Data protection is a particularly high priority for VITACRU INC.'s management. The use of VITACRU INC.'s internet pages is possible without any indication of personal data; however, if a data subject wishes to use special services of the company via our website, the processing of personal data may become necessary. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the consent of the data subject.
The processing of personal data, such as the name, address, email address, or telephone number of a data subject, will always comply with the General Data Protection Regulation (GDPR), the Quebec's Law 25 (Law modernizing certain legislative provisions regarding the protection of personal information), to the Personal Information Protection and Electronic Documents Act (PIPEDA) and country-specific data protection regulations applicable to VITACRU INC.
With this data protection declaration, our company wishes to inform the general public about the nature, scope, and purpose of the personal data we collect, use, and process. Furthermore, data subjects are informed by this data protection declaration of the rights to which they are entitled.
As the data controller, VITACRU INC. has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed via this website. However, data transmissions over the Internet can in principle have security vulnerabilities, so absolute protection cannot be guaranteed. For this reason, each data subject is free to transmit personal data to us by other means, for example by telephone.
VITACRU INC.'s Data Protection Declaration is based on the terms used by the European legislator for the adoption of the General Data Protection Regulation (GDPR). Our Data Protection Declaration should be readable and understandable to the general public, as well as to our customers and business partners. To this end, we first wish to explain the terminology used.
In this data protection declaration, we use the following terms, among others:
Personal data means any information relating to an identified or identifiable natural person («data subject»). A natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
The data subject is any identified or identifiable natural person whose personal data is processed by the data controller.
Processing is any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or modification, extraction, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Processing restriction is the marking of stored personal data for the purpose of limiting its future processing.
Profiling means any form of automated processing of personal data which consists of using personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or movements.
Pseudonymization is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that this additional information is kept separately and is subject to technical and organizational measures ensuring that the personal data are not attributed to an identified or identifiable natural person.
The controller is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
A processor is a natural or legal person, a public authority, an agency, or any other body that processes personal data on behalf of the controller.
The recipient is a natural or legal person, public authority, agency or other body to which personal data are disclosed, whether they are a third party or not.
A third party is a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
Consent of the data subject means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
The data controller for the purposes of the General Data Protection Regulation (GDPR), Quebec's Law 25, the PIPEDA, and other data protection provisions is:
VITACRU INC.
1575 Avenir Blvd, Suite 230
H7S 2N5 Laval, QC, Canada
Phone: 514-351-3636
Email: Contact form
Website: vitacru.com
VITACRU INC.'s websites use cookies. Cookies are text files that are stored in a computer system via an internet browser.
Many websites and servers use cookies. Many cookies contain a cookie ID. A cookie ID is a unique identifier for a cookie. It consists of a string of characters by which internet pages and servers can be assigned to the specific internet browser in which the cookie was stored. This allows visited websites and servers to distinguish the individual's specific browser from other internet browsers that contain different cookies. A specific internet browser can be recognized and identified using the unique cookie ID.
By using cookies, VITACRU INC. can provide users of this website with more user-friendly services that would not be possible without cookies. Cookies allow us to tailor the information and offers on our website to each user. Cookies allow us, as mentioned above, to recognize users of our website. The purpose of this recognition is to make it easier for users to use our website. For example, a user of a website that uses cookies does not need to enter their login credentials every time they visit the website, as this is handled by the website and the cookie stored on the user’s computer system.
3.1 Types of cookies used
These cookies are necessary for the website to function and cannot be deactivated in our systems. They are generally set in response to actions you take that amount to a request for services. Technical session and security cookies may also be used to ensure the proper functioning of the site and the security of transactions.
| Witness name | Category | Duration | Description |
|---|---|---|---|
ccv_consent | Essential | 365 days | Remembers your cookie consent preferences. |
vitacru_warning_read | Essential | 365 days | Record that you have read and accepted the legal disclaimer. |
b) Legal warning notice (vitacru_warning_read)
Our website uses a specific cookie to record your acceptance of our legal notice regarding naturopathic educational content. This cookie is essential for our regulatory compliance.
| Characteristic | Detail |
| Witness name | vitacru_warning_read |
| Purpose | Record that you have read and accepted the legal disclaimer stating that the content of our site is provided for informational purposes for educational and preventive purposes only, and does not constitute medical advice or substitute for consultation with a healthcare professional. |
| Shelf life | 365 days |
| Data stored in the cookie | Value "yes" (confirmation of acceptance) |
| Type | Key witness (regulatory compliance) |
| Legal basis | Legitimate interest (compliance according to current jurisprudence in Quebec) |
Acceptance Logging:
When you accept our legal notice, we also store the following information in our secure database:
This information is retained for the purpose of Regulatory compliance and of proof of informed consent regarding the provision of information related to health and naturopathy. This logging allows us to demonstrate that visitors have been duly informed of the educational and preventive nature of our content.
