Privacy policy

Effective Date: 8/13/2026

1. Introduction

2. Scope

3. What Information We Collect

4. Use of Cookies and Other Tracking Technologies

5. Why We Collect Information

6. When We Disclose Information

7. Children’s Privacy

8. Automated Recommendations and Profiling

9. Retention of Personal Information

10. Links

11. Security

12. Your Choices About the Information We Collect

13. Visitors to the Site Outside of the United States

14. International Processing and Transfers

15. Your California Privacy Rights

16. Your Privacy Rights under Other US State Laws

17. Your Rights Under the General Data Protection Regulation

18. Your Rights Under the UK GDPR

19. Your Canadian Privacy Rights

20. Changes to This Privacy Policy

21. Contact Us

Introduction

Welcome. You have arrived at a website provided by BrickHouse Nutrition, LLC (“BrickHouse Nutrition,” “Company,” “we,” “our” or “us”). BrickHouse Nutrition is a health and wellness company that develops and sells nutritional supplements, superfood products, functional foods, and related wellness products through its website, mobile application, and other services.

At BrickHouse Nutrition, we take your privacy seriously. We provide this Privacy Policy (“Policy”) to tell you what information we collect about you, how we obtain it, how we share it, and how you may limit the ways in which we use your Personal Information. If you have questions about this Policy after you review it, feel free to contact us at contact@brickhousenutrition.com.

Scope

This Policy governs the BrickHouse Nutrition website located at https://brickhousenutrition.com/, its subdomains, and all subdomains or online portals that link to this Policy (collectively, the “Site”), our mobile application (“App”); our online store; customer accounts; subscription-management services; product quizzes and recommendation tools; promotional programs; marketing communications; or otherwise, when you provide Personal Information or interact with us. This Policy also applies to Personal Information that we may collect from you via phone calls, emails, text messages, social media, mail, or other communications with our representatives or in any other instance when you contact us. For the purpose of this Notice, "Personal Information" (sometimes referred to as “Personal Data”) means any Personal Information relating to an identified or identifiable individual that is protected by applicable privacy laws. The definition of Personal Information does not include publicly available information from federal, state, or local government records, such as professional licenses and real estate or property records.

We refer to all the above as our “Services.” Our Services are used by our current and prospective customers (collectively, “Customers), our business partners, vendors, service providers, and other third parties that support our operations (“Partners”), and individuals who visit our Site, use our Services, or purchase products through our online store (“Visitors”).

What Information We Collect

As a rule, we limit the Personal Information we collect to that which is reasonably necessary for us to provide our Services to you.

Data Sources

We collect Personal Information from the following sources:

You directly
Automatically from your Device/Browser, and via Cookies/Tracking Technologies
Third Parties (including Service Providers)

Information That You Provide to Us

As you interact with our Site, App or Services, we collect the following Personal Information via the online chat function and webforms or inputs/uploads on our Site or App, and through telephone calls, text messages, letters, emails and other communications with you. The types of information we collect from you may differ depending on your relationship with the Company and/or the Site.

Site Visitors

Contact information such as your first and last name, email address, job title, home or business address, telephone numbers, mobile numbers, age, and self-reported health and wellness goals.

Customers

Contact and account information such as your first and last name, username, email address, billing address, shipping address, telephone numbers, mobile numbers, login credentials or authentication information, account preferences, and saved addresses;
Product quiz and preference information, such as your responses to our product quiz, product interest, lifestyle preferences, health and wellness goals, and other information you choose to provide to receive product recommendations;
Purchase and subscription information, such as the products you purchase or consider purchasing, subscription frequency, order and transaction history, discounts, promotional codes, payment status, shipment and delivery information, returns, refunds, cancellations, and communications concerning your orders or subscriptions;
Payment-related information, such as billing information, payment method, transaction identifiers, card type, payment status, and limited payment-card information. Full payment-card, digital-wallet, HSA/FSA card, or other payment credentials may be collected and processed directly by Shopify, payment processors, or other payment-service providers;
Communications and customer-service information, such as information you provide when contacting us, managing an order or subscription, requesting a return or refund, reporting a product concern, or otherwise seeking assistance;
Reviews and user-submitted content, such as product ratings, reviews, testimonials, photographs, videos, comments, survey responses, display names, and other content you choose to submit;
Marketing and promotion information, such as your email or text-message preferences, promotional entries, referral information, social media handle, and information submitted in connection with a contest, sweepstakes, giveaway, survey, discount, or other promotion; and
Social media handles, content and other data shared with us through third-party features that you use on our Site, App or Services (such as tools, payment services, widgets and plug-ins offered by social media services like Facebook, Instagram, Twitter and Pinterest) or posted on social media pages (such as our social media page or other pages accessible to us);
HSA/FSA Transactions: If you seek to purchase eligible products using health savings account or flexible spending account funds, we and our service providers may collect information necessary to determine product eligibility, facilitate payment, document the transaction, or support reimbursement. This information may include your contact information, purchase details, eligibility-related responses, payment information, transaction status, and documentation you choose to provide; and
Other information that reasonably could be used to identify you personally that you voluntarily provide to us.

Partners

Contact information such as your first and last name, job title, email address, business address, shipping address, telephone numbers, mobile numbers; and
Business and transaction information, such as company name, role or title, contract information, purchase or service history, referral or campaign information, commission or payment information, tax documentation, and limited payment-related information necessary to administer our relationship.

Your decision to provide us with information is voluntary, but if you choose not to provide requested information, you may not be able to take advantage of all of the Site’s features or our Services.

Information That Is Automatically Collected

Like many businesses, we and our service providers automatically collect and/or store certain information when you visit or interact with the Site, App or Services (“Usage Information”), including via cookies and other tracking technologies (see “Use of Cookies and Other Tracking Technologies” section below). This Usage Information may be stored and/or accessed from your personal computer, laptop, tablet, mobile phone or other device (a “Device”) whenever you visit or interact with our Site or App. Usage Information includes:

Your IP address, MAC address, IDFA, Android/Google Advertising ID, IMEI, or another unique identifier;
Your Device functionality (including browser, browser language, settings and behavior, operating system, hardware, mobile network information);
Your Device location or other location information, including the zip code, state or country from which you accessed the Services;
Your Device characteristics (such as device type (computer vs. mobile) and ID, operating system, hardware);
Cookies, tags, pixels and SDKs (see our Use of Cookies and Other Tracking Technologies section below);
Name and user identification or profile values of other third-party platforms or social media sites;
Referring and exit web pages and URLs;
The areas within the Site or App that you visit and your activities there, including remembering you and your preferences;
Certain other Device data, including the time of day you visit our Site or App or other information used to provide analytics or other usage information;
Information about your engagement with our emails;
Information about your engagement with our text messages and marketing communications, including whether you open a message, select a link, or respond to a communication;
Shopping and checkout activity, including products viewed, searched for, added to a cart, removed from a cart, or left in an abandoned cart or checkout;
Advertising and attribution information, including campaign identifiers, referral sources, conversion events, and interactions with advertisements; and
Interaction information collected through analytics or session-replay technologies, such as page views, clicks, scrolling, navigation paths, and similar activity.

We may derive approximate location information, such as city, state, region, postal code, or country, from your IP address or other technical information. We may use approximate location information for localization, analytics, advertising, security, fraud prevention, and delivery-related purposes. We do not collect precise geolocation through the Site unless we provide notice and obtain any consent required by applicable law.

