Preamble & Summary
This policy explains how Vitafiq uses cookies and similar technologies on its websites, mobile applications, marketplace, practitioner profiles, booking pages and related online services, including Vitafiq.com. It explains what these technologies do and the choices available to you. It should be read together with our Privacy Policy.
Essential technologies support security, account access, bookings and core platform functions. Optional analytics, functionality and advertising technologies are used only as permitted by law and, where required, after you choose to allow them.
Cookie Preference Centre
Choose which optional cookies Vitafiq may use. Strictly necessary cookies are always active because they support security and core platform functions. Your choice can be changed at any time. Where applicable, rejecting advertising cookies also opts you out of sale, sharing or targeted advertising through these technologies.
Required for security, authentication, session management, consent records, bookings, payments, and core platform operations. Cannot be disabled.
Remembers your choices and enables enhanced features such as language, theme preferences, approximate location, accessibility settings, and support tools.
Helps us understand usage and email engagement, resolve errors, and improve platform performance. May include privacy-configured session replays with sensitive health data masked.
Measures campaign reach, limits repeated advertisements, and supports relevant advertising. Vitafiq does not permit health or sensitive clinical information to be used for targeted advertising.
1. Scope and key terms
In this policy, “Vitafiq,” “we,” “us” and “our” refer to the operator of the Vitafiq platform. “Services” means our websites, applications and related online features.
A “cookie” is a small text file stored in your browser or on your device. Similar technologies include pixels, tags, local storage, software development kits (SDKs), mobile advertising identifiers and session-replay tools that perform comparable functions.
Set directly by Vitafiq to maintain your secure session, remember authentication state, and store preference selections.
Set or provided by partner organizations whose services we use, such as payment processors, analytics tools, communication gateways, mapping services, fraud-prevention providers, or advertising networks.
2. Why we use these technologies
We deploy cookies and similar tracking technologies for the following specific purposes:
- Operate the Services: Maintain authenticated sessions, manage cart/booking flows, and remember secure account activity.
- Platform Security: Protect users, practitioners, and Vitafiq from fraud, credential stuffing, unauthorized access, and technical failures.
- Remember Preferences: Preserve user choices including language, geographic region, accessibility settings, and interface display modes.
- Diagnostic & Performance: Understand how our Services are utilized, diagnose runtime errors, monitor latency, and optimize infrastructure.
- Engagement & Communication: Measure website, email, and marketing campaign performance and, where consented to, deliver relevant messaging.
3. Information these technologies may collect
Depending on the technology deployed and your individual consent selections, data collected may include:
- Unique cookie or device identifiers
- Internet Protocol (IP) address
- Browser type, version & device OS
- Referring URLs and page interactions
- Feature usage, clicks & scrolling
- Timestamps and page dwell durations
- Approximate location from IP
- Consent audit logs and opt-out choices
Mobile applications may use Software Development Kits (SDKs) or device advertising identifiers for security verification, telemetry, push notifications, and, where allowed, campaign measurement.
4. Cookie categories and your choices
| Category | Purpose | Default | Your Control |
|---|---|---|---|
| Strictly necessary | Security, authentication, session management, load balancing, consent records, shopping or booking flows and other features required to provide the Services. | Always active | Cannot be switched off through the preference centre. Browser blocking may prevent the Services from working. |
| Functional | Remembers choices and provides enhanced features, including language, approximate location, accessibility, chat, embedded content or support tools. | Off until allowed, where consent is required | Allow or reject in Cookie Preferences. |
| Analytics and performance | Measures visits, navigation, errors, email engagement and performance so that we can improve the Services. This may include privacy-configured session replay where deployed. | Off until allowed, where consent is required | Allow or reject in Cookie Preferences. |
| Advertising and social media | Measures campaigns, limits repeated ads and may support relevant advertising or social features across services. | Off until allowed | Allow or reject Cookie Preferences. Vitafiq will not condition core service access on consent to this category. |
Live Cookie Inventory & Details
Detailed breakdown of specific technologies currently deployed on Vitafiq.com
| Cookie / Key | Category | Provider | Purpose | Type | Retention |
|---|---|---|---|---|---|
| vitafiq_session | Strictly Necessary | Vitafiq | HTTP-only secure JWT token for user authentication and session integrity. | 1st Party | Session / 30 days |
| vitafiq_user_role | Strictly Necessary | Vitafiq | Maintains authenticated role context (customer, practitioner, admin) across pages. | 1st Party | 30 days |
| vitafiq_provider_id | Strictly Necessary | Vitafiq | Maintains practitioner studio/workspace identity for partner operations. | 1st Party | 30 days |
| vitafiq_cookie_preferences | Strictly Necessary | Vitafiq | Records your explicit consent choices and cookie category settings. | 1st Party | 1 year |
| cognito_pkce_verifier | Strictly Necessary | AWS Cognito | Cryptographic PKCE verification preventing authorization code injection during login. | 1st Party | 15 minutes |
| vitafiq_theme | Functional | Vitafiq | Remembers user visual theme preference (dark mode vs. light mode). | 1st Party | 1 year |
| vitafiq_locale | Functional | Vitafiq | Stores preferred display language and regional formatting settings. | 1st Party | 1 year |
| _ga, _ga_* | Analytics | Google Analytics | Measures anonymous visitor metrics, navigation paths, and platform load errors. | 3rd Party | 2 years |
| _fbp, ad_id | Advertising | Meta / Ad Partners | Measures marketing campaigns and limits duplicate advertising without using health data. | 3rd Party | 90 days |
5. Managing cookie preferences
You can choose “Accept All,” “Reject Optional” or manage individual optional categories through the Cookie Preferences link in the website footer or cookie banner. Rejecting optional cookies will not prevent access to the core Services, although some enhanced features may be unavailable.
