Consumer Health Data Privacy Policy

Consumer health data is personal information that identifies a consumer and is linked or reasonably linkable to the consumer's past, present, or future physical or mental health status. This includes, for example, information about supplement purchases, symptoms or health goals you tell us about, and the contents of messages you send to our support team.

Purchases: the supplements you buy, quantities, frequency, and subscription cadence.

Health goals & self-assessments: answers you provide in our get-started quiz or when you tell us what you are trying to support (e.g., sleep, calm, magnesium status).

Support communications: the content of emails or chat messages you send to our support team describing your experience or questions about a product.

Account data: name, email, and shipping address associated with your orders and subscriptions.

We use consumer health data to fulfill and ship your orders, manage recurring subscriptions, provide customer support, recommend products that may suit your stated goals, and improve our catalog and content. We do not use consumer health data to make eligibility decisions about credit, housing, insurance, education, or employment.

We share consumer health data only with service providers that help us operate, each bound by contractual obligations to protect it and use it only as we direct:

• Stripe — payment processing and recurring billing.
• Base44 — commerce platform, hosting, and data storage.
• Shipping carriers — to deliver and track your orders.

We do not sell or rent consumer health data to any third party, and we do not share it for cross-context behavioral advertising.

Depending on your state of residence, you may have the right to:

• Confirm whether we process consumer health data about you;
• Access or obtain a copy of your consumer health data;
• Correct inaccurate consumer health data;
• Delete your consumer health data, subject to legal exceptions;
• Obtain a copy of your data in a portable, readily usable format;
• Withdraw consent for the processing of consumer health data we collect with your consent;
• Limit the use of sensitive consumer health data.

You may exercise these rights through an authorized agent. If you use an agent, we may require proof that the agent has signed written permission to act on your behalf and we may verify your identity directly.

We retain consumer health data only as long as necessary to provide the service, comply with legal and tax obligations, and resolve disputes. Order records are retained per tax-law requirements. You may request earlier deletion of health-goal and support-communication data.

To exercise any of these rights, email support@corelabs.co. We will respond within 45 days. We will not discriminate against you for exercising your privacy rights.

We may update this policy to reflect changes in our practices or legal requirements. The "last updated" date above indicates when it was last revised. Material changes will be noted on the Site.