Privacy Policy

Last updated:

1. Data Controller

The data controller responsible for the processing of your personal data is:

Viviospine
101 1st Ave W, Marmarth, ND 58643, United States
Email: supportuse@viviospine.world
Phone: +1 701 279 6612

2. Scope and Purpose

This Privacy Policy describes how Viviospine ("we," "us," or "our") collects, uses, stores, and protects personal information when you visit our website at viviospine.world or contact us through our forms. We are a United States–based business and process information primarily under U.S. federal and state privacy laws, including the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and comparable state privacy statutes.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we also comply with the General Data Protection Regulation (GDPR) and applicable local data protection laws. Additional rights for those regions are described in Section 12 of this policy.

3. Notice at Collection (United States)

At or before the point of collection, we inform you of the categories of personal information we collect and the purposes for which they are used:

  • Identifiers (such as name and email address) — collected via our contact form to respond to your inquiries.
  • Internet or network activity (such as pages viewed and browser type) — collected automatically to operate, secure, and improve our website.
  • Commercial information (inquiry content and communication history) — collected when you contact us to provide requested information about our services.

We do not collect sensitive personal information as defined under applicable U.S. state privacy laws, and we do not use personal information for automated decision-making or profiling that produces legal or similarly significant effects.

4. Data We Collect

We may collect the following categories of personal data:

  • Contact information: name, email address, and message content submitted through our contact form.
  • Technical data: IP address, browser type, operating system, device information, and referring URLs collected automatically when you visit our website.
  • Usage data: pages visited, time spent on pages, and interaction patterns, collected through analytics cookies with your consent.
  • Cookie preferences: your cookie consent choices stored in localStorage.

5. How We Use Your Information

We use personal information for the following business and commercial purposes:

  • Responding to your inquiries and contact form submissions.
  • Operating, maintaining, and securing our website.
  • Analyzing website usage to improve user experience (with consent where required).
  • Measuring advertising and marketing campaign effectiveness (with consent where required).
  • Complying with legal obligations and enforcing our terms.

We retain personal information only for as long as reasonably necessary to fulfill these purposes or as required by law.

6. Legal Basis for Processing

United States: We process personal information based on one or more of the following: your consent (for example, when you submit our contact form or enable non-essential cookies); our legitimate business interests (such as website security, fraud prevention, and service improvement); performance of a request you initiate (responding to your inquiry); and compliance with applicable legal obligations.

EEA, UK, and Switzerland (GDPR): Where GDPR applies, we process personal data based on the following legal grounds under Article 6:

  • Consent (Art. 6(1)(a)): for analytics and marketing cookies, and for processing contact form data when you provide explicit consent.
  • Legitimate interests (Art. 6(1)(f)): for website security, fraud prevention, and improving our services.
  • Contractual necessity (Art. 6(1)(b)): when processing is necessary to respond to your inquiries.
  • Legal obligation (Art. 6(1)(c)): when required to comply with applicable laws and regulations.

7. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:

  • Contact form data: retained for up to 24 months after your last communication with us, unless a longer period is required by law.
  • Analytics data: retained for up to 26 months from the date of collection.
  • Technical logs: retained for up to 12 months for security purposes.
  • Cookie consent records: retained for up to 12 months in localStorage on your device.

8. Data Sharing, Sale, and Third Parties

We do not sell your personal information. We also do not share personal information for cross-context behavioral advertising in exchange for monetary or other valuable consideration, as "sale" and "share" are defined under the CCPA/CPRA and similar U.S. state laws.

We may disclose personal information to the following categories of recipients for business purposes only:

  • Service providers and contractors (such as hosting, analytics, and email delivery providers) who process data on our behalf under written agreements that limit use to specified services.
  • Professional advisors (such as legal or accounting firms) where reasonably necessary.
  • Law enforcement, regulators, or other parties when required by law, court order, or to protect our rights, safety, or property.

We require third-party service providers to maintain appropriate security measures and use personal information only as directed by us.

9. Your U.S. State Privacy Rights

Depending on your state of residence, you may have the following rights regarding your personal information, subject to applicable exceptions:

  • Right to know/access: request confirmation of whether we process your personal information and obtain a copy of specific pieces and categories collected.
  • Right to delete: request deletion of personal information we collected from you, subject to legal retention requirements.
  • Right to correct: request correction of inaccurate personal information we maintain about you.
  • Right to opt out of sale or sharing: we do not sell or share personal information for cross-context behavioral advertising; no opt-out action is required for those activities.
  • Right to limit use of sensitive personal information: not applicable, as we do not collect sensitive personal information as defined under applicable state laws.
  • Right to non-discrimination: we will not discriminate against you for exercising your privacy rights.
  • Right to appeal: residents of certain states (including Colorado and Virginia) may appeal a denied privacy request by contacting us using the details below and stating "Privacy Appeal" in the subject line.

California residents (CCPA/CPRA): In the preceding 12 months, we have collected the categories of personal information listed in Section 3. We collect this information for the business purposes described in Section 5. We have not sold or shared personal information for cross-context behavioral advertising. California residents may submit up to two access requests within a 12-month period. Authorized agents may submit requests on your behalf with proof of authorization.

Other state residents: Residents of Virginia, Colorado, Connecticut, Utah, Oregon, Texas, Montana, and other states with comprehensive privacy laws may exercise comparable rights as provided by their applicable statute.

To submit a privacy request, email us at supportuse@viviospine.world or call +1 701 279 6612. We will verify your identity before fulfilling a request and respond within the timeframe required by applicable law (generally 45 days, with a possible 45-day extension where permitted). You may also manage non-essential cookies through our Cookie Policy and the cookie banner on our website.

10. International Data Transfers

Your data may be transferred to and processed in the United States. Where data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

11. Your Rights Under GDPR

If you are located in the European Economic Area, you have the following rights regarding your personal data:

  • Right of access: request a copy of the personal data we hold about you.
  • Right to rectification: request correction of inaccurate or incomplete data.
  • Right to erasure: request deletion of your personal data under certain conditions.
  • Right to restriction: request limitation of processing under certain conditions.
  • Right to data portability: receive your data in a structured, machine-readable format.
  • Right to object: object to processing based on legitimate interests or for direct marketing.
  • Right to withdraw consent: withdraw consent at any time without affecting prior lawful processing.

To exercise any of these rights, contact us at supportuse@viviospine.world. We will respond within 30 days.

12. Email Communications

If you contact us or subscribe to communications from us, we may send you responses or informational messages related to your inquiry. You may opt out of marketing emails at any time by using the unsubscribe link in such messages or by contacting us directly. We comply with the CAN-SPAM Act and applicable U.S. email marketing regulations. Transactional or inquiry-related messages may still be sent as necessary to respond to your request.

13. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include HTTPS encryption, access controls, and regular security assessments. However, no method of transmission over the Internet is entirely secure.

14. Children's Privacy

Our website is not directed at children. We do not knowingly collect personal information from children under 13 years of age in compliance with the Children's Online Privacy Protection Act (COPPA). If you are under 13, please do not use this website or submit personal information. If you are between 13 and 18, you may use this website only with the involvement and consent of a parent or legal guardian.

If you believe we have collected information from a child under 13, please contact us immediately and we will take steps to delete such information. For users in the EEA, we do not knowingly collect personal data from individuals under 16 without appropriate consent.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

16. Contact and Complaints

For questions about this Privacy Policy or to exercise your data protection rights, contact us at:

Viviospine
101 1st Ave W, Marmarth, ND 58643, United States
Email: supportuse@viviospine.world

You also have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.