For our App, some of our Services include features based on users’ actual locations and may report on users’ current locations (“Location-Based Services”). If you have enabled location services on the Device on which you access our Site or App, we and our service providers may collect and store information about your location at the time you use those Location-Based Services (in addition to some automatically collected geolocation data). This information comes from a variety of sources depending on the device you use to access the Services; for example, a mobile phone may report its GPS location at the time Location-Based Services are used.

If you do not wish for us or our service providers to collect and use location information, you may disable the location features on your device. Consult your device settings for instructions. Please note that if you disable such features, your ability to access certain features, Services, content, promotions, or products may be limited or disabled.

We may also collect sensory data such as recordings of your voice when you contact our customer service centers. We use this information for training, quality assurance, and to prevent, investigate, and prosecute fraud and other criminal activities.

Information Collected from Third Parties

The Site or App includes functionality that allows certain kinds of interactions between the Site or App and your account on a third-party website or application. The use of this functionality may involve the third-party site providing information to us. For example, our store is hosted by Shopify Inc., which provides the e-commerce platform that enables us to sell our products. Shopify may process your information on our behalf as a service provider, or you may have an existing Shopify account that allows Shopify to provide certain information to us when you create a BrickHouse Nutrition account within Shopify. Similarly, we might obtain information about the traffic and usage of BrickHouse Nutrition from third parties. We might also provide links to make it easier to send a communication from the Site or App, or we may use third parties to make it easier to send emails or post to social media (like a “Share” or “Forward” button). These third parties also use cookies and other tracking technologies to capture information about your interactions with BrickHouse Nutrition.

We may also receive information from providers that support our payment processing, recurring subscriptions, shipping and fulfillment, customer service, HSA/FSA transactions, product reviews, email and text-message communications, analytics, advertising, fraud prevention, product recommendations, and other business operations. For example, marketing and communications providers may provide information concerning your interactions with our emails, text messages, advertisements, Site, cart, or checkout.

We may use Klaviyo or similar customer-relationship-management and marketing-automation providers to help us manage email and text-message communications, recognize returning visitors, analyze interactions with our communications and Services, personalize messages, and send cart, checkout, replenishment, or other reminders where permitted by law.

BrickHouse Nutrition does not have control over the information that is collected, used, and shared by these third parties. We encourage you to review the privacy statements of these third parties to understand their privacy practices.

Information We Infer

We may derive information or draw inferences from the information we collect. For example, based on your product quiz responses, browsing activity, purchases, cart activity, and interactions with our communications, we may infer your likely product interests, preferences, wellness interests, purchasing patterns, or likelihood of engaging with particular content or offers. These inferences may be used to personalize product recommendations, content, communications, and advertising. Unless expressly stated otherwise, our Services are not intended to diagnose a medical condition or provide individualized medical advice.

Use of Cookies and Other Tracking Technologies

We use cookies and other tools (“Tracking Technologies”) to recognize your browser or device, to understand how people use our Site, to make it work correctly, and to improve your experience. These Tracking Technologies store and collect Usage Information. Tracking Technologies may set, change, alter or modify settings or configurations on your Device. In jurisdictions that require prior consent, we only set non-essential cookies after you grant permission.

What are Cookies?

Cookies are small files that your browser stores on your Device. They help the website remember things like your preferences or whether you’ve logged in. Some cookies are placed by us (“first-party cookies”) and some are placed by our partners (“third-party cookies”) such as companies that provide analytics, video, or advertising. Third-party Tracking Technologies may be provided by analytics, advertising, social media, video, customer-experience, e-commerce, and marketing-automation providers. Based on the technologies currently detected on our Site, these providers may include Google, Meta, Microsoft, Shopify, Klaviyo, Microsoft Clarity, Taboola, Simpli.fi, Black Crow AI, and other advertising, analytics, attribution, or content providers. The providers and technologies used may change over time.

Do Cookies Contain Personal Information?

Cookies and similar technologies do not always directly identify you, but many laws treat them as “Personal Information” or “Personal Data” when the information collected, alone or combined with other data, can be linked to you or your Device. For example, if you log in to an account, we may associate cookie data with your account

Other Technologies We Use

In addition to cookies, we may use other Tracking Technologies, including:

HTML5 local or session storage: browser-based storage used to remember certain settings or behaviors;
Pixel tags, clear GIFs and web beacons: small images or snippets of code that load when you visit a page or open an email, telling us or partners that you have engaged with content;
Tags, scripts and containers (e.g., tag managers): snippets of code provided by analytics or marketing vendors to measure behavior or deliver functionality, or tools used to deploy and manage other tags (like Google Tag Manager);
Software Development Kits (SDKs): a set of tools or code provided by a third party that developers add into an app or website to enable certain features, such analytics, advertising, or login, and that may also collect information from users’ Devices.
Embedded Scripts: snippets of code that are designed to collect information about your interactions with the Site, such as the links you click on;
Click Identifiers and URL parameters: short tags added to the end of a URL that help track where website traffic comes from, including UTM parameters, such as which email, ad, or social media post a visitor clicked before landing on a page.
Device Identifiers and probabilistic identifiers: Identifiers unique to your Device (e.g., mobile advertising IDs), or technology that creates an identifier by analyzing characteristics of your Device or browser.
Server-Side Tracking and APIs: technologies that transmit interaction or event data directly from our servers to analytics, advertising or measurement partners (like conversion APIs or server-side tag management);
Analytics and Session Replay Technologies: tools, such as Microsoft Clarity or similar providers, that help us understand how users interact with our Services, which may record page views, clicks, scrolling, or other usage activity for analytics and service improvement purposes;
Social Media Plugins and Embedded Controls: Features such as “Like” or “Share” buttons, embedded videos, or other third-party content that may collect information when you interact with our Services;
Log Files and Network-Level Data Collection: Automatic collection of technical information when you access our Services, including IP Address, browser type, device type, operating system, referring URLs, and timestamps; and
Other data technologies may be used that collect comparable information for security and fraud detection purposes.

We may also engage third parties, such as Google Analytics, Shopify, or Meta, to track and analyze non-personally and personally identifiable website data and to serve advertisements. To do so, we may permit third parties to place cookies on devices of users of our Sites, where permitted by law, and subject to your right to opt out through the Sites. Some of these providers process information solely on our behalf, while others may process information for their own purposes under their respective privacy notices. We use the data collected to help us administer and improve the quality of the Sites and to analyze the Site’s usage. Such third parties may combine the information that we provide about you with other information that they have collected. These third parties are required to use your information in accordance with this Privacy Policy. We will record all such disclosures and will use reasonable efforts to ensure that such third parties do not use your Personal Information for any purpose that is not expressly provided for herein. Depending on the provider’s role and applicable law, these disclosures may constitute a “sale,” “sharing,” or processing for targeted advertising, and you may have the right to opt out.

We classify our cookies into the following categories:

Essential/Strictly Necessary Cookies. These cookies are needed for the Site to work (for example, keeping you logged in or letting the Site load properly). You cannot disable this type of cookie on our Site.
Functionality Cookies. Also known as “preference cookies,” these cookies allow the Sites to remember choices you have made in the past, like what language you prefer, or what your username and password are so you can automatically log in. Disabling these cookies can cause some parts of the Site to not work properly, so we discourage you from disabling these cookies.
Performance and Analytics Cookies. These cookies collect information about how you use a website, like which pages you visited and which links you clicked on. Their purpose is to improve website functions. In some jurisdictions, you may be able to turn these cookies off.
Targeting and Advertising Cookies. These are used by us or our partners to deliver more relevant advertising, measure our marketing, or prevent you from seeing the same ad too many times. These cookies can share that information with other organizations or advertisers. In some jurisdictions, you may be able to turn these cookies off.

