Personal data information

Controller and scope

Denis Pashkevich is the controller of data provided directly to Vita Faro; the contact is shown below. Vita Faro is an independent partner resource, not an official Nature’s Sunshine site or department. The official seller is separately responsible for data collected on its side.

Data and purposes

Depending on the selected feature, Vita Faro may process a name, email, phone, country, language, account and session data, basket contents, delivery address or collection point, comments, NSP registration status, a technical security log and a voluntarily selected Telegram channel. These data support sign-in, saved preferences, replies, preliminary-request assistance, service protection and the selected feature. Do not provide diagnoses, treatment information, payment credentials or other unnecessary sensitive data.

Legal bases and recipients

Depending on the context, processing relies on steps requested by the user before a possible transaction with the official seller, consent, compliance with applicable duties and legitimate interests in service operation and security. Technical recipients may include hosting and database providers, Telegram only when selected, OpenAI only when Vita Faro AI is used, and an official seller or service centre only after a deliberate transfer choice. Vita Faro does not sell personal data.

Retention, security and international processing

Data are kept no longer than needed for the relevant purpose, account operation, dispute handling, security and any mandatory legal period, then deleted or anonymised. Providers may process data in different countries. Where applicable, legally required transfer mechanisms are used; details can be requested by email. No internet service can guarantee absolute security, so proportionate technical and organisational measures are used.

User rights

Subject to applicable law, users may request access, correction, erasure, restriction and portability, object to processing, and withdraw consent without affecting earlier lawful processing. Users may also complain to the competent data-protection authority. Vita Faro does not make decisions producing legal or similarly significant effects solely by automated means. Contact us by email to exercise rights; secure identity verification may be required before data are released.

Telegram, Vita Faro AI and Care Passport

If a user chooses Telegram and starts @VITALOGIC_Care_bot, Vita Faro keeps the technical chat and user identifiers, any public display name, link time and a minimal delivery log. The one-time link token is stored only as a cryptographic hash. Messages are used to handle the request and are not sent to Vita Faro automatically.

When Vita Faro AI is separately enabled, the question, limited context and verified catalogue data are sent to OpenAI. The API request uses store:false; this is not a promise that the provider keeps no operational or security logs. The answer is informational and does not replace medical care.

With separate consent, Care Passport stores structured wellness goals, pace, a practical step and short check-ins. It is not designed for diagnoses, test results, medicines or a free-form medical history; users can export and delete the data.

Vita Faro Passport combines your Care Passport, selected products and this website’s memory. Additional habits, action events and conversations are saved only through your actions. Permission to use your goal and habit in AI and to save conversations is off by default; storage permission enables a button, without automatically saving text. You can download an export and delete the listed data in Vita Faro Passport. Product reminders are shared with other Vita Faro clients and do not confirm use. Health trackers are not connected. LIVE video loads from YouTube only when you click.

To verify official NSP status, users separately provide their NSP ID. Surnames in older requests do not affect the ID match. Matching uses cryptographic HMAC values, a protected request copy, decision status and account link; the source private roster is not published.

Data are transferred to a specific official seller or service centre only after explicit consent, confirmed official NSP registration and a manual destination choice by the administrator. A customer of another partner is not transferred automatically.