Privacy Policy

We use the information we collect to:

• Create and manage your client portal account.
• Process quote requests, production orders, and invoices.
• Communicate with you about your orders, formulas, and account status.
• Provide technical support and respond to inquiries.
• Improve the Platform through usage analytics and feedback.
• Send transactional emails (order confirmations, shipping notices, document uploads).
• Send marketing communications about new capabilities or products — you may opt out at any time.
• Comply with legal obligations, including FDA and cGMP record-keeping requirements applicable to dietary supplement manufacturing.
• Detect and prevent fraud, unauthorized access, and other security incidents.

If you are located in the European Economic Area or United Kingdom, we process your personal data under the following legal bases:

• Contract performance: processing necessary to fulfill your orders and manage your account.
• Legitimate interests: fraud prevention, platform security, and service improvement.
• Legal obligation: compliance with applicable laws and regulations.
• Consent: marketing communications and non-essential analytics cookies.

We do not sell your personal information. We share it only in the following circumstances:

• Service providers: cloud hosting, email delivery, payment processing, and analytics vendors who are contractually bound to protect your data.
• Manufacturing partners: where your formula or order requires coordination with a third-party co-manufacturer, we share only the minimum necessary specifications.
• Legal requirements: when required by law, court order, or government authority, or to protect the rights and safety of We Make Vitamins, our clients, or the public.
• Business transfers: in connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

We retain your account and order data for as long as your account is active and for a minimum of seven (7) years thereafter to comply with FDA record-keeping requirements for dietary supplement manufacturers (21 CFR Part 111). Formula and batch records may be retained longer where required by applicable regulations. You may request deletion of non-regulatory data at any time (see Section 8).

We use the following categories of cookies:

• Strictly necessary: session authentication and CSRF protection. These cannot be disabled.
• Analytics: aggregate usage statistics to improve the Platform. You may opt out via our cookie banner or your browser settings.

We do not use advertising or cross-site tracking cookies.

We implement industry-standard technical and organizational measures to protect your information, including TLS encryption in transit, encrypted storage at rest, role-based access controls, and regular security reviews. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security but we take our obligation to protect your data seriously.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your personal data (subject to regulatory retention obligations).
• Restrict or object to certain processing activities.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. We may need to verify your identity before processing your request.

The Platform is intended solely for business use by adults. We do not knowingly collect personal information from individuals under the age of 18. If you believe we have inadvertently collected such information, please contact us immediately.

We Make Vitamins is based in the United States. If you access the Platform from outside the US, your information may be transferred to and processed in the United States. Where required, we rely on Standard Contractual Clauses or other approved transfer mechanisms to protect cross-border data transfers.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a prominent notice on the Platform at least 14 days before the changes take effect. Your continued use of the Platform after the effective date constitutes acceptance of the updated policy.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: