Privacy Policy

Effective Date: August 26, 2026

This Privacy Policy explains how Vitalis Direct (“Vitalis Direct,” “we,” “us,” or “our”) collects, uses, discloses, and protects information when you visit https://vitalisdirect.com (the “Site”), order or schedule mobile laboratory testing services, communicate with us, or otherwise interact with our services (collectively, the “Services”).

By using the Site or Services, you acknowledge the practices described in this Privacy Policy. Additional notices or consents may apply to certain health information, laboratory services, or transactions.

1. Who We Are

Vitalis Direct is a technology platform that enables consumers to access laboratory testing and coordinates mobile specimen collection at eligible homes, offices, and other locations. Vitalis Direct operates the Site and coordinates ordering, scheduling, payment collection, mobile specimen collection, customer communications, and delivery of results for Services ordered through the platform. Mobile collection personnel may be employed or engaged by an affiliated entity, or an independent laboratory or healthcare partner. Specimens collected through the platform are submitted to an independent clinical laboratory for testing and analysis, which may be an affiliate of Vitalis Direct (including Concord Life Sciences LLC dba Principle Laboratory) or another third-party laboratory (collectively, the “Laboratory”). Vitalis Direct is not a healthcare provider and does not itself operate a clinical laboratory, perform laboratory testing, or provide medical services.

Email: privacy_vitalis@vitalisdirect.com

Phone: (832) 838-5312

2. Information We Collect

2.1 Information You Provide Directly

In the course of your use of the Site, you may voluntarily share information about yourself, for example, such as through the contact form or email newsletter form on our Website.

Following are the categories of personal information we may collect from you when you share it with us:

Identifiers such as your name, email address, telephone number, and communications with us.
Commercial information such as order and appointment information, including test selections, scheduling details, service location, and other information needed to coordinate mobile specimen collection.
Health-related information you provide in connection with testing or specimen collection, which may include relevant medical history, medications, symptoms, demographic information, test orders, and other information necessary to provide the requested Services.
Billing, transaction, and payment-related information associated with your order.
Information submitted when you call a tracked phone number displayed on our Site.
Any other information you voluntarily provide, including through contact forms, customer support, email sign-ups, or other communications.
Electronic-communications and e-signature consent records, including the version and text of the consent you accept, the date and time of your consent, and confirmation of any related verification step.

2.2 Information Collected Automatically

When you visit the Site, we and our service providers may automatically collect certain information through cookies, pixels, local storage, and similar technologies, including:

IP address.
Browser type, device type, and operating system.
Referring and exit pages and URLs.
Pages viewed, time on page, clicks, scrolling, and other interaction data.
Approximate geographic location derived from your IP address.
Session and interaction information used for website analytics, with form-field inputs masked or obfuscated where supported by the applicable tool.
Call metadata and source-attribution information when you call a tracked phone number.

2.3 Information From Third Parties

We may collect information through third parties as well, such as:

Laboratories, healthcare providers, collection professionals, or other service partners may provide information necessary to coordinate your order, specimen, laboratory testing, results, or related Services.
Advertising, analytics, website, and communications providers may provide attribution, device, campaign, or engagement information associated with your interaction with the Site.

We may maintain business contact information about healthcare providers, partners, vendors, or other professional contacts obtained through direct engagement, public professional sources, conferences, or business-development activities.

3. How We Use Information

We use information for purposes that may include:

Providing, coordinating, and supporting orders, appointments, mobile specimen collection, laboratory testing, and results delivery.
Communicating with you about your order, appointment, specimen, results availability, account, payment, or customer-support request.
Processing transactions and maintaining business and service records.
Operating, maintaining, securing, and improving the Site and Services.
Measuring Site traffic, engagement, marketing performance, and service effectiveness.
Delivering, measuring, and optimizing advertising, including retargeting and conversion measurement, subject to applicable law and your available privacy choices.
Detecting and preventing fraud, spam, security incidents, abuse, and other unauthorized activity.
Complying with legal, regulatory, contractual, and recordkeeping obligations and enforcing our terms and policies.