Depending on your browser settings or your location, you may be able to:

Adjust your cookie preferences through our cookie banner;
Block or delete cookies in your browser;
Opt out of certain analytics or advertising tools; or
Change your Device settings to limit tracking.

If you block some cookies, certain features on our Site may not work as intended.

Advertising, Analytics, and Personalization Tools We Use

We use analytics, advertising, attribution, customer-experience, and personalization technologies to understand how users interact with our Services, measure marketing performance, personalize content and product recommendations, and deliver or measure advertisements. These technologies may collect information about your browser or Device, IP address, approximate location, pages viewed, links selected, searches, purchases, cart and checkout activity, advertising interactions, and other online activity.

Providers detected on or associated with our Site may include Google, Meta, Microsoft, Shopify, Klaviyo, Microsoft Clarity, Taboola, Simpli.fi, Black Crow AI, and other analytics, advertising, attribution, or marketing providers. We may change providers from time to time. Please use our cookie preference center for more information about the technologies currently in use and to manage your choices where available.

Why We Collect Information

We use the information we collect about you in a variety of ways, including the following:

To Provide and Administer Our Services

We process certain Personal Information when you access or use our services, including to:

operate, maintain and improve the Site, App, online store, accounts and its services;
enable you to access and use the Site;
create, authenticate, and administer customer accounts;
send you notices, updates, security alerts and support and other messages;
provide and deliver the services and features you request, process and complete transactions, and send you related information, including purchase confirmations and invoices;
process your purchases of, or requests for, products and services;
administer recurring subscriptions, including processing recurring payments, scheduling deliveries, applying subscription discounts or benefits, and managing modifications, skips, pauses, or cancellations;
facilitate HSA/FSA eligibility, payment, documentation, or reimbursement-related functions;
facilitate the functionality of our Site and App, including payment-related functionality; and
customize experiences and personalization when you are on our Site or using our App.

To Communicate with You

We process certain information to communicate with you in relation to your accounts, our services, our marketing, and your requests, including to:

communicate with you about orders, purchases, subscriptions, returns, services, accounts, programs, giveaways and promotions;
offer product quizzes and provide product recommendations;
offer contests, sweepstakes, giveaways, surveys, referral programs, discounts, and other promotions;
send cart, checkout, replenishment, subscription, and product reminders where permitted by law;
respond to your customer service inquiries and requests for information;
post your comments or statements on our Site or App;
send you personalized promotions, content, and special offers;
communicate with you about our brands, products, events, or other promotional purposes;
implement your communications preferences, such as sharing information with our business partners so that they may email you about their promotions, products and initiatives; and
provide important product safety information and notice of product recalls.

For Improvement of Our Site, App or Services

We want to ensure that our Site, App, and Services are continually improving and expanding so that we meet and exceed your needs and expectations. To do so, we may process certain Personal Information, including to:

test, research, analyze, or develop products;
maintain, improve, and analyze our Site, App or Services; and
detect, prevent, or investigate suspicious activity or fraud, including but not limited to unauthorized transactions, chargebacks, account misuse, promotion or referral abuse, bots, security incidents, and other unlawful or prohibited activity.

For Personalization, Profiling, and Product Recommendations

We may use Personal Information, including product quiz responses, purchase history, browsing activity, cart activity, and interactions with our communications, to create or use profiles concerning your likely interests and preferences. We use these profiles to personalize product recommendations, content, offers, communications, and advertising.

To Comply with Applicable Laws

We may be required to process certain Personal Information under certain laws and regulations, such as tax laws, as well as to:

maintain appropriate records for internal administrative purposes;
investigate and respond to product-quality complaints, adverse events, or safety concerns;
communicate product warnings, corrections, withdrawals, or recalls;
maintain records and submit reports required by product-safety, consumer-protection, tax, accounting, or other applicable laws; and
comply with applicable legal and regulatory obligations, and respond to lawful governmental requests, as needed.

To Enforce our Terms, Agreements, or Policies

To maintain a safe, secure, and trusted environment for you when you use our Site, App, and Services, we use your Personal Information to ensure our terms, policies, and agreements with you and any third parties are enforced.

We process certain Personal Information to fulfill any other business or commercial purposes at your direction or with your consent.

When We Disclose Information

To the extent permitted by law, certain Personal Information about you may be disclosed in the following situations:

Service providers. We may disclose Personal Information to our affiliates and to third-party service providers who perform services on our behalf, such as cloud hosting, data storage, payment processing, customer service, analytics, marketing support, communications delivery, IT services, and other operational functions. We require these service providers to enter into written agreements that limit their use of the information to the services they provide to us, prohibit them from using the information for their own purposes, and require them to safeguard the information and keep it confidential. These service providers may access Personal Information only as needed to perform their services.
E-commerce, Payment, and Subscription Providers. We may disclose Personal Information to Shopify, payment processors, digital-wallet providers, HSA/FSA transaction providers, fraud-prevention providers, and subscription-management providers to process transactions, administer recurring subscriptions, detect fraud, and provide related functionality.
Fulfillment and Delivery Providers. We may disclose contact, order, shipping, delivery, and transaction information to warehouses, fulfillment providers, carriers, customs brokers, customs authorities, and other parties involved in processing and delivering orders, including international orders.
Customer Service, Reviews, and Communications Providers. We may disclose Personal Information to providers that support customer service, product reviews, email, text messaging, marketing automation, cart or checkout reminders, and customer-relationship management.
Product Safety and Regulatory Recipients. We may disclose information concerning product complaints, adverse events, safety concerns, or recalls to manufacturers, laboratories, insurers, professional advisors, regulators, governmental authorities, or other parties where reasonably necessary to investigate or respond to the matter or comply with law.
Marketing and advertising. We may disclose or make available identifiers, commercial information, internet or other electronic network activity, approximate location information, and inferences to analytics, attribution, social media, and advertising providers to measure performance, personalize content, create or measure audiences, and deliver targeted advertising. Some recipients act as our service providers, while others may process information for their own purposes under their privacy notices. Depending on applicable law and the recipient’s role, these disclosures may constitute a sale, sharing, or processing for targeted advertising. Depending on your state of residence, you may be able to exercise applicable opt-out rights as described below.

Legal process. To comply with law, legal process, or government requests, including responding to a validly issued and enforceable subpoena, court order, summons, search warrant, regulatory inquiry or other legally enforceable demand. We may also disclose information as necessary in connection with actual or threatened legal proceedings or alternative dispute resolution proceedings either initiated by or against us. When we do so, we limit the disclosure to what is reasonably necessary and take steps to seek confidential treatment or other protections to prevent the information from becoming public, unless we are legally prohibited from doing so.
Compliance. In the course of a review of our practices under the authorization of a state or federal agency, or as necessary to properly respond to an inquiry or complaint from such an agency or organization.
Business Transfers and Corporate Transactions. We may use or share your Personal Information in conjunction with a prospective purchase, sale, or merger of all or part of our Company. This may include sharing information with potential or actual purchasers, investors, or other transaction partners and their advisors as part of due diligence or the transaction itself. Where appropriate, we will take steps to require those parties to protect the information and use it only for the purposes of evaluating or completing the transaction. If the transaction is completed, Personal Information may be transferred to the buyer or successor or affiliate as part of the transferred assets or ongoing business operations.

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Finally, we may aggregate, de-identify, and/or anonymize any information collected through the Site, App or Services such that such information is no longer linked to your Personal Information. We may use and share this aggregated and anonymized information (non-Personal Information) for any purpose, including without limitation, for research and marketing purposes, and may also share such data with our affiliates and third parties, including advertisers, promotional partners and others.