- Your selection should apply before optional technologies are activated, where consent is required.
- You can change or withdraw your choice at any time. Withdrawing consent does not affect processing that occurred before withdrawal.
- We may ask you to confirm your choice again after a material change, after a reasonable period, or when we cannot recognize a previous preference.
- Preferences may be specific to a browser, device, domain or account. You may need to repeat your choice after clearing browser data or using another device.
6. Browser and device controls
Most browsers allow you to view, delete or block cookies. Mobile operating systems may also provide controls for identifiers and tracking. These settings operate separately from Vitafiq Cookie Preferences. Blocking strictly necessary cookies through browser settings may affect sign-in, security, bookings, payments or other core functions.
Browser-based signals such as Global Privacy Control (GPC) or Do Not Track (DNT) may be handled where required by applicable law or supported by our technology. Because standards and legal requirements continue to evolve, responses may vary by browser and jurisdiction.
7. Practitioner pages and third-party services
When a client uses a Vitafiq practitioner profile or booking page, Vitafiq may operate the essential and optional platform technologies described in this policy. A practitioner may separately determine how client and appointment information is collected and used in their business. Questions about a practitioner’s own records or privacy practices should be directed to that practitioner. Cookies on a practitioner’s separate website are governed by that website’s policy unless Vitafiq expressly provides the technology.
Some features rely on service providers, including hosting, security, payments, maps, communications, analytics, customer support and embedded media. These providers may place or access their own technologies when you use the relevant feature. Their handling of information is governed by their own privacy notices and our agreements with them, as applicable.
Vitafiq will maintain a current cookie inventory in its consent tool or cookie details panel, identifying the provider, purpose, category and duration where reasonably available. That live inventory forms part of this policy and reflects technologies actually deployed on the Services.
8. Duration and retention
Session cookies generally expire when you close your browser. Persistent cookies remain for the period stated in the cookie details panel or until deleted by you.
We retain information collected through these technologies only as long as needed for the stated purpose, legal obligations, security, dispute resolution or enforcement, then delete or de-identify it in accordance with our retention practices.
9. Consent and legal bases
Vitafiq uses strictly necessary technologies to provide requested services, protect the platform and pursue legitimate security and operational interests. Optional technologies are based on consent where required.
In jurisdictions that permit opt-out models for certain analytics or advertising activities, Vitafiq will provide the applicable choice and honour legally recognized opt-out signals where required.
10. Data transfers and protection
Service providers may process information outside your province or outside Canada, where different laws may apply and lawful access by courts, regulators or authorities may occur.
We use reasonable administrative, technical and contractual safeguards appropriate to the nature of the information and require providers to protect information they process for us.
11. Advertising and sale or sharing choices
Vitafiq does not sell personal information for money.
Depending on applicable law, allowing advertising partners to receive identifiers or online activity for cross-context or targeted advertising may be treated as a sale, sharing or targeted advertising. Where those concepts apply, you may opt out through Cookie Preferences or any privacy-choice link provided by Vitafiq. Opting out does not necessarily reduce the number of ads you see, but the ads may be less personalized.
12. Children
The Services are not designed to use optional advertising technologies to profile children. Where a child or youth may use the Services, Vitafiq will apply consent and privacy measures appropriate to the user, the information and applicable law. A parent or guardian should contact us if they believe a child’s information has been collected improperly.
13. Your privacy rights
Depending on where you live, you may have rights to withdraw consent, object to or opt out of certain processing, and request access to, correction or deletion of personal information associated with cookies.
Vitafiq may need to verify a request and may retain information where required for security, legal compliance or consent records. Requests concerning information controlled by a practitioner should be directed to that practitioner.
15. Contact us
Questions, requests or complaints about this policy or our handling of personal information should be directed to our Privacy Office:
16. Publication checks & technical compliance
For full compliance with privacy and data protection standards, Vitafiq validates the following operational checks across all web and mobile properties:
- ✓ Confirmed Vitafiq privacy contact details and escalation channels are published.
- ✓ “Reject Optional” is equal in prominence and accessibility to “Accept All”.
- ✓ Optional tags, scripts, and SDKs remain blocked until explicit consent choice is recorded.
- ✓ Evidence of consent and withdrawal is retained securely without collecting unnecessary identifying data.
- ✓ Changing preferences instantly ceases future optional tracking without breaking core account or booking functionality.
- ✓ Sensitive fields, passwords, payment info, consultation notes, and health data are masked in diagnostic telemetry.
- ✓ Reconciled with the Privacy Policy, Terms of Use, and the live vendor inventory.