Cookie Policy

1.1 Strictly Necessary Cookies

Purpose: Essential for the platform to function. Without these cookies, services you've requested (like logging in or booking appointments) cannot be provided.

Duration: Session or up to 1 year

Legal Basis: Legitimate interest (GDPR Article 6(1)(f)) - these cookies are necessary to provide the service you've requested.

Cannot be disabled - Platform won't work without them.

1.2 Functional Cookies

Purpose: Remember your choices and preferences to provide enhanced, personalized features.

Duration: Up to 1 year

Legal Basis: Consent (GDPR Article 6(1)(a)) or legitimate interest for basic functionality.

Can be disabled - Platform will work but won't remember your preferences.

1.3 Analytics Cookies

Purpose: Help us understand how visitors use our platform so we can improve it.

Duration: Up to 2 years

Legal Basis: Consent (GDPR Article 6(1)(a))

Can be disabled - We use anonymized, aggregated data only.

1.4 Marketing Cookies (Future)

Purpose: Show you relevant ads and measure ad campaign effectiveness.

Status: NOT currently used. If we implement marketing cookies in the future, we will notify you, request explicit consent, and provide easy opt-out mechanisms.

Legal Basis: Consent (GDPR Article 6(1)(a))

3.1 Google Analytics (Analytics)

What it does: Helps us understand how users interact with our platform using anonymized data.

Cookies: _ga, _gid, _gat

Privacy: IP anonymization enabled, data shared with Google in aggregated form only.

3.2 Cloudflare (Security & Performance)

What it does: Protects our platform from DDoS attacks, improves loading speed via CDN.

Cookies: __cf_bm, __cflb, __cfduid

Privacy: Cloudflare does NOT track users across sites. Cookies used only for security and load balancing.

3.3 Firebase Authentication (Authentication)

What it does: Manages user authentication securely.

Cookies: Various Firebase session cookies

Privacy: Data processed in EU region, complies with GDPR.

3.4 Vercel (Hosting)

What it does: Hosts our frontend application.

Cookies: __vercel_live_token (if using preview deployments)

Privacy: EU edge network, GDPR compliant.

4.1 Our Cookie Consent Tool

When you first visit VitaFlow Care, you'll see a cookie banner with options:

• Accept All: Allow all cookies (recommended for best experience)
• Reject Non-Essential: Only strictly necessary cookies
• Customize: Choose specific cookie categories

You can change your preferences anytime by going to Account Settings → Privacy → Cookies or clicking "Cookie Preferences" in the footer.

4.2 Browser Settings

You can also control cookies through your browser settings. Be aware that blocking all cookies may prevent the platform from working correctly.