Your privacy matters to us â genuinely, not just legally.
This policy explains in plain language what data VitalPulse collects, why, how long we keep it, and what rights you have over it. We've written it to be genuinely readable. If you have questions after reading it, contact us â see Section 14.
Overview â The Short Version
VitalPulse ("we", "us", "our") operates the website myvitalpulse.org and any related services (the "Service"). This Privacy Policy describes how we handle personal information in connection with the Service.
By using the Service, you acknowledge that you've read and understood this policy. If you don't agree with our practices, please discontinue use of the Service.
Pakistan does not currently have a comprehensive, enacted data protection law (a draft Personal Data Protection Bill remains under consideration as of this writing). The Prevention of Electronic Crimes Act 2016, as amended in 2025, provides criminal protections in Pakistan against misuse of personal data. In the absence of a dedicated Pakistani privacy statute, we voluntarily align our practices with internationally recognized privacy principles â including relevant provisions of the UK/EU GDPR and the US California CCPA/CPRA â to protect all our visitors, wherever they're located.
Data We Collect
We collect information in three ways: information you give us directly, information collected automatically when you use the Service, and â occasionally â information from third parties.
2.1 Information You Provide Directly
| Category | What we collect | When |
|---|---|---|
| Newsletter data | Email address | Newsletter sign-up |
| Contact data | Name, email, message content | Contact form submissions |
| Interactive tool data | Inputs to calculators, quizzes, mood tracker, weight tracker | When you use our on-site tools |
2.2 Information Collected Automatically
| Category | What we collect | Purpose |
|---|---|---|
| Log data | IP address, browser type, referring URL, pages visited | Security, debugging, basic analytics |
| Usage data | Features used, articles read, general engagement | Understanding what content is useful |
| Cookie data | See Section 6 and our full Cookie Policy | Site functionality and (where used) analytics/advertising |
2.3 Information from Third Parties
We may receive aggregated, anonymised information from advertising or analytics partners to understand our audience generally. This information cannot be used to identify you individually.
How We Use Your Data
We use personal data only for the purposes below. We do not use your data for automated decision-making that has legal or similarly significant effects on you.
- Providing the Service â delivering articles, tools, and content
- Communications â sending newsletters you subscribed to and responding to contact form messages
- Improving the Service â understanding which content and features are useful
- Safety and security â detecting abuse and protecting the site's integrity
- Legal compliance â meeting applicable legal obligations and responding to lawful requests
- Advertising (where implemented) â if/when we run advertising (for example via Google AdSense), this typically relies primarily on page content rather than detailed personal profiling
Legal Basis for Processing
VitalPulse is not established in the UK or EU. As good practice â and for the benefit of visitors from jurisdictions where this framework applies â we describe our processing below in terms consistent with GDPR Article 6:
| Processing activity | Basis (where applicable frameworks apply) |
|---|---|
| Sending newsletters you subscribed to | Consent |
| Responding to contact form messages | Legitimate interests |
| Basic analytics and site improvement | Legitimate interests / Consent, depending on the tool used |
| Essential cookies (site functionality) | Legitimate interests / Strictly necessary |
| Analytics and advertising cookies | Consent |
Where we describe processing as based on consent, you may withdraw it at any time â use the unsubscribe link in any newsletter email, or manage cookie preferences via our Cookie Policy.
Sharing Your Data
We share data in limited circumstances only:
5.1 Service Providers
| Provider category | Purpose | Data shared |
|---|---|---|
| Website hosting (Netlify) | Hosting and serving the website | All site data, served over encrypted HTTPS |
| Email delivery (if/when implemented) | Sending newsletters | Email address only |
| Analytics (if/when implemented, e.g. Google Analytics) | Understanding usage patterns | Pseudonymous usage data |
| Advertising (once approved and active, e.g. Google AdSense) | Displaying advertisements | IP address, cookie identifiers, where consented |
5.2 Legal Requirements
We may disclose personal data if required to by law, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
5.3 Business Changes
If VitalPulse is ever transferred to a new owner or operator, we would notify users via a notice on the website before any data is transferred and becomes subject to a different privacy policy.
Cookies & Tracking
We use cookies to operate the Service, remember preferences, and â where implemented â analyse traffic and display advertisements. You can manage your preferences below or in our full Cookie Policy.
Most browsers also let you refuse or delete cookies directly. Disabling all cookies may affect your experience across many websites, not just this one.
Data Retention
We keep personal data only as long as necessary for the purposes described in this policy, or as required by applicable law:
| Data type | Retention period | Reason |
|---|---|---|
| Newsletter subscriptions | Until you unsubscribe | Ongoing service delivery |
| Contact form messages | As long as reasonably needed to resolve the matter | Responding to your enquiry |
| Server access logs | Typically a matter of weeks to a few months | Security monitoring |
| Financial/billing records (if applicable) | As required by applicable tax and accounting regulations | Legal compliance |
When data is no longer needed, we delete it or anonymise it. You can request early deletion â see Section 8.
Your Rights
Depending on where you're located, you may have the following rights over your personal data. We aim to honour requests without requiring you to justify them.
How to Exercise Your Rights
Email us at privacy@myvitalpulse.org. As a matter of good practice, and to align with timelines under frameworks like the UK/EU GDPR and CCPA where relevant, we aim to respond within 30 days. We may ask you to verify your identity first.
Security
We take reasonable, practical steps to protect your personal data against loss, unauthorised access, and misuse:
- The site is served over HTTPS with an automatically-renewed SSL/TLS certificate
- Access to site administration is limited and protected
- We keep the platforms and dependencies we rely on reasonably up to date
Data Breach Notification
If a data breach occurs that is likely to pose a risk to your rights, we will notify affected users without undue delay, in line with globally recognized good practice such as the UK/EU GDPR's approach to breach notification.
Children's Privacy
VitalPulse is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided personal data to us, please contact us at privacy@myvitalpulse.org and we will delete the information promptly.
Third-Party Links
Our Service contains links to third-party websites, including sources cited in our articles and social media platforms. This Privacy Policy applies only to VitalPulse. Once you follow a link elsewhere, that site's own privacy policy governs your data. We recommend reviewing the privacy policy of any site you visit.
International Data Transfers
VitalPulse is operated from Pakistan. If you access the Service from elsewhere, your data may be processed in Pakistan and/or in the countries where our hosting and service providers operate â for example, through Netlify's global hosting infrastructure.
Where our providers transfer data internationally, they typically rely on recognized safeguards such as Standard Contractual Clauses or, where applicable, frameworks like the EU-US Data Privacy Framework. You can ask us for more detail on the specific safeguards in place by contacting us.
Changes to This Policy
We may update this Privacy Policy as our practices, technology, or applicable law change. When we make significant changes, we will update the "Last updated" date at the top of this page and, where appropriate, note the change here.
Continuing to use the Service after an update means you accept the revised policy. If you disagree with a change, please discontinue use of the Service.
Version History
| Version | Date | Notes |
|---|---|---|
| 1.0 (current) | 22 July 2026 | Initial published Privacy Policy |
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please get in touch â we respond to every message.
VitalPulse
For privacy questions, data requests, and general enquiries.