Privacy Policy

(a) Information you provide: When you create an account, place an order, subscribe, or contact us, we collect the following categories of personal information:

• Identifiers: full name, email address, phone number, billing and shipping address
• Account credentials: username and encrypted password
• Payment information: card type and last 4 digits (full card numbers are processed and stored by our payment processor — we do not retain them)
• Commercial information: order history, subscription details, product preferences, return and refund history
• Communications: customer service messages, reviews, and feedback you send us

(b) Automatically collected: When you visit our website, we automatically collect:

• Internet / network activity: IP address, browser type and version, device type and operating system, pages visited, time spent on site, referring URL, links clicked
• Device identifiers: device ID, advertising ID, and cookie identifiers
• Geolocation data: country and state-level location derived from IP address

(c) Inferences: We derive inferences from the above categories, such as marketing preferences and product affinity, to tailor content and recommendations.

(d) From third parties: We may receive information about you from Shopify (our store platform), payment processors, advertising partners (Meta, Google), and analytics providers, in accordance with their respective privacy policies.

We use the information we collect to:

• Process and fulfill your orders
• Send order confirmations, shipping updates, and delivery notifications
• Manage your account and subscriptions (via Recharge)
• Provide customer support
• Send promotional emails and offers (with your consent — you may opt out at any time)
• Send SMS marketing messages (only if you have separately opted in — see Section 7)
• Improve website performance and user experience
• Run targeted advertising via Meta and Google platforms
• Detect and prevent fraud
• Comply with legal obligations

We share your information with:

• Service providers including Shopify (store platform), Recharge (subscriptions), shipping carriers (UPS, FedEx, USPS), payment processors, email marketing platforms, and analytics providers. These providers are contractually bound to protect your data and may only use it to provide services on our behalf.
• Advertising platforms such as Meta and Google, for targeted advertising. This may constitute "sharing" of personal information under the CCPA and applicable state laws. See Section 6 for your opt-out rights.
• Legal compliance when required by law, court order, subpoena, or other legal process.
• Business transfers in the event of a merger, acquisition, or sale of assets.

We do not sell your personal information to third parties for monetary consideration.

We use cookies and similar technologies to operate and improve our website. Categories include:

• Essential cookies — required for checkout, cart functionality, and session management. These cannot be disabled without impacting site functionality. Duration: session or up to 1 year.
• Analytics cookies — Google Analytics (_ga, _gid, _gat) to understand how visitors use our site, measure traffic, and identify errors. Duration: up to 2 years.
• Marketing cookies — Meta Pixel and Google Ads tags to serve relevant advertisements and measure ad performance. Duration: up to 90 days.
• Preference cookies — remember settings such as currency, language, and cart contents. Duration: up to 1 year.

You can control or delete cookies through your browser settings. Opting out of marketing cookies will not affect your ability to browse or purchase from our website. For California residents and residents of applicable states, see Section 6 for additional opt-out rights regarding advertising-related data sharing.

Depending on your state of residence, you may have the following rights regarding your personal information:

• Right to know / access — request a copy of the personal information we hold about you
• Right to correction — request that we correct inaccurate personal information
• Right to deletion — request that we delete your personal information, subject to legal retention requirements
• Right to data portability — receive your data in a structured, commonly used format
• Right to opt out — opt out of the sale or sharing of your personal information, and opt out of targeted advertising (see Section 6)
• Right to non-discrimination — we will not discriminate against you for exercising any of these rights
• Right to appeal — if we deny your request, you may appeal our decision by emailing support@speciesnutrition.com with "Privacy Rights Appeal" in the subject line. We will respond within 60 days.

These rights apply to residents of California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), Montana (MCDPA), Oregon (OCPA), Florida (FDBR), Utah (UCPA), Iowa (ICDPA), Indiana (INCDPA), Tennessee (TIPA), Delaware (DPDPA), New Hampshire, New Jersey, Nebraska, and other states where comprehensive privacy laws are in effect, to the extent provided by applicable law.

EU and UK residents have additional rights under the GDPR and UK GDPR, including the right to object to processing and the right to lodge a complaint with your supervisory authority.

To exercise any of these rights, contact us at support@speciesnutrition.com with your request. We will verify your identity and respond within the timeframe required by applicable law (typically 45 days, with a possible 45-day extension).

Species Nutrition does not sell your personal information for monetary consideration. However, we may share certain data — such as device identifiers and browsing activity — with advertising platforms including Meta and Google for targeted advertising purposes. Under the California Consumer Privacy Act (CCPA) and similar state laws, this may qualify as "sharing" personal information for cross-context behavioral advertising.

You have the right to opt out of this sharing. To exercise this right:

• Email us: Send a request to support@speciesnutrition.com with "Do Not Sell or Share My Personal Information" in the subject line
• Global Privacy Control (GPC): We honor GPC browser signals as a valid opt-out of sharing for California residents. If your browser is configured with GPC enabled, we will treat it as an opt-out request automatically.

We will process your opt-out request within 15 business days and send a written confirmation once your opt-out has been completed. Your opt-out will remain in effect unless you later authorize the sharing of your data. We will not discriminate against you for exercising this right — you will continue to receive the same prices, service levels, and product quality.

If you opt in to SMS/text message marketing, the following terms apply:

• Your phone number and SMS consent information will not be shared with third parties for their own marketing purposes.
• You expressly consent to receive recurring automated marketing text messages from Species Nutrition at the phone number provided. Consent is not a condition of purchase.
• Message frequency varies based on your account activity and active promotions.
• Standard message and data rates may apply.
• To opt out at any time, reply STOP to any text message. Reply HELP for assistance or contact us at support@speciesnutrition.com.

Our SMS program complies with the Telephone Consumer Protection Act (TCPA) and applicable state telemarketing laws. If you believe you have received a text message from us in error, please contact us immediately at support@speciesnutrition.com.

We retain your personal information for as long as necessary to fulfill the purposes described in this policy and to comply with our legal obligations. Our retention schedule by data category:

• Order and transaction data: 7 years (required for tax and legal compliance)
• Account information: duration of account plus 2 years after account closure
• Marketing and analytics data: up to 2 years from last interaction, unless you opt out earlier
• Customer service communications: 3 years from last contact
• Payment information: we do not store full card numbers; tokenized payment data is retained as long as your payment method is on file
• SMS opt-in records: 4 years (TCPA compliance)

For transfers of personal data from the European Economic Area or United Kingdom to the United States, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission as the lawful transfer mechanism under GDPR.

We protect your data using TLS/SSL encryption, secure payment processing, access controls, and industry-standard security practices. No system is completely secure. If you believe your account has been compromised, contact us immediately at support@speciesnutrition.com.

Our website and products are not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information without parental consent, please contact us at support@speciesnutrition.com and we will delete it promptly.

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party sites you visit before providing any personal information.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a prominent notice on our website prior to the change taking effect. Your continued use of our website after changes are posted constitutes your acceptance of the updated policy. The "Last Updated" date at the top of this page reflects the most recent revision.

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

• Email: support@speciesnutrition.com
• Phone: 239-984-5753
• Hours: Monday–Friday, 9:00 AM–5:00 PM EST