Legal
Privacy Policy
What we collect when you shop with us, how we use it, who we share it with, and the choices you have.
1. Scope of this policy
[Legal Entity Name], LLC ("Puritas," "we," "us," or "our") operates the online store at puritasmedicine.com. This policy explains what information we collect through the store, why we collect it, who we share it with, and the rights and choices available to you.
It does not cover information you give to a third party directly — for example, details you enter into our payment provider's hosted checkout, or a shipping carrier's tracking page. Those companies handle that information under their own privacy notices. See Third-party websites and services.
We sell dietary supplements. We are not a healthcare provider, we do not provide medical care, and the information you give us is not protected health information under HIPAA. Some of it may still count as consumer health data under certain state laws — see Consumer health data.
2. Information we collect
Information you give us
- Order and contact details — name, email address, shipping and billing address, and telephone number where you provide one.
- Payment information — collected and processed by our payment provider through its own secure checkout. We receive confirmation of payment, the card brand, and the last four digits. We never receive or store your full card number, security code, or bank credentials.
- Communications — the content of emails, contact forms, and support messages you send us, including any product complaint or reaction you report.
- Marketing preferences — the newsletters you subscribe to and the opt-outs you record with us.
- Anything else you choose to send — including a product review or photograph, if you submit one.
Information we collect automatically
- Device and connection data — IP address, browser type and version, operating system, device identifiers, language, and the page that referred you.
- Usage data — products and pages viewed, items added to the cart, links clicked, and the path you take through the store.
- Approximate location — a general region derived from your IP address, used for shipping estimates, tax, and fraud prevention. We do not collect precise geolocation from your device.
- Cookie and pixel data — see Cookies and similar technologies.
Information we receive from others
- Payment and fraud-prevention providers — authorization results, chargeback notices, and risk signals.
- Shipping carriers — delivery status, exceptions, and address corrections.
- Advertising and analytics partners — aggregate campaign and attribution data, subject to the limits in We do not sell your personal information.
4. How we use your information
We use the information described above to:
- take, process, and fulfil your order, and to ship it to you;
- process payments, returns, refunds, and chargebacks;
- send transactional messages — order confirmations, shipping and delivery notices, return updates, and product safety notices including recalls;
- provide customer support and respond to questions and complaints;
- investigate and act on reports of an adverse reaction to a product, and meet our recordkeeping obligations for those reports;
- operate, secure, debug, and improve the store, and measure the performance of our content and advertising;
- send marketing communications where you have consented or where the law otherwise permits, subject to Email and text message communications;
- detect and prevent fraud, abuse, and security incidents, and enforce our Terms of Service;
- comply with tax, accounting, consumer-protection, and food-safety obligations, and to establish, exercise, or defend legal claims.
We may create de-identified or aggregated data that cannot reasonably be used to identify you, and use it for any lawful purpose. We will not attempt to re-identify it except to test our de-identification methods.
5. We do not sell your personal information
We do not sell your personal information, and we do not disclose it to third parties for their own independent marketing.
Some state privacy laws define "sale" and "sharing" broadly enough to capture the use of analytics and advertising cookies. To the extent those definitions apply, you may opt out at any time using the methods in Cookies and similar technologies and Your choices.
7. Email and text message communications
Transactional messages
We send messages necessary to complete your order — confirmations, shipping notices, return updates, and safety or recall notices. You cannot opt out of these while an order is in progress, because they are part of the service you bought.
Marketing messages
We send marketing email only where permitted by law. Every marketing email includes an unsubscribe link and we honor unsubscribe requests promptly. You can also email privacy@puritasmedicine.com to be removed from all marketing.
Text messages
If you provide your mobile number and consent, we may send text messages about your order and — separately, and only with your express consent — marketing. Consent to marketing texts is not a condition of purchase. Message and data rates may apply and message frequency varies. Reply STOP to opt out and HELP for help, or contact 1-800-000-0000. Carriers are not liable for delayed or undelivered messages.
We do not share mobile telephone numbers, opt-in data, or consent records with third parties or affiliates for their marketing purposes. We share them only with the vendors that deliver messages on our behalf.
8. How long we keep your information
We keep information for as long as we need it, and then for as long as we must:
- Order and transaction records — for the period required by tax, accounting, and consumer-protection law, typically several years after the order.
- Support correspondence — for as long as needed to resolve the matter and to show how we handled it.
- Adverse event and product complaint reports — for the period required by federal dietary supplement recordkeeping rules.
- Marketing and analytics data — no longer than needed for the purpose it was collected. Consent and opt-out records are kept as evidence of your choices.
When information is no longer needed, we delete it or de-identify it. Asking us to delete your information does not require us to delete records we are legally obliged to keep.
9. Your choices and how to exercise them
Wherever you live, you can:
- Access or correct the information you have given us, by contacting privacy@puritasmedicine.com.
- Ask us to delete information we are not required to retain.
- Unsubscribe from marketing email and text messages, as described in Email and text message communications.
- Control cookies and send a Global Privacy Control signal, as described in Cookies and similar technologies.
How to submit a request. Email privacy@puritasmedicine.com or call 1-800-000-0000. We verify your identity before acting, usually by confirming details already associated with an order. We respond within the time the applicable law allows — generally 45 days, with one extension where permitted. You may use an authorized agent where state law allows; we may ask for proof of authority and ask you to confirm the request directly.