Children’s Privacy

Our Site or App is not intended for use by children under the age of 18. To create an account, place and order, enroll in a subscription, participate in a text-message program, or otherwise enter into a biding transaction with us, you must be 18. Individuals under 18 may browse the Site only with the involvement and permission of a parent or legal guardian. We do not request, or knowingly collect, any personally identifiable information from children under the age of 16. If you are the parent or guardian of a child under 16 who you believe has provided her or his information to us, please contact us using the information in the Contact Us section below to request the deletion of that information.

Automated Decision Making

We may use automated technologies, also called Automated Decision-Making Technology (“ADMT”), including algorithms or artificial intelligence to analyze information you provide through our product quiz, together with information about your interaction with our Services, to support certain aspects of our Services. ADMT refers to systems, software or processes (including algorithms and artificial intelligence) that make a decision or facilitate human decision-making based on the automated processing of your Personal Information. For example, we may use this to generate product recommendations, personalize content and offers, and better understand your interests and preferences. These technologies may process information concerning your wellness goals, product preferences, purchasing activity, and browsing behavior. Automated product recommendations are provided for informational and shopping-assistance purposes and are not medical diagnoses or individualized medical advice.

We also may use ADMT for security reasons, such as detecting fraudulent or illegal actions, or to protect consumer safety. When we do so, you cannot opt out of the use of the decision-making technology. Depending on how you interact with our Services, the use of ADMT may affect the content, recommendations, or advertisements you see, the security or monitoring applied to your activity, whether certain transactions require additional verification, your access to certain features or service tiers, or automated responses or suggestions provided to you. We do not use automated decision-making to make decisions that produce legal or similarly significant effects concerning you.

Retention of Personal Information

We will retain your Personal Information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Information to the extent necessary to comply with our legal obligations (for example, if we are required to retain your Personal Information to comply with applicable laws), resolve disputes and enforce our legal agreements and policies.

Personal Information may be stored on systems operated by us or by service providers that support our operations. We utilize the following criteria to determine the length of time for which we retain Personal Information:

How long we have had a relationship with you or provided our Services to you;
The business purposes for which the information is used, and the length of time for which the information is required to achieve those purposes;
Whether we are required to retain the information, or the information is otherwise necessary, in order to: comply with legal obligations or contractual commitments: defend against potential legal claims: detect or prevent potential illegal activity or actions in violation of our policies and procedures; secure our systems and online environment; or protect health and safety;
The privacy impact on individuals of ongoing retention; and
The manner in which information is maintained and flows through our systems, and how best to manage the lifecycle of information in light of the volume and complexity of the systems in our infrastructure.

Retention periods may vary by record type. For example, we may retain transaction and tax records for applicable accounting or statutory periods; account and subscription records for the duration of the account or subscription and a reasonable period thereafter; marketing preferences for as long as necessary to honor your choices; customer-service, product-quality, and safety records for the period needed to resolve the matter and satisfy legal or regulatory obligations; and cookie or advertising identifiers for the period stated in the applicable cookie or technology setting.

Links

For your convenience, the Site or App and this Policy may contain links to other websites. BrickHouse Nutrition is not responsible for the privacy practices, advertising, products, services, or the content of such other websites. None of the links on the Site or App should be deemed to imply that BrickHouse Nutrition endorses or has any affiliation with the links.

Security

We incorporate commercially reasonable safeguards to help protect and secure your Personal Information. However, no data transmission over the Internet, mobile networks, wireless transmission, or electronic storage of information can be guaranteed 100% secure. As a result, we cannot guarantee or warrant the security of any information you transmit to or from the Site or App, and you provide us with your information at your own risk.

Your Choices About the Information We Collect

Updating Your Personal Information

We prefer to keep your Personal Information accurate and up to date. You may be able to review or update certain account, shipping, order, or subscription information by logging into your account or subscription-management portal. You may also request that we update inaccurate contact information by using the information in the Contact Us section below. We will make good faith efforts to make requested changes in our then active databases as soon as reasonably practicable (but we may retain prior information as business records). We may retain prior information where reasonably necessary for recordkeeping, legal compliance, fraud prevention, or dispute resolution.

Communications Preferences

You can opt out of receiving marketing emails or text messages from us at any time. You will still receive transactional messages from us. To manage your email preferences with us, please click on the Unsubscribe link in any email you receive from us or contact us using the information in the Contact Us section below. Your choice will not affect our ability to share information in the other ways described in this Policy.

To opt out of text messages from us, text “STOP” to the number from which the message was received at any time. For more information on SMS and text messaging, please see our Terms of Service ("Terms"). No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Do Not Track Disclosure

Do Not Track (“DNT”) is a web browser setting that requests that a web application disable its tracking of an individual user. When you choose to turn on the DNT setting in your browser, your browser sends a special signal to websites, analytics companies, ad networks, plug in providers, and other web services you encounter while browsing to stop tracking your activity. Various third parties are developing or have developed signals or other mechanisms for the expression of consumer choice regarding the collection of information about an individual consumer’s online activities over time and across third-party websites or online services (e.g., browser do not track signals), but there is no universally agreed upon standard for what a company should do when it detects a DNT signal. Currently, we do not monitor or take any action with respect to these signals or other mechanisms. You can learn more about Do Not Track here.

Opt-Out Preference Signals

Some browsers and browser extensions support opt-out preference signals such as the Global Privacy Control (“GPC”) that can send a signal to the websites you visit indicating your choice to opt-out from certain types of data processing, including data sales. GPC is a web browser-level setting, maintained by either a browser or a browser extension, that a user or privacy-focused technology can set. Where required by applicable law and supported by our systems, we treat a recognized signal as a request to opt out for the browser and Device from which the signal is received. You may need to enable the signal separately for each browser or Device you use. In certain regions, when we detect such a signal, we will make reasonable efforts to respect your choices as required by applicable law.

Controlling Your Cookies

In some jurisdictions, you can opt-out of cookies by enabling an opt-out preference signal (“OOPS”) or Global Privacy Control (“GPC”) on your browser or opting-out of cookies in our Sites’ cookie preference centers. You may also make individual selections on your Device or browser. On most web browsers, you will find a “help” section on the toolbar. Please refer to this section for information on how to receive a notification when you are receiving a new cookie and how to turn cookies off. Please see the links below to learn how to modify your web browser’s settings on the most popular browsers:

Apple Safari
Google Chrome
Microsoft Edge
Mozilla Firefox

Note that if you turn cookies off, you may be unable to access certain parts or benefit from the full functionality of the Sites or App. To learn more about cookies and similar technologies or to opt-out of targeted advertising cookies, visit resources from the Digital Advertising Alliance (“DAA”). We do not control these opt-out links or whether any organization chooses to participate in these opt-out programs.

Please note that even if you exercise the opt-out choices above, you may continue to receive advertisements, for example, ads based on the website you are viewing (e.g., contextually based ads), or ads that are not targeted at you and may be less relevant. Also, if your browser (like some Safari browsers) is configured to reject opt-out cookies when you opt out on the DAA website, your opt-out may not be effective. We always do our best to honor your choices, but because some choices are set at the browser or device level, you may have to make these choices multiple times if you use different browsers or different Devices.

Your Choices for Google Tools

Our Google Analytics Advertising tools may include remarketing, impression reporting, demographics and interest reporting, and cross-service integrations. Google offers several ways to control how your information is used for advertising.

Google Ads Settings – You can opt out of personalized ads from Google by adjusting your settings here.
Google Analytics Opt-Out Browser Add-On – You can block Google Analytics from accessing your online activity with a browser add-on here.

