Privacy Policy

1. Who this site is for

DocVites products are formulated for children, but our website, purchasing experience, communications and advertising are directed to adults who purchase products on a child’s behalf. Our Terms of Service require purchasers to be at least 18 years old.

We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has provided personal information to us, contact privacy@docvites.com so we can review the circumstances and take appropriate action, including deletion where required.

We do not ask you for information about a child’s health, diagnoses, symptoms or medical care, and you should not send it to us. We do not build or target advertising audiences around a child’s health status or nutritional need. We cannot promise that no inference about a household could ever be drawn from ordinary shopping activity — what we can tell you is what we collect and who receives it, which is set out below.

2. Information we collect

Information you give us:

• Contact details such as email address and first name
• Account and profile details if you create an account
• Order, shipping and billing details when you purchase
• Phone number where you provide one, for example at checkout or for delivery updates
• Messages, survey responses and product reviews
• Product and communication preferences

Information collected automatically:

• Device and browser data such as IP address and browser settings
• Usage data such as pages and products viewed, searches run, items added to cart, and orders placed
• Approximate location derived from your IP address
• Cookies, pixels and local storage — see section 4

Information from other sources: payment processors that confirm payment status, fulfilment and delivery partners that confirm shipping, and the analytics and marketing providers listed in section 5 that measure how our store performs.

3. How we use information

• To provide our products and services, process orders, ship goods and support customers
• To send product and marketing updates you have asked for
• To measure and improve our site, our products and our marketing
• To detect and prevent fraud, abuse and security problems
• To comply with law and enforce our terms

4. Cookies and similar technologies

We use cookies, pixels and local storage for three kinds of purpose: essential functions, analytics, and marketing and attribution. Essential technologies are always active because the store cannot operate without them — they cover security, navigation, the cart, checkout, and fraud and bot detection.

Optional purposes are grouped as Preferences, Analytics and Marketing. Participating optional technologies use the choices recorded through Shopify’s Customer Privacy API to determine whether analytics, marketing or sale/share-dependent processing is permitted. Essential security, cart, checkout, fraud-prevention and storefront technologies continue to operate.

Where you have refused a purpose, the optional behavioural tracking and identification that depend on it do not run.

You can change your choices at any time using the Privacy choices control at the bottom of every page.

5. Who we share information with

We use the service providers below, and the advertising partner described in section 5A. What each one receives depends on the service it provides and on the choices you have made. Not every provider receives every category of information. Some of these disclosures may constitute a "sale" or "sharing" of personal information under certain US state privacy laws. Section 6 explains how to opt out.

• Shopify — our ecommerce platform. Operates the storefront, cart, checkout and payments, and runs fraud and bot detection on our behalf. Essential to running the store, so it operates regardless of your optional choices.
• Shopify Network Intelligence — a Shopify platform feature enabled on our store. Shopify uses our customer data together with other Shopify data to improve products, ad targeting and personalisation for our store. Other merchants cannot see our data.
• Google — Google Analytics measures how our site is used, and the Google & YouTube sales channel lists our products through Google Merchant Center. The analytics tag receives pages and products viewed, searches run on our site, cart and checkout activity and purchases. It runs only where you have allowed Analytics or Marketing, and it applies Google Consent Mode. If you opt out of the sale or sharing of your information, we signal that to Google as restricted data processing. Google Ads is not presently connected through Shopify; Google Analytics and Merchant Center are the active services.
• Klaviyo — email marketing and our onsite signup forms. Receives your email address when you give it to us, and browsing and cart activity. Its form library and approximate location lookup load with the page so that forms can display at all; that is app infrastructure, not behavioural tracking. Identification and behavioural tracking run only where you have allowed Analytics and Marketing.
• Judge.me — provides product-review functionality. The app may receive order and review information needed to provide that service. Its storefront pixel runs only where you have allowed Analytics.
• Shopify Collabs — supports our creator and affiliate programme and attribution of creator referrals. Its storefront pixel declares Analytics, Marketing and sale-of-data purposes in Shopify’s configuration, and does not run when the corresponding permission is refused.
• Quiz Kit — provides product-quiz functionality. Its app pixel is connected, but the personalized quiz is not currently active. Its storefront pixel declares Analytics, Marketing and sale-of-data purposes in Shopify’s configuration, and does not run when the corresponding permission is refused.

We also disclose information to professional advisers and auditors, to authorities where required by law, and to parties in a business transaction such as a merger or asset sale.

We do not transmit payment card numbers, government identification numbers or account passwords to any analytics or advertising provider.

5A. Advertising with Meta — Facebook and Instagram

DocVites may advertise on Meta’s platforms, Facebook and Instagram. When this integration is enabled, our Shopify store uses Meta’s Enhanced customer data-sharing level, which combines the browser-based Meta Pixel with Meta’s Conversions API.

When enabled, the integration works through two technologies together.

• The Meta Pixel, which runs in your browser while you use our site.
• The Meta Conversions API, which sends information directly from our platform provider’s servers to Meta’s servers. At the Enhanced level our platform provider transmits the purchase event this way. Because that transmission happens server to server rather than in your browser, an ordinary browser-based ad blocker does not prevent it.

What is shared. When Meta data sharing is active, our platform provider documents that at the Enhanced level the information shared includes your name, location, email address and phone number, together with your browsing behaviour.

Depending on what you do on our site, the integration may collect and share the pages and products you view, searches you run on our site, items you add to your cart, beginning a checkout, entering payment information, and completing an order — including the order value, the currency and the products purchased. It may also include device and connection information such as your IP address and browser user agent, together with Meta’s own browser, click and advertising identifiers.

