Sandra Wen

Privacy Policy

Last Updated: 11th October 2025

1. Introduction & Who We Are

This Privacy Policy describes how ("we," "us," or "our") collects, uses, and shares personal data when you visit our website (the "Site"). We are committed to protecting your privacy and ensuring that your personal data is handled in a safe and responsible manner.

is the data controller responsible for your personal data.

Email for Privacy Inquiries: privacy@vitamincx.com

2. The Personal Data We Collect and Our Purposes for Using It

We collect personal data in the following ways:

1. Information You Provide Directly to Us:

We collect personal data that you voluntarily provide to us when you interact with our Site.

• Contact Forms and Inquiries: When you fill out a contact form, request information, or otherwise communicate with us, we collect your name, email address, phone number, and any other information you choose to provide in your message.

• Purpose: To respond to your inquiries, provide you with the information you have requested, and manage our relationship with you.

• Newsletter or Marketing Subscriptions: When you subscribe to our newsletter or other marketing communications, we collect your name and email address.

• Purpose: To send you marketing materials, updates, and promotional offers that you have requested.

1. Information We Collect Automatically Through Tracking Technologies:

When you visit our Site, we automatically collect certain information about your device and your interaction with our Site using cookies and similar tracking technologies. This information includes:

• Identifiers: Your IP address, unique device identifiers, cookie IDs (e.g., Google Client ID, HubSpot Visitor ID), and mobile advertising identifiers.
• Device and Browser Information: Your device type (e.g., desktop, mobile), operating system, browser type and version, and screen resolution.
• Usage and Interaction Data: The pages you visit on our Site, the time and date of your visit, the time spent on those pages, the links you click, your scroll depth, your search queries on our Site, and the referring website address from which you arrived at our Site.
• Location Information: Your approximate geographic location, as derived from your IP address.

Purpose for collecting this automated data:

• To operate, maintain, and improve our Site's performance and functionality.
• To analyze how users interact with our Site, gather demographic information about our user base, and understand trends.
• To measure the effectiveness of our advertising campaigns and to deliver relevant advertising to you on our Site and other websites (also known as retargeting or cross-context behavioral advertising).
• To ensure the security of our Site and protect against fraud.

3. Our Use of Cookies and Automated Tracking Technologies

Our Site uses cookies and other tracking technologies (such as scripts and pixels) to collect the automated data described above. A cookie is a small text file that a website saves on your computer or mobile device when you visit the site.

We use these technologies to provide and improve our services, and to support our marketing and advertising activities. We partner with the following third-party service providers who use these technologies on our Site:

• Google (for Analytics and Ads): We use Google Analytics to understand our website traffic and user behavior. We also use Google Ads to track conversions from our ad campaigns and to create remarketing audiences. Google collects data through its tags and may use this data for its own purposes, including improving its services and ad network. You can learn more about how Google uses data in its Privacy Policy.
• Meta Platforms, Inc. (Meta Pixel): We use the Meta Pixel to measure the effectiveness of our advertising campaigns on Facebook and Instagram, to optimize our ads, and to build targeted advertising audiences. When you use our Site, the Meta Pixel may share information about your activity with Meta. You can learn more in Meta's Privacy Policy.
• LinkedIn Corporation (LinkedIn Insight Tag): We use the LinkedIn Insight Tag to track conversions from our LinkedIn ad campaigns and to gain insights into the professional demographics of our website visitors. LinkedIn may use this data to improve its services and for its own advertising purposes. You can learn more in LinkedIn's Privacy Policy.
• Microsoft Corporation (Microsoft Advertising UET): We use the Microsoft Advertising Universal Event Tracking (UET) tag to track what you do on our Site after clicking on one of our ads on the Microsoft Search Network (e.g., Bing). This helps us measure ad performance and create remarketing lists. You can learn more in the(https://privacy.microsoft.com/en-us/privystatement).
• HubSpot, Inc. (HubSpot Tracking Code): We use HubSpot's tracking code to analyze our website traffic and to connect your website activity with your contact record in our CRM if you submit a form. This helps us understand your interests and provide you with more relevant communications. HubSpot may also use aggregated data collected via its tracking code to improve its own services. You can learn more in(https://legal.hubspot.com/privacy-policy).

When you first visit our Site, you will be asked to provide your consent for the use of non-essential cookies and tracking technologies. You can manage your preferences at any time through our cookie consent banner.

