Your privacy
Privacy notice
How Vita D3 handles personal data on vitad3odf.com, under Egypt's Personal Data Protection Law (Law No. 151 of 2020) and its Executive Regulations.
Version 2026-10-12 · effective 12 October 2026. The Arabic version is the reference text.
1. Who is responsible for your data
Vita D3 ("we"), commercial register no. 204-999-359, is the data controller.
Privacy and data protection contact: ahmed.nassr@gmail.com · WhatsApp +20 150 906 1111
2. You can use the check without giving us any personal data
The vitamin D check is scored on your own device. If you don't enter a mobile number, nothing you type or answer is sent to us or stored by us.
3. What we collect and why
Contact data
Mobile number, age, page language, date and time, and the consents you gave with the consent-text version.
- When
- Only if you enter your number and tick the contact consent.
- Purpose
- To contact you by phone or WhatsApp about your result and Vita D3 products.
- Legal basis
- Your consent (Article 2, and Article 17 on electronic direct marketing).
Health data (sensitive)
Your “yes” answers to the health questions, your score and result band.
- When
- Only if you also tick the separate health-data consent.
- Purpose
- So a specialist can follow up with you.
- Legal basis
- Your explicit written (electronic) consent to processing sensitive data (Article 12).
Technical logs
Shortened IP address (last part removed), date and time, page requested, browser type.
- When
- Every visit.
- Purpose
- To keep the website secure and running.
- Legal basis
- Necessary to operate a secure website.
Security check
Technical signals from your browser, processed by Cloudflare Turnstile.
- When
- Only if the check appears after you enter your number.
- Purpose
- To stop automated spam.
- Legal basis
- Necessary to protect the form.
We don't use cookies for advertising or analytics, and the site has no third-party trackers. Fonts are served from our own server.
4. Children
The check can be used from age 9. We only accept the number of someone under 18 when a parent or legal guardian confirms they give the consents on the child's behalf. For children under 15, the parent or guardian should fill in the form themselves.
5. Who receives your data
- Google (Google Workspace / Google Sheets): stores the contact and health data we collect, on servers outside Egypt.
- Amazon Web Services (Amazon Lightsail, N. Virginia, USA): hosts this website and its technical logs.
- Cloudflare: provides the security check that may appear when you enter your number.
- Our staff and the specialists who follow up with you, only as far as needed.
These providers act on our instructions. We don't sell your data or share it for other companies' marketing.
6. Transfers outside Egypt
Your data is stored outside Egypt, as described above. We transfer it on the basis of your explicit consent (Article 15 of the Law) and, where required, a licence or permit from the Personal Data Protection Center.
7. How long we keep it
- Contact and health data: deleted automatically 12 months after you send it, or sooner if you ask.
- Proof of your consent (number, date, consent version and your choices): kept as long as the law requires as proof of direct-marketing consent (3 years after our last message to you), at most 4 years, then deleted. It is not used to contact you.
- Technical logs: 14 days.
8. Your rights
Under the Law you can:
- know what data we hold about you and get a copy;
- correct or update it;
- have it deleted;
- withdraw your consent at any time, without affecting what happened before;
- restrict or object to processing;
- be told about any breach that affects your data.
How to use your rights: email ahmed.nassr@gmail.com or WhatsApp +20 150 906 1111 and mention the number concerned, or tell the person who calls you. We may ask you to confirm the number to protect your data. To stop marketing messages, reply "STOP" at any time.
9. Security
We use encrypted connections (HTTPS), limit access to the staff who need it, and delete data automatically when its retention period ends. If a breach affects your data, we notify the Personal Data Protection Center within 72 hours and you within 3 working days after that.
10. Complaints
You can contact our data protection officer, and you have the right to complain to the Personal Data Protection Center.
11. Changes
When we change this notice we update the version at the top of the page. If we change how we use data you have already given us, we will ask for your consent again.