You may choose to opt out of receiving future marketing or promotional email messages from us. Each such email (excluding non-promotional communications, such as those responding to your specific inquiries or related to your relationship with us) sent by us contains an “unsubscribe,” “opt- out”, or similar link with instructions on how to remove yourself from the applicable email list. Additionally, we may always email you in response to your correspondence or in connection with any other transactions you have with us.

We may use other information, which does not identify you personally, for any reason we deem appropriate, including for purposes of administering, protecting and improving our Site and systems, to better understand the preferences of our Site visitors, to identify server problems, to compile aggregated statistics about Website usage, and to help personalize your experience on our Site.

4. Cookies, Pixels, and Similar Technologies

We and our service providers use cookies, local storage, pixels, and similar technologies to operate the Site, understand usage, prevent fraud, measure advertising, and improve performance. These technologies are deployed on the public-facing, informational portions of the Site and, in a limited configuration, within the ordering and checkout areas. Within the ordering and checkout areas, third-party advertising and analytics technologies are configured so that they do not receive the name, type, or category of any test or product you view or purchase, and so that page addresses and referrer information passed to them do not identify any specific test or health condition. When you complete an order, we may transmit to the advertising and analytics providers described in this section a limited confirmation that a purchase occurred, the transaction amount, and general page-engagement measurements (such as page views and time on page), for purposes of advertising measurement and optimization. We do not deploy third-party advertising pixels, session-recording tools, or similar third-party tracking technologies on pages where you enter health information, view laboratory results, or access authenticated account areas. The table below summarizes technologies identified for use on or in connection with the Site.

Technology	Purpose	Data Involved	Retention
Google Analytics 4	Traffic, behavior, engagement, and conversion measurement	Persistent client identifier and usage data	Up to 2 years
Google Tag Manager	Container used to deploy website tags	Configuration information	N/A
Google Ads / DoubleClick	Conversion tracking and ad-performance measurement	Conversion-linker cookies and click identifiers	Up to 90 days
Google reCAPTCHA	Fraud, spam, and bot prevention on forms	IP address, browser/device signals, cookies, and interaction behavior	Set by Google
Google Maps JavaScript API	Displays embedded maps	IP address and page URL	Set by Google
Meta Pixel	Retargeting, remarketing, behavior, and conversion measurement	Browser-based event data	Set by Meta
Microsoft Clarity	Session recordings and heatmaps for site analysis	Interaction and behavioral data; supported form inputs are masked/obfuscated	Set by Microsoft
PixelYourSite	Supports Meta Pixel and traffic/source attribution	Pseudonymous visitor identifier and visit/source data	180 days
CallRail	Dynamic phone number insertion and call tracking	Call metadata and source attribution	Set by CallRail
Cloudflare Insights	Website performance monitoring	Performance and beacon data	Set by Cloudflare
WhatConverts	Session and visitor attribution	First-party cookies and local storage	Varies
WordPress core	Site functionality and administrative sessions	Site and authentication cookies	Session/admin only
Gravity Forms	Form functionality and, where enabled, saved form progress	Browser storage of in-progress form data	Local to your browser
Vimeo	Embedded video playback	Third-party cookies and player data	Set by Vimeo

Your Cookie Choices

You can control cookies through your browser settings, including blocking or deleting them. Blocking certain cookies may affect Site functionality. Where required by applicable law, we will provide choices regarding non-essential cookies or similar technologies.

To opt-out or adjust your preferences for retargeting cookies that may collect information about your online activity while you are using the Site, please click here https://vitalisdirect.com/opt-out/ or adjust your browser settings.

5. Third-Party Advertising, Analytics, and Website Partners

We use third-party providers to support analytics, advertising, communications, fraud prevention, website functionality, and performance. These providers operate under their own terms and privacy practices.

5.1 Meta (Facebook/Instagram)

Meta Pixel may be used for retargeting, remarketing, on-site behavior analysis, and conversion measurement. We have implemented technical safeguards designed to prevent the transmission of names, email addresses, laboratory results, or other directly identifying health information through browser-based advertising pixels. Notwithstanding these safeguards, certain automatically collected information (such as URLs of pages visited, browser identifiers, and interaction data) may be captured by third-party advertising technologies deployed on the Site. We do not deploy advertising pixels, session-recording tools, or similar third-party tracking technologies on pages where consumers enter health information, view laboratory results, or access authenticated account areas.
Meta Conversions API may be used to send conversion and website activity information from our servers to Meta to improve advertising measurement, subject to applicable law and our configuration of the service.

5.2 Google

Google Tag Manager may deploy analytics and advertising tags described in this Policy.
Google Analytics 4 may measure traffic, behavior, engagement, and conversions.
Google Ads / DoubleClick may measure advertising conversions and engagement.
Google reCAPTCHA may process device, browser, cookie, IP-address, and interaction information to detect automated or abusive submissions.
Google Maps may receive IP-address and page information when embedded maps are displayed.

We use Google Analytics to better understand the behavior of visitors to our websites. This includes anonymized data associated with your IP address, such as pages viewed on the Website, length of time on the Website, browser used to access the sites, and device used to access the Website. The information collected does not personally or directly identify you or your street address. To learn more about how Google uses data when you visit our Website please visit: How Google uses information from sites or apps that use our services – Privacy & Terms – Google. You can opt out from the use of Google Analytics by following the instructions provided at: Google Analytics Opt-out Browser Add-on Download Page.

5.3 Microsoft Clarity

Microsoft Clarity may generate session recordings and behavioral analytics to help us understand Site usage and improve user experience. Where configured, form-field inputs are masked or obfuscated in recordings.

5.4 Other Website and Attribution Providers

PixelYourSite, CallRail, Cloudflare Insights, WhatConverts, WordPress, Gravity Forms, Vimeo, and similar providers may process information as described in Section 4 to provide website functionality, attribution, performance monitoring, form functionality, call tracking, or embedded content.

We do not sell your personal information to third parties or share your personal information to third parties for their marketing or advertising purposes. Some advertising technologies may nevertheless be treated as a “sale,” “sharing,” or targeted advertising under certain U.S. state privacy laws. You may opt-out of the “sharing” of your personal information by emailing us at privacy_vitalis@vitalisdirect.com or through the following link: https://vitalisdirect.com/opt-out/ .

6. How We Share Information

We may disclose or transfer information to:

Laboratories, healthcare providers, mobile collection professionals, and other partners as reasonably necessary to provide or coordinate the Services.
Service providers that support website hosting, forms, communications, analytics, advertising, payment processing, customer support, security, and related business operations.
Government authorities, regulators, law enforcement, courts, or other parties when required or permitted by law, or when reasonably necessary to protect rights, safety, security, or prevent fraud or abuse.
A buyer, successor, affiliate, or other party involved in a merger, acquisition, financing, restructuring, sale of assets, or similar corporate transaction, subject to applicable law.

We may disclose for a business purpose to one or more third parties the following categories of personal information:

Identifiers such as your name, email address, telephone number, and communications with us.
Commercial information such as order and appointment information, including test selections, scheduling details, service location, and other information needed to coordinate mobile specimen collection.
Health-related information you provide in connection with testing or specimen collection, which may include relevant medical history, medications, symptoms, demographic information, test orders, and other information necessary to provide the requested Services.
Billing, transaction, and payment-related information associated with your order.
Information submitted when you call a tracked phone number displayed on our Site.
Any other information you voluntarily provide, including through contact forms, customer support, email sign-ups, or other communications.

7. How Long We Keep Information

We retain information for as long as reasonably necessary for the purposes described in this Policy, including providing Services, maintaining required business or healthcare-related records, complying with legal and contractual obligations, resolving disputes, preventing fraud, and enforcing agreements. Retention periods vary by the type of information, the service involved, and applicable legal requirements. Automatically collected data may also be retained according to the periods described in Section 4 or the applicable provider’s settings. Electronic-communications and e-signature consent records are retained for as long as the underlying order and associated health records are retained, and, because they document our compliance with applicable electronic-signature law, we keep them as an append-only evidentiary record even where a deletion request is otherwise granted, consistent with Section 9. We reserve the right to dispose of or delete any or all such personal information or non-personal information at any time (including prior to any specific retention timeframe we may communicate), except as set forth in any other agreement or document executed by both you and us concerning the same or as required by law.

8. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect information against unauthorized access, use, alteration, or disclosure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You should also use reasonable care when transmitting information electronically and protect any account credentials or secure-result links provided to you.

9. Your Privacy Rights and Choices

Depending on where you live and the laws that apply, you may have rights to access, correct, delete, obtain a copy of, or otherwise exercise control over certain personal information. You may also have rights to opt out of targeted advertising, certain forms of sale or sharing, or certain profiling, and to appeal a denied privacy request. We will not discriminate against you for exercising rights provided by applicable law. Where we retain electronic-communications and e-signature consent records to satisfy recordkeeping and evidentiary obligations under applicable electronic-signature law, those records may be retained under a legal-obligation exception even after an otherwise-granted deletion request.

To exercise the rights described above, please contact us at privacy_vitalis@vitalisdirect.com or (832) 838-5312. We may need to verify your identity or authority before completing a request. Authorized agents may submit requests where permitted by law.

You may also use browser, device, advertising-platform, or industry opt-out controls. Where applicable law requires us to recognize a legally valid browser-based opt-out preference signal, we will process that signal as required by law.

9.1 State Privacy Rights

You may be entitled the following privacy rights listed below based on various state privacy laws, including if you are a resident of California, Colorado, Connecticut, Florida, Oregon, Texas, Utah, and Virginia:

The rights to know/access. You may have the right to request to access or know (i) the specific pieces of personal information we have about you; (ii) the categories of personal information we have collected about you; (iii) the categories of sources from which that personal information was collected; (iv) the categories of personal information we have sold or disclosed; (v) the categories of third parties to whom your personal information was sold or disclosed; and (vi) the purposes for collecting and selling your personal information. Generally:
- Vitalis Direct has collected the categories of personal information detailed in the section titled “Information We Collect” above.
- Vitalis Direct has disclosed the categories of personal information detailed in the section titled “How We Share Information” above.
The right to correction. You may have the right to request that we correct the personal information that we have collected or maintain about you.
The right to data portability. You may have right to request your personal information in a format that is portable and useable.
The right to deletion. You may have the right to request that we delete the personal information that we have collected or maintain about you. We may deny your request under certain circumstances, such as if we need to comply with our legal obligations or complete a transaction for which your personal information was collected. If we deny your request for deletion, we will let you know the reason why.
The right to restrict or opt out of the sale or sharing of your personal information. You may have the right to restrict or opt out of the sale or sharing of your personal information. We do not sell your personal information or share your personal information to third parties for their marketing or advertising purposes. You may opt out of the “sharing” of your personal information through the methods described above.
The right to equal service. If you choose to exercise any of these rights, we will not discriminate against you in any way. If you exercise certain rights, understand that you may be unable to use or access certain features of our services.

You may request your right to know and your right to deletion free of charge up to two (2) times in any twelve (12) month period.

To exercise the rights described above, please contact us as follows:

Email: privacy_vitalis@vitalisdirect.com (please use “Consumer Privacy” in the subject line)

Phone: (832) 838-5312

Mail: 16840 Buccaneer Lane, Suite 261, Houston, TX 77058

9.2 EEA, UK, and Switzerland

Legal Basis for Processing Personal Information

The legal bases for our processing of personal information about you are as follows:

Contract: When you purchase a product from us, we collect personal information about that is necessary for completing that transaction and delivering the product to you;
Consent: We obtain your consent to collect personal information for distinct purposes such as receiving marketing communications from us. You have the right to withdraw your consent at any time.
Legitimate Interest: We have a legitimate interest to collect personal information about you for certain purposes such as data analytics and the protection and administration of the Website so that we can (i) understand our customers’ preferences and improve the product selection available on the Website; (ii) to protect the Website from information security threats and our Company in connection with legal claims and proceedings; (iii) to communicate administrative changes in connection with the use of the Website; and (iv) to comply with laws that apply to us and the Website.

