Privacy Policy

This Privacy Policy explains how Virtuclix Marketing Services FZCO ("we", "us" or "our") collects, uses, shares and protects personal data when you visit endspikes.com, contact our support team, or purchase products in connection with The One-Meal Blood Sugar Fix. By using our website or products, you confirm that you have read and understood this policy.

1. Introduction and Scope

This Privacy Policy applies to information collected through the website endspikes.com (the "Website"), any subdomains or campaign pages we operate, and the order, delivery and support workflows we provide in connection with The One-Meal Blood Sugar Fix and any related digital products, guides, audio files, programs, bonuses or subscriptions (collectively, the "Products").

We use the Website and the Products to market and sell direct-response offers, deliver digital content, communicate with customers, and provide customer support. References to "we", "us" and "our" refer to Virtuclix Marketing Services FZCO, the controller of personal data described in this policy. References to "you" and "your" refer to any visitor to the Website, prospective customer, paying customer, subscriber to our communications, or other natural person whose personal data we process.

2. Data Controller and Contact Details

The data controller responsible for the personal data described in this policy is:

Where required by applicable law, we may appoint a representative or a data protection officer (DPO). If applicable, the contact details of such person will be stated on the Website or made available upon request via the email above.

If you live in the EU, the EEA or the UK, you may also contact your local supervisory authority. We will always try to resolve concerns directly first — please reach out to us before escalating.

3. How We Collect Personal Data

We collect personal data in three primary ways: when you provide it to us directly, when it is collected automatically as you interact with our website or emails, and when we receive it from third parties such as advertising platforms or payment processors.

3.1 Information You Provide Directly

You provide us with personal data when you:

• Purchase The One-Meal Blood Sugar Fix or any of our other products and services;
• Sign up for a newsletter, email sequence, free guide or other lead magnet;
• Submit a contact, refund or customer-support request via email or web form;
• Reply to one of our marketing or transactional emails;
• Submit a testimonial, review, comment or piece of voluntary feedback;
• Voluntarily share information about your interests, goals, experience or wellbeing in connection with our content.

3.2 Information Collected Automatically

When you visit endspikes.com or open one of our emails, certain technical information is collected automatically, including: IP address, approximate location derived from IP, browser type and version, operating system, device characteristics, referrer URL, timestamps, the pages and links you interact with, and email-engagement events such as opens, clicks and unsubscribes.

This information is collected through cookies, web beacons, server logs and similar technologies. See Section 6 for more on cookies and pixels.

3.3 Information from Third Parties

We may receive personal data about you from third parties, including: advertising platforms (such as Meta/Facebook, Google, TikTok and similar networks) that report ad-engagement and conversion events back to us; payment processors who confirm a purchase has been made; affiliate platforms or partners who refer customers to us; and analytics, fraud-prevention or deliverability vendors who process data on our behalf.

4. Categories of Personal Data Processed

Depending on how you interact with us, we may process the following categories of personal data:

1. Identification and contact data — name, email address, billing address, telephone number where you provide it.
2. Account and order data — purchase history, order IDs, the products you have bought, refund or chargeback records.
3. Payment data — payment-confirmation tokens received via our payment processor. We do not store full card or bank-account details on our own systems.
4. Communication data — the content of emails, support tickets, form submissions and any attachments you send us.
5. Marketing and engagement data — your subscription preferences, the sequences you are enrolled in, and which emails or pages you have engaged with.
6. Technical and device data — as described in Section 3.2 above.
7. Testimonial and feedback data — voluntary text, photos or videos you submit describing your experience with The One-Meal Blood Sugar Fix or related products.
8. Inferred or derived data — segments, scores or audience profiles created from a combination of the above (for example, "recent buyer", "unengaged subscriber").

