DRAFT — not legal advice. Privacy policies for a health-adjacent service handling shipped biological material carry real regulatory exposure (state privacy laws, and potentially HIPAA-adjacent considerations depending on how data is handled). Have a licensed attorney review before publishing.

Privacy Policy

Last updated: [DATE]

1. What we collect

Order information (name, shipping address, email, order contents), payment information (processed by our payment provider — we do not store full card numbers), and any information you submit via the contact form. [List any nutritional-analysis data if that service stores results.]

2. How we use it

To fulfill orders, communicate order status, provide customer support, and — only with consent — send marketing communications. [Confirm whether/how batch or nutritional-testing data is retained and for how long.]

3. Who we share it with

Shipping carriers (to deliver kits and returns), payment processors (e.g., Stripe/PayPal), and form/email service providers. We do not sell personal information. [Confirm this against actual vendor list before publishing.]

4. Your rights

[Depending on your customers' states of residence, this section may need CCPA/CPRA or other state-privacy-law-specific language — confirm with counsel.]

5. Data security

[Describe actual security measures in place — do not overstate.]

6. Contact

Questions about this policy: contact us or email [email protected].