Privacy Policy

Privacy and Cookies Policy

 Effective Date (Last Updated):  October 31, 2018 

Your privacy is important to us at Truth Nutrition Inc. (“we”, “us”, “our”).  Please read our Privacy and Cookies Policy before using our website www.truthnutrition.com(“website”).  We collect and process your personal data in accordance with this policy. 

1. What personal data we collect and why

We collect your personal data, with your consent, for a variety of purposes.  When you subscribe to our email newsletter, complete a registration form and/or create a customer account on our website, we collect your first and last name, email address, postal address, phone number, and similar contact information.  In creating your credentials used for authentication and customer account access, we collect a password and other security information that you provide.  We also collect your image when you provide one for your user profile or customer account, or if you enter a Transformation Challenge.  When you order products and complete a checkout form on our website, we collect data needed to process your order, including your billing and shipping information, phone number, business name if applicable, and your credit card number with associated security code. Without this data, we cannot enter into a contractual relationship with you and fulfil your order – see our Terms and Conditions for more information.    

When you email us via a contact form on our website or send us something via postal service, we collect your personal data so we can respond to you and keep a record of our correspondence.  We also collect your data when you opt-in to receive our email newsletter, when you submit comments, feedback, questions or product reviews, enter a contest or Transformation Challenge, and when you complete a survey or quiz on our website.

If we ever intend to change the purpose for which we use your personal data, we will obtain your consent for that new purpose prior to using your data.  
We do not intentionally or knowingly collect sensitive personal information about you, meaning, any information that reveals your race or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic information, biometric information used to identify you, and any information concerning your health, sex life or sexual orientation.  If you share sensitive personal information with us, we may delete it with the understanding that you explicitly consented to its deletion.   

Our website uses cookies to collect data about you and your web-enabled device (for example, your computer, smartphone or other device) – see the “How we use cookies and similar technologies” section, below, for more information.  We also collect your IP address and geographical location from which you accessed our website, your internet connection and browser type, and information about how you use our website (for example, which pages you view, when you view them, and what you click on).  We use this data to understand more about how you and other users interact with our website. 

California Do Not Track Disclosures:  We adhere to the California Online Privacy Protection Act (“CalOPPA”) which protects personally identifiable information belonging to residents of California.  Do Not Track (“DNT”) is a privacy preference that users can set in their web browsers.  When you turn on a DNT signal in your web browser, a message is sent to the websites you visit requesting that they do not track your use of those websites.  We honour DNT signals and do not track your online activities over time and across third party websites when a DNT browser mechanism is in place.   

2. How we use personal data

We use your personal data to provide you with a rich and interactive experience on our website.  Your data is used to market and sell our products, to provide customer support, to fulfill your order requests and provide invoices, confirmations and updates, to improve and develop our products and website, to make product recommendations, and to send you promotional communications, targeted advertising and relevant offers.  We use your data to respond to your comments, feedback and questions, to notify you about changes to our website, to carry out our obligations from any contracts entered into between you and us (see our Terms and Conditions for more information), and to provide you with emails, if you have consented to receiving these from us. 

The personal data we collect can tell us a lot about how you and other users interact with our website and other marketing communications.  We perform various data analytics to deepen our understanding of our website users.  We can improve our websites and marketing activities when we better understand usage behaviour.  

Whenever required to do so, we will use personal data to comply with our legal obligations and any applicable laws and regulations.       

3. Where we store and process personal data

We are based in the United States of America with a global reach.  To market and sell our products online, we use various third party service providers that collect and process certain personal data on our behalf.  These third parties have servers located in the US and other countries – see section “Who we share personal data with and why”, below, for more information.

If you live in the European Economic Area (“EEA”), your personal data is transferred outside the EEA.   We ensure appropriate safeguards are in place whenever we transfer your data outside the EEA.  Many of our third party service providers who transfer personal data outside the EEA on our behalf are self-certified to, or otherwise follow, the principles of the EU-U.S. and/or Swiss-U.S. Privacy Shield Frameworks. For more information, see www.privacyshield.gov.

4. Who we share personal data with and why

We share your personal data only when we have a legitimate reason for doing so.  We use a variety of third party service providers to help us market and sell our products online.  The following third parties process personal data on our behalf: 

• We use Shopify Inc. to host our website. Shopify automatically collects certain data in server logs whenever someone accesses our website.  See com/legal/privacy. 
• We use Klaviyo Inc. to send you our e-newsletters and administer our mailing lists. See com/privacy/policy.
• We use Shopify and PayPal to collect and process your payment data when you order our products on our websites. See https://www.paypal.com/us/webapps/mpp/ua/privacy-full.
• We use Google Analytics and for web analytics services – they collect data including IP address and information in cookies to learn more about users of our websites. Once personal data is collected, it is anonymized and stored on an aggregate basis.  See https://policies.google.com/privacy.
• We use a variety of service providers for plugins which, in simple terms, enable an application or program to do something it could not do on its own. For example, some plugins allow you to play a video on a website that your browser, operating without the plugin, would not be able to play.  Below is just a subset of the plugins we currently use (for more information about our plugin providers, please write to us at the address in the “How to contact us”section, below):
  • Shopify – numerous plugins from enabling login, to displaying special offers, to allowing customers to edit or cancel orders. See https://pay.shopify.com/tos-privacy-policy.  
  • Zendesk – plugins to enable customer service including online chat. See com/company/customers-partners/privacy-policy/.
  • Gleam – plugins enabling online contests. See https://gleam.io/privacy.

We do not sell or give away your personal data.  We may share aggregated statistics about our customers – this would involve aggregating or reasonably de-identifying personal data so that any information could not reasonably be used to identify you.

We will disclose your personal data in response to a court order or other governmental request, and in compliance with any legal obligation we must uphold.  We will also share your personal data in connection with a merger, sale of company assets, or acquisition of all or a portion of our business by another company.  In the unlikely event that we go out of business or enter bankruptcy, your personal data would likely be one of the assets that is transferred to or acquired by a third party.  If any of these business transfers happens, this policy would continue to apply to your personal data and the party receiving your data would continue to follow this policy. 

5. How long we retain personal data

We store your personal data until it is no longer necessary for us to provide our products and services or until your customer account, or other data is deleted.  See section “How to access and control your personal data”, below, for information on how to delete your personal data.  When you make a purchase on our website, we retain your billing information and order details for at least the minimum number of years required for accounting and tax purposes.  
We retain your personal data to comply with legal and regulatory requirements or for our legitimate purposes, such as responding to enquiries, and may sometimes need to keep it for a longer period.  If we do not need to retain it for as long, we may delete, destroy or anonymize it sooner.

6. How we keep your personal data secure

We use a range of measures to keep your personal data safe and secure.  We and our third party service providers use secure servers to store your personal data.  Secure Sockets Layer (“SSL”) technology is used to encrypt transfers of data to and from our servers and to encrypt payments you make on or via our website.  We require our staff and any third parties who carry out any work on our behalf to comply with appropriate compliance standards including obligations to protect personal data when using and transferring such data.  We use Shopify to store data on secure servers and create server logs used to ensure network security by detecting unusual or suspicious activity, preventing unauthorized access, and blocking distribution of malicious code.  Server logs collect your IP address, the webpages you access on our site, information you request and the date/time of your request, the source of your access to our website (for example, the website or link which referred you to our website), your browser version and your operating system.  
If a data breach occurs and jeopardizes the security of your personal data, we will work with our third party service providers to address the breach.  We will notify users of our website of a data breach within whatever timeframe is required by law.

7. How to access and control your personal data

You can contact us at any time to request access to, deletion of and/or updates to your personal data.  Please contact our Privacy Officer, outlining your request, at the address provided in the “How to contact us” section, below.  You can withdraw your consent at any time for anything you gave consent to.  You can also object to or restrict our use of your personal data.  If you have a customer account on our website, or you have posted any comments our website, you can request to receive an exported file of your personal data.  You can also request that we delete any personal data we hold about you, excluding any data we are obligated to keep for administrative, legal or security purposes.  When you request access to your personal data, we are required to use all reasonable measures to verify your identity before granting access.  We do this to protect your data and limit the risk of potential identity fraud/theft or unauthorized access.  Finally, you have the right to contact the privacy or data protection regulator in the country where you live to make a complaint.   

