This Privacy Policy explains how Vayas360 and its applicable subsidiaries and affiliates (collectively, "Vayas360," "we," "us," or "our") collect, use, disclose, retain, and protect personal information when you visit vayas360.com, join a waitlist, submit a form, communicate with us, or otherwise interact with our websites, digital experiences, and services that link to this Privacy Policy (collectively, the "Services").
Some Vayas360 services may involve health-related information. Additional protections may apply to that information. Please also review our Consumer Health Data Privacy Policy. If you later receive clinical services from Vayas360 or an affiliated or participating healthcare provider, a separate Notice of Privacy Practices, clinical consent, or other privacy notice may apply to information handled in that clinical relationship.
1. Information We Collect
Information you provide directly
Depending on how you interact with us, we may collect:
- Contact and identity information, such as name, email address, telephone number, mailing address, ZIP code, and account identifiers.
- Interest and preference information, including whether you are interested as a consumer, patient, practitioner, employer, health plan, hospital, partner, investor, or other stakeholder.
- Health and wellness information you choose to provide, such as health goals, conditions of interest, dietary preferences, allergies or sensitivities, nutrition goals, medications, symptoms, or other information relevant to an inquiry or future service.
- Professional information, including professional role, credentials, specialty, organization, employer, or practice information.
- Transaction and billing information if we later offer paid services or products. Payment-card information may be processed directly by a payment processor rather than stored by Vayas360.
- Communications, including messages, survey responses, support requests, feedback, and records of your interactions with us.
- Any other information you choose to submit.
Information collected automatically
When you use the Services, we and our service providers may automatically collect information such as:
- Device and browser information, including device type, operating system, browser type, IP address, language, and approximate location derived from IP address.
- Usage information, including pages viewed, links clicked, referring pages, dates and times of access, session information, and interactions with site features.
- Cookie and similar technology information. We may use cookies, local storage, tags, and similar technologies for security, functionality, analytics, and, where permitted, marketing.
Information from other sources
As Vayas360 services expand, and where permitted by law and authorized by you when required, we may receive information from practitioners, registered dietitian nutritionists, laboratories, diagnostic companies, wearable or connected-device providers, health plans, hospitals, fulfillment providers, research partners, or other third parties. Health-related information received from these sources is addressed further in our Consumer Health Data Privacy Policy and, where applicable, a Notice of Privacy Practices.
2. How We Use Personal Information
We may use personal information to:
- Provide, operate, personalize, and improve the Services.
- Respond to inquiries, manage waitlists, communicate about availability, and provide customer support.
- Understand user interests and develop products, services, clinical programs, nutrition pathways, and educational content.
- Create and maintain accounts and authenticate users.
- Process transactions, subscriptions, shipments, benefits, or reimbursements when those services become available.
- Coordinate with service providers and, when you direct or authorize it, with practitioners, laboratories, wearable platforms, health plans, hospitals, or other care-related partners.
- Conduct analytics, quality improvement, research, and product development using information as permitted by law. Where appropriate, we may use information that has been aggregated or de-identified so that it is not reasonably linkable to an individual.
- Protect the security and integrity of our Services, prevent fraud and abuse, troubleshoot problems, and enforce our agreements.
- Comply with law, legal process, regulatory obligations, and lawful government requests.
- Send marketing or informational communications in accordance with your choices and applicable law.
3. How We Disclose Personal Information
We may disclose personal information in the following circumstances:
- Service providers and processors. We may use vendors that provide hosting, cloud infrastructure, analytics, communications, customer support, security, payments, shipping, professional services, and other operational functions.
- Health, nutrition, and service partners. When services require it and applicable permissions are in place, we may disclose information to registered dietitian nutritionists, healthcare practitioners, laboratories, diagnostic providers, wearable or device platforms, pharmacies or supplement fulfillment partners, meal fulfillment and logistics providers, health plans, hospitals, or other entities involved in providing a requested service.
- At your direction. We may disclose information when you ask us to do so, connect a third-party account, authorize a data transfer, or otherwise direct us to share information.
- Corporate transactions. Information may be disclosed in connection with a financing, merger, acquisition, reorganization, sale of assets, bankruptcy, or similar transaction, subject to applicable law and appropriate protections.
- Legal and safety purposes. We may disclose information when reasonably necessary to comply with law or legal process, protect rights or safety, investigate fraud or security incidents, or enforce agreements.
