What we do with your data (short version)

We collect the minimum needed to ship your order and email you about it. We sell nothing to anyone.

What we collect

Why we have it

To fulfill your order, send transactional emails (confirmation, tracking, one review request), and — only if you chose Accept all in Privacy choices — up to three reminders if you start a checkout and do not finish it. Only if you signed up for our welcome offer, the offer itself and occasional news from Verta (see Welcome offer below). We also count visits and checkout button clicks to improve the store, and, unless you decline, measure our Facebook and Instagram ads with Meta (see Advertising measurement below).

Who else touches it

What we never do

Send marketing email you did not opt into. Share anything with Meta after you decline, or when your browser sends Global Privacy Control. Reviews are one email per order, sent after delivery. Checkout reminders go only to people who chose Accept all in Privacy choices, stop after three, and stop immediately if you buy or unsubscribe. Decline all means we never email you a reminder, and we do not show you the welcome-offer sign-up. Every marketing email carries a one-click unsubscribe and our postal address.

Retention and deletion

Order records are kept for warranty coverage and accounting. Email addresses are kept in our store database and passed to our email provider to send each message. Want your data deleted? Email hello@vertatherapy.com and it's gone — except what accounting law requires us to keep, and we'll tell you exactly what that is.

Cookies and analytics

Cloudflare provides aggregate site analytics. We also count page views and button clicks ourselves on every visit, so we can tell how many people reached a page. By default this stores nothing on your device: the visit is given an identifier that exists only in the page's memory and disappears when you close the tab, so one visit cannot be linked to another. We record the campaign tags (utm_source and similar) carried by the link you arrived on, and the address of the site that linked you to us — the hostname only, such as instagram.com, never the full page address and never any search terms you may have typed. We do not record your name, email address, IP address, or any cross-site advertising identifier, and we do not read fbclid. Enabling site analytics in Privacy choices additionally keeps that identifier in your browser for the rest of your visit, so pages connect to one another. Use Privacy choices in the footer to change your preferences for future activity. Payment, checkout and fulfillment records are kept separately to operate the store. The Meta Pixel is separate from this counting and is described under Advertising measurement below.

Session recording. Unless you decline, Microsoft Clarity records how our home and product pages are used: scrolling, taps and clicks, and which parts of the page you view, so we can see where a page is unclear. Anything you type is hidden from the recording, and email addresses and numbers shown on the page are masked. It does not run on guides, order pages or checkout, which happens on Stripe. By default Clarity stores nothing on your device and each page view is recorded separately; if you choose Accept all, it may set cookies so the pages of one visit connect. Decline all, or Global Privacy Control, turns it off: from that moment nothing is stored, and it does not load on the next page you open. Microsoft keeps recordings for 30 days, except a small sample and any we mark as favourites, which are kept for up to 9 months.

Advertising measurement

We measure our Facebook and Instagram ads with Meta. This is on by default, and you can turn it off at any time. It covers two separate things, because they work differently.

Page measurement. Unless you decline, the Meta Pixel loads on our home and product pages to measure page visits. It can send the page URL, referrer, browser and device information, and Meta sets and reads its own cookies on those pages. On the product page it also reports that the page was viewed, with the price and currency shown and our single product code. That product-page report is sent twice — once by the Pixel in your browser and once by our server — carrying the same identifier so Meta keeps one report, not two. The server copy includes the Meta cookie identifiers already set on your visit, and the internet (IP) address and browser description of that request, which is how Meta matches a server-sent report to a browser. We read those two Meta cookies at that moment and pass them on; we do not store your IP address or browser description anywhere. It does not load on guides, private order pages, or marked QA visits. Automatic event detection and automatic advanced matching are off, so the Pixel does not read what you type into our pages, including the welcome-offer email field and the optional email box on the product page. Payment happens on Stripe, not on this site, so the Pixel never sees your card details.

Checkout-start measurement. Unless you decline, pressing Buy now reports to Meta that a checkout was started, with the price and currency, our product code, the product-page URL and a unique event identifier. It is sent twice — once by the Pixel in your browser and once by our server — carrying the same identifier so Meta keeps one event, not two. The server copy includes the cookie identifiers Meta itself set on your visit, and the internet (IP) address and browser description of that request, which is how Meta matches a server-sent event to a browser. We read those two Meta cookies at that moment and pass them on; we do not store your IP address or browser description anywhere.

Purchase measurement. When you complete a purchase, our server sends Meta the purchase time, order value and currency, a unique event identifier, the product-page URL, a SHA-256 hash of your checkout email address, and the Meta cookie identifiers recorded when you started checkout. A hash can still be matched by Meta and is not anonymous. This is sent unless you declined before starting checkout, or your browser sent Global Privacy Control when you started checkout. It does not depend on which pages you browsed. We do not send product names, guide-reading history, symptoms, or payment-card details.

Turning it off. Choose Decline all in the privacy banner, or open Privacy choices in the footer at any time. If your browser sends Global Privacy Control, both are turned off automatically. Declining does not affect checkout. Previously sent events cannot be recalled by changing your preferences.

Queued measurement data is retained for up to six days for delivery attempts, then removed; identifiers and delivery status remain for duplicate prevention. Meta privacy policy.

Welcome offer

On our home and product pages we may ask once for your email address in return for 10% off one order. If you sign up, we store your address, a single-use offer link, when you signed up and when the offer ends, and which version of the sign-up wording you agreed to, as a record of your consent. We email you the offer straight away, and afterwards occasional news from Verta. Every one of those emails has a one-click unsubscribe and our postal address, and unsubscribing stops all of them. Your address is not shared with Meta and is not used to match you to ads, and it is never added to our visit counting.

The sign-up stores nothing on your device until you use it. Closing it keeps a note in your browser for 14 days so it is not shown again; signing up keeps a note that you already have. Opening the link in our email keeps the offer in your browser so it can be applied at checkout, and the offer ends seven days after you sign up. It is not shown to anyone who chose Decline all.

Shop the Verta Massager