Privacy Policy

VitaZ Venture ("we", "us", or "our") is a health and wellbeing technology company developing AI-driven solutions for proactive health and wellbeing, connected health and wellbeing monitoring, and personalised health experiences. Our registered contact email is [email protected].

We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains what data we collect, why we collect it, how we use it, and what rights you have in relation to it. It applies to all personal data processed through our website at vitazventure.com and any related communications.

This policy is written in accordance with the EU General Data Protection Regulation (GDPR), the UK GDPR, and other applicable data protection laws.

We may collect the following categories of personal information:

• Contact information — name, email address, organisation name, job title, and any message content you submit through our contact or partnership enquiry forms.

• Usage data — pages visited, time spent on the site, referring URLs, browser type, operating system, device type, and IP address, collected automatically via analytics tools.

• Communications — records of correspondence when you contact us by email or through our website, including the content of messages and attachments.

• Technical data — cookies, session identifiers, and similar tracking technologies used to maintain site functionality and improve user experience.

• Business information — where you represent an organisation, we may collect information about that organisation in the context of partnership or investor discussions.

We do not collect sensitive health data (as defined under Article 9 GDPR) directly through this website. Our AI health products, when deployed in clinical or enterprise environments, operate under separate data processing agreements with those organisations.

We use the information we collect for the following purposes:

• Responding to enquiries — to reply to messages, partnership requests, and investor enquiries submitted through our website.

• Service improvement — to analyse how visitors interact with our website and improve its content, structure, and performance.

• Marketing communications — to send updates about VitaZ Venture products, services, and events, where you have provided explicit consent.

• Business development — to evaluate and progress partnership, investment, or commercial discussions.

• Legal compliance — to meet our obligations under applicable laws and regulations, including data protection, financial, and healthcare regulations.

• Security and fraud prevention — to detect, investigate, and prevent fraudulent transactions and other illegal activities.

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data under the following legal bases as set out in Article 6 of the GDPR:

• Legitimate interests (Article 6(1)(f)) — to respond to enquiries, improve our services, and conduct business development activities, where these interests are not overridden by your rights and freedoms.

• Consent (Article 6(1)(a)) — where you have explicitly opted in to receive marketing communications or agreed to the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

• Legal obligation (Article 6(1)(c)) — where processing is required to comply with a legal obligation to which we are subject.

• Contract performance (Article 6(1)(b)) — where processing is necessary to take steps at your request prior to entering into a contract, or to perform a contract to which you are a party.

Where we rely on legitimate interests, you have the right to object to that processing. Please contact us at [email protected] to exercise this right.

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by applicable law. Our standard retention periods are:

• Contact form submissions — retained for up to 24 months from the date of submission, unless you request earlier deletion or an ongoing relationship requires longer retention.

• Partnership and investor correspondence — retained for the duration of the relationship and up to 5 years thereafter for legal and audit purposes.

• Analytics data — aggregated and anonymised data may be retained indefinitely; identifiable usage data is retained for up to 26 months.

• Legal and compliance records — retained for the period required by applicable law, typically 6–7 years.

When data is no longer required, it is securely deleted or anonymised in accordance with our data disposal procedures.

Our website uses cookies and similar tracking technologies. Cookies are small text files placed on your device that help us operate the site and understand how it is used. We use the following categories of cookies:

• Strictly necessary cookies — essential for the website to function. These cannot be disabled.

• Analytics cookies — help us understand how visitors interact with the site by collecting anonymised information about pages visited and actions taken.

• Preference cookies — remember your settings and choices to improve your experience on return visits.

• Marketing cookies — used to deliver relevant content and track the effectiveness of our communications, only where you have consented.

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies or delete them after they have been set. Please note that disabling certain cookies may affect the functionality of the site.

A cookie consent banner is displayed on your first visit. You may update your preferences at any time by clearing your browser cookies and revisiting the site.

We use trusted third-party service providers to operate our website and process data on our behalf. These include:

• Hosting and infrastructure providers — to serve and maintain our website.

• Email delivery services — to transmit contact form submissions and communications.

• Analytics platforms — to collect and analyse website usage data.

• Customer relationship management (CRM) tools — to manage partnership and investor enquiries.

All third-party processors are bound by data processing agreements and are contractually obligated to handle your data securely, only for the purposes we specify, and in compliance with applicable data protection laws. We do not permit our processors to use your data for their own purposes.

We may also share your data with professional advisers (lawyers, accountants, auditors) where necessary, and with regulatory authorities where required by law.

Depending on your location and applicable law, you have the following rights regarding your personal data:

• Right of access (Article 15) — request a copy of the personal data we hold about you, along with information about how it is processed.

• Right to rectification (Article 16) — ask us to correct inaccurate or incomplete personal data without undue delay.

• Right to erasure / "right to be forgotten" (Article 17) — request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent.

• Right to restriction of processing (Article 18) — ask us to limit how we use your data in certain circumstances, such as while a dispute is being resolved.

• Right to data portability (Article 20) — receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.

• Right to object (Article 21) — object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds.

• Rights related to automated decision-making (Article 22) — not to be subject to decisions based solely on automated processing that produce significant legal or similarly significant effects.

• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. We may need to verify your identity before processing your request. If you are unsatisfied with our response, you have the right to lodge a complaint with your local supervisory authority (e.g., the Data Protection Commission in Ireland, the ICO in the UK, or your national DPA).

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption of data in transit using TLS/SSL protocols.

• Access controls limiting data access to authorised personnel only.

• Regular security assessments and vulnerability monitoring.

• Staff training on data protection and information security.

• Incident response procedures for detecting and reporting data breaches.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and, where required, inform affected individuals without undue delay.

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. You transmit data to us at your own risk.

VitaZ Venture operates globally and your personal data may be transferred to and processed in countries outside the European Economic Area (EEA) or the United Kingdom. Where such transfers occur, we ensure that appropriate safeguards are in place to protect your data, including:

• Standard Contractual Clauses (SCCs) — approved by the European Commission for transfers to third countries.

• Adequacy decisions — transfers to countries recognised by the European Commission as providing an adequate level of data protection.

• Binding Corporate Rules — where applicable for intra-group transfers.

By using our website and submitting your data, you acknowledge that your information may be transferred internationally in accordance with this policy and applicable law.

Our website and services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected information from a child, please contact us immediately at [email protected] and we will take steps to delete such data promptly.

Our website may contain links to third-party websites, including social media platforms and partner organisations. This Privacy Policy applies only to our website. We are not responsible for the privacy practices of third-party sites and encourage you to review their privacy policies before providing any personal data.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The "Last updated" date at the top of this page will reflect the most recent revision. Where changes are material, we will take reasonable steps to notify you, such as by posting a prominent notice on our website.

We encourage you to review this policy periodically to stay informed about how we protect your data. Your continued use of the website after changes are posted constitutes your acceptance of the updated policy.

VitaZ Venture is the data controller responsible for your personal data collected through this website.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

VitaZ Venture

Email: [email protected]

Website: vitazventure.com

We are committed to working with you to resolve any concerns about your privacy. If you are not satisfied with our response, you have the right to contact your local data protection supervisory authority.