This Privacy Policy describes how Randbast, LLC d/b/a VitalCore Health (“VitalCore Health,” “VCH,” “we,” “us,” or “our”) collects, uses, and shares information when you visit or use our websites and online store (the “Services”).

Scope Note: This Privacy Policy applies to VCH’s marketing websites, e-commerce store, subscriptions, and customer service activities. It does not apply to third-party telehealth platforms (including Telegra), licensed healthcare providers, or HIPAA-governed medical records.

1. Notice at Collection (California)

We collect identifiers and contact information (such as name, email, phone, and shipping address), commercial information (such as purchase and subscription details), and internet activity information (such as IP address and website interactions) for purposes including processing orders, customer support, communications, analytics, security, and legal compliance. We do not collect HIPAA-regulated medical records through our e-commerce systems.

2. Information We Collect

Information You Provide

• Name
• Email address
• Phone number
• Shipping and billing address
• Account information and purchase/subscription details
• Customer interests and communication preferences

   

Information Collected Automatically

• IP address
• Device and browser information
• Pages viewed, clicks, and time spent on pages
• Referring/exit pages and URLs
• Cookies and similar tracking technologies

   

Inferences

We may generate inferences based on information you provide or your interactions with our Services, such as general preferences, interests, or subscription-related insights. These inferences are used solely to operate, improve, and personalize our Services and are not used to diagnose medical conditions or make clinical decisions.

3. Information We Do Not Collect

Our e-commerce systems are not designed to collect:

• Medical records
• Diagnoses or treatment details
• Prescription information
• HIPAA-regulated Protected Health Information (PHI)
• Genetic data or biometric identifiers

   

4. How We Use Information

We use information for purposes including:

• Processing orders, subscriptions, payments, and fulfillment
• Providing customer support and responding to requests
• Sending transactional communications (e.g., confirmations, billing notices, shipping updates)
• Sending marketing communications if you opt in (you can opt out at any time)
• Operating, maintaining, and improving our Services
• Analytics, troubleshooting, and performance monitoring
• Fraud prevention, security, and compliance
• Enforcing our terms and protecting our rights

   

No Automated Medical Decision-Making

VitalCore Health does not use automated decision-making or profiling to make medical, diagnostic, or treatment decisions. Any clinical determinations are made exclusively by independent licensed healthcare providers through third-party platforms, under their own terms and policies.

5. How We Share Information

We may share personal information as follows:

Service Providers

We may share personal information with trusted service providers that perform services on our behalf, including:

• Payment processing and fraud prevention
• Order fulfillment and shipping
• Customer support platforms
• Email and SMS communications
• Website hosting, analytics, and performance monitoring
• Security, compliance, and legal support
  
  

These service providers are authorized to use personal information only as necessary to provide services to us and are contractually required to protect it.

Legal and Compliance

We may disclose information if we believe disclosure is reasonably necessary to comply with applicable law, regulation, legal process, or governmental request; to enforce our agreements and policies; to protect the security or integrity of our Services; or to protect the rights, property, and safety of VCH, our users, or others.

Business Transfers

We may share information in connection with, or during negotiations of, any merger, sale of assets, acquisition, financing, or similar transaction, subject to reasonable confidentiality protections.

We do not sell personal information for monetary consideration.

De-Identified and Aggregated Data

We may create de-identified or aggregated data from personal information. This data does not identify you and may be used for analytics, research, business planning, and improving our Services. De-identified and aggregated data is not subject to this Privacy Policy to the extent permitted by law.

6. Cookies & Tracking Technologies

We use cookies and similar technologies for site functionality, analytics, and marketing attribution. You can manage cookies through your browser settings. If you disable cookies, some features of the Services may not function properly.

7. Sensitive Personal Information

We do not collect or use “Sensitive Personal Information” as defined under California law, except where incidental (for example, login credentials) and solely to provide and secure the Services.

8. Your Privacy Rights

California Residents (CCPA/CPRA)

California residents may have the right to:

• Request access to personal information we collect about you
• Request deletion of personal information (subject to legal exceptions)
• Request correction of inaccurate personal information
• Opt out of certain data sharing activities as permitted by law
  
  

To submit a request, email help@vitalcore-health.com. We may verify your request before processing it.

Other U.S. States

Residents of certain states may have similar rights under applicable state privacy laws. You can submit requests by emailing help@vitalcore-health.com.

9. Data Retention

We retain personal information only for as long as reasonably necessary to:

• Provide and administer our Services
• Maintain accounts and subscriptions
• Comply with legal, tax, and accounting obligations
• Resolve disputes and enforce our agreements
• Protect our rights and prevent fraud
  
  

When information is no longer needed, we take reasonable steps to delete or de-identify it.

10. Security

We use reasonable administrative, technical, and physical safeguards to protect personal information. No security measure is perfect, and we cannot guarantee absolute security.

11. Children’s Privacy

Our Services are not intended for individuals under 18 years of age, and we do not knowingly collect personal information from children.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on the Services with an updated “Last Updated” date.

13. Contact

Email: help@vitalcore-health.com
Mailing Address: 30 N Gould St, Ste R, Sheridan, WY 82801