You have the following rights with respect to the personal information we hold about you:

Right of Access: The right to know what personal information we hold about you and ask for copies of that information;
Right of Correction: The right to have incomplete, incorrect, outdated, or unnecessary personal information corrected, deleted, or updated;
Right to Restriction of Processing: The right to request that we restrict the processing of Personal Information we hold about you in certain circumstances;
Right to Object: The right to object to the processing of personal information we hold about you;
Right of Erasure: The right to ask us to erase your personal information in certain circumstances;
Right to Data Portability: The right to ask that we transfer personal information you have given us to another organization, or to you, in certain circumstances; and/or the right to receive any Personal Information we hold about you in a structured and commonly used machine-readable format or have such personal information transmitted to another company.

In connection with exercising your rights described above, we may request additional personal information for purposes of verifying your identity and for no other purpose.

We do not engage in or have features that engage in automated decision-making. If this changes, we will update our Policy accordingly.

Depending on where you live, you may have the right to withdraw consent and lodge a complaint with a supervisory authority or other regulatory agency if you believe that we have violated any of the rights concerning personal information about you. We encourage you to first reach out to us at privacy_vitalis@vitalisdirect.com, so we have an opportunity to address your concerns directly before you do so.

To exercise any of the rights described above, please contact us at the email provided above.

10. Children and Minors

The Site and Services are generally intended for adults. We do not knowingly collect personal information directly from children under 13 through the Site without appropriate authorization. If Vitalis Direct permits a parent, legal guardian, or other authorized representative to request Services for a minor, we may collect information about the minor as reasonably necessary to provide those Services and as permitted by applicable law. If you believe a child has provided information to us without appropriate authorization, contact us so we can review the matter.

11. Health Information

Because our Services involve facilitating access to laboratory testing and mobile specimen collection, information we process may include health-related information such as test orders, specimen and collection information, laboratory results, relevant medical information you provide, and communications concerning testing or results.

Some health information may be subject to the Health Insurance Portability and Accountability Act (HIPAA) when it is created, received, maintained, or transmitted by a HIPAA covered entity or business associate. Other health-related information may be governed by state consumer health privacy, medical privacy, genetic-information, or general privacy laws. The legal protections that apply may depend on the entity handling the information and the circumstances in which it is collected or used.

Where a separate Notice of Privacy Practices, consumer-health-data notice, consent, authorization, laboratory notice, or other health-privacy document applies to particular information or Services, that document will apply according to its terms. We do not intend to use laboratory results or directly identifying health information for targeted advertising except where expressly permitted by applicable law and supported by any required consent or authorization.

12. Third-Party Links and Services

The Site may contain links to or integrations with third-party websites, maps, videos, laboratories, healthcare providers, or other services. This Privacy Policy does not govern, and we are not responsible for, the privacy, information security, or other practices of any third parties, including any third party operating any site or service linked from the Site. The inclusion of a link on the Site does not imply our endorsement of the linked site or service. Their privacy practices are governed by their own policies.

13. International Visitors

The Site and Services are primarily intended for users in the United States. If you access the Site from another country, information may be transferred to, stored, or processed in the United States or other locations where our service providers operate. Privacy and data-protection laws in those locations may differ from the laws where you live. Where required by applicable law, we use appropriate safeguards for covered international transfers.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised Policy on the Site and update the “Last Updated” date. Where required by law, we will provide additional notice or obtain consent for material changes.

15. Contact Us

If you have questions about this Privacy Policy, our privacy practices, or a privacy request, contact us at:

Vitalis Direct
Email: privacy_vitalis@vitalisdirect.com
Phone: (832) 838-5312