Log data retention period: These data are retained for a period of 7 years, in compliance with legal obligations for evidence preservation.
We use Google Analytics to analyze traffic on our website. These cookies help us understand how visitors use our site (see Section 15 for more details).
| Witness name | Category | Duration | Description |
|---|---|---|---|
_ga | Analytics | 2 years | Google Analytics – Distinguishes unique users. |
_ga_* | Analytics | 2 years | Google Analytics 4 – Retains session state. |
_ga_E2LW9V8N3N | Analytics | 2 years | Google Analytics 4 – Retains session state. |
_gat | Analytics | 1 minute | Google Analytics – Limits the request rate. |
_gid | Analytics | 24 hours | Google Analytics – Tracks users. |
d) Social media influencers
Cookies may be set by the social media platforms integrated into our site (Facebook, LinkedIn, Twitter, Pinterest, YouTube) when you interact with their features.
| Witness name | Category | Duration | Description |
|---|---|---|---|
bcookie | Social networks | 1 year | LinkedIn – Browser Identifier for Sharing Buttons. |
date | Social networks | 2 years | Facebook - Identifies the browser for sharing buttons. |
guest_id | Social networks | 2 years | Twitter/X – Identify the user for embedded content. |
lidc | Social networks | 24 hours | LinkedIn – Routing Optimization for Sharing Features. |
VISITOR_INFO1_LIVE | Social networks | 180 days | YouTube – Estimates bandwidth and adapts video quality. |
YSC | Social networks | Session | YouTube – Records a unique identifier for viewed videos. |
These cookies are used to offer you relevant advertising on other websites and to measure the effectiveness of our advertising campaigns. They may be placed by our advertising partners (such as Facebook/Meta and Google) to create a profile of your interests and show you personalized ads.
Witness name Category Duration Description _gcl_auMarketing 90 days Google Ads - Conversion Linker for conversion tracking.
The person concerned can, at any time, prevent the installation of cookies via our website by means of a corresponding setting in the Internet browser used, and thus permanently refuse the installation of cookies. Furthermore, cookies that have already been installed can be deleted at any time via an Internet browser or other software programs. This is possible in all popular Internet browsers.
How to manage cookies in your browser:
If the person concerned deactivates the installation of cookies in the internet browser used, all functions of our website may not be fully usable.
In accordance with the Law Modernizing Personal Information Protection Provisions (commonly known as «Law 25»), we inform you that:
The VITACRU INC. website collects a series of general data and information when a data subject or an automated system accesses the website. This general data and information are stored in the server's log files. The data collected may include:
When using this general data and information, VITACRU INC. draws no conclusions about the data subject. Rather, this information is necessary for:
Therefore, VITACRU INC. statistically analyzes the data and information collected anonymously, with the aim of increasing the data protection and data security of our company, and ensuring an optimal level of protection for the personal data we process. The anonymous data from server log files is stored separately from any personal data provided by a data subject.
The data subject has the possibility to register on the website of the data controller, providing personal data. The personal data transmitted to the data controller are determined by the registration form used.
The personal data entered by the data subject is collected and stored exclusively for internal use by the controller and for its own purposes. The controller may request the transfer to one or more processors (e.g., a parcel service) who also use personal data for internal purposes attributable to the controller.
By registering on the controller's website, the IP address assigned by the Internet service provider (ISP) and used by the data subject, as well as the date and time of registration, are also stored. The storage of this data takes place in the context where it is the only means of preventing the misuse of our services and, if necessary, allowing the investigation of criminal offenses. To this extent, the storage of this data is necessary for the security of the controller. This data is not passed on to third parties, unless there is a legal obligation to pass on the data or if the transfer serves the purpose of criminal prosecution.
