Legal information

Legal & Privacy

This page covers our cookie usage, data protection practices under the GDPR / DSGVO, and general legal disclosures. Last updated July 2026.

01

Cookie Policy

This website uses a minimal set of cookies necessary for its core functionality. We do not use third-party advertising or tracking cookies.

Cookie Purpose Type Duration
XSRF-TOKEN Protects forms against cross-site request forgery (CSRF). Essential Session
vital_earth_session Maintains your session state while browsing (e.g. form data, flash messages). Essential Session
hCaptcha Set by hCaptcha when you submit the request form, to help prevent spam and abuse. Essential / Security Up to 1 year (set by hCaptcha)

Because these cookies are strictly necessary for the website to function (forms, security), they are set automatically and do not require consent under Art. 5(3) of the ePrivacy Directive and § 25(2) TTDSG. We do not use analytics, marketing, or social media cookies.

02

Privacy Policy (GDPR / DSGVO)

We are committed to protecting your personal data in accordance with the EU General Data Protection Regulation (GDPR) and, where applicable, the German Federal Data Protection Act (Bundesdatenschutzgesetz / DSGVO). This section explains how your data is processed when you use this website, in particular the sample request and B2B order forms.

03

Data Controller

VitalEarth

[Company legal name & registration number — to be completed]

[Registered address — to be completed]

Email: info@jevmc.com

If a Data Protection Officer (DPO) is appointed, their contact details will be listed here.

04

What Data We Collect

When you submit the Sample Request or B2B Order form, we collect:

  • Full name
  • Email address
  • Phone number (optional)
  • Delivery / shipping address
  • Company name and job position (B2B form only)
  • Product preferences, quantities, and order specifications you provide
  • Any message or additional notes you choose to include
  • Technical data submitted by hCaptcha to verify you are not a bot (IP address, browser signals — processed by hCaptcha, see Section 6)

We do not collect payment information through this website. We do not use cookies or scripts to track your browsing behaviour across other websites.

06

Third-Party Services

We use the following third-party services to operate this website and process form submissions:

hCaptcha

Used on our forms to distinguish human submissions from automated bots. hCaptcha may process your IP address and browser data. See the hCaptcha Privacy Policy.

Email delivery provider

Form submissions are sent via our transactional email provider to info@jevmc.com for processing your request. [Provider name — to be completed, e.g. Postmark, SES, Mailgun].

Google Fonts

Typefaces (Cormorant Garamond, DM Sans) are loaded from Google Fonts servers, which may process your IP address. [If self-hosting fonts, remove this row.]

Image hosting

Some imagery is served from Unsplash and a third-party media CDN (R2 storage), which may log standard request data (IP address, user agent) as part of normal content delivery.

07

Data Retention

We retain personal data submitted through our forms only for as long as necessary to fulfil the purposes described above, typically:

  • Sample requests and B2B enquiries: retained for the duration of the business relationship and a reasonable period afterward for follow-up, plus any statutory retention periods applicable under German commercial and tax law (typically 6–10 years for business correspondence and invoices, per § 257 HGB / § 147 AO).
  • Form submissions that do not result in a business relationship: deleted after a reasonable period, generally no longer than 24 months.
08

Your Rights

Under the GDPR, you have the right to:

  • Access — request a copy of the personal data we hold about you (Art. 15).
  • Rectification — request correction of inaccurate or incomplete data (Art. 16).
  • Erasure — request deletion of your data, where applicable ("right to be forgotten") (Art. 17).
  • Restriction — request that we limit processing of your data under certain conditions (Art. 18).
  • Data portability — receive your data in a structured, machine-readable format (Art. 20).
  • Objection — object to processing based on legitimate interests (Art. 21).
  • Lodge a complaint — with your local data protection supervisory authority.

To exercise any of these rights, contact us at info@jevmc.com. We will respond within one month as required by Art. 12(3) GDPR.

09

General Disclaimer

The information provided on this website, including product descriptions, certifications, and health-related claims, is provided in good faith for general informational purposes only. Functional product claims (Hibiscus RTD range) are based on EFSA-authorised health claim mechanisms under EU Regulation 1924/2006 and Regulation (EU) No. 432/2012, Art. 13.1, where indicated. These claims relate to the function of nutrients (e.g. Vitamin C) and not to the diagnosis, treatment, or prevention of any disease.

Certification references (BIO / organic, EUDR-readiness, EFSA compliance) reflect the supply chain standards we apply and the certifications held by our suppliers and products at the time of publication. Certificates are available upon request for B2B partners.

While we strive to keep all information accurate and up to date, we make no warranties of any kind, express or implied, about the completeness, accuracy, reliability, or availability of the website or the information, products, or services contained on it for any purpose.

10

Contact

For any questions regarding this Privacy Policy, cookies, or to exercise your data protection rights, please contact us at:

info@jevmc.com