4. Our Lawful Basis for Processing Your Data (For UK & Brazil Residents)

If you are located in the United Kingdom (UK) or Brazil, we rely on the following lawful bases to process your personal data:

• Consent: We rely on your consent to place non-essential cookies and tracking technologies on your device for analytics and advertising purposes, and to send you direct marketing communications via email. You have the right to withdraw your consent at any time.
• Performance of a Contract: We process your personal data when it is necessary to perform a contract with you, or to take steps at your request before entering into a contract (e.g., responding to a request for a quote).
• Legitimate Interests: We process your personal data for our legitimate interests, such as to respond to your general inquiries, to secure our Site, and to analyze and improve our services, provided that these interests are not overridden by your rights and interests.

5. Who We Share Your Personal Data With

We do not sell your personal data in the traditional sense of the word. However, as described in Section 3, our use of certain third-party advertising and analytics technologies may be considered a "sale" or "sharing" of personal data under California law.

We disclose your personal data to the following categories of recipients:

• Analytics and Advertising Partners: As described above, we share data collected via tracking technologies with partners like Google, Meta, LinkedIn, and Microsoft to help us analyze our Site performance and deliver targeted advertising.
• Marketing Automation Platforms: We share data with platforms like HubSpot to manage our marketing communications and CRM.
• Service Providers: We may share your data with third-party vendors and service providers who perform services on our behalf, such as website hosting, data analysis, and customer service. These providers are contractually obligated to protect your data and use it only for the purposes for which we disclose it to them.
• Legal and Law Enforcement: We may disclose your personal data if required to do so by law or in the good faith belief that such action is necessary to comply with a legal obligation, protect and defend our rights or property, or in urgent circumstances to protect the personal safety of users of the Site or the public.

6. Your Privacy Rights and How to Exercise Them

You have certain rights regarding your personal data, subject to local data protection laws. We provide all users with the following rights, regardless of their location:

• Right to Access/Know: You have the right to request a copy of the personal data we hold about you and information about how we process it.
• Right to Rectification/Correct: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
• Right to Erasure/Delete: You have the right to request that we delete your personal data, subject to certain legal exceptions.

To exercise any of these rights, please contact us at or by submitting a request through our online portal at. We will respond to your request within the timeframes required by law.

Additional Rights for Residents of the UK and Brazil:

If you are a resident of the UK or Brazil, you also have the following rights:

• Right to Restrict Processing: The right to request that we restrict the processing of your personal data in certain circumstances.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format and to have it transmitted to another controller.
• Right to Object: The right to object to the processing of your personal data where we are relying on legitimate interests as our lawful basis.
• Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection authority. In the UK, this is the Information Commissioner's Office (ICO). In Brazil, this is the Autoridade Nacional de Proteção de Dados (ANPD).

Additional Rights for Residents of California:

If you are a resident of California, you have the following additional rights under the CCPA/CPRA:

• Right to Opt-Out of Sale or Sharing: You have the right to opt out of the "sale" or "sharing" of your personal data for cross-context behavioral advertising. You can exercise this right by clicking the link below:
  Do Not Sell or Share My Personal Information
• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use and disclosure of your sensitive personal information. You can exercise this right by clicking the link below:
  Limit the Use of My Sensitive Personal Information
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

We will verify your identity before processing your request. You may also designate an authorized agent to make a request on your behalf.

7. International Data Transfers

Our Site is operated in, and our third-party partners are located in various countries around the world, including the United States. If you are accessing our Site from outside the United States, please be aware that your personal data may be transferred to, stored, and processed in the United States and other countries where our partners are located.

Data protection laws in these countries may be different from the laws of your country of residence. We take steps to ensure that your personal data receives an adequate level of protection in the jurisdictions in which we process it, including by implementing appropriate safeguards such as Standard Contractual Clauses or relying on the UK/EU-U.S. Data Privacy Framework where applicable.

8. Data Security and Retention

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal data we process. However, please also remember that we cannot guarantee that the internet itself is 100% secure.

We will retain your personal data only for as long as is necessary for the purposes set out in this Privacy Policy. We will determine the appropriate retention period based on the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process it, and any applicable legal requirements. For example, data collected for analytics purposes is typically retained for a period of up to 26 months, while contact information you provide may be retained for as long as we have an active relationship with you.

9. Information Regarding Children

Our Site is not intended for or directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If we learn that we have collected personal data from a child under 16, we will take steps to delete such information from our files as soon as possible.

10. Changes to This Policy

We may update this Privacy Policy from time to time in response to changing legal, technical, or business developments. When we update our Privacy Policy, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We will obtain your consent to any material Privacy Policy changes if and where this is required by applicable data protection laws.

You can see when this Privacy Policy was last updated by checking the "Last Updated" date displayed at the top of this policy.