Privacy Policy

1. Information we collect

We collect three kinds of information: what you give us directly, what is generated automatically when you browse, and what our service providers report back to us about an order in progress.

Information you give us

• Contact details — your name, email address and, when you provide it, a phone number for delivery notifications.
• Shipping and billing address — the street address, city, state and ZIP code needed to deliver your bottles and to verify your payment.
• Order history — the products you bought, the pack you chose, the amount you paid, any discount code applied, and the status of each order.
• Messages you send us — the content of emails, contact form submissions and any photos you attach when reporting a damaged parcel.
• Reviews and other content — anything you choose to publish on the store, including the display name attached to it.
• Marketing preferences — whether you asked to receive our emails, and whether you later opted out.

Payment information

Information collected automatically

• Device and connection data — IP address, browser type and version, operating system, screen size and language preference.
• Usage data — the pages you viewed, the order in which you viewed them, how long you stayed, what you added to the cart, and the link or advertisement that brought you here.
• Cookie identifiers — random identifiers stored in your browser that let us keep your cart intact between pages and measure how the store is performing.

We do not ask for, and do not want, sensitive categories of information. Please do not send us medical records, diagnoses, prescriptions, government identification numbers or financial account numbers. If you include health details in a message to us, we use them only to answer that message and we delete them once the conversation is closed.

2. Why we collect it

Every piece of information above has a specific job. We use your details to:

• process your order, take payment, and send the confirmation and tracking emails that go with it;
• deliver your parcel and, where needed, let the carrier reach you about a delivery;
• handle returns, replacements and refunds under our guarantee;
• answer your questions and keep a record of what we told you;
• manage subscription refills, including reminders before a renewal charge;
• send marketing emails when you have asked for them, and stop sending them when you ask us to stop;
• understand which pages and products work, so we can improve the store;
• detect and prevent fraud, abuse of discount codes and unauthorised access; and
• meet our legal, tax and accounting obligations.

We do not use your information to make automated decisions that produce legal effects about you, and we do not build psychological or health profiles of our customers.

3. Cookies and tracking technologies

Cookies are small text files a website stores in your browser. We also use closely related technologies such as pixels, local storage and software development kits provided by our analytics and advertising partners. They fall into three groups.

• Strictly necessary. These keep your cart contents, remember that you are mid-checkout, apply a valid discount code and protect the store against fraud. The store does not work without them, so they cannot be switched off from within the site.
• Analytics. These count visits, measure how far people scroll, show where a checkout was abandoned and report aggregate performance. We use this to fix what is broken and to decide what to write next.
• Advertising. These let advertising platforms recognise that a visit or a purchase came from one of our ads, and let us show a reminder to people who viewed a product but did not buy.

You can delete existing cookies and refuse new ones through your browser settings — every major browser has a privacy or site-data section for this. Blocking strictly necessary cookies will break the cart and the checkout. Where the law requires consent before analytics or advertising cookies are set, we ask for that consent when you first arrive and you can withdraw it at any time using the same control.

4. Advertising pixels and how to opt out

We advertise on third-party platforms, and those platforms give us a small piece of code — a pixel — that reports back when a visit, an add-to-cart or a purchase followed one of our ads. Depending on the campaign, this can include advertising and analytics technology from social networks, search engines and ad networks. The pixel shares an event and a hashed, non-readable identifier, not your name or your address.

You have several ways to limit this:

• use the ad settings inside the social or search platform account itself to turn off personalised ads and to remove advertisers from your list;
• enable your browser's "Do Not Track" or global privacy control signal — where a recognised opt-out preference signal is sent, we treat it as a request to opt out of sharing for targeted advertising;
• use the industry opt-out pages operated by the Digital Advertising Alliance and the Network Advertising Initiative; or
• email us at support@lymphaticdrainagedrops.com and ask us to exclude you.

Opting out does not mean you stop seeing ads. It means the ads you see are less likely to be based on your activity on this store.

5. Who we share information with

We share personal information only with the companies that make the store work, and only with the part of your information each one needs. Our categories of recipients are:

• Payment processors — to authorise, capture and refund your payment, and to run fraud checks. They receive your payment details directly and your billing information from us.
• Shipping carriers and fulfilment partners — to pick, pack and deliver your parcel. They receive your name, shipping address, phone number where supplied, and the contents of the order.
• Our email provider — to send order confirmations, shipping notifications, refill reminders and, if you asked for them, marketing emails. They receive your email address, your name and the order details referenced in the message.
• Analytics and advertising providers — to measure traffic and campaign performance, as described above.
• Our e-commerce platform and hosting providers — who store the store's data on our behalf under contract.
• Professional advisers and authorities — our accountants and lawyers, and any court, regulator or law enforcement body where we are legally required to respond or where we need to establish or defend a legal claim.
• A successor — if the business is sold, merged or reorganised, customer records may transfer to the buyer, who would remain bound by this policy until it is updated and you are notified.

Each provider is bound by a contract that limits them to processing your information for the purpose we hired them for, and forbids them from using it for their own purposes.

6. We do not sell your personal data

We do not sell your personal information for money, and we have not done so in the twelve months before the date at the top of this page. We do not rent or trade customer lists. Sharing personal information with advertising platforms for targeted advertising can be treated as a "sale" or a "share" under some state privacy laws, which is why we describe it openly above and give you the opt-out routes in section 4.

7. How long we keep your information

We keep information only for as long as it has a purpose:

• Order and transaction records — for seven years, because tax and accounting rules require us to be able to reproduce them.
• Customer account and contact details — for as long as your account is active, and then for up to three years of inactivity, after which we delete or anonymise them.
• Support conversations — three years from the last message, so we can pick up a history if you write again.
• Marketing lists — until you unsubscribe. After that, we keep only the minimum record needed to make sure we do not email you again by mistake.
• Analytics data — in aggregate, indefinitely; at an individual, event level, no more than twenty-six months.

