Privacy Policy

OnlineVitals ("OnlineVitals", the "Site") is operated by VRO LLC ("VRO", "we", "us", or "our"). This Privacy Policy explains what information we collect when you use the Site, how we use and share it, and the choices and rights you have — including specific rights for California residents under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA").

OnlineVitals is an independent, informational directory of vital-records and health-department offices. We are not a government agency and we do not process orders or payments for certificates. When you choose to order a record, you are directed to our partner, Vital Records Online, which maintains its own privacy policy.

1. Information we collect

• Reviews and content you submit. When you review an office we collect the name, star rating, and review text you provide. Please do not include sensitive personal information in a review.
• Messages you send us. If you contact us (e.g. by email or a contact form), we receive your email address and the contents of your message.
• Usage and device data. Like most websites, we and our analytics providers automatically collect internet and network activity — IP address, browser and device type, operating system, referring/exit pages, pages viewed, and approximate (city/region-level) location derived from your IP address.
• Anti-spam data. The review form uses Cloudflare Turnstile to prevent automated abuse, which processes limited technical signals from your browser.
• Cookies and similar technologies. We use cookies, tags, and similar technologies (see Section 3).

We do not ask for or collect Social Security numbers, government ID numbers, passport numbers, financial-account or payment-card numbers, or other sensitive identifiers on this Site. Those are handled — if at all — by Vital Records Online during an order.

2. How we use information

• To operate, maintain, and improve the directory and its search features.
• To display, moderate, and manage reviews.
• To respond to your questions and messages.
• To measure and analyze traffic and site performance.
• To detect, prevent, and address security issues, spam, and abuse.
• To comply with law and enforce our Terms of Use.

3. Cookies and tracking technologies

We use Google Tag Manager and Google Analytics to understand aggregate usage. These set cookies and collect the usage data described above. Depending on how analytics and advertising features are configured, some of this activity may be considered a "sale" or "sharing" of personal information under California law — see Section 8. You can control cookies through your browser settings; disabling them may affect some features. We honor recognized opt-out preference signals, including Global Privacy Control (GPC), where required.

4. How we share information

We share personal information only as described here:

• Service providers. With vendors that operate the Site on our behalf — hosting and database (Vercel, Supabase), analytics (Google), and security/anti-spam and content delivery (Cloudflare) — under contracts limiting their use of the information.
• Publicly. Reviews you submit are displayed publicly with the name you provide.
• Legal and safety. When we believe disclosure is required by law, or to protect the rights, property, or safety of users, the public, or us.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

We link to Vital Records Online and to third-party maps and government websites; those services have their own privacy practices, and this Policy does not cover them.

5. Data retention

We keep review and message content for as long as needed to operate the directory and for legitimate business or legal purposes, and analytics data for the period set in our analytics configuration. You may ask us to delete content you submitted (see Sections 7 and 8).

6. Security

We use administrative and technical safeguards, including encryption in transit (HTTPS). No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Children's privacy

The Site is not directed to children under 13, and we do not knowingly collect personal information from them, consistent with the Children's Online Privacy Protection Act (COPPA). If you believe a child provided us information, contact us and we will delete it.

8. Your California privacy rights (CCPA/CPRA)

This section applies to California residents and describes the categories of personal information we handle and the rights you have under the CCPA/CPRA. "Personal information" has the meaning given by California law.

Categories of personal information we collect

In the last 12 months, we have collected the following CCPA categories:

We do not collect "sensitive personal information" as defined by the CPRA on this Site, and therefore do not use or disclose it for purposes that would trigger the right to limit its use. We do not sell personal information for money and do not knowingly sell or share the personal information of consumers under 16.

Your rights

• Know / access the categories and specific pieces of personal information we collected about you.
• Delete personal information we collected from you, subject to legal exceptions.
• Correct inaccurate personal information we maintain about you.
• Opt out of sale or sharing of your personal information (see "Your privacy choices" below).
• Non-discrimination — we will not deny service, charge a different price, or provide a different level of service because you exercised your rights.

How to submit a request

Email support@onlinevitals.com with "California Privacy Request" in the subject line, or write to the address in Section 12. To protect your information, we will take reasonable steps to verify your identity — typically by confirming details associated with your request (such as the email you used or the content you submitted). You may use an authorized agent to submit a request; we may ask the agent for proof of authorization and may ask you to verify your identity directly.

Your privacy choices — Do Not Sell or Share My Personal Information

To the extent our use of analytics and similar technologies constitutes a "sale" or "sharing" of personal information under the CCPA/CPRA, you can opt out:

• Global Privacy Control (GPC). We treat a valid GPC browser signal as a request to opt out of sale/sharing for that browser or device. See globalprivacycontrol.org.
• Browser cookie controls. Disable or clear analytics cookies through your browser.
• Email us. Send a request to support@onlinevitals.com with "Do Not Sell or Share" in the subject line.

Shine the Light

California's "Shine the Light" law (Civil Code § 1798.83) lets California residents request information about disclosures of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing.

9. Other U.S. state privacy rights

Residents of other states with comprehensive privacy laws (for example Virginia, Colorado, Connecticut, and others) may have similar rights to access, correct, delete, and opt out of targeted advertising or sale. To exercise them, contact us as described in Section 12; we honor recognized opt-out preference signals such as GPC where required.

10. Changes to this policy

We may update this Policy from time to time. We will revise the "Last updated" date above, and material changes will be reflected on this page. Your continued use of the Site after an update constitutes acceptance of the revised Policy.

11. Contact us

Questions or privacy requests: support@onlinevitals.com.

VRO LLC
4300 Biscayne Blvd, Suite 302 A
Miami, FL 33137