The registration of the data subject, with the voluntary indication of personal data, is intended to allow the data controller to offer the data subject content or services that can only be offered to registered users due to the nature of the matter in question. Registered persons are free to change the personal data specified during registration at any time or to have it completely deleted from the data controller's database.
The data controller must, at any time, provide information upon request to each data subject regarding the personal data stored about them. Furthermore, the data controller must rectify or erase personal data at the request or indication of the data subject, to the extent that there are no legal retention obligations. All employees of the data controller are available to the data subject as contact persons in this regard.
On VITACRU INC.'s website, users have the option to subscribe to our company's newsletter. The form used for this purpose determines what personal data is transmitted, as well as when the newsletter is ordered from the data controller.
VITACRU INC. regularly informs its clients and business partners about the company's offerings through a newsletter. The company's newsletter can only be received by the person concerned if:
A confirmation email will be sent to the email address registered by the concerned person for the first time for newsletter subscription, for legal reasons, as part of the double opt-in procedure. This confirmation email is used to prove whether the owner of the email address, as the concerned person, is authorized to receive the newsletter.
When subscribing to the newsletter, we also store the IP address of the computer system assigned by the internet service provider (ISP) and used by the data subject at the time of subscription, as well as the date and time of subscription. The collection of this data is necessary in order to understand any potential misuse of the data subject's email address at a later date, and therefore serves the purpose of legal protection for the data controller.
The personal data collected when subscribing to the newsletter will only be used to send our newsletter. Furthermore, newsletter subscribers may be informed by email as long as it is necessary for the operation of the newsletter service or the subscription in question, as may be the case in the event of changes to the newsletter offering or changes in technical circumstances. Personal data collected by the newsletter service will not be transferred to third parties.
The newsletter subscription can be canceled by the data subject at any time. Consent to the storage of personal data, which the data subject has given for sending the newsletter, can be revoked at any time. For the purpose of revoking consent, a corresponding link can be found in each newsletter. It is also possible to unsubscribe from the newsletter at any time directly on the website of the data controller or to inform the data controller in another way.
The VITACRU INC. newsletter contains tracking pixels. A tracking pixel is a miniature graphic embedded in HTML-formatted emails to enable log file recording and analysis. This allows for statistical analysis of the success or failure of online marketing campaigns.
Based on the integrated tracking pixel, VITACRU INC. can see if and when an email was opened by a relevant person, and which links within the email were viewed by the relevant persons.
The personal data collected in the tracking pixels contained in the newsletters are stored and analyzed by the data controller in order to optimize the sending of the newsletter, as well as to better adapt the content of future newsletters to the interests of the data subject. This personal data will not be transferred to third parties.
The persons concerned have the right to revoke the respective separate declaration of consent issued by means of the double opt-in procedure at any time. After a revocation, this personal data will be deleted by the data controller. VITACRU INC. automatically considers unsubscribing from the newsletter as a revocation.
The VITACRU INC. website contains information that enables rapid electronic contact with our company, as well as direct communication with us, which also includes a general email address. If a data subject contacts the controller by email or via a contact form, the personal data transmitted by the data subject will be automatically stored. This personal data voluntarily transmitted by a data subject to the controller is stored for the purpose of processing or contacting the data subject. There is no transfer of this personal data to third parties.
Comments made on the VITACRU INC. blog may be subscribed to by third parties. In particular, it is possible for a commenter to subscribe to comments following their comments on a particular blog post.
If an interested party decides to subscribe to the option, the data controller will send an automatic confirmation email to verify the double opt-in procedure as to whether the owner of the specified email address has opted in for this option. The option to subscribe to comments can be terminated at any time.
The controller shall only process and store personal data of the data subject for the period necessary to achieve the purpose of storage, or as granted by European legislators or by other legislators in laws or regulations to which the controller is subject.
If the storage objective is not applicable, or if a storage period prescribed by European or other competent legislator expires, personal data shall be systematically blocked or erased in accordance with legal requirements.
Each data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed. If a data subject wishes to exercise this right of confirmation, he or she may, at any time, contact any employee of the controller.
Every data subject shall have the right to obtain from the controller free information about his or her personal data stored at any time and a copy of this information. In addition, directives and regulations grant the data subject access to the following information:
If an interested party wishes to exercise this right of access, they may contact any employee of the data controller at any time.
