Privacy Policy

We respect your privacy and are committed to protecting it through our compliance with this privacy policy (“Policy”). This Policy describes the types of information we may collect from you or that you may provide (“Personal Information”) on the https://onlymultivitamin.com website (“Website” or “Service”) and any of its related products and services (collectively, “Services”), and our practices for collecting, using, maintaining, protecting, and disclosing that Personal Information. It also describes the choices available to you regarding our use of your Personal Information and how you can access and update it. This Policy is a legally binding agreement between you (“User”, “you”, or “your”) and Only Multivitamin (“Only Multivitamin”, “we”, “us”, or “our”). If you are entering into this Policy on behalf of a business or other legal entity, you represent that you have the authority to bind such entity to this Policy, in which case the terms “User”, “you”, or “your” shall refer to such entity. If you do not have such authority, or if you do not agree with the terms of this Policy, you must not accept this Policy and may not access or use the Website and Services. By accessing and using the Website and Services, you acknowledge that you have read, understood, and agree to be bound by this Policy. This Policy does not apply to the practices of companies that we do not own or control, or to individuals that we do not employ or manage.

Collection of Personal Information

You can access and use the Website and Services without telling us who you are or revealing any information by which someone could identify you as a specific, identifiable individual. If you wish to use certain features on the Website, you may be asked to provide Personal Information (for example, your name and email address). We receive and store any information you knowingly provide to us when you create an account, make a purchase, or fill out forms on the Website. When required, this information may include contact information (such as email address, phone number, etc.), basic personal information (such as name, country of residence, etc.), and payment information (such as credit card details, bank details, etc.). Some information is collected directly from you via the Website and Services. We may also collect Personal Information from other sources such as social media platforms, public databases, third party data providers, and joint partners. This may include demographic information (such as age and gender), device information (such as IP addresses), location (such as city and state), and online behavioral data (such as information about your use of social media websites, page view information, search results, and links). You can choose not to provide Personal Information, but you may not be able to use certain features of the Website. Users uncertain about what information is mandatory may contact us.

Use and Processing of Collected Information

We act as a data controller and a data processor when handling Personal Information, unless we have entered into a data processing agreement with you in which case you would be the data controller and we would be the data processor. We act as a data controller when we request Personal Information necessary to ensure your access and use of the Website and Services, because we determine the purposes and means of processing. We act as a data processor when you submit Personal Information through the Website and Services and such information is processed only in accordance with your instructions, in which case the User acts as the data controller. To make the Website and Services available to you, or to meet a legal obligation, we may need to collect and use certain Personal Information. If you do not provide the information requested, we may not be able to provide the requested products or services. Information we collect may be used to create and manage user accounts, fulfill and manage orders, deliver products or services, improve products and services, send marketing and promotional communications, send product and service updates, respond to inquiries and offer support, request user feedback, improve user experience, post customer testimonials, deliver targeted advertising, and run and operate the Website and Services. Processing of your Personal Information depends on how you interact with the Website and Services, where you are located, and whether one of the following applies: (a) you have given consent for one or more specific purposes; (b) provision of information is necessary for performance of this Policy and/or any pre-contractual obligations; (c) processing is necessary for compliance with a legal obligation; (d) processing is related to a task carried out in the public interest or in the exercise of official authority vested in us; (e) processing is necessary for the purposes of legitimate interests pursued by us or by a third party. Under some laws, we may be allowed to process information until you object by opting out, without relying on consent or another legal basis. We can clarify the specific legal basis for processing and whether providing Personal Information is a statutory or contractual requirement or necessary to enter into a contract.

Payment Processing

For Services requiring payment, you may need to provide credit card details or other payment account information, used solely for processing payments. We use third party payment processors (“Payment Processors”) to process payment information securely. Payment Processors adhere to the PCI Security Standards Council requirements. Sensitive data exchange happens over SSL encryption and is protected with digital signatures, and the Website and Services follow strict vulnerability standards to create as secure an environment as possible. We share payment data with Payment Processors only as necessary to process payments, issue refunds, and handle complaints and payment related queries. Payment Processors may collect Personal Information necessary to process payments (for example, email address, address, credit card details, and bank account number) and handle steps in the payment process through their systems. Where necessary for future or recurring payments and subject to your prior consent, your financial information will be stored in encrypted form on secure servers of our Payment Processors. Their use of your Personal Information is governed by their respective privacy policies, which may or may not be as protective as this Policy. We suggest reviewing those policies.

