Legal

Privacy Policy

Last updated: June 23, 2026

This Privacy Policy explains how Vitalle Fit collects, uses, stores, shares and protects the personal data of visitors and clients of the website vitallefit.com (the "Site") and of the nutrition and wellness consulting services (the "Services"). We process your data in accordance with Brazil's General Data Protection Law (Law No. 13,709/2018 - "LGPD"), the European Union General Data Protection Regulation (Regulation (EU) 2016/679 - "GDPR") and other applicable laws, including the California Consumer Privacy Act ("CCPA"), where applicable.

1. Data we collect

We collect the following types of personal data:

1.1. Data you provide

• Identification and contact: name, email, phone, address and, when needed for billing, tax ID.
• Account data: access credentials and preferences.
• Health and lifestyle data: information you voluntarily share for the provision of the nutrition service (goals, eating habits, restrictions, weight, height and relevant history). These are sensitive personal data and receive enhanced protection.
• Communications: messages sent through forms, email or WhatsApp.

1.2. Payment data

Payments are processed by Stripe. We do not store full card numbers on our servers; we only receive transaction data (status, amount, last digits and identifiers) needed to manage orders and subscriptions.

1.3. Data collected automatically

• IP address, device type, browser and operating system.
• Pages visited, browsing time and interaction data.
• Cookie identifiers and similar technologies (see the Cookie Policy).

2. Purposes of use

• Provide, personalize and improve the nutrition and wellness Services.
• Process payments, subscriptions, refunds and fraud prevention.
• Communicate updates, support and responses to requests.
• Send marketing communications, when authorized by you.
• Comply with legal, accounting and regulatory obligations.
• Ensure the security, integrity and operation of the Site.

3. Legal bases

We process your data based on: performance of a contract (provision of the Services); consent (sensitive health data, non-essential cookies and marketing); compliance with a legal obligation; and legitimate interest (security and improvement of the Site), always respecting your rights and freedoms. For users in the European Economic Area and the United Kingdom, the equivalent GDPR legal bases apply (Art. 6 and Art. 9).

4. Cookies

We use cookies and similar technologies to operate the Site, remember preferences, measure performance and personalize content. You can manage your choices at any time. Details in our Cookie Policy.

5. Sharing

We do not sell your personal data. We may share it with:

• Service providers acting on our behalf (processors), under contract and a duty of confidentiality.
• Public authorities, when required by law or court order.
• Third parties, in the event of a corporate reorganization, always preserving this Policy.

6. Processors and partners

The main processors that may handle data on our behalf include:

• Stripe - payment processing.
• Hosting and CDN providers - delivery of the Site.
• Email and support tools - communication and support.
• Analytics tools - performance measurement, when enabled.

7. International data transfer

As we operate globally, your data may be processed on servers located outside your country, including in the United States and the European Union. In such cases, we adopt appropriate safeguards, such as standard contractual clauses and other mechanisms set out in the LGPD and GDPR, to ensure a comparable level of protection.

8. Retention

We keep data for as long as necessary to fulfill the purposes and legal obligations (for example, tax and accounting periods). Once processing ends, data is securely deleted or anonymized, except where the law requires retention.

9. Your rights

Under the LGPD and GDPR, you may, at any time:

• Confirm the existence of processing and access your data.
• Correct incomplete, inaccurate or outdated data.
• Request anonymization, blocking or deletion of unnecessary data.
• Request data portability.
• Withdraw consent and object to processing.
• Request information about data sharing.
• File a complaint with the National Data Protection Authority (ANPD) or the competent authority in your region.

To exercise your rights, write to suporte@vitallefit.com. We will respond within the applicable legal timeframes.

10. Security

We adopt technical and administrative measures to protect your data against unauthorized access, loss, alteration or improper disclosure, including encryption in transit, access control and careful selection of suppliers. No transmission method is 100% secure, but we work continuously to mitigate risks.

11. Minors

The Services are not intended for minors under 18 without the consent and supervision of parents or legal guardians. We do not intentionally collect children's data without proper authorization. If you identify such a situation, contact us so we can remove it.

12. Changes to this Policy

We may update this Policy from time to time. The current version will always be available on this page, with the date of the last update. Material changes may be communicated through official channels.

13. Contact

Questions about privacy and data protection can be sent to suporte@vitallefit.com or by phone at (48) 99932-4487.