Privacy Policy

1. Introduction

Welcome to Vinner Healthcare ("we", "us", or "our"). This Privacy Policy explains how we collect, use, share and protect your personal information when you visit our website at www.vinnerhealthcare.com (the "Website"). It also explains your rights and choices regarding your data.

By using our Website, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue your use of our Website.

2. Information We Collect

2.1  Information You Provide Directly

• Name, email address and phone number (e.g. when you fill in a contact or enquiry form)
• Healthcare enquiries and messages you send us
• Any other information you voluntarily submit

2.2  Information Collected Automatically via Meta Business Tools

We use Meta Business Tools — including the Meta Pixel, Meta Conversions API, Facebook SDK for App Events, Offline Conversions and App Events API — which automatically collect the following categories of data when you visit or interact with our Website:

• Contact Information: personally identifying details such as names, email addresses and phone numbers, used solely for matching purposes. This information is hashed before transmission to Meta.
• Event Data: information about your actions on our Website, including page visits, product views, and purchases or enquiry submissions.
• Device and browser information, IP address, and referring URLs.
• Impression data from Facebook Social Plugins (e.g. Like and Share buttons) and Facebook Login.

This data collection is governed by the Meta Business Tools Terms (effective 3 November 2025). For full details please see Meta's Business Tools Terms.

2.3  Cookies and Tracking Technologies

We use cookies and similar technologies (pixels, web beacons) to collect information about your browsing activity. These include:

• Essential cookies required for the Website to function.
• Analytics cookies to understand how visitors use our Website.
• Advertising cookies placed by Meta to help us measure and target advertising.

You may manage your cookie preferences at any time. Please see Section 8 (Your Rights and Choices) below.

3. How We Use Your Information

3.1  Providing and Improving Our Services

• To respond to your enquiries and provide healthcare information.
• To improve our Website, products and services.
• To ensure the security and integrity of our Website.

3.2  Advertising and Measurement (via Meta Business Tools)

We use Business Tool Data for the following advertising and measurement purposes, as permitted under Meta's Business Tools Terms:

(a) Contact Information Matching

We instruct Meta to process your hashed Contact Information solely to match it against Meta user IDs ("Matched User IDs") and combine those IDs with Event Data. Meta deletes your Contact Information following this matching process.

(b) Measurement and Analytics

We use Event Data to:

• Exclude certain users from seeing our ads.
• Generate Campaign Reports on the impact of our advertising campaigns and attribute conversions to ad impressions.
• Produce Analytics and insights about how people use our Website, apps, products and services.

(c) Ad Targeting

We may direct Meta to use Event Data to create custom audiences — groups of Meta users based on your interactions with our Website — to target our ad campaigns. Custom audiences are created and managed in accordance with applicable law and Meta's terms. We will not sell or transfer these audiences to third parties.

(d) Commercial and Transactional Messages

We may use Matched User IDs and associated Event Data to send you transactional and commercial messages via Messenger and other Meta products, where you have given appropriate consent.

(e) Ad Delivery and Personalisation

In connection with ad delivery, Meta will: (i) only use your Event Data for ads delivery after aggregating it with data from other advertisers; and (ii) not allow other advertisers to target advertising solely on the basis of your Event Data. Meta may also use Event Data to personalise features and content shown to you on and off Meta platforms. For more information, see Meta's Privacy Policy.

3.3  Legal Bases for Processing (GDPR / UK GDPR)

Where applicable, we rely on the following legal bases to process your personal information:

• Legitimate interests — to measure and improve our advertising campaigns and Website performance.
• Consent — for the placement of non-essential cookies and for sending marketing communications; you may withdraw consent at any time.
• Contract — to fulfil enquiries and services you request from us.
• Legal obligation — where we are required to process your data by law.

4. Sharing Your Information

4.1  Meta Platforms

We share Business Tool Data with Meta Platforms Ireland Limited (for EEA/Switzerland users) and Meta Platforms, Inc. (for UK and rest-of-world users) for the purposes described in Section 3.2. We act as a Controller in respect of matching, measurement and analytics services, and as a Joint Controller with Meta in respect of ad targeting and delivery. Meta acts as an independent Controller for any further processing after your data is transmitted to Meta.

4.2  Service Providers

We may share your information with trusted third-party service providers who assist us in operating our Website or conducting our business, subject to strict data processing agreements. These providers are prohibited from using your data for any purpose other than those we specify.

4.3  Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal requests from public authorities.

4.4  Business Transfers

If Vinner Healthcare is involved in a merger, acquisition or asset sale, your personal information may be transferred as a business asset. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

4.5  What We Will Not Do

• We will not sell your personal information to any third party.
• We will not share Business Tool Data with third parties (including advertisers) unless you have given us permission or we are required to do so by law.
• We will not share data that includes health information, financial information, credit card numbers, or other sensitive categories for the purposes of ad targeting.
• We will not knowingly collect or share data from or about children under the age of 13.