8. Your rights and how to exercise them

Wherever you live, we offer every customer the same core set of choices:

• Access — ask us for a copy of the personal information we hold about you.
• Correction — ask us to fix anything that is wrong or out of date, including a shipping address on an order that has not yet gone out.
• Deletion — ask us to erase your information, subject to the records we are legally required to retain.
• Portability — ask for your information in a structured, commonly used, machine-readable format.
• Opt out of marketing — click the unsubscribe link at the bottom of any marketing email, or write to us. Unsubscribing does not stop transactional emails about an order you have placed.
• Opt out of targeted advertising — as described in section 4.

To exercise any of these, email support@lymphaticdrainagedrops.com or write to us through the contact page, and tell us which right you are exercising. We will confirm receipt quickly and respond within forty-five days; if the request is complicated we may take one further forty-five day extension and will tell you why. To protect you, we need to verify that the request really comes from you — usually by matching the email address on file with a recent order number. We will never charge you for a first request, and we will never treat you differently, change your prices or deny you service because you exercised a privacy right. An authorised agent may act for you if they provide written permission signed by you.

9. California residents (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act as amended by the California Privacy Rights Act gives you specific rights, and this section explains how we meet them.

In the last twelve months we have collected the following statutory categories of personal information: identifiers (name, email, postal address, IP address); customer records information (shipping address, phone number, payment card information limited to brand and last four digits); commercial information (products purchased and considered); internet or network activity (browsing and interaction with our store); geolocation data at the coarse, city or region level inferred from IP; and inferences drawn from the above about product preferences. The sources, purposes and recipients are set out in sections 1, 2 and 5. We do not collect sensitive personal information for the purpose of inferring characteristics, and we do not use or disclose sensitive personal information beyond the limited purposes permitted by law.

Your California rights are: to know what we collect, use, disclose and share; to access the specific pieces we hold; to delete personal information, subject to legal exceptions; to correct inaccurate information; to opt out of the sale or sharing of personal information for cross-context behavioural advertising; to limit the use of sensitive personal information; and to be free from retaliation for exercising any of them. We honour a recognised opt-out preference signal, such as the Global Privacy Control, sent by your browser as a valid opt-out of sharing. You may submit a request by email to support@lymphaticdrainagedrops.com or through the contact page; we verify requests as described in section 8, and you may appeal a refusal by replying to our decision.

Residents of other states with comprehensive privacy laws — including Colorado, Connecticut, Virginia, Utah, Texas and Oregon — have closely equivalent rights, and we handle their requests using the same process, including the right to appeal an outcome.

10. EU and UK visitors (GDPR)

If you visit us from the European Economic Area, the United Kingdom or Switzerland, we act as the controller of your personal information and process it on these legal bases:

• Performance of a contract — to take, fulfil and support your order, including returns and refills.
• Legitimate interests — to secure the store, prevent fraud, understand aggregate usage and improve what we sell, balanced against your rights and never overriding them.
• Consent — for marketing emails, and for analytics and advertising cookies where consent is required. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
• Legal obligation — to keep tax and accounting records.

In addition to the rights in section 8, you may object to processing based on legitimate interests, ask us to restrict processing while a dispute is resolved, and lodge a complaint with your national supervisory authority or, in the United Kingdom, the Information Commissioner's Office. We would appreciate the chance to resolve the matter first.

11. Children's privacy

This store is intended for adults. Our products are not designed, labelled or sold for anyone under the age of sixteen, and we do not knowingly collect personal information from anyone under sixteen. If you believe a child has provided us with personal information, write to us and we will delete the account and the associated records promptly. Parents and guardians should consult a paediatric healthcare provider before giving any dietary supplement to a minor.

12. Data security

The store runs over encrypted connections, so information travels between your browser and our servers in a form that cannot be read in transit. Access to customer records is limited to the few people who need it to run the business, protected by individual accounts and multi-factor authentication, and reviewed when someone's role changes. Payment details are handled only by our processor within its own certified environment, which is why a breach of our systems cannot expose your card number. We keep backups, patch our systems and review our providers' security commitments.

No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security. If a breach affects your personal information and creates a risk to you, we will notify you and the relevant regulator within the timeframes the law requires, and tell you plainly what happened and what to do about it.

13. International transfers

We operate from the United States and our servers and service providers are located primarily in the United States. If you order from outside the United States, your information will be transferred to and processed in a country whose data protection laws may differ from those of your own. Where we transfer personal information out of the European Economic Area or the United Kingdom, we rely on appropriate safeguards — usually the European Commission's Standard Contractual Clauses together with the UK Addendum, and additional technical measures such as encryption — and we will provide a copy of the relevant safeguards on request.

14. How we notify you of changes

We may update this policy as the store evolves, as we add or replace a service provider, or as the law changes. When we do, we revise the "last updated" date at the top of this page and keep the new version here. If a change materially affects how we use information we already hold about you — for example, a genuinely new purpose — we will tell you before it takes effect, by email to the address on your account or through a clear notice on the store, and where the law requires it we will ask for your consent. Continuing to use the store after an update takes effect means you accept the revised policy.

15. How to contact us

Privacy questions, requests and complaints all go to the same place, and a person reads every one. Email support@lymphaticdrainagedrops.com or use the contact page. Please include the email address you used to order, so we can find your records, and tell us what you would like us to do. We aim to reply within two business days, and always within the statutory deadline that applies to your request.