Your data, clearly stated.

B12 Insight operates b12cardio.com and is responsible for the personal information described in this policy. In this policy, “we”, “us” and “our” refer to B12 Insight.

This policy covers the website, the B12 risk check, report purchases, reports and support. It does not apply to third-party websites or services that have their own privacy notices.

We collect the information needed to run B12 Insight, deliver a requested report and keep the service secure. The main categories are:

We designed the check to collect as little as possible. It asks seven fixed questions:

• Your age band: under 40, 40 to 59, or 60 and over.
• Your diet pattern: regular animal foods, mostly plant-based, vegetarian or vegan.
• Long-term use of a proton-pump inhibitor, H2 blocker, metformin, both or neither.
• Conditions that affect absorption, including IBD, coeliac disease, gut inflammation, stomach or bowel surgery, atrophic gastritis or pernicious anaemia.
• How often you eat animal foods.
• Recent tiredness, brain fog, tingling, numbness, sore tongue or breathlessness.
• Whether you have had B12 tested and whether the result was normal, borderline, low or not tested.

We do not ask for full medical records, test PDFs, family history, insurance details, government ID, precise location, your contact list or a free-text medical history inside the check.

Your answers can relate to health and are treated as sensitive health-related information. We use them to calculate the score, generate the report you request from the saved answers, support your account and protect the service. Where law requires a specific legal basis, we rely on your consent or another lawful condition needed to provide the service you requested.

We do not use your check answers for advertising, and we do not sell them. We do not currently create identifiable profiles from your answers for purposes unrelated to the report. Aggregate site analytics may show page visits and performance, but not the options you selected in the check.

You can clear cookies and site data in your browser at any time. Blocking strictly necessary cookies may prevent sign-in, checkout or reports from working. When the cookie banner is available, you can reopen cookie settings from the footer.

B12 Insight sells one-time report credits. There is no subscription, automatic renewal or automatic top-up. One unused credit unlocks one report.

Checkout may be handled by Waffo Pancake as merchant of record or by another provider shown at checkout, such as Stripe, PayPal or Creem. Alipay and WeChat Pay may be available in CNY through a supported provider.

We receive the order details needed to confirm payment, issue credits and handle support, including the order number, amount, currency, payment status, provider and payment email. We do not receive or store your full card number or card security code. The payment provider handles that information under its own privacy notice.

We do not sell your personal information. We share it only when needed to operate B12 Insight, complete a payment or meet the law.

• Cloudflare for hosting, security, database, storage and production analytics.
• Waffo Pancake, Stripe, PayPal or another checkout provider for payment, refunds and fraud checks.
• An email provider, such as Resend or Cloudflare Email Service when configured, for verification, password and service messages.
• Support or communication tools only when they are enabled and needed to respond to you.
• Professional advisers, auditors or insurers bound by confidentiality duties.
• Public authorities when we are legally required to respond.
• A buyer or successor as part of a merger, acquisition or transfer of the service, subject to appropriate safeguards.

Our providers may process information outside your country. Where required, we use contractual safeguards, approved transfer mechanisms or another lawful basis. You can ask us for more information about the safeguards that apply.

Account deletion is currently handled manually after we verify control of the account. Download any report you want to keep first. Deleting your account may remove saved reports, unused credits and access to the service.

We use encryption in transit, access controls, password hashing, rate limits and security monitoring. No internet service can guarantee perfect security, but we review our controls and respond to incidents that may affect your information. If an incident is likely to create a legal notification duty, we will notify affected users and relevant authorities.

Depending on where you live, you may have the right to:

• Know what personal information we hold and how we use it.
• Access a copy of your information and correct inaccurate details.
• Delete your information or ask us to restrict or stop certain processing.
• Receive eligible information in a portable, machine-readable format.
• Object to processing based on legitimate interests and withdraw consent for future processing.
• Receive equal service when you exercise a privacy choice.

To make a request, email the privacy contact below or open an account support ticket. We may need to verify that you control the relevant account. We will respond within the period required by applicable law, normally within 30 days. Some rights have legal exceptions, and deleting account data may remove access to saved reports and unused credits.

As of this policy, we do not sell personal information or share it for cross-context behavioural advertising. If an advertising tool is introduced later, we will update this policy and the available consent choices. You may use an authorised agent where the law allows it, subject to identity verification.

B12 Insight currently does not send promotional email campaigns. We use email for service messages that you request or need, such as address verification, password resets, purchase confirmations, security alerts and important policy updates.

If optional marketing is introduced, we will use a lawful basis, explain what you would receive and provide a working unsubscribe route. Service messages would remain separate from marketing. You can also contact us to ask about your email settings.

The service is intended for adults aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided information, contact us and we will take appropriate steps to delete it.

We may update this policy when the service or the law changes. We will update the date at the top of this page. For a material change, we will provide a clearer notice by email or in the service before it takes effect where required.

For privacy requests, questions or complaints, contact us using the details below. Please include the email address linked to your account and enough detail for us to find the relevant records. Do not send a full medical history.