No retaliation. We will not deny you products, charge you a different price, or provide a different level of service because you exercised a privacy right.
10. State privacy rights
Depending on your state of residence, you may have some or all of the following rights, subject to the exceptions in the applicable law:
- Right to know / access — to confirm whether we process your personal information and obtain a copy, including the categories collected, the sources, the purposes, and the categories of recipients.
- Right to correct inaccurate personal information.
- Right to delete personal information we hold about you.
- Right to portability — to receive your information in a portable, readily usable format.
- Right to opt out of targeted advertising, of the sale or sharing of personal information, and of profiling that produces legal or similarly significant effects.
- Right to limit the use and disclosure of sensitive personal information.
- Right to appeal a decision we make about your request, where your state provides one. To appeal, reply to our decision or email privacy@puritasmedicine.com with "Privacy Appeal" in the subject line. If we deny your appeal, your state attorney general's office can receive a complaint.
- Right to non-discrimination for exercising any of these rights.
California
California residents have the rights above under the California Consumer Privacy Act, as amended by the CPRA. The categories of personal information we have collected in the preceding twelve months are:
| CCPA category | Examples we collect | Disclosed for a business purpose to |
|---|---|---|
| Identifiers | Name, shipping and billing address, email, phone number, IP address | Payment provider, fulfilment, carriers, service providers |
| Customer records (Cal. Civ. Code § 1798.80) | Name, address, telephone number, payment card last four digits | Payment provider, service providers |
| Commercial information | Products purchased or considered, order and returns history | Payment provider, fulfilment, service providers |
| Internet or network activity | Pages and products viewed, referring URL, session and cart data | Analytics providers |
| Geolocation data | Approximate region derived from IP address | Analytics providers, fraud prevention |
| Inferences | Product interest derived from what you browse and buy | Analytics providers |
We do not knowingly sell or share the personal information of consumers under 16 years of age. California residents may also designate an authorized agent and, under the "Shine the Light" law, request information about disclosures to third parties for their direct marketing purposes. As stated in We do not sell your personal information, we make no such disclosures.
Other states
Residents of states with comprehensive privacy statutes — including Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia — may exercise the rights listed above to the extent their law provides them. Use the same contact methods in Your choices.
11. Consumer health data
This section is our consumer health data notice for the purposes of the Washington My Health My Data Act, Nevada SB 370, and the consumer health data provisions of the Connecticut Data Privacy Act. Those laws define health data broadly, and what you buy from a supplement store can fall within the definition even though we are not a healthcare provider and hold no medical records.
- What we collect. The products you browse, add to your cart, and purchase, and anything you volunteer about why — for example, in a support message or a reported reaction to a product.
- Where it comes from. Directly from you and from your interactions with the store.
- Why we collect it. To fulfil and support your order, to respond to safety reports, and to operate and secure the store.
- Who we share it with. Only the payment, fulfilment, shipping, and service providers described in How we share your information. We do not sell consumer health data, and we do not disclose it to advertising networks.
- Your rights. You may confirm whether we collect, share, or sell your consumer health data; obtain a list of the third parties with which we have shared it; withdraw consent to its collection and sharing; and request its deletion, including deletion by our processors. Email privacy@puritasmedicine.com with "Consumer Health Data" in the subject line.
- Appeals. If we decline a request we will explain why and how to appeal. Washington residents may also file a complaint with the Washington Attorney General.
We do not use a geofence around any facility that provides health care services to identify, track, or advertise to consumers based on health data.
12. How we protect your information
We use safeguards designed to protect personal information against unauthorized access, use, alteration, and loss. These include encryption of data in transit over TLS, restricting access to staff who need it, multi-factor authentication for administrative access, logging and monitoring, and vendor security review. Card payments are handled entirely by our payment provider, so full card numbers never reach our systems.
No method of transmission or storage is completely secure and we cannot guarantee absolute security. If we become aware of a breach affecting your information, we will notify you and the applicable regulators as required by state breach-notification law.
13. Children’s privacy
Our products and this store are intended for adults 18 years of age and older. We do not knowingly collect personal information from children under 13, and we do not knowingly sell or share the personal information of anyone under 16. If you believe a child has provided us information, contact privacy@puritasmedicine.com and we will delete it. See also our Supplement Disclaimer & Safety policy, which explains that our products are not intended for children.
14. Third-party websites and services
The store links to and relies on services we do not control — payment providers, shipping carriers, analytics tools, and social media. This policy does not apply to them. Read the privacy notice of any site you visit before providing information. We are not responsible for the content or privacy practices of third-party sites.
15. Where we operate
The store is intended for customers in the United States, and we ship only within the United States. Information we collect is processed and stored in the United States. If you access the store from elsewhere, you do so on your own initiative and are responsible for compliance with local law, and you understand that United States privacy law may differ from the law of your jurisdiction.
16. Changes to this policy
We may update this policy to reflect changes in our practices or in the law. When we do we will revise the "Last updated" date at the top of this page, and if the change is material we will give additional notice — by email or a prominent notice on the store — before it takes effect. Continuing to use the store after the effective date of a revision means you accept it.
17. How to contact us
Questions, requests, or complaints about privacy:
[Legal Entity Name], LLC
000 Example Street, Suite 000
City, ST 00000
Privacy: privacy@puritasmedicine.com
Support: hello@puritasmedicine.com · 1-800-000-0000
If you are not satisfied with our response, you may contact your state attorney general's office.