Privacy Policy

1.1 Information You Provide Directly

When you place an order, create an account, contact our support team, or subscribe to our email list, you may provide us with the following categories of personal information:

• Identity Information: First name, last name
• Contact Information: Email address, phone number, postal address
• Transaction Information: Billing address, shipping address, order history, and purchase amounts
• Payment Information: Credit or debit card details, bank account details (processed securely through our payment processors — we do not store full payment card numbers)
• Communications: Messages you send us via email, contact forms, or customer service channels
• Account Credentials: Username and password if you create an account on our Site

1.2 Information Collected Automatically

When you visit our Site, certain information is collected automatically through cookies, web beacons, and similar tracking technologies:

• Device Information: IP address, browser type and version, operating system, device type
• Usage Data: Pages viewed, links clicked, time spent on pages, referring URLs, exit pages
• Location Data: General geographic location derived from your IP address (country, state/region, city — not precise GPS coordinates)
• Cookie Data: Information stored in cookies placed on your browser (see Section 4 for details)

1.3 Information From Third Parties

We may receive information about you from third-party sources, including:

• Payment Processors: Transaction confirmation data from Stripe, PayPal, or other payment platforms
• Shipping Carriers: Delivery status and address validation data from USPS, UPS, FedEx
• Advertising Partners: Aggregated audience data for advertising campaigns (no individual-level personal data)
• Analytics Providers: Aggregated website performance data from Google Analytics and similar tools

We use the information we collect for the following purposes:

We do not sell your personal information to third parties. We may share your information only in the following circumstances:

3.1 Service Providers

We share information with trusted third-party vendors who help us operate our business and deliver products to you. These include:

• Payment Processors (e.g., Stripe, PayPal) — to process your payment transactions securely
• Fulfillment & Shipping Partners (e.g., USPS, UPS, FedEx) — to ship your orders
• Email Marketing Platforms (e.g., Klaviyo, Mailchimp) — to send transactional and marketing emails
• Analytics Providers (e.g., Google Analytics) — to understand how our Site is used
• Customer Support Tools — to manage customer service interactions
• Advertising Platforms (e.g., Google Ads, Facebook/Meta Ads) — to run and measure advertising campaigns

All service providers are contractually required to handle your data in accordance with this Privacy Policy and applicable law. They are not permitted to use your personal data for any purpose other than providing services to us.

3.2 Legal Requirements

We may disclose your information when required to do so by law, legal process, or government authority, including in response to a court order, subpoena, or regulatory investigation. We may also disclose information when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

3.3 Business Transfers

If UpWellness, LLC undergoes a merger, acquisition, bankruptcy, dissolution, or sale of all or a portion of our assets, your information may be transferred as part of such a transaction. We will notify you via email or a prominent notice on our Site if such a transfer occurs and your information becomes subject to a materially different privacy policy.

3.4 With Your Consent

We may share your information with third parties when you have explicitly given us consent to do so.

We use cookies and similar tracking technologies to operate and improve our Site, personalize your experience, and for advertising purposes.

Types of Cookies We Use

Managing Cookies

You can control and delete cookies through your browser settings. Most browsers allow you to refuse cookies or delete cookies that have already been set. Please note that refusing certain cookies may affect the functionality of our Site. You can also opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

To opt out of interest-based advertising, visit the Digital Advertising Alliance opt-out page or Network Advertising Initiative opt-out page.

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your browser and our Site is encrypted using industry-standard TLS (Transport Layer Security) encryption
• Payment Security: We use PCI DSS-compliant payment processors. We do not store full payment card numbers on our servers
• Access Controls: Personal data is accessible only to authorized employees and contractors who need it to perform their job functions
• Secure Data Storage: Data is stored on secured servers with appropriate access controls and monitoring
• Regular Security Reviews: We periodically review and update our security practices

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.

• Order & Transaction Records: Retained for 7 years to comply with financial and tax record-keeping requirements
• Customer Account Data: Retained for the duration of your account plus 3 years after account closure
• Marketing Preferences: Retained until you unsubscribe or request deletion
• Support Communications: Retained for 3 years from the date of the last interaction
• Website Analytics Data: Retained for up to 26 months in aggregate form

When your data is no longer needed, we securely delete or anonymize it. You may request deletion of your personal data at any time by contacting us (see Section 7 and Section 12).

Depending on your location, you may have the following rights regarding your personal information:

To exercise any of these rights, contact us at [email protected] or call (800) 876-2196. We will respond to all verified requests within 30 days. We may need to verify your identity before processing your request.

Opt-Out of Marketing Emails

You can unsubscribe from our marketing emails at any time by clicking the "Unsubscribe" link at the bottom of any marketing email, or by contacting us directly. Note that you will continue to receive transactional emails (order confirmations, shipping notifications) even after unsubscribing from marketing communications.

Our Site and products are intended for adults aged 18 and older. We do not knowingly collect personal information from children under the age of 13. If you are a parent or guardian and believe that your child under 13 has provided us with personal information, please contact us immediately at [email protected].

Upon receiving such a notification, we will take prompt steps to delete the relevant information from our records. If you are between 13 and 17 years of age, please consult with a parent or guardian before using our Site or submitting any personal information.

Our Site may contain links to third-party websites, including carrier tracking portals (USPS, UPS, FedEx), social media platforms (Facebook, Instagram, YouTube), and affiliate or review sites. These websites operate independently and are not governed by this Privacy Policy.

We are not responsible for the privacy practices of any third-party website. We encourage you to review the privacy policies of any external site you visit before providing personal information. The presence of a link on our Site does not constitute endorsement of the linked website's privacy practices.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

Right to Know

You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected it, the business or commercial purposes for collecting or selling it, and the categories of third parties with whom we share it.

Right to Delete

You have the right to request deletion of personal information we have collected from you, subject to certain exceptions (e.g., information needed to complete a transaction, detect fraud, or comply with legal obligations).

Right to Opt-Out of Sale

We do not sell personal information. As a result, no opt-out mechanism for sale of personal information is required. We do not sell, rent, or trade your personal data to third parties for their own commercial purposes.

Right to Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights. This means we will not deny you goods or services, charge different prices, provide a different quality of service, or suggest you will receive different treatment for exercising your privacy rights.

How to Submit a CCPA Request

California residents may submit privacy rights requests by:

• Emailing us at [email protected] with "CCPA Request" in the subject line
• Calling us at (800) 876-2196 Monday–Friday 9 AM–9 PM ET

We will verify your identity and respond to your request within 45 days, extendable by an additional 45 days when necessary. You may designate an authorized agent to submit requests on your behalf — we will require written authorization from you and may verify your identity directly.

We may update this Privacy Policy from time to time to reflect changes in our business practices, applicable law, or technology. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Post a prominent notice on our homepage or Site for at least 30 days
• Send an email notification to registered account holders and email subscribers for significant changes

Your continued use of our Site after the effective date of any revised Privacy Policy constitutes your acceptance of the changes. We encourage you to review this page periodically to stay informed about how we protect your information.

Previous versions of this Privacy Policy are available upon request by contacting us at the address below.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information, please contact us using any of the following methods: