Privacy Policy

Information We Collect

We collect different types of information depending on how you interact with us. Below is an overview of the categories of personal information we may collect:

Information You Provide Directly

You give us information when you create an account, place an order, sign up for our newsletter, contact customer support, or interact with our products and services.

Information Collected Automatically

As you navigate the Site, we automatically collect technical information through cookies, web beacons, and similar technologies (see Section 3).

Information We Do NOT Collect

• We do not collect sensitive health information such as medical diagnoses, prescriptions, or health records;
• We do not collect biometric data;
• We do not collect precise GPS location data;
• We do not knowingly collect information from children under 13.

How We Use Your Information

We use the information we collect for the following business purposes:

• To process and fulfill your orders — including payment processing, shipping, customer service, and refunds;
• To create and manage your account — including authentication, account recovery, and preferences;
• To communicate with you — including order confirmations, shipping updates, customer support, and (with your consent) marketing communications;
• To personalize your experience — including content recommendations and product suggestions;
• To improve our products and services — including analytics, troubleshooting, and product development;
• To send marketing communications — only if you have opted in (you can opt out at any time);
• To prevent fraud and ensure security — including detecting and preventing unauthorized access, abuse, and other harmful activities;
• To comply with legal obligations — including responding to legal process, government requests, and applicable laws.

Cookies & Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on the Site, analyze how the Site is used, and deliver relevant advertising.

Types of Cookies We Use

• Essential cookies — required for the Site to function (e.g., shopping cart, login). These cannot be disabled.
• Performance cookies — help us understand how visitors use the Site (e.g., Google Analytics).
• Functional cookies — remember your preferences and choices.
• Advertising cookies — used to deliver relevant ads on our Site and other websites (e.g., Meta Pixel, Google Ads).

Managing Cookies

Most web browsers allow you to control cookies through their settings. You can:

• Block all cookies (note: this may affect Site functionality);
• Accept only first-party cookies;
• Delete existing cookies at any time;
• Receive a notification before a cookie is set.

To learn more about cookies, visit allaboutcookies.org.

How We Share Your Information

We do not sell your personal information for monetary consideration. We may share your information with the following categories of recipients:

Service Providers

We share information with third-party companies that perform services on our behalf, such as:

• Payment processors (e.g., Stripe, PayPal);
• Order fulfillment and shipping companies;
• Email and SMS marketing platforms;
• Customer support software;
• Web hosting and IT infrastructure;
• Analytics providers (e.g., Google Analytics);
• Advertising partners (e.g., Meta, Google Ads).

These service providers are contractually required to protect your information and use it only for the services they provide to us.

Legal Compliance

We may disclose your information if required by law or in response to:

• A subpoena, court order, or other legal process;
• A government or law enforcement request;
• To protect our rights, property, or safety, or those of our users or the public;
• To investigate or prevent fraud or other illegal activity.

Business Transfers

In the event of a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you of any such change.

With Your Consent

We may share your information with third parties when you have given us explicit consent to do so.

Third-Party Services & Links

Our Site may contain links to third-party websites, services, or advertisements that are not operated by us. We are not responsible for the privacy practices or content of these third parties.

We encourage you to review the privacy policies of any third-party services before providing them with your information. Examples of third-party services we use include:

• Payment processors (Stripe, PayPal, Apple Pay)
• Shipping carriers (USPS, UPS, FedEx)
• Analytics providers (Google Analytics)
• Advertising platforms (Meta, Google, TikTok)
• Email marketing (Klaviyo, Customer.io)
• Customer support tools (Zendesk, Intercom)

Google Analytics & Advertising

We use Google Analytics and Google Ads to analyze Site usage and deliver relevant advertising. This may include:

• Remarketing with Google Analytics;
• Google Display Network Impression Reporting;
• Google Analytics Demographics and Interest Reporting;
• Integration with Google Ads campaigns.

Google may use cookies (including DoubleClick cookies) and other identifiers to collect data about your interactions with our Site.

