1. Introduction

We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you about how we look after your personal data when you visit our website (regardless of where you visit it from) and tell you about your privacy rights and how the law protects you.

2. Important Information and Who We Are

Controller
VitaAssist VA is the controller and responsible for your personal data (referred to as “we”, “us” or “our” in this privacy policy).

Contact Details
If you have any questions about this privacy policy or our privacy practices, please contact us via our contact form.

3. The Data We Collect About You

We may collect, use, store, and transfer different kinds of personal data about you which we have grouped together as follows:

• Identity Data includes [first name, last name, title].
• Contact Data includes [email address, telephone number].
• Technical Data includes [internet protocol (IP) address, your browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website].
• Usage Data includes [information about how you use our website].

We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data).

4. How is Your Personal Data Collected?

We use different methods to collect data from and about you including through:

• Direct interactions. You may give us your Identity and Contact Data by filling in our contact form or by corresponding with us by post, phone, email or otherwise.
• Automated technologies or interactions. As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs and other similar technologies. We may also receive Technical Data about you if you visit other websites employing our cookies. Please see our section on Cookies below for further details.

5. How We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• Where we need to respond to an enquiry you have sent us via the contact form.
• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
• Where we need to comply with a legal obligation.

Purpose/Activity	Type of Data	Lawful Basis for Processing
To respond to your message sent through the contact form	Identity, Contact	Necessary to take steps at your request prior to entering into a potential contract
To administer and protect our website (including troubleshooting, data analysis)	Technical	Necessary for our legitimate interests (for running our business, provision of IT services)
To use data analytics to improve our website, marketing, and user experiences	Technical, Usage	Necessary for our legitimate interests (to define types of customers, keep website updated)

6. Cookies

Our website uses cookies to distinguish you from other users. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site.

What are cookies? A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree.

We use the following cookies:

• Strictly necessary cookies. These are cookies that are required for the operation of our website.
• Analytical/performance cookies. They allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.

Google Analytics
We use Google Analytics, a web analytics service provided by Google, Inc. Google Analytics uses cookies to help us analyse how users use our site. The information generated by the cookie about your use of our website (including your IP address) will be transmitted to and stored by Google on servers which may be in the United States.

Google uses this information to evaluate your use of our website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf.

You can opt-out of Google Analytics without affecting how you visit our site. For more information on opting out of being tracked by Google Analytics across all websites you use, visit https://tools.google.com/dlpage/gaoptout.

How to manage cookies
You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.

7. Disclosures of Your Personal Data

We may share your personal data with the following parties for the purposes set out in the table above:

• Service Providers who provide IT and system administration services (such as our hosting provider and Google Analytics).
• Professional advisers including lawyers, bankers, auditors and insurers.
• HM Revenue & Customs, regulators and other authorities based in the United Kingdom who require reporting of processing activities in certain circumstances.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

8. International Transfers

Google Analytics may process and store your data in the United States. Google LLC is certified under the UK Extension to the EU-US Data Privacy Framework, which provides safeguards for data transferred from the UK to the US. This certification provides an approved legal mechanism for the transfer of your data.

9. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.

10. Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements.

Analytics Data: User-level and event-level data stored

Contact Form Enquiries: We will typically keep messages sent via the contact form for business review.