- Affiliates. We may share information among Vayas360 entities where reasonably necessary to operate the business and provide Services, subject to applicable law and any additional restrictions governing health information.
- Aggregated or de-identified information. We may use and disclose information that has been appropriately aggregated or de-identified for analytics, research, service improvement, scientific work, commercial planning, or other lawful purposes, provided the information is not reasonably linkable to an individual.
We do not sell identifiable consumer health data as described in our Consumer Health Data Privacy Policy. We also do not disclose identifiable consumer health data to advertising networks for targeted advertising based on your health condition or health activity.
4. Cookies, Analytics, and Privacy Choices
We may use cookies and similar technologies that are necessary to operate the Services, remember preferences, measure site performance, understand engagement, and, where legally permitted, support marketing. You may be able to manage non-essential technologies through a cookie or privacy-preference tool made available on the Services.
Where required by applicable law, we will honor legally recognized universal opt-out preference signals, such as Global Privacy Control, for activities covered by those signals. Legacy "Do Not Track" browser signals are not standardized, and the Services may not respond to them unless required by law.
Because Vayas360 may handle health-related information, we intend to restrict third-party advertising technologies from pages, forms, portals, or workflows that collect or display sensitive health information unless the use has been specifically reviewed and is legally permitted.
5. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services, maintain business and transaction records, resolve disputes, enforce agreements, meet legal and regulatory obligations, and protect security. Retention periods may differ by data type and service. Health information subject to a clinical, reimbursement, research, or other regulated retention requirement may be retained for the period required by applicable law or contract.
6. Security
We use administrative, technical, and physical safeguards designed to protect personal information based on the nature and sensitivity of the information. No security program can guarantee that information will never be accessed, used, or disclosed improperly. You are responsible for using reasonable security practices for your own devices, accounts, credentials, and connected services.
7. Your Privacy Rights
Depending on where you live and the law that applies, you may have rights to request access to personal information, correct inaccurate information, delete information, obtain a portable copy, opt out of certain sales or sharing, opt out of targeted advertising or certain profiling, limit certain uses of sensitive personal information, withdraw consent, or appeal a decision regarding a privacy request.
To exercise a privacy right, contact privacy@vayas360.com or use the privacy-request mechanism provided on the Services. We may need to verify your identity before completing a request. Authorized agents may submit requests where permitted by law, subject to appropriate verification. We will not discriminate against you for exercising an applicable privacy right.
For rights specifically involving consumer health data, see the Consumer Health Data Privacy Policy.
8. California and Other U.S. State Privacy Disclosures
If Vayas360 is subject to a state comprehensive privacy law with respect to your information, we will provide and honor the rights required by that law. Depending on the law and our activities, categories of personal information may include identifiers, internet or network activity, commercial information, professional information, inferences, and sensitive personal information such as health information or precise geolocation when collected.
We do not use or disclose sensitive personal information for purposes that require a right to limit unless we provide the legally required mechanism. We will honor applicable opt-out preference signals where required. Applicability of specific state privacy laws may depend on statutory thresholds and exemptions.
9. Children and Minors
The public Vayas360 website is not directed to children under 13, and we do not knowingly collect personal information online from children under 13 through the general website without legally required parental consent. If Vayas360 later offers a pediatric or family service, that service will use age-appropriate enrollment, parental or guardian consent, and privacy practices designed for that program. If you believe a child has provided information through the general website inappropriately, contact privacy@vayas360.com.
10. Third-Party Services and Links
The Services may link to or integrate with third-party websites, applications, laboratories, devices, payment providers, or other services. Their privacy practices are governed by their own terms and policies. We encourage you to review those policies before providing information or connecting an account.
11. International Visitors
Vayas360 is currently designed primarily for users in the United States. If you access the Services from another country, your information may be transferred to and processed in the United States. Additional notices or consent mechanisms may be provided if Vayas360 expands into jurisdictions that require them.
12. Changes to This Privacy Policy
We may update this Privacy Policy as our Services, technology, business model, or legal obligations change. We will post the revised policy with an updated "Last updated" date. If a change is material, we will provide additional notice when required by law.
13. Contact Us
Privacy questions or requests: privacy@vayas360.com
Vayas360
500 North Central Expressway, Suite 500
Plano, Texas, United States