How to Opt Out

You can opt out of Google Analytics by:

• Installing the Google Analytics Opt-Out Browser Add-on;
• Adjusting your Google Ad Settings;
• Visiting the Network Advertising Initiative opt-out page.

Meta (Facebook) Advertising

We use Meta's advertising platform (which includes Facebook and Instagram) to deliver targeted advertising. This may include:

• Meta Pixel — a tracking tool that collects information about your interactions with our Site;
• Custom Audiences — used to deliver relevant ads to people who have visited our Site;
• Lookalike Audiences — used to reach new users similar to our existing customers.

We comply with Meta's Data Use Restrictions and do not share Meta advertising data outside of authorized parties.

How to Opt Out

You can manage your Meta ad preferences at facebook.com/settings/ads.

SMS/Text Messaging Privacy

If you opt in to receive SMS/text messages from us, we collect your phone number and message preferences. We use this information to send:

• Order confirmations and shipping updates;
• Customer service notifications;
• Marketing messages (only with your explicit consent).

Message and data rates may apply. For more details, see Section 4 of our Terms of Service.

Email Communications

Every marketing email we send includes an unsubscribe link at the bottom. You can remove yourself from our mailing list at any time by clicking that link or by contacting us at support@glucozeal.com.

Even if you unsubscribe from marketing emails, we may still send you transactional emails related to your account or orders (e.g., order confirmations, shipping notifications, refund updates).

Payment Information Security

When you make a purchase, your payment information (such as credit card number and bank account details) is collected and processed by our PCI-DSS compliant payment processors. We do not store full credit card numbers on our servers.

All payment information is encrypted using industry-standard Secure Socket Layer (SSL) technology during transmission. Your payment information is shared only with the payment processor and the financial institutions necessary to complete your transaction.

Data Storage & Retention

Your personal information is stored on secure servers managed by our IT infrastructure providers. We retain your information for as long as necessary to:

• Fulfill the purposes outlined in this Privacy Policy;
• Comply with legal, tax, and accounting obligations;
• Resolve disputes and enforce our agreements;
• Provide ongoing customer service.

Typical Retention Periods

After the retention period, your information is either deleted or anonymized so it can no longer be linked to you.

Data Security Measures

We implement industry-standard security measures to protect your information from unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for data in transit;
• Encrypted databases for data at rest;
• Access controls limiting employee access to personal information on a need-to-know basis;
• Regular security audits and vulnerability assessments;
• Secure password policies and multi-factor authentication for internal systems;
• PCI-DSS compliance for payment information.

GDPR Rights (EU/EEA Residents)

If you are located in the European Union (EU), European Economic Area (EEA), or the United Kingdom, you have certain rights under the General Data Protection Regulation (GDPR).

Your Rights Include:

1. Right of access — Request a copy of the personal data we hold about you
2. Right to rectification — Request correction of inaccurate or incomplete data
3. Right to erasure ("right to be forgotten") — Request deletion of your data
4. Right to restrict processing — Request that we limit how we use your data
5. Right to data portability — Receive your data in a structured, machine-readable format
6. Right to object — Object to certain types of processing, including direct marketing
7. Right not to be subject to automated decision-making — Including profiling
8. Right to withdraw consent — Where processing is based on consent
9. Right to lodge a complaint — With your local data protection authority

Legal Basis for Processing

We process your personal data based on:

• Performance of a contract — to fulfill orders and provide services;
• Legitimate interests — to improve our services and prevent fraud;
• Consent — for marketing communications and certain cookies;
• Legal obligations — to comply with tax, accounting, and other laws.

To exercise any of these rights, contact us at support@glucozeal.com with the subject line "GDPR Request." We will respond within 30 days.

California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).

Your California Rights:

1. Right to know — What personal information we collect, use, share, and sell
2. Right to delete — Request deletion of your personal information (subject to certain exceptions)
3. Right to correct — Request correction of inaccurate personal information
4. Right to opt out of sale or sharing — Of your personal information
5. Right to limit use of sensitive personal information
6. Right to non-discrimination — For exercising your CCPA rights
7. Right to data portability — Receive your data in a usable format

Categories of Information Collected (Past 12 Months)

We have collected the following categories of personal information in the past 12 months, as described in Section 1 above:

• Identifiers, commercial information, internet activity, device information, geolocation data (approximate), user content, and inferences.

Sale or Sharing of Personal Information

We do not sell personal information for monetary consideration. However, certain advertising practices (such as the use of cookies and pixels for cross-context behavioral advertising) may be considered "sharing" under the CPRA.

To opt out of such sharing, click "Do Not Sell or Share My Personal Information" on our Site footer (when available), or contact us at support@glucozeal.com.

How to Exercise Your Rights

To submit a request, email us at support@glucozeal.com with the subject line "CCPA Request" and include:

• Your full name and email address used with our Site;
• The specific right you wish to exercise;
• Verification information (we may request additional verification to confirm your identity).

We will respond within 45 days (extendable by an additional 45 days if necessary). You may also designate an authorized agent to submit a request on your behalf.

Shine the Light Law

California's Shine the Light law allows California residents to request information about third parties with whom we have shared their personal information for direct marketing purposes. Contact us at support@glucozeal.com to make such a request.

Other U.S. State Privacy Rights

If you are a resident of certain U.S. states, you may have additional privacy rights under state law, including:

• Virginia — Virginia Consumer Data Protection Act (VCDPA)
• Colorado — Colorado Privacy Act (CPA)
• Connecticut — Connecticut Data Privacy Act (CTDPA)
• Utah — Utah Consumer Privacy Act (UCPA)
• Texas — Texas Data Privacy and Security Act (TDPSA)
• Oregon — Oregon Consumer Privacy Act (OCPA)
• Montana — Montana Consumer Data Privacy Act
• Washington — My Health My Data Act

These laws generally provide rights similar to the CCPA, including the right to access, delete, correct, and opt out of certain processing. To exercise any of these rights, contact us at support@glucozeal.com with the subject line "State Privacy Request - [Your State]."

Children's Privacy (COPPA)

This Site is designed for adults age 18+. We comply with the Children's Online Privacy Protection Act (COPPA) and similar laws protecting minors' privacy.

Your Choices & Opt-Out Rights

You have several choices about how we use your information:

Marketing Communications

• Email: Click the "unsubscribe" link in any marketing email;
• SMS: Reply STOP to any text message;
• Postal mail: Contact us at support@glucozeal.com.

Cookies & Tracking

• Adjust your browser settings to block or delete cookies;
• Use the opt-out tools listed in Sections 6 and 7;
• Use browser extensions like Privacy Badger or uBlock Origin.

Account Information

• Update your account information at any time through your account settings;
• Request deletion of your account by contacting us.

Promotional Offers

If you no longer wish to receive promotional offers, please email us at support@glucozeal.com with the subject line "Unsubscribe All."

Do Not Track Signals

Some browsers offer a "Do Not Track" (DNT) signal that asks websites not to track your browsing. Currently, there is no industry standard for how to respond to DNT signals, and we do not currently respond to DNT signals.

However, you can opt out of tracking through the methods described in Section 17 above.

Business Transfers

If GlucoZeal is involved in a merger, acquisition, asset sale, reorganization, or bankruptcy, your personal information may be transferred as part of that transaction. We will provide notice (through the Site or by email) of any such change in ownership or control of your personal information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will:

• Post the updated Policy on this page;
• Update the "Effective Date" at the top;
• Notify you by email if you have an account with us (for material changes).

Your continued use of the Site after any changes are posted constitutes your acceptance of the updated Policy. We encourage you to review this page periodically to stay informed.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

For privacy-specific requests, please include the appropriate subject line:

• "GDPR Request" — for EU/EEA residents
• "CCPA Request" — for California residents
• "State Privacy Request - [Your State]" — for other state residents
• "Unsubscribe All" — to opt out of all marketing
• "Account Deletion" — to delete your account

We will respond to your inquiry within the timeframe required by applicable law.