Privacy

01Who we are

vialprep is an injection preparation supplies and education company operated by Influence Media Pte. Ltd., a company incorporated in the Republic of Singapore (UEN 202140293Z). We sell sterile preparation supplies and educational materials. We do not sell, manufacture, prescribe, or distribute peptides, hormones, or controlled substances.

Influence Media Pte. Ltd. is the data controller responsible for your personal data under this policy.

Contact: hello@vialprep.com

02What we collect

We collect only what we need to operate the service and improve the product.

• Protocol data (compound name, dose, frequency) entered in our dose calculator and /start-here flow. Used to personalize your experience and send optional reminders. Stored in Supabase (Singapore region).
• Contact information (name, email, phone number, delivery address) provided at checkout, via the /start-here flow, blog signup forms, or lead capture prompts. Contact info is encrypted client-side before it reaches our database.
• LINE ID (optional) provided during signup by users in Thailand. Used for transactional and promotional messaging via the LINE platform.
• Payment data processed by Stripe. We never see or store your full card number. Stripe's privacy policy governs payment data.
• Behavioural analytics collected via Google Analytics 4 (GA4). This includes page views, button interactions, scroll depth, calculator inputs (compound name, dose, vial size, water volume, syringe type, route), and traffic source data. GA4 may use cookies and device identifiers. We do not link analytics data to your name or email.
• Engagement data from interactive features including lead capture prompts (email, interaction patterns) and supplier audit tool results.
• Source and campaign data (UTM parameters, referral source) captured when you arrive at the site.

03What we do not collect

• Medical history or health records
• Government-issued identification
• Biometric data
• Precise geolocation data beyond your delivery address

04Lawful basis for processing

We process your data on the following legal grounds:

• Contract: Contact information and delivery address are necessary to fulfil your order and deliver your kit.
• Consent: Protocol data, LINE ID, and marketing communications are collected with your explicit consent. You may withdraw consent at any time.
• Legitimate interest: Behavioural analytics, engagement data, and aggregated research help us improve our products, develop new features, and understand market trends. We balance this against your privacy rights and only use anonymized or aggregated data for these purposes.

05How we use your data

• Delivering your kit: address, name, and phone number are shared with our logistics partner for delivery.
• Personalizing your experience: protocol data powers your calculator results and any reminders you opt into.
• Improving vialprep: analytics help us understand which parts of the site work and which need fixing.
• Product development: anonymized usage patterns inform new features, tools, and educational content.
• Research and intelligence: we may use anonymized protocol and usage data to train machine learning models, develop analytical tools, and create research outputs. See Section 06.

We never use identifiable health-related data for marketing without your explicit consent.

06Anonymized and aggregated data

We create anonymized, aggregated datasets from protocol data, calculator usage, and behavioural analytics. These datasets cannot identify you.

We may use, license, sell, or publish these anonymized datasets for:

• Research and academic partnerships
• Industry reporting and market intelligence
• Product development and feature improvement
• Training machine learning and AI models
• Commercial data products and analytics services

Once data is truly anonymized, it is no longer personal data under applicable privacy laws and may be used without restriction. We apply industry-standard anonymization techniques and will never attempt to re-identify anonymized data.

07Marketing communications

We may contact you via email, LINE, or SMS. We distinguish between:

• Transactional messages: order confirmations, delivery updates, account notifications, and security alerts. These are sent as part of our contract with you and do not require separate marketing consent.
• Product updates: new features, tools, educational content, and service improvements. Sent with your consent.
• Promotional messages: offers, partner promotions, referral programmes, and commercial communications. Sent only with your explicit opt-in consent.

You can opt out of product updates and promotional messages at any time by replying STOP, clicking the unsubscribe link, or emailing hello@vialprep.com. Opting out of promotional messages does not affect transactional messages.

08Third parties

• Stripe (payment processing, USA)
• Supabase (database hosting, Singapore region)
• Vercel (website hosting, global CDN)
• Google Analytics 4 (behavioural analytics, USA)
• LINE (messaging platform, Japan/Thailand) — when you opt in
• X / Twitter (embedded content widgets on blog pages, USA)
• Google Fonts (typography, USA) — loads font files; your IP address is transmitted to Google servers
• Logistics partners (delivery services in your region)

Each provider processes data only for the purpose we share it. We review our providers periodically and may integrate additional service providers as the product evolves. This list will be updated to reflect any material changes.

09International data transfers

vialprep is operated from Singapore. Your data may be transferred to and processed in:

• Singapore (Supabase database, company operations)
• United States (Stripe payments, Google Analytics, Google Fonts, X/Twitter widgets)
• Global CDN nodes (Vercel website hosting)
• Japan / Thailand (LINE messaging, when applicable)

Where data is transferred outside your jurisdiction, we rely on the receiving country's data protection adequacy, standard contractual clauses, or the provider's binding corporate rules to ensure your data is protected to a standard consistent with the Singapore Personal Data Protection Act 2012 (PDPA).