Google AdWords Remarketing - You can opt out of Google AdWords Remarketing here.
Direct-Level Advertising Settings – Many mobile devices allow you to limit the use of Advertising IDs (Android Ad ID or Apple IDFA). See your Device’s settings for more information.

With respect to these advertising features, the privacy roles of BrickHouse Nutrition is the sole controller under all applicable data protection legislation. We will not identify users or facilitate the merging of Personal Information with additional information collected through any Google advertising product or feature unless we have your affirmative opt-in consent to that identification or merger.

Your Choices for Meta (Facebook) Tools

If we use the Meta Pixel, Meta may use information about your activity on our Site to personalize ads you see on Facebook, Instagram, and other Meta services. You can control your ad preferences directly with Meta:

Meta Ad Preferences – You can view or change your Facebook Ad Preferences here.

Your Choices for Microsoft (Bing Ads, UET Tag) Tools

If we use Microsoft Tracking Technologies, you can control your ad preferences directly with Microsoft:

Microsoft Link to Opt-Out of Targeted Advertising – You can view or change Microsoft Personalized ads and offers settings here.

Visitors to the Site Outside of the United States

If you are visiting the Site or App from a location outside of the U.S., your connection will be through and to servers located in the U.S. All information you receive from the Site or App will be created on servers located in the U.S., and all information you provide will be maintained on web servers and systems located within the U.S. The data protection laws in the United States may differ from those of the country in which you are located, and your information may be subject to access requests from governments, courts, or law enforcement in the United States according to laws of the United States. By using the Site or App or providing us with any information, you consent to the transfer to, and processing, usage, sharing and storage of your information in the United States and in other countries, as set forth in this Policy.

International Processing and Transfers

BrickHouse Nutrition is based in the United States. Your Personal Information may be transferred to, stored in, or processed in the United States and other countries where we or our service providers operate. The privacy and data protection laws of those countries may differ from the laws of the jurisdiction in which you reside. Where required by applicable law, we use recognized legal mechanisms and safeguards for international transfers of Personal Information.

International orders may also require us to disclose recipient, order, product, shipment, and transaction information to carriers, customs brokers, customs authorities, and other parties involved in processing and delivering the order.

Your California Privacy Rights

This section of the Policy applies solely to California residents. We adopt this Section to comply with the California Consumer Privacy Act of 2018 (“CCPA”) as amended by the California Privacy Rights Act (“CPRA”). Any terms defined in the CCPA or CPRA have the same meaning when used in this Section.

Notice at Collection of Personal Information We Collect and Purposes For Use (Forward-Looking)

We will collect Personal Information for the business and commercial purposes outlined below. The categories of Personal Information we intend to collect and the purposes for which we use each category are set forth in the table below. We do not collect additional categories of Personal Information or use the Personal Information we collect for materially different, unrelated, or incompatible purposes without providing notice at or before the time the information is collected.

Under the CCPA, “sell” means to disclose, make available, or otherwise communicate Personal Information to a third party for monetary or other valuable consideration. This may include certain disclosures made in connection with advertising or marketing relationships, depending on how the recipient uses the information. “Share” means to disclose Personal Information to a third party for cross-context behavioral advertising. We disclose Personal Information to our service providers and contractors for business purposes (such as analytics, security, support, or website hosting), which is not considered a sale or sharing under the CCPA when the recipient is contractually restricted from using the information for its own purposes. Under the CCPA, a “third party” is an entity that is not a service provider or contractor and that is not controlled by or controlling the business.

We will retain each category of Personal Information for the period reasonably necessary to fulfill the purposes described below, unless a longer retention period is required or permitted by law. Please see our “Retention of Personal Information” section above.

If we sell or share Personal Information or use or disclose Sensitive Personal Information (“SPI”), we indicate that in the table below.

Category of Personal Information	Business Purpose for Collection or Use	Sold/Shared?	Retention Period
Identifiers: such as name, email, phone number	Provide services, communication, enforce agreements, personalization, advertising, analytics, improve services, comply with law, account management, processing transactions, security/fraud prevention	Yes/Yes	Duration of customer relationship with you and/or legal retention periods
Customer Records: such as billing information, account credentials	Provide services, communication, enforce agreements, personalization, advertising, analytics, improve services, profiling, comply with law, account management, processing transactions, security/fraud prevention	No/No	7 years or life of account
Protected Classifications: such as veteran’s status	Provide services, communication, personalization, improve services, comply with law, account management, security/fraud prevention; provide employment benefits	No/No	During period of employment (if needed to administer benefits); during customer relationship if provided for special benefits or discounts (e.g., veteran’s status)
Commercial Information: such as purchases, transaction history	Provide services, communication, enforce agreements, personalization, advertising, analytics, improve services, profiling, comply with law, account management, processing transactions, security/fraud prevention	Yes/Yes	Duration of customer relationship with you and/or legal retention periods
Internet or Network Activity: such as browsing history, information regarding interaction with a website	Improve services, personalization, advertising, analytics, security/fraud prevention	Yes/Yes	2 years or per cookie lifecycle
Geolocation Data: such as physical location and/or movements	Improve services, personalization, advertising, analytics, security/fraud prevention	For app, if location services enabled: Yes/Yes	2 years or per cookie lifecycle
Sensory Data: such as audio data from calls	Provide services, enforce agreements, comply with law, security/fraud prevention	No/No	Duration of customer relationship with you and/or legal retention periods
Professional/Employment Information: such as current or past job history and evaluations	Provide benefits, enforce agreements, comply with law, security/fraud prevention	No/No	During period of employment
Inferences: information used to create a profile about you, such as preferences or likes	Improve services, communication, personalization, profiling, advertising, analytics	Yes/Yes	Duration of customer relationship with you and/or legal retention periods
Sensitive Personal Information: like medical information or precise geolocation	Comply with law, security/fraud prevention	Only if provided: No/No	Duration of customer relationship with you and/or legal retention periods

Notice of California Privacy Rights

In addition to the rights set forth in the “Your Choices About the Information We Collect” section above, California residents have the following additional privacy rights:

Right to Know (Categories): To know the categories of Personal Information we collect, the categories of sources from which it is collected, the purposes for which we use it, whether we sell or share it, and the categories of third parties to whom we disclose it.
Right to Know (Retention): To know the length of time we intend to retain each category of Personal Information, or the criteria used to determine such period;
Right to Know (Specific Pieces): To access the specific pieces of Personal Information we have collected about you;
Right to Delete: To request deletion of the Personal Information you have provided to us, subject to certain exceptions;
Right to Correct: To request that we correct inaccurate Personal Information that we maintain about you;
Right to Opt-Out of Sale of Personal Information: To direct us not to sell your Personal Information;
Right to Opt-Out of Sharing: To direct us not to share your Personal Information for cross-contextual behavioral advertising;
Right to Know About Sensitive Personal Information: To know whether we collect Sensitive Personal Information (“SPI”), the categories of SPI, the purposes for which we use the SPI, and whether the SPI is sold or shared;
Right to Limit the Use and Disclosure of Sensitive Personal Information: To request that we limit our use and disclosure of your SPI to the purposes permitted by the CCPA; and
Right to Non-Discrimination: Not to receive discriminatory treatment for exercising any of your CCPA privacy rights.

Please note that if we collected information about you for a single one-time transaction and do not keep that information in the ordinary course of business, that information will not be retained for purposes of a request under this section. In addition, if we have de-identified or anonymized data about you, we are not required to re-identify or otherwise link your identity to that data if it is not otherwise maintained that way in our records.

