Privacy Policy

Privacy Policy — Tonicology

Effective Date: September 22, 2026  •  Last Updated: September 22, 2026

Protecting your personal information is our priority. This Privacy Policy applies to the website located at Tonicology.com and is operated by Tonicology Health Gold, LLC ("Tonicology," "we," "us," or "our"). It describes how we collect, use, share, and protect your personal information, and explains the rights available to you.

By using this website, you agree to the data practices described in this policy.

1. Information We Collect

Information You Provide Directly

When you create an account, place an order, or contact us, we may collect:

• First and last name
• Mailing and billing address
• Email address
• Phone number
• Payment card information (processed securely through our payment processor — we do not store full card numbers on our servers)
• Account credentials (username and password)
• Communications you send us

Information Collected Automatically

When you visit our website, we automatically collect:

• IP address
• Browser type and version
• Device type and operating system
• Pages visited and time spent on each page
• Referring website URL
• Date and time of each visit
• Mouse movement and interaction data (used to improve site layout)

Information from Third-Party Services

If you connect a third-party account (such as a social login) to your Tonicology account, we receive basic profile information from that service as permitted by your settings on that platform. You may disconnect third-party account connections at any time through that platform's settings.

2. How We Use Your Information

We use the information we collect to:

• Process and fulfill your orders
• Send order confirmations, shipping updates, and receipts
• Manage your account and provide customer support
• Send marketing and promotional communications (only with your consent or as permitted by law; you may opt out at any time)
• Improve our website, products, and services
• Analyze website traffic and usage patterns
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations

Legal bases for processing (GDPR): We process your personal data on the following bases: (a) performance of a contract — to fulfill orders and manage your account; (b) legitimate interests — to improve our services and prevent fraud; (c) legal obligation — to comply with applicable laws; and (d) consent — for marketing communications and non-essential cookies.

3. Cookies and Tracking Technologies

What We Use

Our website uses cookies and similar tracking technologies, including:

• Essential cookies — required for the website to function (shopping cart, login session)
• Analytics cookies — we use Google Analytics and Google Tag Manager to understand how visitors use our site. These services collect anonymized usage data.
• Marketing cookies — used to deliver relevant advertisements. These are only set with your consent.

Your Cookie Choices

When you first visit our site, you are presented with a cookie consent banner. You may accept all cookies, customize your preferences, or reject non-essential cookies. You may change your preferences at any time through the cookie settings link in our website footer.

You may also control cookies through your browser settings. Disabling certain cookies may affect the functionality of our website.

For more information about how Google uses data collected through Analytics, visit google.com/policies/privacy/partners.

4. Sharing Your Information

We do not sell, rent, or lease your personal information to third parties.

We may share your information with:

• Service providers — trusted third parties who assist us in operating our website and delivering services, including:
  • Payment processors (to securely process transactions)
  • Shipping carriers (to fulfill and track orders)
  • Email service providers (to send transactional and marketing emails)
  • Cloud hosting and infrastructure providers
  • Analytics providers (Google Analytics, Google Tag Manager)
  These service providers are contractually required to use your information only as necessary to provide services to us and to maintain appropriate confidentiality and security.
• Legal and regulatory authorities — we may disclose your information when required by law, court order, or government request, or to protect the rights, property, or safety of Tonicology, our customers, or the public.
• Business transfers — in the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your personal information is transferred and becomes subject to a different privacy policy.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law.

You may request deletion of your data at any time subject to the exceptions described in Section 7.

6. Security

We use commercially reasonable technical and organizational measures to protect your personal information, including SSL/TLS encryption for data transmitted to and from our website and encryption of sensitive data at rest.

Despite these measures, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security of your data.

Security incidents: In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected individuals and applicable regulatory authorities as required by applicable law.

7. Your Privacy Rights

All Users

Regardless of your location, you have the right to:

• Opt out of marketing emails at any time by clicking the unsubscribe link in any marketing email or contacting us at Wecare@Tonicology.com
• Access and update your account information by logging into your account

California Residents (CCPA / CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know — You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, our business purpose for collecting it, and the categories of third parties with whom we share it.
• Right to Delete — You may request that we delete personal information we have collected from you, subject to certain exceptions (e.g., completing a transaction, complying with a legal obligation).
• Right to Correct — You may request that we correct inaccurate personal information we hold about you.
• Right to Opt Out of Sale or Sharing — We do not sell your personal information. If this practice changes, we will update this policy and provide an opt-out mechanism.
• Right to Limit Use of Sensitive Personal Information — You may direct us to limit our use of sensitive personal information to purposes necessary to provide our services.
• Right to Non-Discrimination — We will not discriminate against you for exercising any of your CCPA rights.

To submit a CCPA request, contact us at Wecare@Tonicology.com or call 307-222-2387. We will respond within 45 days.

EEA, UK, and Swiss Residents (GDPR)

If you are located in the European Economic Area, United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR):

• Right of Access — You may request a copy of the personal data we hold about you.
• Right to Rectification — You may request that we correct incomplete or inaccurate personal data.
• Right to Erasure ("Right to be Forgotten") — You may request that we delete your personal data where there is no legitimate reason for us to continue processing it.
• Right to Restrict Processing — You may request that we restrict the processing of your personal data in certain circumstances.
• Right to Data Portability — You may request a machine-readable copy of your personal data to transfer to another service.
• Right to Object — You may object to processing of your personal data where we rely on legitimate interests as our legal basis.
• Right to Withdraw Consent — Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at Wecare@Tonicology.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection supervisory authority.

International data transfers: If you are located outside the United States, your personal information is transferred to and processed in the United States. We rely on appropriate safeguards for such transfers, including standard contractual clauses approved by the European Commission where applicable.

8. Children's Privacy

Our website is not directed to children under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us at Wecare@Tonicology.com and we will promptly delete such information.

9. Third-Party Links

Our website contains links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party sites you visit.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by:

• Sending an email to the address associated with your account, and/or
• Posting a prominent notice on our website

The "Last Updated" date at the top of this page reflects the most recent revision. Your continued use of our website after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Tonicology Health Gold, LLC
30 N. Gould St, #7623
Sheridan, WY

Email: Wecare@Tonicology.com
Phone: 307.222.2387

This Privacy Policy was drafted for internal review purposes. Tonicology recommends having this policy reviewed by a licensed attorney before publishing.