact with our Service and provide, maintain and improve the content and functionality of the Service and our customer relationships and experiences, develop our business and inform our marketing strategy (please see the “Cookies” section below and refer to our Cookie Policy to learn how we use cookies and similar technologies);
  • To administer and protect our business and the Site, prevent fraud, criminal activity, or misuses of our Site, and to ensure the security of our IT systems, architecture and networks (including troubleshooting, testing, system maintenance, support and hosting of data); and
  • To comply with legal obligations and legal process and to protect our rights, privacy, safety or property, and/or that of our affiliates, you or other third parties, and enforce our terms and policies.

For information about what we mean by legitimate interests and the rights of individuals in the EU or the UK, please see the “European Users” section below.

Marketing. We may contact you to provide information we believe will be of interest to you as permitted by law. For instance, if you elect to provide your email address, we may use that information to send you promotional information about our products and services. You may opt out of receiving emails by following the instructions contained in each promotional email we send you or by contacting us. If you unsubscribe from our marketing lists, you will no longer receive marketing communications but we will continue to contact you regarding our Site and Services and to respond to your requests.

With your consent, where required by law (such as in relation to certain marketing communications and the use of cookies and similar technologies as described in our Cookie Policy).

3. HOW WE SHARE AND DISCLOSE PERSONAL DATA

In certain circumstances we may share your Personal Data with third parties without further notice to you, unless required by the law, as set forth below:

  • Vendors and Service Providers: We may share Personal Data with service providers, including hosting, cloud services and other information technology services providers; event management, email communication software providers and email newsletter providers; data base and sales/customer relationship management services; payment processors; fulfillment service providers; web analytics and advertising services (for more details on the third parties that place cookies and similar technologies through the Site, please see the “Cookies” section below).  Pursuant to our instructions, these parties will access, process or store Personal Data in the course of performing their duties to us.
  • Donations. When you make a donation that is part of a campaign sponsored by your employer, and/or when your employer is being asked to match your donation, we may share your name and the amount of you donation with your employer. We may also identify you as a donor on our Site (including listing your name and amount donated), for example in annual reports or annual tax returns. 
  • Business Transfers: If we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, sale of all or a portion of our assets, or transition of service to another provider, your Personal Data and other information may be shared in the diligence process with counterparties and others assisting with the transaction and transferred to a successor or affiliate as part of that transaction along with other assets.
  • Legal Requirements: If required to do so by law or in the good faith belief that such action is necessary to (i) comply with legal or regulatory obligations, including to respond to lawful requests from public authorities and to meet national security or law enforcement requirements, (ii) protect and defend our rights or property, (iii) prevent fraud, (iv) act in urgent circumstances to protect the personal safety of users of the Site, or the public, or (v) protect against legal liability.

4. DATA RETENTION

We keep Personal Data for as long as reasonably necessary for the purposes described in this Privacy Policy, while we have a legitimate business need to do so, or as required by law (e.g. for tax, legal, accounting or other purposes), whichever is the longer.

If you have elected to receive marketing communications from us, we retain information about your marketing preferences until you opt out of receiving these communications and in accordance with our policies.

To determine the appropriate retention period for your Personal Data, we will consider the amount, nature, and sensitivity of the Personal Data, the potential risk of harm from unauthorized use or disclosure of your Personal Data, the purposes for which we use your Personal Data and whether we can achieve those purposes through other means, and the applicable legal requirements.

5. UPDATE YOUR INFORMATION

If you need to change or correct your Personal Data, or wish to have it deleted from our systems, you may contact us at privacy@vitaminangels.org. We will address your request as required by applicable law.

6. CALIFORNIA PRIVACY RIGHTS DISCLOSURES

Online Tracking and Do Not Track Signals: We may, and we may allow third party service providers to, use cookies or other tracking technologies to collect information about your browsing activities over time and across different websites following your use of the Site. Our Site currently does not respond to “Do Not Track” (“DNT”) signals and operates as described in this Privacy Policy whether or not a DNT signal is received. If we do respond to DNT signals in the future, we will describe how we do so in this Privacy Policy.

7. CHILDREN

Our Service is not directed to children who are under the age of 13. Vitamin Angels does not knowingly collect Personal Data from children under the age of 13. If you have reason to believe that a child under the age of 13 has provided Personal Data to Vitamin Angels through the Service please contact us and we will endeavor to delete that information from our databases.

8. EUROPEAN USERS

Scope. This section applies to individuals in the EU (for these purposes, reference to the EU also includes the European Economic Area countries of Iceland, Liechtenstein and Norway, and Switzerland) and the United Kingdom.

Data Controller. Vitamin Angel Alliance, Inc. and Vitamin Angels UK (a UK based charitable organization, with a principal place of business located at No. 1 London Bridge, London, SE1 9BG, England) process Personal Data as joint controllers.  Please direct any questions relating to the processing of your Personal Data to Vitamin Angel Alliance, Inc., who can be contacted as described in the contact us section of this Privacy Policy. Please also refer to the contact us section of this Privacy Policy for information about our data protection representatives in the EU and the UK.