Each data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
Each data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay, and the controller shall be obliged to erase personal data without undue delay where one of the following grounds applies:
Each data subject shall have the right to obtain from the controller the restriction of processing where one of the following applies:
Each data subject shall have the right to receive the personal data concerning them, which they have provided to a controller, in a structured, commonly used and machine-readable format. They shall have the right to transmit those data to another controller without hindrance.
Every data subject has the right to object, on grounds relating to their particular situation, at any time, to the processing of their personal data. VITACRU INC. will no longer process personal data in the event of an objection, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject.
If VITACRU INC. processes personal data for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning them for such marketing purposes.
Each data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.
Each data subject has the right to withdraw their consent to the processing of their personal data at any time. If the data subject wishes to exercise the right to withdraw their consent, they may, at any time, contact any employee of VITACRU INC.
In addition to the rights mentioned above, Quebec's Law 25 grants you the following rights:
To exercise any of these rights, please contact us via our Contact form.
The data controller collects and processes the personal data of applicants for the purpose of processing the application procedure. Processing may also be carried out electronically. This is particularly the case if an applicant submits the corresponding application documents by email or via a web form on the website to the data controller.
If the data controller enters into an employment contract with an applicant, the submitted data will be stored for the purpose of processing the employment relationship in accordance with legal requirements. If no employment contract is concluded with the applicant by the data controller, the application documents will be automatically deleted two months after notification of the rejection decision, provided that no other legitimate interest of the data controller opposes the deletion.
On this website, the data controller has integrated components from the company AddThis. AddThis is a bookmarking provider. The service allows for simplified marking of internet pages via buttons.
AddThis's operating company is AddThis, Inc. 1595 Spring Hill Road, Suite 300, Vienna, VA 22182, USA.
The data subject can at any time prevent the installation of cookies via our website by means of a corresponding setting of the Internet browser used. The data subject also has the option to permanently opt-out of the processing of personal data by AddThis by clicking on the opt-out button at the following link: http://www.addthis.com/privacy/opt-out.
AddThis's applicable data protection provisions can be found at http://www.addthis.com/privacy/privacy-policy.
On this website, the data controller has integrated components from the company Facebook. Facebook is a social network.
The company that operates Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If you live outside the United States or Canada, the data controller is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
If such a transfer of information to Facebook is not desired by the person concerned, they can prevent it by logging out of their Facebook account before accessing our website.
The data protection directive published by Facebook, available at https://facebook.com/about/privacy/, provides information on Facebook's collection, processing, and use of personal data.
On this website, the controller has integrated the Google Analytics component (with the anonymization function). Google Analytics is a web analytics service.
The operator of the Google Analytics component is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
For web analysis via Google Analytics, the data controller uses the «_gat._anonymizeIp» application. By means of this application, the IP address of the data subject's internet connection is shortened by Google and anonymized when accessing our websites from a Member State of the European Union or another contracting state to the Agreement on the European Economic Area.
The data subject can prevent Google Analytics from installing cookies by adjusting the web browser used. Furthermore, the data subject has the option to object to the collection of data generated by Google Analytics by downloading and installing a browser add-on at the following link: https://tools.google.com/dlpage/gaoptout.
Further information and applicable data protection provisions from Google can be found at https://www.google.com/intl/fr/policies/privacy/.
Our site uses an audience measurement tool hosted on our own servers. No IP addresses are stored—they are converted into irreversible digital fingerprints. No tracking cookies are used. The data remains exclusively on our servers in Canada.
On this website, the data controller has integrated the Google+ button as a component. Google+ is a social network.
The operating company of Google+ is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
The data controller has integrated components from LinkedIn Corporation into this website. LinkedIn is a web-based social network that allows users with existing business contacts to connect and establish new business contacts.
The company operating LinkedIn is LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA 94043, USA. For privacy inquiries outside of the USA, LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland, is responsible.
If such transmission of information to LinkedIn is not desired by the person concerned, they can prevent it by logging out of their LinkedIn account before accessing our website.
LinkedIn offers at https://www.linkedin.com/psettings/guest-controls the option to unsubscribe from emails, SMS messages, and targeted ads, as well as the ability to manage advertising settings.
On this website, the data controller has integrated components from Pinterest Inc. Pinterest is a social network.
The operating company of Pinterest is Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, USA.
If such transmission of information to Pinterest is not desired by the person concerned, they can prevent it by logging out of their Pinterest account before accessing our website.
