Privacy
Safeguard
How Vitalco manages, stores, and protects personal data within our wellness portal. We hold the security of your information to the same exacting standards as our botanical formulations.
Effective Date: September 2026 // Version 2.4
1. Entity Overview
This Privacy Policy applies to personal data collected through the website vitalcoinfo.info operated by Vitalco ("we", "us", or "our"), with registered administrative facilities located at Jl. Malioboro No. 56, Ngampilan, Yogyakarta 55261, Indonesia.
For all privacy-related inquiries or to exercise your statutory rights under applicable privacy legislation (including GDPR and regional data protection statutes), you may reach our designated Data Protection Officer directly at [email protected].
2. Categories of Information Collected
We collect personal information exclusively when knowingly provided by you, as well as necessary technical metadata:
- Voluntary Inquiries: Full name, email address, inquiry topic, and message contents submitted via our contact forms.
- Device & Technical Telemetry: Anonymized IP address, browser user-agent, operating system, language preferences, and referral URL for diagnostic security.
- Cookie & Consent State: Local storage flags detailing your cookie preferences (Accept All, Functional Only, Partial).
3. Legal Bases for Data Processing
We process personal data in accordance with legitimate business grounds:
- Contractual Pre-steps & Support: To respond to your product inquiries and deliver requested information.
- Legitimate Interests: To maintain server integrity, thwart malicious attacks, and prevent fraudulent abuse.
- Consent: When you consent to non-essential analytical tracking via our Cookie Consent interface.
4. Third-Party Processors & Non-Sale of Data
We do not sell, rent, or trade your personal data to third parties. Data is shared only with verified technical providers under strict confidentiality agreements:
- Secure Hosting Providers: Encrypted web servers and database infrastructures.
- Email Dispatch Systems: Secure SMTP routing for customer service communications.
- Legal Authorities: Only when strictly mandated by valid legal warrants or court orders under applicable Indonesian or international law.
5. Individual Data Rights (GDPR & CCPA)
Depending on your jurisdiction, you retain fundamental data protections:
Right to Access & Portability
Request an exported copy of personal data stored within our records.
Right to Erasure (Forgotten)
Request the complete deletion of your correspondence history from our database.
Right to Rectification
Correct any inaccurate contact information or details in our systems.
Right to Withdraw Consent
Modify your cookie and analytical consent at any time via our footer interface.
6. Retention Protocols & Encryption
We implement 256-bit Transport Layer Security (TLS/SSL) encryption across all endpoints. Customer inquiry records are retained for no longer than 24 months after dialogue resolution unless statutory record-keeping requires longer persistence.