Legal Bases for Processing. This Privacy Policy (the paragraph “How We Use Personal Data”) describes the legal bases we rely on for the processing of your Personal Data. Please contact us if you have any questions about the specific legal basis we are relying on to process your Personal Data.

Where we rely on our or a third party’s legitimate interest to process your Personal Data, we consider the impact on you and will only use your Personal Data to the extent that our reasons for using your data do not harm your rights and interests.

Your Rights. Pursuant to the European Union General Data Protection Regulation (or GDPR) and the UK Data Protection Act 2018, you have the following rights in relation to your Personal Data, under certain circumstances and subject to any applicable exceptions:

  • Right of access: If you ask us, we will confirm whether we are processing your Personal Data and, if so, provide you with a copy of that Personal Data along with certain other details. If you require additional copies, we may need to charge a reasonable fee.
  • Right to rectification: If your Personal Data is inaccurate or incomplete, you are entitled to ask that we correct or complete it. If we shared your Personal Data with others, we will tell them about the correction where possible. If you ask us, and where possible and lawful to do so, we will also tell you with whom we shared your Personal Data so you can contact them directly.
  • Right to erasure: You may ask us to delete or remove your Personal Data, such as where you withdraw your consent. If we shared your data with others, we will tell them about the erasure where possible. If you ask us, and where possible and lawful to do so, we will also tell you with whom we shared your Personal Data with so you can contact them directly.
  • Right to restrict processing: You may ask us to restrict or ‘block’ the processing of your Personal Data in certain circumstances, such as where you contest the accuracy of the data or object to us processing it (please read below for information on your right to object). We will tell you before we lift any restriction on processing. If we shared your Personal Data with others, we will tell them about the restriction where possible. If you ask us, and where possible and lawful to do so, we will also tell you with whom we shared your Personal Data so you can contact them directly.
  • Right to data portability: You have the right to obtain your Personal Data from us that you consented to give us or that was provided to us as necessary in connection with our contract with you, and that is processed by automated means. We will give you your Personal Data in a structured, commonly used and machine-readable format. You may reuse it elsewhere.
  • Right to object: You may ask us at any time to stop processing your Personal Data, and we will do so:
    • If we are relying on a legitimate interest to process your Personal Data — unless we demonstrate compelling legitimate grounds for the processing or we need to process your data in order to establish, exercise, or defend legal claims;
    • If we are processing your Personal Data for direct marketing. We may keep minimum information about you in a suppression list in order to ensure your choices are respected in the future and to comply with data protection laws (such processing is necessary for our and your legitimate interest in pursuing the purposes described above);
  • Right to withdraw consent: If we rely on your consent to process your Personal Data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect any processing of your data before we received notice that you wished to withdraw consent.
  • Right to lodge a complaint with the data protection authority: If you have a concern about our privacy practices, including the way we handled your Personal Data, you can report it to the data protection authority that is authorized to hear those concerns (in the UK, the Information Commissioner’s Office (ICO), who can be contacted at https://ico.org.uk/make-a-complaint/your-personal-information-concerns/, or otherwise the EU data protection authority of the country in which you are located).

Please see the “Contact Us” section below for information on how to exercise your rights.

Storage of Personal Data. Vitamin Angel Alliance, Inc. is based in the U.S. and we rely on service providers that process Personal Data on our behalf in the U.S. The U.S. may have data protection laws less stringent than or otherwise different from the laws in effect in the EU and UK. When we engage in cross-border data transfers, we will ensure that relevant safeguards are in place to afford adequate protection for Personal Data, in particular by relying on an EU Commission or UK government adequacy decision/regulation for transfers outside of the EEA and UK, or on contractual protections for the transfer of Personal Data. For more information about how we transfer Personal Data internationally, please contact us as set out in the “Contact Us” section below.

9. LINKS TO OTHER WEBSITES

The Site may contain links to other websites not operated or controlled by Vitamin Angels, including Social Media Sites (“Third Party Sites”). The information that you share with Third Party Sites will be governed by the specific privacy policies and terms of service of the Third Party Sites and not by this Privacy Policy. By providing these links we do not imply that we endorse or have reviewed these sites. Please contact the Third Party Sites directly for information on their privacy practices and policies.

10.  COOKIES

We and our partners use cookies and similar technologies to operate and administer our Site, make it easier for you to use the Site during future visits, gather usage data on our Site and other purposes described in our Cookie Policy.

For more information about the cookies used on our Site, please refer to our Cookie Policy, which forms part of this Privacy Policy.

11. SECURITY

You use the Service at your own risk. We employ a number of technical, organizational and physical safeguards designed  to protect Personal Data both online and offline from loss, misuse, and unauthorized access, disclosure, alteration or destruction. However, no Internet or e-mail transmission is ever fully secure or error free. In particular, e-mail sent to or from us may not be secure. Therefore, you should take special care in deciding what information you send to us via the Service or e-mail. Please keep this in mind when disclosing any Personal Data to Vitamin Angels via the Internet. In addition, we are not responsible for circumvention of any privacy settings or security measures contained on the Service, or third party websites.

