Privacy Policy

Eudaimonia Practice LLC ("the Company") operates Vibrant Healers, a holistic health coaching brand registered in Sheridan, WY 82801, USA. The Company's website is www.vibranthealers.com ("the Website"). This Privacy & Data Protection Policy ("Policy") explains what personal data we collect, how we use it, who we share it with, and your rights over it. It applies to all products and services operated by the Company.

If you do not agree to this Policy, do not use the Website or purchase any of our products or services.

1.  DATA COLLECTION

1.1  Information You Provide

When you sign up or purchase, we collect your name and email address. Payment information is processed by Stripe or other approved payment processors. We do not store your card details. Where relevant to your program, we also collect health information you voluntarily share, including symptoms and lab results. We retain any communications you send us by email or through our platforms.

1.2  Automatically Collected Data

We automatically collect certain technical data when you visit the Website, including your IP address, browser type, and device information, as well as pages visited and time spent on the Website. We also use cookies and similar tracking technologies, as detailed in Section 6.

1.3  Sanar AI Tool

If you use Sanar, we collect the health metrics you input, specifically HbA1c, and optionally fasting glucose and ketone levels. This data is used solely to guide your progress within the program. It is not used for any other purpose and is not sold or shared with third parties.

2.  USE OF DATA

We use your data to deliver the programs and digital products you purchased; to personalise your experience and track your progress; to process payments and manage your account; to send you program-related communications and, where you have opted in, marketing emails; to comply with legal obligations; and to improve our services and platform.

Legal basis (GDPR): We process your data on the basis of (a) contract performance to deliver the service you purchased; (b) legitimate interests to improve our services; and (c) your consent for marketing emails and cookies.

3.  HEALTH DATA

Health data is sensitive. We take its protection seriously. Health information is collected only when you voluntarily share it with us as part of a program engagement. VIP clients may email lab results, which are stored securely in our internal email and cloud storage systems, accessible only to authorised personnel. Sanar health data (HbA1c, glucose, ketones) is stored on our secure application server, accessible only to authorised personnel. Health data is used solely to guide your program. It is never used for marketing or profiling, and is never sold to third parties. You can request deletion of your health data at any time by contacting us using the details in Section 13. Health data is automatically reviewed for deletion after 2 years of inactivity.

GDPR basis for processing health data: Your explicit consent, given when you engage our services and share health information.

4.  DATA SHARING

We do not sell your data. We share it only with the service providers necessary to run our business. Our payment processor, Stripe, handles all card transactions and their privacy policy applies to data they process. We do not store card details. Our sales pages, customer database, and email marketing list are hosted by a third-party website hosting and CRM platform, which stores your name and email on their servers. We use cloud-based storage and email tools to manage internal communications and store client documents such as lab results. The Sanar AI tool runs on a third-party application hosting infrastructure where health data entered into Sanar is stored securely. Where we run paid advertisements, the relevant advertising platform may collect data per their own privacy policy. Each of these providers is contractually bound to protect your data and may not use it for their own purposes.

5.  INTERNATIONAL TRANSFERS

The Company is based in the United States. Your data may be stored and processed in the US or other countries where our service providers operate. Where we transfer data from the EU or UK, we rely on standard contractual clauses or equivalent safeguards as required by GDPR.

6.  COOKIES

Our website uses cookies to make the site function and to understand how it is used. We use three types of cookies: essential cookies, which are required for the website to function and cannot be disabled; analytics cookies, which help us understand traffic and usage patterns (e.g., Google Analytics); and marketing cookies, which are used when we run paid advertisements to measure campaign performance. When you first visit our website, you will be asked to consent to non-essential cookies. You can withdraw consent at any time by adjusting your browser settings or contacting us.

7.  DATA RETENTION

We retain data for the following periods: client account and purchase records for 7 years, as required for tax and legal compliance; health data in Sanar is deleted after 2 years of inactivity, or immediately upon your request; lab results and health emails are retained for the duration of your program engagement, then deleted upon your request; email marketing list data is retained until you unsubscribe; and website analytics data is retained for 26 months, in line with Google Analytics defaults.

8.  YOUR RIGHTS

Depending on where you are located, you may have the following rights over your personal data.

Under GDPR (EU/UK residents): You have the right to request a copy of the data we hold about you; to ask us to correct inaccurate data; to erasure of your data; to restrict processing and limit how we use your data; to receive your data in a portable format; to object to processing based on legitimate interests or for direct marketing; and to withdraw consent at any time where processing is based on consent.

Under CCPA (California residents): You have the right to know what personal information we collect, use, and share; to delete personal information we hold about you; to opt out of the sale of personal information (we do not sell personal information); and to non-discrimination for exercising your privacy rights.

To exercise any of these rights, contact us using the details in Section 13. We will respond within 30 days.

9.  DATA SECURITY

We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. Health data is accessible only to authorised personnel. Data is stored with reputable cloud providers and all payment processing is encrypted via Stripe or other approved payment processors. No online transmission is 100% secure. If you have concerns about specific data, contact us directly.

10.  MINIMUM AGE

Our services are for adults aged 18 and above. We do not knowingly collect data from anyone under 18. If you believe a minor has provided us personal data, contact us and we will delete it promptly.

11.  GOVERNING LAW

These terms are governed by and construed in accordance with the laws of Singapore without regard to its conflicts of law provisions. Exclusive jurisdiction and venue for any action arising under this Agreement is in the Singapore courts, and both parties consent to the jurisdiction of, and irrevocably waive any objection to venue in courts for this purpose.

Where mandatory local consumer protection laws apply, including GDPR, CCPA, or applicable US federal law, those laws shall take precedence solely to the extent they conflict with this clause. EU and UK residents have the right to lodge a complaint with their local data protection authority if they believe their data has been handled unlawfully.

If a dispute arises, contact us first using the details in Section 13. We will make every reasonable effort to resolve it directly.

12.  POLICY UPDATES

We may update this policy from time to time. When we do, we will update the "Last Updated" date at the top. For material changes, we will notify active clients by email with at least 14 days notice.

13.  CONTACT US

For any questions about this policy or to exercise your data rights:

Email: info@onenictan.com

Website: www.vibranthealers.com

Business: Eudaimonia Practice LLC, Sheridan, WY 82801, USA

We aim to respond to all requests within 30 days.