Request to Know, Correct, or Delete

California residents have the right to request, under certain circumstances, that a business that collects Personal Information about them disclose the information listed below for the preceding 12 months:

The categories of Personal Information collected about you;
The categories of sources from which the Personal Information is collected;
The business or commercial purpose for collecting, disclosing, selling or sharing Personal Information;
The categories of third parties to whom the business discloses Personal Information for a business purpose;
The categories of Personal Information that we sold or shared;
The categories of third parties to whom we sold or shared Personal Information; and
The specific pieces of Personal Information collected, disclosed, or sold or shared about you.
Whether we collected Sensitive Personal Information about you and whether such information is sold or shared, subject to applicable exceptions.

You can also request that we correct or delete your Personal Information. There may be certain exceptions to our obligation to correct or delete your information such as if you have an existing account or transaction with us or if we have a legitimate business reason to keep your information.

Personal Information Collected Within Last Twelve (12) Months

We have collected, used and disclosed the following categories of Personal Information from consumers within the last twelve (12) months:

Category of Personal Information	Sources of Information	Business Purpose for Collection, Use or Disclosure	Categories of Service Providers or other Third Parties To Whom Information is Provided for a Business Purpose	Categories of Third Parties To Whom Information is Sold or Shared
Identifiers: such as name, email, phone number	You, Automatically, Third Parties	Provide services, communication, enforce agreements, personalization, advertising, analytics, improve services, comply with law, account management, processing transactions, security/fraud prevention	Data processing and analytics vendors, payment processors, service providers such as website hosting, security vendors, or customer service vendors	Analytics and advertising vendors
Customer Records: such as billing information, account credentials	You, Automatically, Third Parties	Provide services, communication, enforce agreements, personalization, improve services, comply with law, account management, processing transactions, security/fraud prevention	Data processing vendors, payment processors, service providers such as website hosting, security vendors, or customer service vendors	Analytics, service providers payment processors, and advertising vendors
Protected Classifications: such as veteran’s status	You	Provide services, communication, personalization, improve services, comply with law, account management, security/fraud prevention; provide employment benefits	Employee benefits vendors or other service providers for employment services	None
Commercial Information: such as purchases, transaction history	You, Automatically	Provide services, communication, enforce agreements, personalization, advertising, analytics, improve services, profiling, comply with law, account management, processing transactions, security/fraud prevention	Data processing vendors, payment processors, service providers such as website hosting, security vendors, or customer service vendors	Analytics and advertising vendors
Internet or Network Activity: such as browsing history, information regarding interaction with a website	Automatically, Third Parties	Improve services, personalization, advertising, analytics, security/fraud prevention security/fraud prevention	Data processing vendors, service providers such as website hosting, security vendors, or customer service vendors	Analytics, service providers, and advertising vendors
Geolocation Data: such as physical location and/or movements	Automatically, if provided via Device	Improve services, personalization, advertising, analytics, security/fraud prevention	Data processing vendors, payment processors, service providers such as website hosting, security vendors, or customer service vendors	Analytics and advertising vendors
Sensory Data: such as audio data from calls	You	Provide services, enforce agreements, comply with law, security/fraud prevention	Customer service vendors	None
Professional/Employment Information: such as current or past job history and evaluations	You, Third Parties	Provide benefits, enforce agreements, comply with law, security/fraud prevention	Service providers such as job search websites or employee benefits providers	None
Education Information: records maintained by an educational institution, such as school transcripts	You, Third Parties	Provide benefits, enforce agreements, comply with law, security/fraud prevention	Service providers such as job search websites or employee benefits providers	None
Inferences: information used to create a profile about you, such as preferences or likes	You, Automatically, Third Parties	Improve services, communication, personalization, profiling, advertising, analytics	Data processing vendors, payment processors, service providers such as website hosting, security vendors, or customer service vendors	Analytics and advertising vendors
Sensitive Personal Information: like precise geolocation or medical information	You, only if provided	Provide services or information to you; security/ fraud prevention	None	None

Information related to how long we retain each category of Personal Information is included in the Retention of Personal Information section above.

Do Not Sell My Personal Information

As a California resident, you also have the right, at any time, to tell us not to sell Personal Information – this is called the “right to opt-out” of the sale of Personal Information. To opt-out of this, please click on the link in our footer.

Right to Limit Use of Sensitive Personal Information

California residents have the right to limit the use of each type of Sensitive Personal Information for each purpose with each type of third-party partner. Please note that we only keep your Sensitive Personal Information for a limited time, and only for the transaction for which it is required. Currently, we do not use Sensitive Personal Information for purposes that give rise to the right to limit its use under California law. Specifically, we do not provide your Sensitive Personal Information to any third parties other than those service providers that are necessary for us to provide our Services to you.

Right Not to Be Discriminated Against

We will not discriminate against you for exercising any of your rights under the CCPA. Unless permitted by California law, we will not:

Deny you goods or services.
Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
Provide you a different level or quality of goods or services.
Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

Notice of Financial Incentives

We offer programs, benefits, and other offerings to users of the Services related to our collection and use of Personal Information that might be deemed a “financial incentive” or “price service difference” under the California Privacy Laws. These offerings may involve the collection Personal Information from consumers like you that participate. Examples of the programs that we offer as part of the Services include:

1. Email Marketing. We may offer current or potential users of our Services the opportunity to sign up to receive marketing-related emails about the Services. As part of this program, you may receive a financial incentive from us, such as special promotional offers or discounts regarding the Services or subscriptions for the Services. In exchange for your participation in the email marketing program, we may collect and use your Personal Information, such as your email address, name, Internet or other electronic network activity information and device information, and inferences. No purchase is required to sign up to the email marketing program. Participation in our email marketing program is governed by this Privacy Policy and our Terms.. You may cancel your subscription to emails at any time by either following the instructions provided in the emails or clicking "Unsubscribe" in such emails. Our good-faith estimate of the value of your Personal Information for participating in our newsletter program is the value of the benefit we offer you. We have calculated such value by using the expense related to the benefit.

2. SMS/Text Message Alert Programs. We may offer current or potential users of our Services the opportunity to sign up to receive marketing-related SMS/Text Message notifications about the Services. As part of these programs, you may receive a financial incentive from us, such as special promotional offers or discounts regarding the Services or subscriptions for the Services. In exchange for your participation in these programs, we may collect your Personal Information, such as your mobile phone number, name, and email address. No purchase is required to sign up for message alerts from us, although standard text messaging rates and fees (as determined by your cellular network provider) may apply. Participation in these programs is governed by this Privacy Policy, our Terms, our Cookie Policy, and the terms and conditions of any additional agreements provided to you before you sign up to participate in the program. You may cancel or terminate your participation in these programs at any time by following instructions you receive in the agreements and materials that we provide to you when you sign up to participate in the program, or by calling the official customer service number provided in our Site's footer for our publication that is sending you the SMS/Text Message notification. You may also cancel or terminate your participation in these programs by following the instructions in the SMS/Text Message notifications that you receive from us. Our good-faith estimate of the value of your Personal Information for participating in our SMS/Text Message notification programs is the value of the benefit we offer you. We have calculated such value by using the expense related to the benefit.

We may offer discounts, promotional codes, complimentary products, subscription savings, or other benefits in connection with email or text-message enrollment, recurring subscriptions, surveys, referrals, promotions, or similar programs. These offerings may be considered a financial incentive or price or service difference under California law when they involve the collection, retention, sale, or sharing of Personal Information.