Managing Information

You may delete certain Personal Information we have about you, and what can be deleted may change as the Website and Services change. When you delete Personal Information, we may maintain a copy of unrevised information for the duration necessary to comply with obligations to affiliates and partners and for the purposes described in this Policy. If you would like to delete your Personal Information or permanently delete your account, you can do so in your account settings on the Website.

Disclosure of Information

Depending on the requested Services or as necessary to complete a transaction or provide a Service, we may share your information with contracted companies and service providers (“Service Providers”) who assist in operating the Website and Services and whose privacy policies are consistent with ours or who agree to abide by our policies regarding Personal Information. We do not share personally identifiable information with unaffiliated third parties. Service Providers are not authorized to use or disclose your information except as needed to perform services on our behalf or comply with legal requirements. Service Providers receive only the information necessary to perform their designated functions, and we do not authorize them to use or disclose it for their own marketing or other purposes.

Retention of Information

We retain and use Personal Information for the period necessary to comply with legal obligations, as long as your user account remains active, until orders or Services are fulfilled, and to enforce this Policy and resolve disputes, unless a longer retention period is required or permitted by law. We may use aggregated data derived from or incorporating your Personal Information after you update or delete it, but not in a way that identifies you personally. Once the retention period expires, Personal Information will be deleted. Rights such as access, erasure, rectification, and portability cannot be enforced after the retention period expires.

Region Specific Notices

We implement additional measures to comply with obligations and rights associated with Personal Information collection based on laws governing the regions of our users.

Disclosures for Residents of the USA

If you are a resident of California, you have certain rights and we aim to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Information. This section provides information about rights under the California Consumer Privacy Act and the California Privacy Rights Act (collectively, “CCPA”), the Colorado Privacy Act (“CPA”), the Connecticut Data Privacy Act (“CDPA”), the Delaware Online Privacy and Protection Act (“DOPPA”), the Iowa Consumer Data Protection Act (“ICDPA”), the Maryland Personal Information Protection Act (“PIPA”), the Utah Consumer Privacy Act (“UCPA”), the Virginia Consumer Data Protection Act (“VCDPA”), and related regulations. Unless otherwise stated, terms have the meanings defined in the related state laws. If you provide Personal Information to obtain Services for personal, family, or household use, you may submit requests related to your Personal Information once per calendar year. There are circumstances where we may not be able to comply, including inability to verify your request or conflicts with legal or regulatory requirements, and we will notify you if that is the case. (a) Right to know and right to access: You may request certain information we have collected. After receiving and confirming a verifiable request, we will disclose, to the extent permitted by law, the specific pieces of Personal Information we hold, categories of sources, and purposes for collecting, selling, or sharing Personal Information. You may request that Personal Information be delivered in a portable and easily usable format when technically possible. (b) Right to correct: You may request correction of inaccurate Personal Information, considering the nature and purposes of processing. (c) Right to delete: You may request deletion of Personal Information. (d) Right to opt out of sale and sharing: You may opt out of the sale of Personal Information, including selling, disclosing, or transferring Personal Information for monetary or other valuable consideration. (e) Right to consent to or limit use of sensitive personal information: You may consent to use of Sensitive Personal Information and direct us to restrict its use to what is essential for providing Services or certain business objectives as specified by law. We do not use Sensitive Personal Information beyond legally permitted purposes or beyond your consent. (f) Right to non-discrimination: You have the right not to be discriminated against for exercising your rights. We will not deny goods or Services, charge different prices, provide different quality, or suggest different treatment because of a data request. (g) Shine the Light: California residents with an established business relationship with us have the right to know how personal information is disclosed to third parties for direct marketing purposes under California’s Shine the Light law, or the right to opt out. To exercise rights, contact us using the details below. After receiving and verifying your request, we will process it to the extent possible within our capabilities.

How to Exercise Your Rights

Requests to exercise rights can be directed to us using the contact details in this Policy. We may ask you to verify your identity before responding. Your request must include sufficient information to verify you are the person you claim to be or an authorized representative. If submitted by an authorized representative, we may request proof of authority such as power of attorney or valid written authorization. You must include enough detail for us to understand and respond. We cannot respond or provide Personal Information unless we verify identity or authority and confirm the information relates to you.

