1. Who we are and how to contact us
VitalReach Wellness Hub is a Ghanaian-American wellness brand offering wellness products, education and consultation intake. “We,” “us” and “our” refer to VitalReach Wellness Hub.
VitalReach Wellness Hub24 Kusia Street, Kokomlemle, Accra, Ghana
+1 (410) 504-4449
Contact the VitalReach team
For a privacy request, provide a way to reach you and, if relevant, your submission or order reference. Do not include symptoms, medical histories, passwords, card details or identity documents in the general contact form. We will explain how to provide any information needed to verify and handle your request.
2. Information we collect
- Messages: name, email, phone, message content, submission time and read status.
- Shopping and orders: browser shopping-session identifier, bag contents, product variants and quantities, contact and delivery details, order notes, quotes, shipping and taxes, payment currency and references, payment status and fulfillment history.
- Consultation intake: name, age, sex response, pregnancy/postpartum response, optional contact information, selected checklists, health answers, dated readings and lab results, medicines and remedies, and notes you provide.
- Clinical records we create: screening flags and supporting answers, submission reference, consent time and version, review status, and clinical assessment and action notes.
- Administration and security: sign-in identity, account status and permissions, reviewer identities, access/review audit events and technical logs.
Health questions may concern kidney, cardiovascular, liver or diabetes history, medicine use and withdrawal, mental wellbeing, and self-harm. Uncertain answers can remain “Unknown” or “Prefer not to say.” Do not guess measurements.
3. Consultation consent and choices
When online intake is available, we ask for affirmative consent before storing your submission for consultation and automated screening review. Opening a QR link, browsing, purchasing a product or accepting general website terms does not give consent to collect a health questionnaire.
The QR code opens a blank form and contains no patient record or health answers. A submission reference is not a public link to your record. You may decline online submission and ask staff about assessment options. Omitting optional information or declining answers may limit the review.
Ask staff to correct a submitted answer or discuss withdrawing consent for future consent-based use. Withdrawal does not undo prior lawful use or necessarily require deletion of records that must be retained.
4. Automated screening and human review
Our software applies predefined rules to reported symptoms, history, medicines and measurements to highlight concerns. It records the rule version and reasons for each flag. The current feature does not send questionnaire answers to a generative-AI provider to produce flags.
Flags are not diagnoses or disease probabilities. Incomplete or inaccurate answers can produce missing or incorrect flags. A lack of flags does not mean a person is healthy. A clinical reviewer interprets the information; green “no outstanding action” status records an explicit reviewer decision.
You can ask for an explanation, correction or human review. The tool does not automatically decide eligibility for insurance, employment, credit or treatment. It does not dispatch emergency services or guarantee an immediate response.
5. Why we use information
We use information to respond to requests, maintain shopping bags, prepare and fulfill orders, calculate taxes, verify payments, prepare consultations, support clinical review, administer access, investigate problems, prevent abuse and meet applicable recordkeeping obligations.
Consent supports the optional health-intake collection described above. Other processing may be needed to take requested steps toward a purchase, perform an order, protect the service or comply with law. The basis and rights that apply depend on the information, purpose and jurisdiction.
We do not sell personal information. Consultation answers, screening flags and clinical notes are not used for advertising, marketing audiences or newsletter enrollment. Submitting a message, order or consultation form does not sign you up for marketing.
6. Access and sharing
Authorized operational administrators handle messages and orders. Consultation records in the portal require separate clinical-review permission. Superadmins manage permissions; ordinary administrator or superadmin status alone does not grant clinical-record access. Record reads and review updates are audited.
Hosting, infrastructure and support providers may process stored information or backups as needed to operate and secure the service. Payment providers receive payment setup details; tax providers receive delivery and transaction details; fulfillment partners may receive information needed for an arranged delivery. Health questionnaire answers are not supplied to payment or delivery providers as part of these workflows.
Information may also be disclosed as required or permitted by law, to address a safety/security concern, or as part of a lawful business transfer with appropriate protections. Separate clinical referrals or additional health-record disclosures should be discussed with you and handled on an appropriate legal basis.
7. Payments and order records
When enabled, payments take place on hosted Stripe or Paystack pages. We send setup details such as email, order/reference identifier, amount and currency, and receive verification/status information. Our checkout form does not collect full card numbers or bank login credentials.
Order details, payment references, tax evidence and fulfillment records support service, reconciliation and recordkeeping. Providers handle their own records under their policies: Stripe privacy and Paystack privacy.
8. Google sign-in and administrator records
Google authenticates approved administrators. We use basic identity information such as email, name, account identifier and sign-in status to control access and attribute activity. We do not request Gmail, Drive, calendar, contact-list or Google password access.
We maintain account status, permissions and relevant administrative records. We do not sell Google sign-in data or use it for advertising. See Google's Privacy Policy for its handling of information.
10. Technical records and safeguards
Servers may record IP addresses, request paths, times, browser information and errors. Connection diagnostics record events without questionnaire answers. Submission limits use a temporary derived network-address identifier to reduce abuse.
Safeguards include HTTPS, encryption of stored consultation answers and clinical notes, separate clinical permissions, restricted server access and audit records. Basic metadata, such as reference, time, urgency and status, is stored separately. Authorized technical personnel may require controlled infrastructure access. No system can promise absolute security.
Use a private device where possible, sign out of shared admin sessions and close a shared visitor session when finished. If a security incident requires notice, we will provide notice as required by applicable law.
11. Retention and backups
Retention depends on the record and purpose: messages for resolving enquiries; orders/payments for fulfillment, accounting and disputes; consultation records for review, follow-up and applicable clinical recordkeeping; and security/audit records for investigating access and misuse.
Records do not automatically disappear when a consultation is reviewed, a browser closes, consent is withdrawn or an administrator is removed. The current intake service has no automatic deletion deadline. Contact us for applicable retention information or to request deletion; we will consider the purpose and any legal need to retain the record.
Backup copies may remain after a live record is removed until the relevant backup is retired. If deletion is restricted or delayed, we will explain the reason and available options, subject to applicable law.
12. Your requests and rights
Depending on applicable law, you may request access, a copy, correction, deletion, restriction or objection to certain uses, withdrawal of consent, or an explanation and human review of automated processing. We may need proportionate information to verify identity and locate your record. Legal exceptions may apply.
Start through our privacy request form or center staff. Do not include your health history in that initial message. You can also raise concerns with the competent authority, including Ghana's Data Protection Commission where applicable.
13. Age limits and international processing
Online consultation intake is for adults aged 18 and above. Visitors under 18 should ask staff about assisted assessment; the site has no parental-consent workflow for online intake. The general website is not directed to children under 13. Contact us if a child has submitted information inappropriately.
VitalReach serves Ghana and the United States. Processing may occur where our operations and providers are located, and protections differ between jurisdictions. Cross-border processing remains subject to applicable requirements; using this website does not waive statutory privacy rights.
14. Changes to this policy
Revisions will carry a new date/version. We will provide further notice or request consent where required for a material change. Updating this policy does not by itself authorize a new use of previously collected health information. Questions can be sent using the contact details in section 1.