Participation is voluntary. The material terms of each offer will be presented at or before enrollment. You may withdraw from a program through the method described in the applicable program terms, by unsubscribing from the relevant communication, by canceling the applicable subscription, or by contacting us. We estimate the value of Personal Information associated with an offer based on the value of the benefit provided, expenses associated with administering the program, anticipated revenue, and other reasonable factors permitted by law.

Third Party Marketing (“Shine The Light” law)

If you are a California resident with an established business relationship with us, you have the right under California Civil Code Section 1798.83 to request information regarding the disclosure of your Personal Information to third parties for their own direct marketing purposes in the preceding calendar year. You have the right to prevent disclosure of Personal Information, and we provide a cost-free option to exercise that right as set forth below in “Exercising Your California Privacy Rights.” Please include “Shine the Light Opt Out” in your request. We do not disclose Personal Information to third parties for their own direct marketing purposes if you have exercised your opt out right.

Exercising Your California Privacy Rights

You or your authorized agent may make a request to access, correct, delete, opt-out of the sale of your Personal Information, or limit the use of your Sensitive Personal Information by contacting us as follows:

Webform
Email Address: contact@brickhousenutrition.com

If you use an authorized agent to submit your request, we may require proof of the written authorization you have given. We also may require you to confirm your identity and your residency to obtain the information, and you are only entitled to make this request twice in a 12-month period. For emails, please include “California Privacy Rights” as the subject line. You must include your full name, email address, and attest to the fact that you are a California resident. We will acknowledge your request within 10 days and respond to your request within 45 days or let you know if we need additional time. If you make this request by telephone, we may also ask you to provide the request in writing so that we may verify your identity. If we are unable to honor your request for any reason, we will notify you of the reason within the request time period.

Your Privacy Rights under Other US State Laws

If you live in certain other U.S. states, such as Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, Nevada, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have rights under applicable privacy laws. These rights are in addition to those rights set forth in the “Your Choices About the Information We Collect” section above.

Based on the applicable law in the state where you live, you may have the following rights with respect to your Personal Information:

To confirm whether or not a controller is processing your Personal Data and to access such Personal Data;
To know the categories of Personal Information we collect about you, the purposes for the collection, how long we retain your Personal Information, and whether that information is sold or shared or disclosed and to whom;
To correct inaccuracies in your Personal Data;
To delete your Personal Data;
To obtain a copy of your Personal Data that you previously provided to us in a portable, and if technically feasible, readily usable format, if processing is carried out by automated means;
To opt out of the processing of your Personal Data for purposes of (i) targeted advertising, (ii) the sale of Personal Data, or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer;
For Minnesota and Oregon residents, you have the right to request a list of the specific third parties to whom we have disclosed your personal data.
For Nevada residents, you have the right to request certain information from us regarding the collection and sale of your personal information during your visit to our websites or when you otherwise interact with us online. If you have sought or acquired, by purchase or lease, any goods or services for personal, family, or household purposes from us, you may ask us to disclose whether we have sold for monetary consideration certain information about you. You may also request to opt out of us sharing such information about you.
For Texas residents, you have the right to learn whether we sell your biometric data or other sensitive personal information to third parties. We do not sell this information to third parties.
Not to discriminate against you because you have exercised any of these rights, including by:
- denying you Services;
- charging different prices or rates for our Services, including through the use of discounts or other benefits or imposing penalties;
- providing you a different level or quality of Services; and/or
- suggesting that you will receive a different price or rate for Services, or at a different level or quality of Services.

To exercise any of these rights, you may make a request to confirm, access, correct, delete, obtain a copy, or opt-out of the processing of your Personal Data for targeted advertising, sale, or profiling by using this link or contacting us using the information in the Contact Us section below. Please include your state of residence.

We may require you to confirm your identity and your residency in order to obtain the information, and you are only entitled to make this request up to twice annually. For emails, please include “Privacy Rights” as the subject line. You must include your full name, email address, and attest to the state in which you are a resident.

We will process your request within 45 days or let you know if we need additional time or cannot process your request. If you make this request by telephone, we may also ask you to provide the request in writing so that we may verify your identity. If we are unable to honor your request for any reason, we will notify you of the reason within the request time period.

Right to Opt Out

You may have the right to opt out of the processing of your Personal Data for purposes of (i) targeted advertising, (ii) the sale of Personal Data, or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer. To exercise your right, please click on the link on the bottom of the webpage where your information is being collected.

Appeals of Our Decisions

In some jurisdictions, you may appeal to us if we refuse to take action on your exercise of certain choices described above. In order to appeal such a refusal, please contact us using the information in the Contact Us section below with the subject line “Appeal of Refusal to Take Action on Privacy Request” and provide the relevant information in the email.

If we decline to take action on any request you make, we will provide you with the information required by the applicable law where you live. This may include an explanation of why we declined your request, information on how to appeal our decision, and/or how to make a complaint to your state Attorney General.

Your Rights Under the General Data Protection Regulation

This section of the Policy applies if you are a data subject who resides or is located in the European Economic Area (“EEA”). We adopt this section to comply with European privacy laws, including the General Data Protection Regulation (“GDPR”). Any terms defined in the GDPR have the same meaning when used in this section.

Under applicable law, we are considered the “data controller” of the Personal Information we handle under this Policy. In other words, we are responsible for deciding how to collect, use and disclose this information, subject to applicable law.

We have listed below the rights that you may be able to exercise in respect of the processing of your Personal Information, subject to applicable law. We take reasonable steps to ensure that the Personal Information that we process is limited to the Personal Information that are required in connection with the purposes set out in this Policy.

If you are a resident of or located within the EEA, you have certain data protection rights. These rights include:

The right to access, update or delete the information we have collected from you.
The right of rectification. You have the right to have your information rectified if that information is inaccurate or incomplete.
The right of erasure. You have the right to request deletion of your Personal Information, with certain exceptions.
The right to object. You have the right to object to our processing of your Personal Information.
The right of restriction. You have the right to request that we restrict the processing of your Personal Information.
The right to data portability. You have the right to be provided with a copy of the information we have on you in a structured, machine-readable, and commonly used format.
The right to withdraw consent. You also have the right to withdraw your consent at any time where we relied on your consent to process your Personal Information.
The right not to be subject to automated decision-making, including profiling, that produces legal or similarly significant effects.

Legal Basis for Processing Personal Information

We rely on the following legal bases for processing your Personal Information:

Contract: To conclude or perform a contract with you; for example:
- To manage and fulfill orders, facilitate delivery, and to provide other Services;
- To manage and administer our accounts, recurring subscriptions and records;
- To handle your inquiries and requests/provide customer support;
Legitimate Interests: When we process your Personal Information for our legitimate interests, we make sure to consider and balance any potential impact on you and your rights under data protection laws. Our legitimate business interests do not automatically override your interests – we will not use your Personal Information for activities where our interests are overridden by the impact on you unless we have your consent or those activities are otherwise required or permitted to by law. You have the right to object to processing that is based on our legitimate interests, as further described below. Examples of legitimate interests include:
- For IT security, logging, and access monitoring;
- To detect, prevent, or investigate security breaches, chargebacks, account misuse, promotion abuse or fraud;
- To prevent unauthorized access;
- To respond to your customer service inquiries and requests for information;
- To maintain, improve, troubleshoot and analyze our Site, App, ads, and Services we offer;
- For our strictly necessary cookies;
- To conduct direct marketing activities where permitted by law and where our interests are not overridden by your rights; and
- To facilitate the functionality of our Site and App.
Legal Compliance: To comply with our legal obligations; for example:
- For fraud detection;
- To maintain appropriate records for internal administrative purposes and as required by applicable law or agency regulations,
- For required reporting, such as tax, accounting or financial reporting obligations;
- To respond to legal process or defend ourselves in legal proceedings;
- To provide important notices as required by law.
- To maintain appropriate records for internal administrative purposes and as required by applicable law, and
- To provide important notices required by law (such as product safety information and notice of product recalls).
Consent: We rely on consent when we process your Personal Information for purposes that are not necessary for providing our Services, for fulfilling our legal or regulatory obligations, or for pursuing our legitimate business interests. These include:
- Sending marketing communications, including newsletters, educational content and information about events or services that may be of interest to you;
- Using non-essential cookies and tracking technologies, such as for analytics, advertising, cross-site tracking, retargeting and behavioral profiling;
- Enabling certain personalization features that are not required for delivering our Services;
- Sharing your Personal Information with third parties for their own marketing purposes (only when you have provided express consent).