8. How we use cookies and similar technologies

Cookies are small text files sent to and stored on your web-enabled device (for example, your computer, smartphone or other device) when you visit a website.  This data uniquely identifies your device.  When we use the term “cookies”, we include other technologies that accomplish similar tasks or help cookies function.  For example, web beacons are electronic tags on webpages used to help deliver cookies.  Web beacons can also be used in emails to collect information about delivery rate, open rate, and click through rate – this helps us assess the level of engagement by our email recipients. 
We use cookies on our websites to fulfil many different legitimate purposes.  Cookies help us distinguish you from other users of our websites and help us improve your experience on our websites.  Cookies help us store your preferences and settings, enable you to sign-in to your customer account, and help us provide you with interest-based advertising.  We also use cookies to combat fraud and analyze how our websites are performing.  Cookies allow us to automate the display of our advertisements on other websites you visit.  This automation increases our efficiency – we can direct our advertising to consumers who are interested in our products based on their activity on our websites.  
When we include links to other websites, those sites will have their own privacy and cookie policies that will govern the use of your personal data on those sites.  We recommend you check their policies as we are not responsible or liable for their practices.  
Web browsers are typically set up to accept cookies but if you wish to amend your cookie preferences, you can do this through your browser settings.  If you choose to turn off certain cookies, it may affect the functionality of our websites.  The cookies we use cannot look into your computer, phone or web-enabled device and obtain information about you or your family or read any material kept on your hard drive.  If you use a public computer to access our websites, our cookies cannot be used by anyone else who has access to that computer to find out anything about you, other that the fact that someone using that computer may have visited this site.

9. Collection of personal data from children

Our websites and marketing activities are not aimed at children, defined as individuals under the age of 13.  We comply with the Children’s Online Privacy Protection Act of 1998 (“COPPA”) and we do not knowingly collect personal data from children.  If we become aware that we have personal data of children, whether through error, deception or fraud, we will delete the data unless there is a justifiable reason to retain such data in compliance with COPPA.      

10. Changes to this Privacy and Cookies Policy

We may modify this policy from time to time.  When we do, we will provide notice to you by publishing the most current version and revising the date at the top of this page.  If we make a material change to the policy, we will provide additional notice by sending you an email and/or displaying a prominent notice on our websites.  By continuing to use our websites after changes to this policy come into effect, you agree to the revised policy.  

11. Third Party Pixels and Cookies                                                              Notwithstanding anything else in this policy, we and/or our partners may use pixels and pixel tags, and place, read or use cookies the collect information from your device and/or Internet browser. These cookies do not contain personally identifiable information, however, it may be possible for our third-party business partners to combine it with other information in order to identify your email address or other information about. For example, the cookies may reflect de-identified demographic or other data linked to data you voluntarily have submitted to us, e.g., your email address, which we may share with a data provider solely in hashed, non-human readable form. Visitors can also express their choices for display advertising, through the following platforms: Digital Advertising Alliance opt-out platform or the Network Advertising Initiative opt-out platform.We and/or our partners may also use cookies for delivering personalized advertising emails. These cookies are used to identify the visitors of our advertisers’ websites and send personalized emails based on the visitors’ browsing experience. We and/or our partners use cookies, pixels and other tracking technology to associate certain Internet-related information about you, such as your Internet Protocol address and what Web browser you are using, with certain of your online behaviors, such as opening emails or browsing websites. Such information is used to customize ads or content and may be shared with our partners.                                      
    
    
12. How to contact us

If you have questions about this Privacy and Cookies Policy, please contact us at:

Attention: Privacy Officer
Address: Truth Nutrition Inc
                6 Donellan Rd.
                Scarsdale, NY 10583
Email: info@truthnutrition.com