Cookies

We use cookies to help personalize your online experience. Cookies are text files placed on your device by a web page server. Cookies cannot run programs or deliver viruses. Cookies are uniquely assigned and can be read only by the issuing domain. We may use cookies for security, personalization, and statistical purposes. You can accept or decline cookies. Most browsers accept cookies by default, but you can modify settings to decline cookies.

Data Analytics

We may use third party analytics tools that use cookies, web beacons, or similar technologies to collect standard internet activity and usage information. The information is used to compile statistical reports, such as visit frequency and page engagement, to monitor performance and improve the Website and Services.

Privacy of Children

We do not knowingly collect Personal Information from children under 18. If you are under 18, do not submit Personal Information. If you believe a child under 18 provided Personal Information, contact us to request deletion. We encourage parents and guardians to monitor internet usage and instruct children not to provide Personal Information without permission.

Do Not Sell My Personal Information

You may opt out of having Personal Information sold or disclosed by contacting us. After verifying your request, we will cease sale and disclosure. Opting out of transfers to third parties may affect our ability to provide certain Services. We may reject opt out requests in situations permitted by the CCPA, including when sale of Personal Information is required to fulfill legal or contractual duties.

Do Not Track Signals

Some browsers offer a Do Not Track feature that signals a preference not to be tracked. Tracking is not the same as using or collecting information in connection with a website. Tracking refers to collecting personally identifiable information over time across different websites. Do Not Track signals are not yet uniform, so the Website and Services do not interpret or respond to them. We limit our collection and use of Personal Information as described in this Policy. For more information, visit internetcookies.com.

Advertisements

We may allow third party companies to help tailor advertising and collect data about user activities on the Website. These companies may deliver ads that place cookies and track behavior. To learn about opting in or out of interest based advertising, visit the Digital Advertising Alliance and Network Advertising Initiative websites.

Social Media Features

The Website and Services may include social media features (for example, Facebook and Twitter buttons). These features may collect your IP address, the page you are visiting, and may set a cookie to function properly. These features are hosted by providers or on our Website. Your interactions are governed by the providers’ privacy policies.

Email Marketing

We may offer electronic newsletters that you can subscribe to voluntarily. We keep your email address confidential and do not disclose it to third parties except as allowed in this Policy or to use a third party provider to send emails. We maintain email related information in accordance with applicable laws. In compliance with the CAN-SPAM Act, our emails identify who they are from and provide contact details. You may unsubscribe using instructions in the emails or by contacting us. You will continue to receive essential transactional emails.

Affiliate Links

We may engage in affiliate marketing and include affiliate links. If you click an affiliate link, a cookie may be placed on your browser to track sales for commission purposes.

Links to Other Resources

The Website and Services may link to resources not owned or controlled by us. We are not responsible for the privacy practices of those resources. Please review the privacy statements of any resource you visit that may collect Personal Information.

Information Security

We secure information on servers in a controlled environment and maintain reasonable administrative, technical, and physical safeguards to protect Personal Information. No transmission over the internet or wireless network can be guaranteed, so while we strive to protect your Personal Information, you acknowledge that internet security limitations exist, and information may be viewed or tampered with in transit despite best efforts. Security also depends on the device you use and how you protect your credentials, so please take steps to protect this information.

Data Breach

If we become aware of a security compromise or disclosure of Personal Information due to external activity (including attacks or fraud), we may take appropriate measures including investigation, reporting, and cooperation with law enforcement. If a data breach occurs, we will make reasonable efforts to notify affected individuals if we believe there is a reasonable risk of harm or if notice is required by law. Notice may be posted on the Website and communicated via email or phone.

Changes and Amendments

We may modify this Policy at any time. When we do, we will revise the updated date at the bottom of the page. We may provide notice through contact information you provide. The updated Policy is effective upon posting unless otherwise specified. Continued use after the effective date constitutes acceptance. We will not use Personal Information in a materially different way than stated at the time of collection without your consent.

Acceptance of This Policy

By accessing and using the Website and Services and submitting your information, you agree to be bound by this Policy. If you do not agree, you are not authorized to access or use the Website and Services.

Contacting Us

If you have questions regarding the information we may hold about you or if you wish to exercise your rights, you may use the following data subject request form: Submit a data access request. If you have other questions, concerns, or complaints regarding this Policy, contact us at Info@OnlyMultivitamin.com. We will attempt to resolve complaints and disputes and make reasonable efforts to honor your request as quickly as possible and within the timescales provided by applicable data protection laws.

Last updated March 1, 2024.