You have the right to withdraw your consent at any time without affecting the lawfulness of any processing that occurred before withdrawal.

International Transfers

Your Personal Information may be transferred to and processed in countries outside the EEA (like the United States) that may not have the same data protection laws.

If applicable, you may exercise any of your rights under the GDPR by submitting a verifiable data subject request to us by using the contact details below. You may make a request related to your Personal Information or on behalf of someone for which you have authorization. You must include your full name, email address, and attest to the fact that you are a citizen or resident of the EEA by including your country of citizenship or residence in your request. We may require you to confirm your identity and/or legal standing for the request as well as your residency in the EEA to obtain the information. We will respond to your request within 30 days or let you know if we need additional time.

Please note that we will ask you to verify your identity before responding to such requests, and we may deny your request if we are unable to verify your identity or authority to make the request.

Should you wish to raise a concern about our use of your data (and without prejudice to any other rights you may have), you have the right to do so with your local supervisory authority- a list of authorities is available at https://www.edpb.europa.eu/about-edpb/about-edpb/members_en; however, we hope that we can assist with any queries or concerns you may have about our use of your Personal Information first by contacting us.

This section applies only to individuals located in the United Kingdom at the time their Personal Information is collected or processed. It supplements, and should be read together with, the rest of this Policy.

We process Personal Information as a “controller” under the UK GDPR and the UK Data Protection Act 2018 based on the same legal bases described in the GDPR section above:

Contract
Legitimate Interests
Legal Obligation
Consent

Where UK law requires consent (particularly for marketing or non-essential cookies), we will request it separately and clearly.

Individuals in the UK have the following rights:

Right of access
Right to rectification
Right to erasure
Right to restrict processing
Right to data portability
Right to object
Right to withdraw consent
Rights relating to automated decision-making.

If we share your Personal Data within Company or with third parties located outside the United Kingdom, we take steps to ensure that appropriate safeguards are in place to guarantee the continued protection of your Personal Data, such as by entering into the UK International Data Transfer Agreement or the International Data Transfer Addendum to the European Commission’s SCCs, adopted by the UK Government under section 119A of the Data Protection Act 2018, or another lawful transfer mechanism permitted under UK law.

You have the same data subject rights as those for the EU listed above, except that references to the "GDPR" should be read as references to the "UK GDPR" and complaints should be filed with the UK supervisory authority, the Information Commissioner’s Office at https://ico.org.uk/.

Your Canadian Privacy Rights

Canadian laws provide specific privacy rights to our Canadian customers. If you are a resident of Canada, this section applies in addition to all other applicable rights and information contained in this Policy.

Where applicable, We follow applicable Canadian federal and provincial privacy laws (“Canadian Privacy Law”), including:

The Personal Information Protection and Electronic Documents Act (PIPEDA)
Alberta’s Personal Information Protection Act (Alberta PIPA)
British Columbia’s Personal Information Protection Act (BC PIPA)
Québec's Act respecting the protection of Personal Information in the private sector (Québec Act).

In most cases, we rely on implied consent to collect, use, or disclose your Personal Information. In some circumstances, including those involving sensitive Personal Information, we obtain express consent. Where you have provided your consent to the collection, use, and transfer of your Personal Information (whether orally, in writing, or electronically), you may have the legal right to withdraw your consent under certain circumstances. In addition to the methods described above with respect to your privacy choices, you may withdraw your consent by submitting a request using the information in the “Contacting Us” section below. Please note that if you withdraw your consent, We may not be able to provide you with a particular product or service. We will explain the impact to you at the time of your request to help you with your decision.

Use of Your Personal Information

We will not collect, use, or disclose Personal Information except for the identified purposes identified above (See When We Disclose Information section above), unless we have received additional consent or the processing is authorized without consent. Where we engage service providers who utilize the Personal Information we provide to them, those relationships are governed by a written agreement regarding the confidentiality of your information.

Marketing Communications

Where required by Canada’s Anti-Spam Legislation (“CASL”), we obtain consent before sending commercial electronic messages. You may withdraw your consent at any time by using the unsubscribe mechanism contained in the message, replying “STOP” to an applicable text message, or contacting us using the information in the “Contact Us” section. Unsubscribing from marketing communications will not prevent us from sending transactional or service-related communications where permitted by law.

Canadian Access and Challenge Rights

Canadian Privacy Law provides the right to receive information about the existence, use, and disclosure of your Personal Information and be provided access to that information. You may also challenge the accuracy and completeness of your Personal Information and have it amended as appropriate. Depending on the nature of the challenged information, amendment may involve correction, deletion, or addition of information.

Exercising Your Canadian Privacy Rights

If you have an account with Us, you may view and update your account information (as noted above) directly by logging into your account. To submit a request for access to information not contained within your account, or to challenge the accuracy or completeness of your Personal Information, you may also submit a written request using the information in the “Contacting Us” section below. When submitting a request, We also may require you to confirm your identity and your residency to obtain the information. For emails, please include “Canadian Privacy Rights” as the subject line. You must include your full name, email address, and attest to the fact that you are a Canadian resident and provide your province of residence. We will begin processing your request once you have completed the verification process and will respond within the timeframe required by law.

If We cannot substantively respond to your request in a timely manner, We will notify you and state the reason for the delay. Under certain circumstances, We may not be able to fulfill your request, such as when doing so would interfere with Our regulatory or legal obligations, where We cannot verify your identity, or if your request involves disproportionate cost or effort. However, We will respond to your request within a reasonable time, as required by law, and provide an explanation.

Additional information about how to exercise your rights under Canadian Privacy Law can be found here:

Office of the Privacy Commissioner of Canada
Website
Phone: 1-800-282-1376

Office of the Information and Privacy Commissioner of Alberta
Website
Phone: 1-888-878-4044
Edmonton office: (780) 422-6860
Calgary office: (403) 297-2728

Office of the Information and Privacy Commissioner of British Columbia
Website
Vancouver: (604) 660-2421
Elsewhere in BC: (800) 663-7867

Commission d'acces a' l' information du Quebec
Website
Phone: 1-888-528-7741

Changes to This Privacy Policy

We may change this Privacy Policy at any time. We will post all changes to this Policy on this page and will indicate at the top of the page the modified policy’s effective date. We therefore encourage you to refer to this page on an ongoing basis so that you are aware of our current privacy policy. If required by the applicable law, we will notify you of the changes.

By continuing to use the Site, App or Services or providing us with information following such a replacement Policy being uploaded, you agree that you will be bound by the Privacy Policy as changed.

Contact Us

If you have any questions or suggestions regarding this Policy, please contact us as follows:

BrickHouse Nutrition, LLC

Re: Privacy Compliance Officer

777 Cannon Dr. #54760

Hurst, TX 76054

Email: contact@brickhousenutrition.com