Welcome to Vitala.co.kr This Privacy Policy applies to the information we collect about you when you use our website (www.Vitala.co.kr) (the "Site") or when you otherwise interact with us, including through our customer service channels. If you have any questions about this Privacy Policy, please contact us at Vitala.co.kr 

When we use the term "Vitala.co.kr " or "we" or "us," we are referring to Vitala , Inc.

You can jump to specific areas of this Privacy Policy by clicking on the links below, or you can read on for the full Privacy Policy below:

Information We Collect

You may choose to provide us with information in a variety of ways. For example, you may provide information to us when you place an online order, sign up for our marketing emails, create an account or submit a question through our Contact Us page or Professional Support section. The types of information we collect about you include your name, email address, physical address, payment method information, billing and shipping address, phone number, birthday, demographic information and any other information you choose to provide.

We also collect information about you from others, such as when a user enters your name and email address in our Refer a Friend form.

In addition, we automatically collect information about you when you visit the Site ("Usage Information"), including your IP address, browser type, and domain name, the date/time and length of your visit, the functions you used and content you viewed, the number of times you visit and/or purchase from the Site, the items you place in your shopping cart, the webpages you visited before and after visiting the Site and other information collected through cookies and other tracking tools (please see the section below titled "Cookies and Tracking Tools" for more information).

How We Use the Information We Collect

We use the information we collect for the purposes described in this Privacy Policy. First and foremost, we use the information we collect to create, maintain and improve our Site, products, and services. We also use the information we collect to:

• Customize your experience on the Site
• Perform data analysis, identify usage trends and improve our products and services, including the Site
• Provide our products and services, including fulfilling your product orders
• Respond to your requests or inquiries and provide customer support
• Contact you about programs, products, or services that we believe may be of interest to you, including new product or service announcements, savings or discount programs, special offers from other companies or other promotional offers
• Conduct market research, surveys and similar inquiries to help us understand trends and customer needs across product categories or customer groups
• Alert you about a product safety announcement or recall or correction of an offer, promotion, or advertisement
• Enhance the security of our Site and services
• Monitor and prevent fraud, and enforce our Terms of Use and other policies
• Administer our programs like the Vitala Ambassador and VL+ Membership program if you decide to participate in that program, including to make commission payments and communicate with you about the program where applicable

How We May Share the Information We Collect

We won't disclose the information we collect about you to anyone outside of Vitala.co.kr , except in the following circumstances:

Service Providers

We disclose information to third-party service providers that we engage to provide us and you with various services ("Providers"). Examples of Providers include data analysis firms, credit card processing companies, companies that help fulfill your orders, website hosting providers, fraud detection and identity verification services, customer service, email and SMS vendors, auditing firms and other providers. Providers also include any co-promotion partners with which we jointly develop or market products or services. Some Providers may collect information on our behalf or through your use of the Site.

Affiliates

We may share information we collect about you with legal entities in the Vitala.co.kr family of companies for purposes and uses that are consistent with this Privacy Policy.

Corporate Transactions

We may disclose the information we collect about you to third parties as part of a corporate business transaction, such as a merger, acquisition, joint venture, or financing or sale of some or all of our assets, including in the context of bankruptcy proceedings.

In Compliance with Law

In addition, we may disclose your information we collect about you as we deem necessary or appropriate to: (1) comply with applicable law; (2) respond to requests from governmental authorities, including those outside your country of residence; (3) comply with subpoenas and other legal processes; (4) pursue available remedies or limit damages we may sustain; (5) protect our operations, rights or properties and those of our affiliates; and (6) enforce our Terms of Use and other applicable policies.

Aggregate or De-Identified

We may aggregate your information we collect about you with that of other individuals, or otherwise de-identify the information we collect about you, and share that aggregated or de-identified data with third parties, but only in a form in which the information can no longer be used to identify you as an individual.

Marketing Partners

From time to time, we may make the names, phone numbers, and postal addresses for those who register or place orders with us as well as the email addresses of those who opt-in to receive promotional communications to other reputable organizations whose products or services we think you might find interesting in compliance with local laws and regulations. If you do not want us to share your information with these other companies or organizations, please let us know by contacting us through the contact details provided at the end of this Privacy Policy.

Accessing and Updating Your Information

You may always manage, update and correct the information you provide as part of your online account by logging into your user account. Alternatively, you may contact us to request that it be updated by using the information set forth in the "Contact Us" section below.

Cookies and Tracking Tools

We use cookies, web beacons and similar tracking technologies ("Tools"), including those provided by other companies, which collect and track information about you and your activities online over time and across different websites and online services.

For more information about our use of cookies and how to disable them, please see our Cookie Policy.

EEA & Swiss Residents

If you are a resident of the EEA & Switzerland, you have certain rights and protections under the law regarding our processing of your personal data. Please see the sections below for more details.

Legal Basis for Processing

We will only process personal data about you in the following situations:

• As necessary to perform our responsibilities under our contract with you; for example, by processing your order and delivering the products you purchase.
• When we have a legitimate interest in processing your personal data; for example, to communicate with you about changes to our Site or legal documents, to prevent fraud, or to provide, protect and improve our products and services.
• If we request your consent to a specific processing activity, and you provide your consent in the manner indicated.
• In some cases, processing will be necessary for compliance with a legal obligation, such as response to legal process requests.

