Privacy Policy

Effective Date: January 1, 2025
Last Updated: May 9, 2026

1. Who We Are

Essential Vital ("we", "us", or "our") operates the website and e-commerce platform located at our primary domain. We are the data controller responsible for your personal information.

Contact:
Email: contact@essentialvital.com
Address: Riyadh, Saudi Arabia

2. Information We Collect

We collect the following categories of personal information:

| Category | Examples | Purpose | |---|---|---| | Identity | Full name | Account creation, order processing | | Contact | Email address, phone number | Order confirmations, support | | Financial | Payment card details (processed by Stripe/PayPal — we never store raw card numbers) | Processing payments | | Transaction | Order history, items purchased, amounts paid | Fulfilling orders, customer support | | Technical | IP address, browser type, device type, cookie identifiers | Site security, fraud prevention, analytics | | Usage | Pages visited, search queries, browsing history within the site | Improving our service | | Marketing | Communication preferences | Sending promotional emails (with consent) |

3. How We Use Your Information

We use your personal data for the following purposes and on the following legal bases:

Performance of a contract — to process orders, payments, and deliver products you purchase.
Legal obligation — to comply with applicable tax, accounting, and consumer protection laws.
Legitimate interests — to detect fraud, improve our website, and provide customer support.
Consent — to send marketing emails and use non-essential cookies (you may withdraw consent at any time).

4. Cookies & Tracking Technologies

We use the following types of cookies:

Strictly Necessary — Essential for the site to function (session management, security). Cannot be disabled.
Analytics & Performance — Help us understand how visitors use our site (e.g., page views, traffic sources). We use anonymised or pseudonymised data where possible.
Marketing & Advertising — Used to deliver relevant advertisements. Only set with your explicit consent.
Preferences & Functionality — Remember your settings (language, currency, theme).

You can manage your cookie preferences at any time using the cookie consent banner on our site or through your browser settings.

5. Sharing Your Information

We share your data only in these circumstances:

Payment Processors — Stripe and/or PayPal to process transactions securely.
Delivery Partners — Shipping carriers receive your name and address to fulfil orders.
Email Service Providers — Resend to send transactional and marketing emails.
Cloud Infrastructure — Vercel (hosting), MongoDB Atlas (database), Uploadthing (file storage).
Legal Authorities — When required by law, court order, or to protect our legal rights.

We do not sell your personal information to third parties.

6. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including the United States and EU member states. Where we transfer data outside the EEA, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses).

7. Data Retention

We retain personal data for as long as necessary to fulfil the purposes described in this policy:

Account data: While your account is active, plus 3 years after closure.
Order records: 7 years (to comply with tax and accounting obligations).
Marketing consents: Until you withdraw consent.

8. Your Rights (GDPR — EU/UK Residents)

If you are located in the EU or UK, you have the following rights:

Access — Request a copy of your personal data.
Rectification — Correct inaccurate or incomplete data.
Erasure — Request deletion of your data ("right to be forgotten").
Restriction — Ask us to limit how we use your data.
Portability — Receive your data in a machine-readable format.
Object — Object to processing based on legitimate interests or for direct marketing.
Withdraw consent — Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at contact@essentialvital.com. We will respond within 30 days.

You also have the right to lodge a complaint with your national data protection authority.

9. Your Rights (CCPA — California Residents) {#ccpa}

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following rights:

Know — The categories and specific pieces of personal information we have collected about you.
Delete — Request deletion of your personal information, subject to certain exceptions.
Opt-Out — We do not sell personal information. You do not need to opt out.
Non-Discrimination — We will not discriminate against you for exercising your CCPA rights.

To submit a CCPA request, email us at contact@essentialvital.com with the subject line "CCPA Request".

10. Children's Privacy

Our services are not directed to children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately.

11. Security

We implement industry-standard technical and organisational security measures including:

HTTPS encryption for all data in transit.
Tokenised payment processing (we never store raw card numbers).
Password hashing using bcrypt.
Regular security reviews of our infrastructure.

No system is completely secure. In the event of a data breach, we will notify affected users and relevant authorities as required by law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this page indicates when changes were made. For material changes, we will notify you by email or a prominent notice on our website before the change becomes effective.

13. Contact Us

For any privacy-related questions or to exercise your rights:

Essential Vital
Email: contact@essentialvital.com
Address: Riyadh, Saudi Arabia