12.  YOUR CHOICES

Whether or not you provide Personal Data to us is completely up to you, but if you choose not to provide information that is needed to use some features of our Site, you may be unable to use those features. You can also contact us to request access to your data or to ask us to update, correct, or delete your Personal Data.

13. CHANGES TO THE PRIVACY POLICY

The Service, and our business may change from time to time. As a result we may change this Privacy Policy at any time. When we do we will post an updated version on this page, unless another type of notice is required by the applicable law. By continuing to use our Service or providing us with Personal Data after we have posted an updated Privacy Policy, or notified you if applicable, you consent to the revised Privacy Policy and practices described in it.

14.  CONTACT US

If you have any questions about our Privacy Policy or the information practices of the Site, please feel free to contact Vitamin Angel Alliance, Inc. by email at privacy@vitaminangels.org or by post:

Vitamin Angel Alliance, Inc.
6500 Hollister Ave., Suite 130
Goleta, CA 93117 United States


Individuals in the EU and the UK

If you are an individual in the EU or the UK, you can also contact DataRep, Vitamin Angel Alliance, Inc.’s data protection representative in the EU and in the UK. You can contact DataRep by email at datarequest@datarep.com[1] [2]  quoting “Vitamin Angel Alliance, Inc.” in the subject line, through its online webform at www.datarep.com/data-request; or by post:

DataRep EU
DataRep, 12 Northbrook Road, Dublin, Ireland

DataRep UK
107-111 Fleet Street, London, EC4A 2AB, United Kingdom

CountryAddress
AustriaDataRep, City Tower, Brückenkopfgasse 1/6. Stock, Graz, 8020, Austria
BelgiumDataRep, Rue des Colonies 11, Brussels, 1000
BulgariaDataRep, 132 Mimi Balkanska Str., Sofia, 1540, Bulgaria
CroatiaDataRep, Ground & 9th Floor, Hoto Tower, Savska cesta 32, Zagreb, 10000, Croatia
CyprusDataRep, Victory House, 205 Archbishop Makarios Avenue, Limassol, 3030, Cyprus
Czech RepublicDataRep, Platan Office, 28. Října 205/45, Floor 3&4, Ostrava, 70200, Czech Republic
DenmarkDataRep, Lautruphøj 1-3, Ballerup, 2750, Denmark
EstoniaDataRep, 2nd Floor, Tornimae 5, Tallinn, 10145, Estonia
FinlandDataRep, Luna House, 5.krs, Mannerheimintie 12 B, Helsinki, 00100, Finland
FranceDataRep, 72 rue de Lessard, Rouen, 76100, France
GermanyDataRep, 3rd and 4th floor, Altmarkt 10 B/D, Dresden, 01067, Germany
GreeceDataRep, 24 Lagoumitzi str, Athens, 17671, Greece
HungaryDataRep, President Centre, Kálmán Imre utca 1, Budapest, 1054, Hungary
IcelandDataRep, Kalkofnsvegur 2, 3rd Floor, 101 Reykjavík, Iceland
IrelandDataRep, The Cube, Monahan Road, Cork, T12 H1XY, Republic of Ireland
ItalyDataRep, Viale Giorgio Ribotta 11, Piano 1, Rome, Lazio, 00144, Italy
LatviaDataRep, 4th & 5th floors, 14 Terbatas Street, Riga, LV-1011, Latvia
LiechtensteinDataRep, City Tower, Brückenkopfgasse 1/6. Stock, Graz, 8020, Austria
LithuaniaDataRep, 44A Gedimino Avenue, 01110 Vilnius, Lithuania
LuxembourgDataRep, BPM 335368, Banzelt 4 A, 6921, Roodt-sur-Syre, Luxembourg
MaltaDataRep, Tower Business Centre, 2nd floor, Tower Street, Swatar, BKR4013, Malta
NetherlandsDataRep, Cuserstraat 93, Floor 2 and 3, Amsterdam, 1081 CN, Netherlands
NorwayDataRep, C.J. Hambros Plass 2c, Oslo, 0164, Norway
PolandDataRep, Budynek Fronton ul Kamienna 21, Krakow, 31-403, Poland
PortugalDataRep, Torre de Monsanto, Rua Afonso Praça 30, 7th floor, Algès, Lisbon, 1495-061, Portugal
RomaniaDataRep, 15 Piaţa Charles de Gaulle, nr. 1-T, Bucureşti, Sectorul 1, 011857, Romania
SlovakiaDataRep, Apollo Business Centre II, Block E / 9th floor, 4D Prievozska, Bratislava, 821 09, Slovakia
SloveniaDataRep, Trg. Republike 3, Floor 3, Ljubljana, 1000, Slovenia
SpainDataRep, Calle de Manzanares 4, Madrid, 28005, Spain
SwedenDataRep, S:t Johannesgatan 2, 4th floor, Malmo, SE – 211 46, Sweden
SwitzerlandDataRep, Leutschenbachstrasse 95, ZURICH, 8050, Switzerland
United KingdomDataRep, 107-111 Fleet Street, London, EC4A 2AB, United Kingdom