Privacy Policy

Scope and who we are

This policy explains how Betterly Nutrition LLC (“Betterly”, “we”, “us”) handles personal information on betterlynutrition.com and in the emails and text messages we send. It applies to shoppers, account holders, newsletter subscribers, and anyone who contacts our support team.

We are a United States business. We sell and ship only within the 48 contiguous United States, and the services that run this store are operated from the United States. If you are outside the US, please do not send us personal information through this site.

Our mailing address is a virtual mailbox for correspondence, not a storefront or a warehouse: 936 SW 1st Ave PMB 877, Miami, FL 33130, US.

What we collect

Four kinds of information: what you give us, what your order requires, what you consent to receive, and a small amount of usage data that tells us which pages are working.

Account information

Your email address and a password. Passwords are hashed by our authentication provider before storage — we never see, store, or have any way to recover your plaintext password. If you save a name or a shipping address to your account, we keep those so checkout is faster next time.

Order information

Your shipping name and address, your phone number (our fulfilment partner requires one to create a shipping label), the items and quantities you bought, the amounts charged including sales tax, shipping and the handling fee, your order reference, and the tracking number the carrier gives us.

Payment information

Payment is completed on a page hosted by Stripe, our payment processor. Your full card number, expiry date and security code are never sent to, seen by, or stored on Betterly’s servers. Stripe returns a payment status and a reference so we can mark the order paid and manage subscription renewals. Stripe handles that card data under its own privacy policy.

Messages you send us

If you use the contact form we store the name, email address, subject and message you submit. If you request a return we store your email address and the reason you give, and we link it to your most recent order so we can process it. Email you send to our support addresses is stored in the mailbox it arrives in.

Marketing consent and engagement

If you subscribe to our email list we store your address, the fact that you confirmed the subscription, and when. If you opt in to text messages we store your mobile number and your consent. Our email provider reports back when a message is delivered, opened, clicked, bounced or marked as spam, and we record those events so we can stop mailing addresses that do not want to hear from us.

Cart recovery

If you enter your email address during checkout but do not finish, we store that address alongside the contents of your cart so we can send you a reminder. The prices and product names in that record are re-read from our own catalogue, never taken from your browser.

Usage analytics

We run our own analytics rather than a third-party advertising platform. Each visit gets a random identifier held in your browser’s session storage, which is discarded when you close the tab. Against that identifier we record the event name — a page view, a product view, an add-to-cart, a checkout start, a purchase, a button click — the page path, and which element you interacted with. We do not store your IP address in that log, and none of it is linked to an advertising profile.

Technical and security data

Our host records standard web-server data for every request, including IP address, browser type and the page requested. Public endpoints such as the newsletter form and the guest order lookup hold an IP address briefly in memory to rate-limit abuse; that value is not written to our database.

Why we use it

• To take payment, fulfil and ship your order, and give you tracking.
• To send transactional messages — order confirmations, shipping notices, subscription renewal notices, password resets and return updates. These are part of the service, not marketing.
• To run Subscribe & Save: charging renewals at the interval you chose, and letting you skip, pause or cancel.
• To answer your questions and handle returns and refunds.
• To send marketing email or texts, only where you have opted in.
• To recover abandoned carts, where you gave us your email address during checkout.
• To understand which pages and products people actually use, so we can improve them.
• To detect and prevent fraud, abuse and automated attacks, and to keep accounts secure.
• To meet our tax, accounting and other legal obligations.

We do not use your personal information to make automated decisions that produce legal or similarly significant effects about you.

Our legal bases

US privacy law does not generally use the language of “legal bases”, but we set ours out anyway because it makes plain what each use of your data actually rests on.

• Performing our contract with you — taking, charging, fulfilling and supporting orders and subscriptions.
• Your consent — marketing email and text messages. You can withdraw it at any time, and withdrawing it does not affect anything we sent before.
• Our legitimate interests — securing the site, preventing fraud, measuring how the store is used, and reminding you about a cart you left behind. We rely on this only where your interests and rights do not override ours.
• Legal obligation — keeping sales and tax records, and responding to lawful requests.

How long we keep it

• Order and payment records — for as long as tax and accounting law requires, generally at least seven years from the end of the tax year in which the order was placed.
• Account data — until you close your account. We then delete or anonymise it within 90 days, except for the order records above.
• Support and return messages — 24 months from your last message, so we still have the history if you write again.
• Abandoned-cart records — 90 days, then deleted whether or not the cart was recovered.
• Analytics events — 24 months, after which they are deleted or kept only in aggregate form that cannot be traced to a session.
• Our suppression list — kept indefinitely. If you unsubscribe, we have to remember your address in order to keep not mailing it. It holds nothing beyond the address and the reason.

Who we share it with

We share personal information only with the service providers that actually run this store, and only the data each one needs. Every provider below is under contract to use your information solely to provide their service to us.

Beyond those providers we may disclose information to our professional advisers, such as accountants and lawyers, where they need it to advise us; to a regulator, court or law enforcement agency where the law requires it or where it is necessary to protect our rights or someone’s safety; and to a buyer or successor if the business is sold or merged, in which case we will post notice here before your information becomes subject to a different policy.

We do not sell your personal information. We do not share it for cross-context behavioural advertising. We do not run advertising pixels, retargeting tags or social-media tracking scripts on this site, and we do not give your email address or phone number to advertising networks or data brokers.

Cookies and analytics

This site uses very little browser storage, and none of it follows you around the internet.