We disclose that this information is shared. We do not state the transmission format applied to each individual field, because neither the integration nor our platform provider’s documentation confirms that for every field.

We do not transmit full payment card numbers, account passwords or government identification numbers to Meta. Where a payment-information event occurs, it is triggered when a customer enters payment information during checkout — not merely when a payment page is displayed — and it records that this step took place. It does not carry your payment card details.

Events. Our platform provider documents the following automatic events for this integration: PageView, ViewContent, Search, AddToCart, InitiateCheckout, AddPaymentInfo and Purchase. Which of these occur for you depends on what you do on our site and on how the integration behaves.

What Meta does with it. When Meta data sharing is active, Meta uses this information for attribution and advertising measurement, for matching you to a Meta account, for retargeting, for the delivery and optimisation of advertisements, for building advertising audiences, and for cross-context behavioural advertising.

Sale and sharing. When Meta data sharing is active, these disclosures constitute "sharing" for cross-context behavioural advertising under applicable US state privacy law definitions, and may constitute a "sale" under some of those laws. Section 6 explains how to opt out, at no cost and without detriment.

Your choices. When enabled, browser-side Meta collection depends on the relevant permissions recorded through our platform provider’s Customer Privacy API, and does not run where you have refused the corresponding purpose. You can record an opt-out from the sale and sharing of your personal information from any location using the Privacy choices control at the bottom of every page. Our footer also links to the Data Sharing Opt-Out page operated by our platform provider, which displays its control only to visitors it detects in a US state whose law grants this right. Your choices are stored for the browser and device you use to make them, so you may need to make them again on another browser or device.

Your privacy choices are recorded through Shopify’s Customer Privacy API and applied to Meta data sharing through Shopify’s integration. You can reject nonessential technologies or record an opt-out from sale and sharing as described in section 6.

Advertising to adults. Our advertising is directed to adults. Where we run Meta campaigns, they use a hard minimum audience age of 18. We do not target advertising to children. We do not create or target advertising audiences based on a child’s symptoms, diagnoses, health status, nutritional concerns or age band, and we do not build advertising audiences from the topics of our Pediatric Nutrition Library articles.

6. Your privacy choices

Privacy choices. Use the Privacy choices control at the bottom of any page to accept all optional technologies, reject all nonessential technologies, or choose by purpose. Rejecting nonessential technologies also records an opt-out of the sale and sharing of your personal information.

Do Not Sell or Share My Personal Information. You can also opt out of the sale and sharing of your personal information using the Do Not Sell or Share My Personal Information link in the Policies section of our footer, or by visiting docvites.com/pages/data-sharing-opt-out directly. That page is operated by our platform provider and shows the opt-out control only to visitors it detects in a US state whose law grants this right. If you do not see a control there, use the Privacy choices control described above, which records the same opt-out from anywhere.

Your choice is recorded for the browser and device you use to make it. If you use a different browser or device, make the choice again there.

Marketing email. Unsubscribe using the link in any marketing email.

Account settings. If you have an account, you can view and update some of your information there.

7. Your privacy rights

Depending on where you live, you may have the right to request access to the personal information we hold about you, a portable copy of it, correction of inaccurate information, deletion, limits on or objection to certain processing, and to opt out of targeted advertising or the sale or sharing of personal information.

To exercise a right, email privacy@docvites.com. We will verify your identity before acting. You may authorise an agent where the law allows it.

California, Colorado, Connecticut, Virginia and similar state laws. We collect identifiers, commercial information, internet and network activity, approximate geolocation and inferences drawn from that information. When Meta Enhanced data sharing is active, we share personal information with Meta for cross-context behavioral advertising. Under California law this is "sharing", and under some state laws it may also constitute a "sale". Some of our disclosures to the providers in section 5 may additionally constitute a sale or sharing. You may opt out at any time as described in section 6, at no cost and without detriment. If we decline a request you may appeal by replying to our decision email with "Appeal" in the subject line.

8. Payments, shipping and retention

Payments are processed by third-party payment processors. We do not store full payment card numbers. Shipping is handled by fulfilment and carrier partners who receive your name, address and contact details in order to deliver your order.

We retain personal information for as long as reasonably necessary for the purposes described in this policy, including providing services, maintaining business and tax records, resolving disputes, preventing fraud and meeting legal obligations. Retention periods vary according to the type of information and why it was collected.

Information already transmitted to a service provider is held by that provider under its own retention schedule. Deleting your information from our systems does not by itself delete copies a provider holds. Where applicable law requires or a provider’s tools support it, we may take reasonable steps to communicate a verified request to the relevant provider.

9. Where information is processed

DocVites operates in the United States and our Shopify data storage location is the United States. Some of the providers in section 5 are global businesses that may store or process information outside the United States on their own infrastructure. Once information has been transmitted to a provider we do not control where that provider processes it.

10. Security

We use reasonable administrative, technical and organizational safeguards designed to protect personal information. No method of transmission or storage is completely secure. If we learn of a breach affecting you we will notify you as the law requires.

11. Third-party links and features

Our site links to third-party services and includes third-party plugins and widgets. Those services are governed by their own privacy policies.

12. Changes to this policy

We may update this policy to reflect changes in our practices, our technology or the law. We will post the updated policy with a new effective date, and give additional notice where required. If we begin using advertising technologies not described here, we will update this policy before doing so.

13. Contact us

DOCVITES, LLC — privacy@docvites.com. General support: support@docvites.com.