5. Purposes and Legal Bases for Processing

We process personal data only when we have a valid legal basis to do so. Specifically:

1. To fulfil your order and deliver your products — including granting you access to The One-Meal Blood Sugar Fix and any related guides, audio files or bonuses, sending login or download details, and providing customer service. Legal basis: performance of a contract (Article 6(1)(b) GDPR).
2. To process payments and prevent fraud — via our payment processor and fraud-prevention vendors. Legal basis: performance of a contract and our legitimate interest in preventing fraud (Article 6(1)(b) and (f) GDPR).
3. To send transactional and marketing emails — including order confirmations, delivery emails, refund notices, and promotional messages about The One-Meal Blood Sugar Fix or related products you have shown interest in. Legal basis: performance of a contract for transactional messages; consent or legitimate interest for marketing (Article 6(1)(a), (b) and (f) GDPR), subject to your right to opt out at any time.
4. To respond to enquiries and provide customer support. Legal basis: performance of a contract and legitimate interest (Article 6(1)(b) and (f) GDPR).
5. To measure and improve our marketing — including ad-platform conversion reporting, A/B testing, retargeting and lookalike audience creation. Legal basis: consent where cookies are involved (Article 6(1)(a)); legitimate interest in measuring our own marketing (Article 6(1)(f)).
6. To comply with legal obligations — including tax record-keeping, refund-policy disclosure, and responding to lawful requests from authorities. Legal basis: legal obligation (Article 6(1)(c) GDPR).
7. To defend, exercise or establish legal claims — including in the event of a refund dispute, chargeback or formal complaint. Legal basis: legitimate interest (Article 6(1)(f) GDPR).
8. To publish testimonials, case studies and reviews — only when you have voluntarily submitted them and consented to such use. Legal basis: consent (Article 6(1)(a) GDPR).

We do not engage in fully automated decision-making that produces legal or similarly significant effects for you within the meaning of Article 22 GDPR. If this changes, we will update this Privacy Policy accordingly.

6. Cookies, Pixels and Similar Technologies

We and our service providers use cookies, pixels, tags and similar technologies on the Website. The technologies we use fall into four broad categories:

• Strictly necessary — required for the Website to function correctly, including authenticating sessions, completing your order through the checkout, and recognising you when you return to a multi-step flow. These cannot be disabled.
• Performance and analytics — measure how visitors use the Website (which pages are visited, how long visitors stay, where they drop off) so we can improve content and user experience. Set both by us and by analytics vendors acting on our behalf.
• Functional — remember your preferences (such as form-filled fields, the variation of the Website you saw, language) to give you a more personal experience.
• Advertising and retargeting — used by advertising partners (such as Meta/Facebook, Google, TikTok and similar networks) to measure ad conversions, build retargeting audiences, and serve relevant ads on other websites and apps. Each advertising partner has its own privacy policy that governs the data they collect.

You can manage non-essential cookies through your browser settings, through any cookie banner we display, or by adjusting your preferences on the advertising platforms themselves. Disabling strictly-necessary cookies will prevent core functionality such as completing a purchase.

7. Sharing and Disclosure of Personal Data

We do not sell personal data. We share personal data only in the following situations:

1. Service providers and processors acting on our behalf — including web hosting, email delivery, payment processing, customer-support tooling, analytics, advertising-attribution and fraud-prevention vendors. These providers process personal data under written agreements that require them to use the data only as instructed.
2. Advertising platforms — Meta/Facebook, Google, TikTok and similar networks — to measure conversions, attribute traffic and serve relevant ads. We share only what is necessary for these measurement and remarketing purposes (typically hashed identifiers and engagement events).
3. Affiliates and referral partners — where a sale is attributed to an affiliate, we may share the necessary order data with the affiliate platform to credit the sale.
4. Professional advisers — including lawyers, accountants and auditors when required for legal or financial reasons.
5. Law enforcement, regulators or other authorities — when we are legally required to do so or when we believe in good faith that disclosure is necessary to protect rights, property or safety.
6. Successors in interest — in the event of a merger, acquisition, reorganisation or sale of assets, personal data may be transferred as part of that transaction, subject to confidentiality protections.

8. International Transfers of Personal Data

We are based in the United Arab Emirates and many of our service providers are located in the United States, the EU, the UK and other jurisdictions. Where personal data is transferred outside the EU/EEA or the UK, we rely on appropriate safeguards including the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or — where available — adequacy decisions by the relevant regulator.

You can request a copy of the safeguards in place by emailing us at [email protected].

9. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including any legal, accounting, tax or reporting requirements. In practice:

• Order and payment records are retained for the period required by tax and accounting law (typically 7–10 years).
• Customer-support communications are retained for as long as necessary to handle the request, plus a reasonable period afterwards to resolve any follow-up questions or disputes.
• Marketing-list data is retained until you unsubscribe or ask us to delete it, subject to a short cool-down to honour your unsubscribe.
• Engagement and analytics data is retained in aggregated or pseudonymised form and is periodically purged of direct identifiers.
• Testimonials, reviews and case studies are retained for as long as we display or rely on them, plus a reasonable period afterwards for our records.

10. Data Security

We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure. These include, where appropriate:

• Encryption in transit — TLS/HTTPS across the Website and all customer-facing endpoints.
• Access controls on our systems — multi-factor authentication, least-privilege access, and audit logging.
• Need-to-know basis — only the team members and vendors who need access to perform their work are granted access to personal data.
• Vendor agreements requiring comparable safeguards (data-processing agreements and equivalent contractual protections).
• Regular backups and reasonable redundancy to protect against accidental loss.

If we become aware of a personal-data breach that is likely to result in a high risk to your rights and freedoms, we will notify you and the relevant authorities where required by law and within the timeframes set by applicable law (under GDPR, generally within 72 hours of becoming aware of the breach).

No method of transmission over the internet or method of electronic storage is 100% secure, so we cannot guarantee absolute security.

11. Direct Marketing and Your Choices

If you have purchased The One-Meal Blood Sugar Fix or signed up to receive emails from us, we may send you marketing communications about The One-Meal Blood Sugar Fix and related products we think you may find relevant. You can opt out at any time by clicking the unsubscribe link in any marketing email, or by contacting us at [email protected]. Opting out of marketing does not affect transactional emails that are necessary to fulfil your order.

12. Special Categories of Data

Our marketing and products may relate to topics that touch on wellbeing, daily routines, energy, focus, comfort or general lifestyle. We do not intentionally collect special categories of personal data (such as health, racial or ethnic origin, religious beliefs, sexual orientation or biometric data) through cookies or normal browsing.

If you voluntarily share such information when describing your experience with The One-Meal Blood Sugar Fix — for example in a testimonial, support ticket or survey — we treat that information as having been provided with your explicit consent (Article 9(2)(a) GDPR) and use it only for the purpose for which you submitted it.

13. Your Rights Under Data Protection Laws

Depending on where you live, you may have the following rights in respect of your personal data:

• Right of access — to obtain a copy of the personal data we hold about you.
• Right of rectification — to ask us to correct inaccurate or incomplete data.
• Right to erasure — to ask us to delete your personal data in certain circumstances.
• Right to restrict processing — to ask us to limit how we process your data in certain circumstances.
• Right to object — including the right to object to direct marketing at any time.
• Right to data portability — to receive certain data in a structured, machine-readable format.
• Right to withdraw consent — where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing already carried out.
• Right to lodge a complaint with your local data-protection supervisory authority.

To exercise any of these rights, please email us at [email protected]. We will respond within the timeframe required by applicable law (typically one month).

14. Rights of California and Other U.S. State Residents

If you are a resident of California or another U.S. state that grants similar rights, you may have additional rights under state consumer-privacy laws, including the right to know what categories of personal data we have collected, the right to delete personal data, the right to correct inaccurate personal data, and the right to opt out of certain types of data "sale" or "sharing" as those terms are defined under state law.

We do not sell personal data for monetary consideration. However, some U.S. state laws treat the use of cookies and advertising-attribution data shared with advertising platforms (such as Meta, Google or TikTok) as a form of "sharing" — to opt out of such sharing, manage your cookie preferences through any banner we display, your browser settings, or your preferences on the advertising platforms themselves.

You also have the right not to be discriminated against or retaliated against by us for exercising any of your privacy rights. To exercise these rights, please email us at [email protected].

15. Children's Privacy

The One-Meal Blood Sugar Fix and our other products are not directed to children. We do not knowingly collect personal data from anyone under the age of 18. If you become aware that a child has provided personal data to us, please contact us at [email protected] and we will take steps to delete it.

16. Third-Party Websites and Social Media

The Website may contain links to third-party websites, social-media pages or services. We are not responsible for the privacy practices of those third parties. We encourage you to read the privacy policies of each website or service you visit.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the products we offer, or applicable law. The most recent version will always be available at this URL, and we will update the "Last updated" date at the top of the page. Material changes will be communicated through prominent notice on the Website or by email where appropriate.