Privacy Policy | Vitanexorik

1. Scope and identity

This Privacy Policy applies to Vitanexorik at vitanexorik.life. The supplied contact point is [email protected], +254 756 600 600, Ring Road Kilimani, Nairobi, Kenya. No legal company name, registration number or tax identifier was provided for this build, so this policy does not invent one.

2. Kenya legal framework

The website is designed with the Kenya Data Protection Act, 2019 and the Data Protection (General) Regulations, 2021 in mind. Those rules address lawful, fair and transparent processing, purpose limitation, data minimisation, security and data-subject rights. Whether a particular registration or compliance obligation applies in a real deployment depends on the operator’s actual activities and should be confirmed by the operator.

3. Information you submit

If you use the contact form, the site processes the name, email address, subject and message you choose to submit. The form includes a honeypot field used to reduce automated spam. We ask you not to include detailed medical records, identity documents or unnecessary health information.

4. Health data caution

Information about health can be sensitive personal data. This site is an editorial resource, not a patient portal. The contact form is not designed for clinical histories, laboratory results or diagnosis requests. If you voluntarily include sensitive information, it may be contained in the email generated by the form; please avoid doing so unless genuinely necessary.

5. Purpose and lawful handling

Contact details are used to read and respond to enquiries, handle corrections, manage privacy requests, maintain site security and document communications where reasonably necessary. We do not state that data is used for purposes that the current code does not perform.

6. Email delivery and hosting

A production PHP mail transport may pass the message through hosting and email infrastructure. Those providers may process technical or message data as necessary to deliver the email. The exact provider is deployment-specific and has not been supplied, so this policy does not name one.

7. Server logs

Web hosting commonly creates technical logs such as IP address, request time, requested path, response status and user-agent data for security and reliability. The exact retention period is controlled by the hosting environment and has not been provided here.

8. Cookies and browser storage

No GA4, GTM, Cookiebot, advertising pixel or reCAPTCHA ID is configured in this build. A lightweight preference interface uses local browser storage to remember the cookie-choice selection. See the Cookies Policy.

9. Affiliate model

The site declares an affiliate business model, but no external affiliate partner or destination URL is configured in this build. Therefore the current code does not create affiliate-tracking cookies or outbound commission links.

10. Data sharing

Contact messages may be available to the operator and the technical providers needed to host the site and deliver email. We do not claim to sell contact-form data. If future analytics, advertising or affiliate vendors are enabled, this policy must be updated before or at activation.

11. International transfers

Hosting or email providers may process data outside Kenya depending on the real deployment. Because those providers have not been supplied, no specific transfer mechanism is claimed here. The operator should confirm applicable safeguards before production use.

12. Retention

The current site code does not create a contact database. Emails may remain in the recipient mailbox or backups according to the operator’s real email and hosting settings. No fixed retention period is invented here.

13. Your rights

Kenyan data-protection law provides rights in relation to personal data, subject to applicable conditions and exemptions. These include transparency and rights relating to access, correction and deletion in appropriate circumstances. Requests about data handled through this site can be sent to the contact email above.

14. Security

The form uses server-side validation, a honeypot and output escaping. No website can guarantee absolute security. The operator should keep PHP, hosting, TLS certificates and email systems maintained and restrict administrative access.

15. Children

This resource is written for adults seeking general prostate-health information. It is not intentionally designed to collect children’s data. If a child’s data is submitted inadvertently, contact us so the operator can review the request.

16. Changes

This policy should be revised whenever the actual data flow changes, including activation of analytics, reCAPTCHA, advertising, a CRM, affiliate tracking or a new form destination.

17. Contact

Privacy questions may be sent to [email protected] or by post/contact at Ring Road Kilimani, Nairobi, Kenya.