How we handle your data

Last updated: 20 April 2026

The Dietitian's Vault ("we", "us", "our") is operated by Valpre Huisamen Inc, a Personal Liability Company registered in South Africa (CIPC Registration Number 2024/703270/21). We take your privacy seriously and are committed to protecting your personal information in accordance with the Protection of Personal Information Act (POPIA) of South Africa and the General Data Protection Regulation (GDPR) for users in the European Union.

1. What information we collect

1.1 Information you give us

• Order information: name, email address, and billing details when you purchase a handbook. Payment processing is handled by our third-party payment processors — we do not store your credit card details.
• Communications: content of any emails you send us at hello@thedietitiansvault.com.

1.2 Information collected automatically

• Usage data: IP address, browser type, pages viewed, time on site, referring URL. This is collected by our hosting provider (Netlify) and Gumroad for service delivery and security.
• Cookies: we use essential cookies for cart functionality (via Gumroad) and analytics cookies where enabled. You can disable non-essential cookies in your browser.

2. How we use your information

• To process your purchase and deliver the digital products you paid for
• To send you transactional emails (order receipts, download links, updates to handbooks you purchased)
• To provide customer support when you contact us
• To comply with legal obligations (tax records, consumer protection)
• To improve our products based on aggregated, anonymised usage patterns

We do not send marketing emails without your explicit consent. We do not sell, rent, or share your personal information with third parties for their marketing purposes.

3. Who processes your data

Your data is shared only with these essential service providers:

• Gumroad (payment processing, digital delivery, order management) — Gumroad Privacy Policy
• Stripe and PayPal (payment processing via Gumroad) — their respective privacy policies apply
• Netlify (website hosting) — Netlify Privacy Policy
• Spacemail (email hosting for hello@thedietitiansvault.com) — Spacemail/Spaceship Privacy Policy
• Investec Bank (South African business banking for payouts)

4. Your rights (POPIA & GDPR)

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your information, subject to legal retention requirements (e.g. tax records)
• Object to processing or withdraw consent at any time
• Portability — receive a copy of your data in a machine-readable format
• Complain to the Information Regulator (South Africa) or your local data protection authority (EU)

To exercise any of these rights, email hello@thedietitiansvault.com with "Data request" in the subject line. We will respond within 30 days.

5. How long we keep your data

• Order records: retained for 5 years after purchase, as required by South African tax law (SARS) and consumer protection legislation
• Email communications: retained for 3 years unless deletion is requested
• Deleted account requests: processed within 30 days, except for records we are legally required to retain

6. Data security

We use industry-standard security measures to protect your data:

• HTTPS/TLS encryption on all pages
• Multi-factor authentication on administrative accounts
• Regular security audits of third-party providers
• PCI-compliant payment processing (via Gumroad/Stripe — we never see your card details)

However, no method of transmission over the internet or storage is 100% secure. In the unlikely event of a data breach, we will notify affected users within 72 hours as required by POPIA.

7. International data transfers

Our service providers (Gumroad, Stripe, Netlify) may process data in the United States and European Union. All transfers comply with POPIA and GDPR requirements via Standard Contractual Clauses.

8. Children's privacy

Our products are designed for healthcare professionals. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected information from a minor, we will delete it immediately.

9. Changes to this policy

We may update this policy occasionally. The "Last updated" date at the top will reflect changes. Material changes will be emailed to existing customers.

10. Contact us

For any privacy-related questions or requests:

Valpre Huisamen Inc
Email: hello@thedietitiansvault.com
CIPC Registration: 2024/703270/21
Information Officer: Valpre Huisamen

For unresolved concerns, you may contact the Information Regulator of South Africa.