Data Subject Requests

You have the right to access personal data we hold about you and to ask that this data be corrected. In certain cases, you may also have the right to request that we delete data we are processing or to restrict or object to certain of our processing activities. You may also have the right to request that we provide you with the personal data you have provided us in a portable form for transmission to another controller's service. If you would like to exercise any of these rights, you may contact us as indicated below.

Data Retention

We store the information we collect about you for as long as is necessary for the purpose for which we originally collected it. We may retain certain information for legitimate business purposes or as required by law.

EU-U.S. and Swiss-U.S. Privacy Shield

We adhere to the EU-U.S. and Swiss-U.S. Privacy Shield Framework Principles issued by the U.S. Department of Commerce (the "Principles") in connection with our processing of personal data transferred from the European Economic Area and Switzerland ("Covered Data"). For more information about the Principles, please visit the Department of Commerce's Privacy Shield. You may contact us about any question or complaint regarding our adherence to the Principles as indicated below. If we do not resolve your complaint, you may submit your complaint free of charge to JAMS at our designated Privacy Shield independent dispute resolution provider. Under certain conditions specified by the Principles, you may also be able to invoke binding arbitration to resolve your complaint. We are subject to the investigatory and enforcement powers of the Federal Trade Commission. If we share Covered Data with a third-party service provider that processes the data solely on our behalf, then we will be liable for that party's processing of Covered Data in violation of the Principles, unless we can prove that it is not responsible for the event giving rise to the damage.

International

The information we collect about you may be transferred to, and accessed from within, the United States and other countries, as permitted by applicable law. These other countries may not offer the same level of data protection as your home jurisdiction. However, Vitala.co.kr will at all times treat the information we collect about you in accordance with this Privacy Policy. And, we will take steps to maintain an adequate level of protection for this information in the jurisdiction in which we process it.

California Residents - Privacy Notice

This notice is provided pursuant to the California Consumer Privacy Act of 2018 (“CCPA”) which grants California residents specific rights regarding their personal information.

CCPA-Enumerated Categories of Personal Information: CCPA considers “personal information” to be information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device. In the previous 12-month period, we have collected information from the following categories enumerated in CCPA (note: the information listed in the “Examples” column is provided for clarity purposes; please see the “Information We Collect” section above for additional details on what we collect):

Personal information does not include:

• Publicly available information from government records.
• De-identified or aggregated consumer information.
• Information excluded from CCPA’s scope, including:
  • Health or medical information covered by HIPAA and the California Confidentiality of Medical Information Act or clinical trial data;
  • Personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FRCA), the Gramm-Leach-Bliley Act (GLBA) or the California Financial Information Privacy Act (FIPA), and the Driver’s Privacy Protection Act of 1994

Right of Access and Data Portability: You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request, we will disclose to you:

• The categories of personal information we collected about you.
• The categories of sources for the personal information we collected about you.
• Our business or commercial purpose for collecting or selling that personal information.
• The categories of third parties with whom we share that personal information.
• The specific pieces of personal information we collected about you (also called a data portability request).
• If we sold or disclosed your personal information for a business purpose, two separate lists disclosing:
  • Sales identifying the personal information categories that each category of recipient purchased; and
  • Disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained.

Sharing Personal Information: We may disclose your personal information to a third party for a business purpose. When we disclose personal information for a business purpose, we enter into a contract with that third party that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for purpose except for performing the contract.

Deletion Rights Request: You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.

We may deny your deletion request if retaining the information is necessary for us or our service providers to:

1. Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you or otherwise perform a contract we have with you.
2. Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
3. Debug to identify and repair errors that impair existing intended functionality.
4. Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
5. Comply with the California Electronic Communications Privacy Act pursuant to Chapter 3.6 (commencing with Section 1546) of Title 12 of Part 2 of the Penal Code.
6. Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent.
7. Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
8. Comply with a legal obligation.
9. Make other internal or lawful uses of that information that are compatible with the context in which you provided it.

Exercising Access, Data Portability, and Deletion Rights: To exercise the access, data portability, and deletion rights described above, please submit a verifiable consumer request to us by either:

Only you, or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child.

You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative.
• Describe your request with sufficient detail that allows us to property understand, evaluate, and respond to it.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Making a verifiable consumer request does not require you to create an account with us. We will only use personal information in the request to verify the requestor’s identity or authority to make the request.

Response Timing and Format: CCPA requires us to respond to a verifiable consumer request within 45 days of its receipt. If we require more time (up to 45 days), we will inform you of the reason and extension period. If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option. Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request’s receipt. If we are unable to comply with a request, we will provide an explanation within the timeframe.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Notification of Changes to Privacy Policy

We reserve the right to change, modify or amend this Privacy Policy from time to time. Whenever we change our Privacy Policy, we will post a notice on this Site indicating that a new version is available. In some cases, we may provide you with additional notice, such as through a banner notice on our Site or an email.