Last updated: November 2026
This Privacy Policy explains how VGAN Inc ("VGAN", "we", "us") collects, uses and protects information when you visit lovevgan.com (the "Site"). This Site is informational — we don't sell products directly through it. When you buy our chocolate, you do so through independent retailers or marketplaces, each of which handles your information under its own privacy policy.
The company responsible for your information (the "data controller") depends on where you are. For visitors in Norway and the rest of the EEA that is VGAN chocolate AS; for visitors in the United States it is VGAN Inc. Either way you can reach us at the address below.
VGAN Inc
225 Long Avenue Bldg 15
Hillside, NJ 07205
United States
contact@eatvgan.com
Usage & device information. When you visit the Site, we automatically collect standard technical information — such as your browser type, device, IP address, pages viewed and how you interact with the Site — through cookies and similar technologies. We use this to load the Site correctly and to understand and improve how it's used.
Information you give us. If you email us (for example a wholesale request or a question), we receive the contact details and content you choose to send, and use them only to respond to you.
Advertising information. If you consent, the Meta Pixel records that you visited the Site, which pages you looked at, and — if you arrived from one of our Instagram ads — which ad sent you. This is described in its own section below.
We do not process payments, take orders or collect payment-card information on this Site.
To operate and secure the Site, to analyse and improve it, to measure whether our advertising works and to show ads to people likely to be interested in our chocolate, to respond to your enquiries, and to comply with our legal obligations.
If you are in Norway or elsewhere in the EEA, we rely on your consent for the Meta Pixel and any other non-essential cookie, on our legitimate interest in running and securing a working website for strictly necessary cookies and server logs, and on our legitimate interest in answering you when you write to us. You can withdraw consent at any time, and withdrawing it is as easy as giving it — see "Your choices" below.
Strictly necessary. A small number of cookies are needed for the Site to work — remembering your language and remembering your cookie choice itself. These are set without consent because the Site cannot function without them.
Advertising. The Meta Pixel is only loaded after you accept it. If you choose "Only essential", or simply ignore the banner, it is never loaded and no data goes to Meta. Norwegian law (the Electronic Communications Act section 3-15, in force since 1 January 2025) requires this kind of active, prior consent, and we apply the same standard to every visitor regardless of country.
We advertise on Instagram. To see whether those ads actually bring anyone to our store finder, we use the Meta Pixel, a piece of code provided by Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland). With your consent it tells Meta that a browser visited our Site, which pages were viewed, and which ad — if any — the visit came from. Meta also receives your IP address and cookie identifiers, which can let Meta recognise you if you have a Meta account.
We use this to measure our advertising and to build audiences for future ads. We do not use it to build profiles about individual people, and we do not upload customer lists to Meta.
For the collection of this data and its transmission to Meta, we and Meta are joint controllers. What Meta does with the data afterwards is Meta's own responsibility, and is governed by Meta's privacy policy, which you can read at facebook.com/privacy/policy. You can also review and change what Meta does with your data in your Meta account settings.
If your browser sends a Global Privacy Control signal, we treat that as an objection to advertising tracking and the Pixel is not loaded at all, even if a consent cookie is present.
We do not sell your personal information for money. We do share limited information with Meta Platforms Ireland for the advertising purposes described above, and with service providers who host and help us run the Site, and where required to comply with the law or protect our rights.
Several US state privacy laws define "sale" and "sharing" broadly enough that passing data to Meta for cross-context behavioural advertising falls within them. We therefore treat it as such, and you can opt out at any time without giving a reason — see "Your choices".
Our Site is hosted in Europe. Information shared with Meta may be processed in the United States. Meta Platforms, Inc. is certified under the EU–US Data Privacy Framework, which the European Commission has recognised as providing an adequate level of protection, and Meta's terms additionally incorporate the European Commission's Standard Contractual Clauses as a fallback. You can ask us for more detail at the address above.
Server logs are kept for up to 30 days. Your cookie choice is stored for 12 months, after which you are asked again. Emails you send us are kept for as long as needed to deal with your enquiry and our records, normally no more than three years. Data held by Meta is subject to Meta's own retention periods, which we do not control.
You can change or withdraw your cookie consent at any time using the Cookie settings link at the bottom of every page. Choosing "Only essential" there stops the Meta Pixel from loading and is also how you exercise the right to opt out of the sale or sharing of your personal information under US state privacy laws.
We also honour the Global Privacy Control browser signal automatically, so if you have it enabled you do not need to do anything. Most browsers additionally let you block or delete cookies in their settings; parts of the Site may not work as well if you do.
We will not treat you differently, or give you a worse experience, because you exercised any of these rights.
If you are in Norway or the EEA: you have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to our processing of it, to receive it in a portable form, and to withdraw consent at any time without affecting processing that already happened. If you think we have handled your data wrongly, you can complain to the Norwegian Data Protection Authority (Datatilsynet, datatilsynet.no) or to the authority in your country.
If you are in the United States: depending on your state, you may have the right to know what personal information we collect and who receives it, to have it corrected or deleted, to receive a copy, and to opt out of its sale or sharing and of targeted advertising. See "Your choices" above for the opt-out, or write to us using the address below. We will verify a request by replying to the email address it came from, and we respond within the period your state's law requires.
To make any request, email us at contact@eatvgan.com.
This Site is not directed to children, and we don't knowingly collect personal information from anyone under 18, or knowingly sell or share the information of anyone under 16. If you believe a child has provided us information, contact us and we'll delete it.
We may update this policy from time to time; the "last updated" date above will change accordingly.
Questions or complaints? Email contact@eatvgan.com or write to us at the address above.