5. Data Retention

We retain your personal information only for as long as is necessary for the purposes described in this Privacy Policy, or as required by law.

• Event Data submitted via Meta Business Tools is retained for a maximum of two (2) years, in accordance with Meta's Business Tools Terms.
• Custom audiences created using Event Data are retained until you or we delete them via account tools.
• Contact form submissions and enquiry records are retained for up to three (3) years or as required to fulfil your request.
• Cookie data is retained in accordance with the expiry periods set out in our Cookie Policy.

6. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including the United States, where Meta Platforms, Inc. is headquartered. Such transfers are made subject to appropriate safeguards including Standard Contractual Clauses (SCCs) and, where applicable:

• Meta's Data Processing Terms and Global Data Transfer Addendum.
• The UK Data Transfer Addendum (for UK personal data transferred to Meta Platforms, Inc.).
• The EU-US Data Privacy Framework (where applicable).

7. Data Security

We implement and maintain appropriate organisational, technical and physical safeguards to protect your personal information against unauthorised access, use, alteration or disclosure. These measures include:

• Hashing of Contact Information before transmission to Meta.
• Encryption of data in transit using TLS/HTTPS.
• Access controls limiting data access to authorised personnel.
• Regular review of security practices in accordance with Meta's Data Security Terms.

While we take reasonable steps to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. If you become aware of any potential breach of security, please contact us immediately.

8. Your Rights and Choices

8.1  Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

8.2  Opt-Out of Ad Targeting

You may opt out of the collection and use of your information for ad targeting at any time by visiting:

• Digital Advertising Alliance (DAA):
• http://www.aboutads.info/choices
• Your Online Choices (EU): http://www.youronlinechoices.eu/
• Facebook Ad Preferences: https://www.facebook.com/ads/preferences

8.3  Cookie Preferences

You can manage your cookie preferences through our Cookie Consent tool available on our Website, or through your browser settings. For guidance on implementing consent, visit Meta's Cookie Consent Resource.

8.4  Individual Data Requests (Meta)

In accordance with Meta's Business Tools Terms, you may also request access to your Event Data held by Meta directly by contacting Meta via their privacy settings.

9. Children's Privacy

Our Website is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. We will not share with Meta any data that we know or reasonably should know is from or about children under the age of 13. If you believe we have inadvertently collected information from a child under 13, please contact us immediately so we can delete such information.

10. Sensitive Information

We do not intentionally collect or share sensitive categories of personal information, including:

• Health or medical information
• Financial information (including bank account or credit card numbers)
• Consumer report information
• Social security or government identification numbers
• Racial or ethnic origin, political opinions, religious beliefs, or other special category data under applicable law

Any events, conversions or custom audiences we create through Meta Business Tools will not be named, structured or based on any such sensitive information.

11. GDPR and UK GDPR — Additional Information

11.1  EEA Users

For processing of personal data subject to the General Data Protection Regulation (EU) 2016/679 ("GDPR"):

• We are the Controller for matching, measurement and analytics services (Sections 3.2(a) and 3.2(b) above).
• We are a Joint Controller with Meta Platforms Ireland Limited, Block J, Serpentine Avenue, Dublin 4, Ireland, for Event Data related to ad targeting and delivery (Sections 3.2(c) to 3.2(e) above). This joint controllership is governed by the Controller Addendum available on Meta's website.
• Meta Platforms Ireland Limited acts as an independent Controller for any further processing after your data is transmitted to Meta.

11.2  UK Users

For processing of personal data subject to the UK GDPR:

• We are the Controller for matching, measurement and analytics services.
• We are a Joint Controller with Meta Platforms, Inc., 1 Meta Way, Menlo Park, CA 94025, US, for Event Data related to ad targeting and delivery. This is governed by the UK Controller Addendum.
• The UK Data Transfer Addendum applies to any transfers of personal data to Meta Platforms, Inc.

12. Third-Party Links

Our Website may contain links to third-party websites. This Privacy Policy does not apply to those websites and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party websites you visit.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or other factors. We will indicate the "Last Updated" date at the top of this page. By continuing to use our Website after any update, you agree to the revised Privacy Policy. We encourage you to review this Privacy Policy periodically.

14. Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or our data practices, please contact us at:

For data protection enquiries under GDPR, you also have the right to lodge a complaint with your local supervisory authority. In the EU, you can find your authority at 

https://edpb.europa.eu/about-edpb/about-edpb/members_en

. In the UK, the supervisory authority is the Information Commissioner's Office (ICO): 

https://ico.org.uk