Privacy Policy

1. Data Controller

The data controller responsible for the processing of your personal data is:

Removevital
Van Baerlestraat 76
1071 BB Amsterdam
Netherlands
Email: assist@removevital.world
Phone: +31 20 723 3631

For any questions regarding data protection, you may contact us using the details above. We aim to respond to privacy-related inquiries within 30 days as required under the General Data Protection Regulation (GDPR).

2. Scope of This Policy

This Privacy Policy applies to all personal data collected through our website at removevital.world, including data submitted via our contact form, data collected through cookies and similar technologies, and data processed in connection with our consulting and educational services related to herbal tea recipes and blending guidance.

This policy does not apply to third-party websites that may be linked from our pages. We encourage you to review the privacy policies of any external sites you visit.

3. Categories of Personal Data We Collect

3.1 Data You Provide Directly

When you use our contact form, we collect the following information:

• Your full name
• Your email address
• The content of your message
• Your consent confirmation for data processing

When you book a consulting session or educational program, we may additionally collect:

• Phone number (if provided)
• Billing address for invoicing purposes
• Payment transaction references (processed by our payment provider)
• Notes regarding your flavour preferences and blending interests (educational context only)

3.2 Data Collected Automatically

When you visit our website, certain technical data may be collected automatically through cookies and server logs, including:

• IP address (anonymized where possible)
• Browser type and version
• Operating system
• Referring URL
• Pages visited and time spent on each page
• Date and time of access
• Device type and screen resolution

4. Legal Basis for Processing

We process your personal data on the following legal grounds under Article 6 of the GDPR:

• Consent (Art. 6(1)(a)): When you submit our contact form, accept non-essential cookies, or subscribe to communications, you provide explicit consent for the specified processing activities.
• Contractual necessity (Art. 6(1)(b)): Processing required to fulfil consulting agreements, educational program enrolments, or to respond to pre-contractual inquiries.
• Legitimate interests (Art. 6(1)(f)): Website security monitoring, fraud prevention, and improvement of our informational content, balanced against your privacy rights.
• Legal obligation (Art. 6(1)(c)): Retention of financial records for tax and accounting purposes as required by Dutch law.

5. Purposes of Data Processing

We use your personal data exclusively for the following purposes:

• Responding to your inquiries submitted through the contact form
• Delivering consulting sessions and educational programs you have booked
• Processing payments and issuing invoices
• Sending service-related communications such as appointment confirmations
• Analysing website usage to improve content quality and user experience (with your cookie consent)
• Ensuring the security and proper functioning of our website
• Complying with applicable legal and regulatory requirements

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

6. Data Retention Periods

We retain personal data only for as long as necessary to fulfil the purposes described in this policy:

• Contact form submissions: Retained for 24 months from the date of submission, unless an ongoing business relationship exists.
• Consulting and program records: Retained for 7 years after the last transaction, in accordance with Dutch tax and accounting regulations.
• Cookie consent records: Retained for 12 months from the date consent was given or updated.
• Server log files: Retained for 90 days, after which they are automatically deleted.
• Analytics data: Retained in aggregated, anonymized form for up to 26 months when analytics cookies are accepted.

Upon expiry of the relevant retention period, personal data is securely deleted or anonymized beyond recovery.

7. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data to third parties. We may share data with the following categories of recipients where necessary:

• Hosting provider: Our website is hosted on secure servers within the European Economic Area (EEA).
• Payment processor: For consulting and program payments, transaction data is processed by a PCI-DSS compliant payment provider.
• Email service provider: Used to deliver responses to your inquiries and service notifications.
• Analytics provider: Only when you have consented to analytics cookies, anonymized usage data may be processed.

All third-party processors are bound by data processing agreements that require GDPR-compliant handling of your information. Transfers outside the EEA, if any, are protected by Standard Contractual Clauses approved by the European Commission.

8. Security Measures

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• HTTPS encryption for all data transmitted between your browser and our servers
• Access controls limiting personal data access to authorized personnel only
• Regular security assessments of our website infrastructure
• Encrypted storage of sensitive data at rest
• Employee training on data protection principles and procedures
• Incident response procedures for potential data breaches

While we take reasonable precautions, no method of transmission over the internet is entirely secure. We encourage you to use strong passwords and exercise caution when sharing personal information online.

9. Your Rights Under GDPR

As a data subject, you have the following rights regarding your personal data:

• Right of access (Art. 15): Request a copy of the personal data we hold about you.
• Right to rectification (Art. 16): Request correction of inaccurate or incomplete personal data.
• Right to erasure (Art. 17): Request deletion of your personal data where no compelling reason for continued processing exists.
• Right to restriction (Art. 18): Request that we limit processing of your data in certain circumstances.
• Right to data portability (Art. 20): Receive your data in a structured, machine-readable format where processing is based on consent or contract.
• Right to object (Art. 21): Object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent (Art. 7(3)): Withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at assist@removevital.world. We will respond within 30 days. You also have the right to lodge a complaint with the Autoriteit Persoonsgegevens (Dutch Data Protection Authority) at autoriteitpersoonsgegevens.nl.

10. Children's Privacy

Our website and services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will take steps to delete such information.

11. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. The date at the top of this page indicates when the policy was last revised. Material changes will be communicated through a notice on our website. We encourage you to review this page regularly.

12. Contact

For privacy-related questions or to exercise your data protection rights, contact:

Removevital
Van Baerlestraat 76, 1071 BB Amsterdam, Netherlands
Email: assist@removevital.world
Phone: +31 20 723 3631