Privacy Policy

Effective date: [EFFECTIVE DATE]

This Privacy Policy explains how [COMPANY LEGAL NAME] ("NoMas Supplements," "we," "us," or "our") collects, uses, shares, and protects personal information when you visit our website, buy our products, access our member area, or join our email or text message programs (the "Services"). It also explains the privacy rights you may have, including under the California Consumer Privacy Act as amended by the California Privacy Rights Act (together, "CCPA") and similar state laws.

The short version: we collect what we need to ship your order, support you, and (only if you say yes) send you offers. We do not sell your personal information for money, and we never share your mobile information or SMS opt-in data with third parties for their marketing.

1. Information We Collect

Category	Examples	Collected?
Identifiers	Name, shipping and billing address, email address, phone number, IP address, order number, member area login	Yes
Commercial information	Products purchased, order history, offers accepted or declined, refund requests	Yes
Payment information	Card type, last four digits, billing ZIP (full card numbers are collected and stored by our payment processor, Stripe, not by us)	Limited
Internet or network activity	Pages viewed, clicks, referring site, browser and device type, course progress in the member area, email opens and clicks	Yes
Approximate geolocation	City, state, or region inferred from IP address	Yes
Communications	Messages you send to support, survey answers, reviews, text message replies (such as STOP or HELP)	Yes
Inferences	Product interests based on your purchases and browsing	Yes
Sensitive personal information	We do not ask for health records or diagnoses. Your purchase of a menopause support product could suggest information about health or age. We use it only to fulfill and support your order, and not to infer characteristics about you.	Limited

2. Sources of Information

Directly from you: when you place an order, fill out a form or popup, contact support, or opt in to texts or emails.
Automatically: through cookies, pixels, and similar technologies when you use the Services.
From service providers: such as our payment processor (payment confirmation and fraud signals), our fulfillment partner (shipping and tracking status), and our SMS and email providers (delivery and opt-out status).

3. How We Use Your Information

To process payments, fulfill and ship orders, and process returns and refunds
To provide access to digital courses and the member area
To send order confirmations, shipping updates, and account notices
To send marketing emails and texts, but only if you have opted in
To respond to questions and provide customer support
To prevent fraud, chargeback abuse, and security incidents
To measure and improve our website, products, and advertising
To comply with legal obligations and enforce our Terms & Conditions

4. How We Share Your Information

We share personal information only as described below. None of the categories of sharing described in this section include text messaging originator opt-in data or consent, which we never share with any third party.

Payment processor (Stripe): to process payments, including one-click upsell charges, and to prevent fraud.
Fulfillment partner (On Demand Fulfillment): your name, shipping address, phone number (for carrier delivery purposes only), and order contents so they can pack and ship your order.
Shipping carriers: such as USPS, UPS, or FedEx, to deliver your package.
SMS provider (Twilio): your mobile number and message content, solely to deliver the text messages you requested and to process opt-out and help requests. Twilio acts as our service provider and may not use your information for its own marketing.
Email service provider: your name, email address, and engagement data, solely to send the emails you requested or agreed to receive.
Member area and hosting providers: to host our website and deliver your courses.
Analytics and advertising partners: such as Google and Meta, through cookies and pixels, to measure site performance and show relevant ads. See Section 6.
Professional advisors and authorities: lawyers, accountants, and government authorities when required by law or to protect our rights.
Business transfers: if we are involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction, subject to this policy.

Our service providers are contractually limited to using personal information only to perform services for us.

5. SMS / Text Messaging Privacy

If you opt in to our NoMas Alerts text message program, we collect your mobile phone number, the date, time, and method of your opt-in, and your message history (including STOP and HELP replies) so we can deliver messages, honor opt-outs, and keep records of your consent.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.

We share mobile numbers only with our SMS service provider (Twilio) and only to the extent needed to deliver the messages you asked to receive. We do not sell, rent, or trade mobile numbers or SMS consent.

You can opt out at any time by replying STOP. Reply HELP for help, or contact [SUPPORT EMAIL] or [SUPPORT PHONE]. Message frequency varies. Message and data rates may apply. Full program terms are on our SMS Terms page and in Section 10 of our Terms & Conditions.

6. Cookies, Pixels, and Tracking Technologies

We and our partners use cookies, tracking pixels (such as the Meta Pixel and Google tags), and similar technologies to:

Keep your cart and checkout working
Remember your preferences and keep you signed in to the member area
Understand how visitors use our site (analytics)
Measure ad performance and show you ads on other sites and apps (interest-based advertising)

You can control cookies through your browser settings. You can also opt out of interest-based ads through the Digital Advertising Alliance and Network Advertising Initiative, and through your Google and Meta ad settings. We honor Global Privacy Control (GPC) browser signals as a request to opt out of sale or sharing for that browser.

7. "Do Not Sell or Share My Personal Information"

We do not sell personal information for money. However, our use of advertising cookies and pixels may be considered "sharing" for cross-context behavioral advertising, or a "sale," under some state laws. You can opt out by enabling Global Privacy Control in your browser, or by emailing [SUPPORT EMAIL] with the subject line "Do Not Sell or Share." We do not knowingly sell or share the personal information of anyone under 18. SMS opt-in data and mobile numbers are never sold or shared.

8. Your Privacy Rights

Depending on where you live (including California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and other states with privacy laws), you may have the right to:

Know and access the personal information we have about you, including the categories, sources, purposes, and recipients
Delete personal information we collected from you, subject to legal exceptions (for example, records we must keep for tax purposes)
Correct inaccurate personal information
Opt out of the sale or sharing of personal information, targeted advertising, and profiling
Limit the use of sensitive personal information (we only use it as permitted by law)
Data portability, meaning a copy of your data in a usable format
Non-discrimination: we will not deny you service or charge different prices for exercising your rights
Appeal a decision we make about your request, by replying to our decision email with the word "Appeal"

To make a request, email [SUPPORT EMAIL] or call [SUPPORT PHONE]. We will verify your identity by matching information you provide with our records (such as your email and a recent order number). You may use an authorized agent, who must provide written permission from you. We respond within 45 days, and we will tell you if we need more time as allowed by law.

California "Shine the Light": California residents may ask for information about personal information disclosed to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing.

9. Marketing Choices

Email: click "unsubscribe" in any marketing email. We will still send transactional emails, such as receipts and shipping notices.
Text messages: reply STOP to any message.
Ads: see Section 6.

See our Anti-Spam Policy for more.

10. Children's Privacy

Our Services are intended for adults 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has given us personal information, contact us at [SUPPORT EMAIL] and we will delete it.

11. Data Retention

We keep personal information only as long as needed for the purposes in this policy. In general, we keep order and payment records for up to 7 years for tax, accounting, and chargeback purposes; member area account data for as long as your account is active; marketing data until you opt out or ask us to delete it; and SMS consent and opt-out records for at least 5 years after your last interaction, to prove consent and honor opt-outs. [CONFIRM]

12. Security

We use reasonable administrative, technical, and physical safeguards to protect personal information, including encrypted (HTTPS) connections and PCI-compliant payment processing through Stripe. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security. If a breach affects your information, we will notify you as required by law.

13. Where Your Information Is Processed

We are based in the United States, and our Services are intended for U.S. residents. Your information is processed and stored in the United States.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy here with a new effective date, and notify you of material changes by email or on our site when required.

15. Contact Us

[COMPANY LEGAL NAME], [STREET ADDRESS], [CITY, STATE ZIP]
Email: [SUPPORT EMAIL]
Phone: [SUPPORT PHONE]

See also: Terms & Conditions, SMS Terms, Contact.