Pinterest's data protection policy, available at https://about.pinterest.com/privacy-policy, provides information on how Pinterest collects, processes, and uses personal data.
On this website, the controller has integrated components from Twitter. Twitter is a publicly available, multilingual microblogging service on which users can publish and disseminate «tweets,» i.e., short messages limited to 280 characters.
The operating company of Twitter is Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.
If a person does not wish for such information to be transmitted to Twitter, they can prevent it by logging out of their Twitter account before accessing our website.
Twitter's applicable data protection provisions are available at https://twitter.com/privacy?lang=fr.
On this website, the data controller has embedded YouTube components. YouTube is an internet video portal that allows video publishers to post video clips free of charge and other users to view, rate, and comment on them free of charge.
The operating company of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
If such transmission of information to YouTube and Google is not desired by the person concerned, they can prevent it by logging out of their YouTube account before accessing our website.
YouTube's data protection provisions, available at https://www.google.com/intl/en/policies/privacy/, provide information on the collection, processing, and use of personal data by YouTube and Google.
Article 6(1) lit. a of the GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose.
If the processing of personal data is necessary for the performance of a contract to which the data subject is party, as is the case, for example, when processing operations are necessary for the provision of goods or for the provision of any other service, the processing is based on Article 6(1) lit. b of the GDPR.
Does our company have a legal obligation requiring the processing of personal data, such as for the fulfillment of tax obligations, where the processing is based on Article 6(1) lit. c of the GDPR?.
In rare cases, processing of personal data may be necessary to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor were injured at our company and their name, age, health insurance data, or other vital information had to be passed on to a doctor, hospital, or other third party. The processing would then be based on Article 6(1) lit. d GDPR.
Finally, processing operations could be based on Article 6(1)(f) of the GDPR. This legal basis is used for processing operations that are not covered by any of the aforementioned legal grounds, if the processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where these interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data.
When the processing of personal data is based on Article 6(1) lit. f of the GDPR, our legitimate interest is to operate our business for the well-being of all our employees and shareholders.
The criteria used to determine the retention period for personal data are the respective legal retention periods. After this period expires, the corresponding data will be systematically deleted, provided it is no longer necessary for the performance or initiation of a contract.
We clarify that the provision of personal data is partly required by law (e.g., tax regulations) or may also result from contractual provisions (e.g., information about the contractual partner).
Sometimes, it may be necessary to enter into a contract that requires the data subject to provide us with personal data, which must then be processed by us. The data subject is, for example, obliged to provide us with personal data when our company enters into a contract with them. Failure to provide the personal data would result in the contract with the data subject not being concluded.
Before personal data is provided by the data subject, the data subject must contact an employee. The employee explains to the data subject whether the provision of personal data is required by law or contract or is necessary for the conclusion of the contract, whether there is an obligation to provide the personal data, and the consequences of not providing the personal data.
As a responsible company, we do not use automated decision-making or profiling.
In accordance with Quebec's Law 25, VITACRU INC. has designated a person responsible for the protection of personal information.
For any questions regarding this privacy policy, our personal information protection practices, or to exercise your rights, please contact:
VITACRU INC.
Data Protection Officer (DPO)
1575 Avenir Blvd, Suite 230
H7S 2N5 Laval, QC, Canada
Email: Contact form
Phone: 514-351-3636
If you are not satisfied with our response to your request or if you believe that we are not processing your personal information in accordance with the law, you can file a complaint with:
Québec Access to Information Commission (CAI)
https://www.cai.gouv.qc.ca/
Last updated: March 2026
Masterclasses, articles, events, and updates on our cause. All delivered once a month, directly to your inbox.
The content published on this site, including blog posts published by the Association, is provided For educational and informational purposes only. It aims to convey general knowledge about prevention and well-being and in no case constitutes :
The articles, opinions, and information published on this site, including the «articles and blog» section, may reflect points of view, research, or approaches that are not recognized, validated, or supported by the official medical or scientific authorities in Quebec.
In Quebec, courts currently maintain that only doctors are authorized to assist anyone who believes they have a health deficiency. If you have concerns about your health, we invite you to consult a doctor.
The reader assumes full responsibility for their use of the information contained on this site. Vitacru Institute, its collaborators and authors, as well as the Vitacru Association for Natural Approaches, disclaim any liability for consequences, direct or indirect, that may arise from the interpretation or application of this content.
Naturopathic consultation