10Data security

Contact information is encrypted client-side before insertion into our database. All connections use HTTPS/TLS. Access to production data is restricted to authorised personnel of Influence Media Pte. Ltd. We do not guarantee the security of unencrypted communications (email, SMS, LINE).

11Your rights

Depending on where you are located, you may have the following rights regarding your personal data. To exercise any right, email hello@vialprep.com. We will respond within 30 days.

Singapore PDPA (all users)

Under the Personal Data Protection Act 2012, you have the right to:

• Access your personal data and request a copy.
• Correct any inaccurate or incomplete data.
• Withdraw consent for any processing you previously agreed to.

vialprep will cease processing your data within a reasonable period after consent is withdrawn, except where required by law.

EU / EEA residents (GDPR)

If you are in the European Union or European Economic Area, you also have the right to:

• Erasure — request deletion of your personal data.
• Restriction — limit how we process your data.
• Portability — receive your data in a machine-readable format.
• Object — object to processing based on legitimate interest.
• Automated decision-making — not be subject to decisions based solely on automated processing. We do not currently make automated decisions that produce legal effects concerning you.

You may also lodge a complaint with your local data protection authority.

California residents (CCPA / CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and disclose.
• Delete your personal information.
• Opt out of the sale or sharing of personal information. We do not sell identifiable personal information. Our use of anonymized, aggregated data (Section 06) does not constitute a "sale" under the CCPA.
• Non-discrimination — we will not treat you differently for exercising your rights.

Thailand residents (PDPA)

Under the Personal Data Protection Act B.E. 2562, you have the right to access, correct, delete, withdraw consent, object to processing, and port your data. One message deletes everything. We will not ask why.

All users

Regardless of your location, you can request deletion of your personal data at any time by emailing hello@vialprep.com. We will process your request within 30 days.

12Cookies and tracking technologies

We use the following tracking technologies:

• Google Analytics 4 cookies: GA4 may set first-party cookies to distinguish users and sessions. These are used for anonymous behavioural analytics only.
• localStorage: We use browser localStorage (not cookies) to save your progress in the /start-here flow, store your email for convenience, retain calculator and tool preferences, manage interactive feature state (e.g., lead prompt dismissal cooldowns), and store your anonymous analytics identifier.
• Third-party widgets: Blog pages may load Twitter/X embed scripts, which set their own cookies under Twitter's privacy policy. These are loaded only when embedded content is visible.

We do not use advertising pixels, retargeting cookies, or cross-site tracking technologies. We do not install cookies from ad networks.

13Data retention

• Active customers: We retain your personal data for the duration of your active use of the service, plus 24 months after your last purchase or meaningful interaction.
• Waitlist and lead data: Retained for 24 months from collection, then deleted unless you become an active customer.
• Anonymized and aggregated data: Retained indefinitely, as it cannot identify you.
• Tax and financial records: Retained as required by Singapore law (currently 5 years from the relevant year of assessment).

If you request deletion, we remove your identifiable personal data within 30 days, except where retention is required by law.

14Children's data

vialprep is not intended for anyone under 18 years of age. We do not knowingly collect personal data from individuals under 18. If we discover that we have collected data from a minor, we will delete it promptly. If you believe a minor has provided us with personal data, please contact hello@vialprep.com.

15Data breach notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will:

• Notify the relevant data protection authority within 72 hours of becoming aware of the breach.
• Notify affected users without undue delay via email or prominent site notice.
• Document the breach, its effects, and the remedial actions taken.

16Business transfers

If vialprep or Influence Media Pte. Ltd. is acquired, merged, reorganized, or transfers substantially all of its assets, your personal data may be transferred to the acquiring entity. We will notify you via email or prominent site notice before your data becomes subject to a materially different privacy policy. You will have the opportunity to request deletion before the transfer takes effect.

17Partner and affiliate data sharing

We work with distribution partners and affiliates (e.g., personal trainers, referral partners). We may share the following with partners:

• Anonymized performance data: referral counts, conversion rates, and aggregated usage trends. This data cannot identify individual customers.
• Commission and payout data: order counts and revenue attributed to a partner's referral code, necessary for calculating commissions.

We will never share your name, email, phone number, address, or protocol data with affiliates or distribution partners without your explicit consent.

18Changes to this policy

We may update this policy from time to time. The "last updated" date at the top reflects the most recent revision. For material changes, we will notify you via email or prominent site notice at least 30 days before the changes take effect. Continued use of vialprep after the effective date constitutes acceptance of the updated policy.

19Contact

Questions about your data or this policy? Email hello@vialprep.com.

Data controller and designated data protection contact: Influence Media Pte. Ltd., Singapore.