Privacy Policy

Supplesmart collects various types of information to provide personal clinical-grade supplement recommendations and coordinate reliable delivery infrastructure.

We collect personal information that you voluntarily submit to us during account creation, checkout, or survey completion.

• Contact information: Full name, delivery address, phone number, and email.
• Account credentials: Usernames, securely hashed passwords, and profile preferences.
• Order information: Transaction histories, billing status, and purchase records.
• Communications: Logs of correspondence with our customer-support and clinical advisory teams.
• Clinical profiles: Voluntary health survey data to align custom supplement dosages.

Whenever you interact with the Supplesmart web platform, certain network and telemetry indicators are captured.

• Device attributes: Hardware model, operating system, and software versions.
• Browser profiles: User-agent strings, system language settings, and viewport resolutions.
• Usage patterns: Page-scrolling depth, click heatmaps, and referring domain sources.
• Network identifiers: IP address and derived approximate geographical location.

We may receive updated delivery records or demographic data from third-party logistics and identity verification partners to ensure accurate distribution of clinical subscriptions.

Collected information serves as the structural foundation of our custom-formulated supplement services. Primary operational purposes include:

• Providing products and services tailored to individual nutritional requirements.
• Processing orders and managing automated monthly subscription cycles.
• Answering inquiries and routing dedicated clinical support resources.
• Maintaining core website security, performance, and responsive checkout pipelines.
• Monitoring against credit card fraud and malicious bot registrations.
• Performing anonymized statistical analytics to refine our ingredient supply chains.

Final purposes and legal wording to be confirmed.

We employ persistent and session-based cookies to retain your login state and hold items securely in your digital shopping cart. These files help us understand user interaction, allowing us to continuously polish site performance and stability.

Supplesmart does not trade, lease, or rent customer personal information. Sharing is strictly limited to operations essential to direct product fulfillment.

We contract with certified data processors, payment gateways, and freight carriers to package and ship your monthly orders. These entities process data exclusively under our explicit instruction.

Aggregated, fully de-identified diagnostic statistics may be shared with scientific consultants to audit the long-term effectiveness of our clinical protocols.

We may disclose personal records when required to comply with regulatory audits, court subpoenas, or formal requests by federal health administrations.

In the event of a merger, acquisition, or restructuring, database records containing transaction history and clinical profiles may be securely migrated as a core business asset.

Our e-commerce store is hosted on Shopify Inc. They provide us with the secure online transaction infrastructure that allows us to offer our formulations for sale. Your transaction database resides securely behind Shopify's certified PCI-compliant firewall systems.

Final Shopify-specific privacy language to be supplied.

Supplesmart keeps active account files, transaction records, and clinical logs only as long as necessary to manage your custom subscription. If you choose to terminate your Supplesmart profile, we will archive past records to satisfy our global legal, financial, and tax auditing mandates.

Depending on where you live, you have key rights regarding how we handle your personal information. These generally include:

• Access: Request a clear, structured copy of all personal records we have on file for you.
• Correction: Update or correct outdated names, addresses, or profile details.
• Deletion: Instruct us to permanently remove or anonymize your clinical data profiles.
• Marketing Preferences: Opt out of non-essential promotional and educational newsletters.
• Cookie Controls: Adjust your browser settings to reject secondary analytical tracking pixels.

Supplesmart products, website, and subscription systems are not built or intended for individuals under 18. We do not knowingly collect records from minors. If you believe we have received details from a minor, please contact us immediately to purge the records.

We protect your data using industry-standard Secure Sockets Layer (SSL) encryption, firewalls, and strict access limits. While we employ rigorous defenses, please note that no internet transmission or electronic storage method can guarantee absolute security.

Our servers are located primarily within the United States. If you visit our website from outside the US, please note that your information will be transferred, stored, and processed in accordance with this policy.

Final jurisdiction and international-transfer language to be confirmed.

We may update this Privacy Policy from time to time to align with new legal requirements or changes in our services. We will post any updates directly to this page and revise the date listed above.

Current version: 2.1.0-alpha

Last updated: October 24, 2025

For any questions, requests, or concerns regarding your personal data and this policy, please get in touch with our dedicated privacy desk.