• Sign-in cookies — strictly necessary. They keep you signed in and protect the session. Block them and you will not be able to stay logged in.
• Cart storage — your cart lives in your browser’s local storage so it survives a refresh. It stays on your device until you check out or clear it.
• Analytics session identifier — a random value in session storage, not a cookie. It disappears when you close the tab, so it cannot link two separate visits together.
• Aggregate page analytics — our host counts page views without setting a tracking cookie and without building a cross-site profile of you.

Because we do not sell or share personal information for advertising, there is no advertising opt-out for us to apply. If that ever changes we will honour a Global Privacy Control signal from your browser as a valid opt-out request, and we will update this policy before doing anything that would require one.

Marketing and opting out

Email

Our newsletter is double opt-in: entering your address only creates a pending signup and sends a confirmation link. Nothing marketing-related goes out until you click it, which means nobody can subscribe you using your address. Every marketing email carries an unsubscribe link and a one-click unsubscribe header your mail app can act on directly. You can also opt out at any time on our unsubscribe page. Opt-outs take effect immediately.

Text messages

We text only mobile numbers that have given express written consent, and we check that consent again on every send. Reply STOP, END, CANCEL, QUIT or UNSUBSCRIBE to any message and we will stop; reply START to opt back in. Message and data rates may apply. Consent to marketing texts is never a condition of buying anything.

What you cannot opt out of

Transactional messages: order confirmations, shipping and delivery updates, subscription renewal notices, refund confirmations, password resets and security alerts. They are part of the service you asked for. Cancel your subscriptions and close your account from your account and those stop too.

Your privacy rights

Wherever you live in the United States, we extend the same rights to everyone rather than gating them by state:

• Know what personal information we hold about you, where we got it, why we use it, and who we share it with.
• Get a copy of it in a portable format.
• Correct anything that is inaccurate.
• Delete it, subject to the records we are legally required to keep.
• Withdraw consent to marketing email or texts.
• Opt out of the sale or sharing of your personal information — which we do not do in the first place.
• Be treated the same whether or not you exercise any of these rights. We will not deny you products, charge you a different price, or give you a worse experience for asking.

California residents (CCPA/CPRA)

In the twelve months before this policy was last updated, we collected the categories of personal information described in what we collect — identifiers, customer records, commercial information, internet activity, and location inferred only from the shipping address you gave us — for the purposes listed in why we use it, and disclosed it for business purposes to the providers listed in who we share it with. We did not sell personal information and did not share it for cross-context behavioural advertising, including for consumers we knew to be under 16.

We do not ask you for sensitive personal information as the CPRA defines it: no government identifiers, no precise geolocation, no biometric data, no racial or ethnic origin, no union membership, no health records, no contents of your private messages. Your purchase history can reveal general wellness preferences; we treat it as confidential, use it only to run your orders and support you, and never sell or share it. Because we do not use or disclose sensitive personal information beyond what is necessary to provide the service, the right to limit its use does not arise.

You may use an authorised agent to make a request for you. We will ask the agent for written proof of your permission, and we may ask you to confirm it directly.

Other states

If you live in a state with a comprehensive privacy law — including Virginia, Colorado, Connecticut, Utah, Texas, Oregon and Montana, among others — you have substantially the same rights, plus a right to appeal if we refuse a request. To appeal, reply to our decision with “Appeal” in the subject line. We will review it and give you a written answer with our reasoning.

How to exercise them

There is one path, and it is short. Email support@betterlynutrition.com with “Privacy request” in the subject line, and tell us:

• Which right you want to exercise — a copy, a correction, or deletion.
• The email address you ordered or signed up with, so we can find your records.
• The state you live in, if you want us to apply a specific state law.

We verify requests by matching them to the email address on your account or orders, and by replying to that address; for a deletion request we may ask you to confirm from that inbox. We will not ask you for a government ID or for any information we do not already hold just to prove who you are.

We acknowledge requests within 10 business days and answer them within 45 calendar days. If a request is genuinely complex we may take a further 45 days, and we will tell you why before the first period runs out. There is no charge unless a request is repetitive or excessive, and we will tell you before doing anything on that basis.

Much of this you can do yourself, instantly: view and update your details, see your orders, and manage or cancel subscriptions from your account; check an order without signing in at order tracking; and switch marketing off at our unsubscribe page.

Children’s privacy

This site is intended for adults. Our terms of service require purchasers to be at least 18. We do not direct this site to children under 13 and we do not knowingly collect their personal information. If you believe a child has given us information, email support@betterlynutrition.com and we will delete it and close any associated account. Supplements should be kept out of reach of children, and should not be given to a child without advice from a healthcare provider.

How we protect data

• Traffic to and from this site is encrypted in transit, and our database provider encrypts data at rest.
• Card data never touches our servers — it goes from your browser straight to our payment processor.
• Account data is protected by database-level access rules, so a signed-in customer can read their own records and nobody else’s.
• Incoming webhooks from our payment, email, SMS and fulfilment providers are signature-verified before we act on them, so a forged request cannot alter an order or change your consent.
• Unsubscribe links are cryptographically signed, so one cannot be guessed or forged to opt someone else out.
• Public endpoints are rate-limited to blunt automated abuse, and staff access to customer data is limited to the people who need it.

No system is perfectly secure, and we will not tell you otherwise. If we discover a breach affecting your personal information, we will notify you and the relevant authorities as the law requires.

Changes to this policy

We update this policy when what we do with data changes — for example if we add a service provider. The “last updated” date at the top of the page always reflects the current version. If a change materially affects your rights or how we use information you have already given us, we will say so prominently here and email account holders and subscribers before it takes effect.

Contact us

Privacy questions and requests: support@betterlynutrition.com. Questions about a specific order: support@betterlynutrition.com. You can also write to us through our contact form.

See also our terms of service and our accessibility statement.