CONSUMER HEALTH DATA PRIVACY POLICY
VLXM LLC — Vilixium® Brand
Effective Date: August 18, 2026
This Consumer Health Data Privacy Policy explains how VLXM LLC ("Vilixium,"
"we," "us," or "our") collects, uses, shares, protects, and lets you control
"consumer health data" in connection with your Wellness From Within
membership (the PMA) and the Vilixium® brand, including on
wellnessfromwithin.life, www.vilixium.com, members.vilixium.com, and
portal.vilixium.com. Wellness From Within is the PMA; VLXM LLC is the
company. It supplements our general Privacy Policy. Where this policy and
the general Privacy Policy both apply to consumer health data, the
protections most favorable to you govern.
We publish a link to this policy from our website homepage, from the
Vilixium Assessment consent screen, and from our membership legal terms.
1. About This Policy
This policy is specific to consumer health data. Our general Privacy Policy
covers all other personal information.
2. What "Consumer Health Data" Means
Consumer health data ("health data") means personal information that is
linked or reasonably linkable to you and that identifies your past, present,
or future physical or mental health status — or that could be used to infer
it. For Vilixium, the only health data we collect is the information you
choose to give us when you voluntarily take the Vilixium Assessment inside
the membership.
We do not treat, and do not collect as, health data: your application
information (name, contact details, shipping location, how you heard about
us); or your orders. Those are governed by our general Privacy Policy.
3. The Health Data We Collect, and Why
Your assessment answers. Your responses to the Vilixium Assessment —
how you have been feeling day to day (for example energy, digestive comfort,
skin, recovery), your lifestyle context, and your goals and readiness. We
use these solely to personalize your membership: to greet you with your own
situation, to suggest what to read first, and to recommend where to begin.
A derived "starting point" tag. A single general-interest tag we compute
from your answers (for example, reset, gut, immune, skin, or maintenance).
We use it to personalize your experience and, in future, to offer you
optional interest-specific content. It drives nothing automatically today.
Consent and request records. The record that you consented (date, time,
the policy version you agreed to), and records of any privacy requests you
make. We keep these to honor your choices and to show we did.
We collect health data only directly from you, only when you choose to take
the assessment, and only after you have given specific consent on the
assessment consent screen. The assessment is optional; you can use your
membership fully without it.
We do not: collect health data from any source other than you; ask for
diagnoses, conditions, medications, or medical history; use health data to
make any medical or eligibility decision; or use health data for advertising
or to build advertising profiles.
4. How We Use Health Data
- To personalize your membership — the words on your member path page, what
we suggest you read first, and which starting point we recommend.
- To provide the assessment feature itself, including letting you retake it
and see your latest result.
- To improve the assessment and our member experience in aggregate, using
de-identified or aggregated information wherever possible.
- To keep records of your consent and your privacy requests, and to comply
with law.
We never use health data: for targeted or cross-context behavioral
advertising; to sell or offer to sell it; to train advertising or
third-party models; or for any purpose we have not described here and
obtained your consent for.
5. How We Share Health Data — and What We Never Do
We do not sell your health data. We have not sold it, and we do not offer it
for sale. If that ever changed, we would first obtain your separate, valid
written authorization — distinct from the consent described here — exactly
as the law requires, and you could decline without losing access to the
membership.
We do not share your health data for advertising, and we do not disclose it
to advertising platforms or affiliate networks. Specifically, our affiliate
program and its provider never receive assessment answers or the derived tag.
We share health data only with the service providers ("processors") that
help us run the membership, and only as needed, under contracts that bind
them to protect it and to use it only on our instructions. The categories
are:
Our secure database / hosting provider. Stores your assessment answers
and consent records on our behalf, in an access-controlled, append-only
store. Processor: Cloudflare (D1 + R2).
Our e-commerce platform. Stores your account and the derived "starting
point" tag on your member record so your experience is personalized. It does
not receive your individual assessment answers. Processor: Shopify.
Legal, security, and compliance advisors. Receive health data only if
strictly necessary to protect our rights, your safety, or to comply with
law — and only under confidentiality obligations.
We may also disclose health data if required by law (for example a valid
subpoena), to protect against fraud or imminent harm, or in connection with
a merger or acquisition — in which case we will require the successor to
honor this policy or will seek your consent. We will not use these
exceptions as a workaround for the no-sale, no-advertising commitments
above.
6. Your Rights
For your health data, you have the right to
- Confirm and access — ask whether we are processing your health data
and get a copy of it, including a list of the categories of third parties
and specific processors with whom we have shared it.
- Withdraw consent — change your mind at any time. When you withdraw, we
stop collecting and using your health data for the purposes you had
consented to.
- Delete — ask us to delete your health data. We will delete it from our
records and instruct our processors to do the same, subject to narrow
legal-retention exceptions we will tell you about. Deleting your
assessment answers simply returns your member path page to its general
(non-personalized) version.
- Appeal — if we decline a request, you may appeal, and we will respond
with our reasoning.
We will not discriminate against you for exercising any of these rights —
your membership, pricing, and access do not change because you declined the
assessment, withdrew consent, or asked us to delete your data.
How to exercise your rights: email us at contact@vilixium.com, or write
to us at the address in Section 12. We will verify your request to protect
your data, respond within the timeframe applicable law requires, and will
not charge you for a first request in any 12-month period.
7. Consent
Before the assessment collects anything, we ask for your consent on a clear
screen that describes what we collect and why, separate from any other
agreement, with nothing pre-checked. Your consent is specific to the
purposes described in this policy, freely given (you can skip the assessment
and lose nothing), and revocable at any time. We keep a record of the
consent you gave and the version of this policy you agreed to. If we ever
want to use your health data for a new purpose, we will ask you again first.
8. How We Protect Health Data
Health data is stored separately, flagged as consumer health data, in an
access-controlled store, with access limited to the few people who need it
to run the assessment feature.
It is stored in an append-only manner with no third-party advertising or
analytics trackers on the members area, and it is never transmitted to
advertising platforms.
We apply administrative, technical, and physical safeguards appropriate to
the sensitivity of the data, and we bind our processors to equivalent
protections by contract.
9. How Long We Keep It
We keep your health data only as long as needed to provide the assessment
and your personalized experience, and to meet our legal and record-keeping
obligations. When you delete it or withdraw consent, we remove it from
active use and delete it on our standard schedule, keeping only the minimal
records the law lets us keep (for example, proof that we honored your
deletion request). We keep consumer health data only as long as reasonably
necessary for those purposes, consistent with our Privacy Policy.
10. Geofencing
We do not use geofencing to identify or track anyone near any health care
facility, and we do not use location to send health-related messages or to
collect health data based on where you are.
11. Age
Vilixium membership is for adults 18 and older. We do not knowingly collect
health data from anyone under 18. If you believe a minor has provided health
data, contact us and we will delete it.
12. Changes, and How to Reach Us
If we make a material change to how we handle health data, we will update
this policy, change the effective date, and — where the change affects data
we already hold — ask for your consent again before the new use begins. Your
continued membership after a non-material update means the updated policy
applies.
Contact us about health data or your rights
VLXM LLC
Attn: Privacy
7803 SW Ellipse Way, Unit 24
Stuart, FL 34997
contact@vilixium.com
Effective date: August 18, 2026. This policy is specific to consumer
health data; our general Privacy Policy covers all other personal
information.