Last Updated: Sep 23, 2025

This Privacy Policy describes the information Novalyx Health Technologies, LLC and its affiliates and subsidiaries (together, “Novalyx,” “we,” “us,” or “our”) collects about you and how it is shared or otherwise used, what rights and choices you have over your personal information and our use of it, and the measures that Novalyx takes to protect your information. This Privacy Policy applies to personal information collected by or on behalf of Novalyx, including information collected through our websites and mobile versions of our websites (collectively, the “Site”); our mobile app; our AI Chatbot; in person, by phone or other offline method; and anywhere else where we display this Privacy Policy (collectively the “Service”).

We collect the personal information you choose provide to us when you purchase our products or interact with the Service. The categories of information we may collect include:

We use cookies to create a better experience for you on our Site. For example, cookies prevent you from having to login repeatedly, and they help us remember items you’ve added to your cart. We also use third-party cookies, which are cookies placed by third parties for advertising and analytics purposes. Cookies are small text files containing a string of alphanumeric characters. We may use session cookies and persistent cookies. A session cookie disappears after you close your browser. A persistent cookie remains after you close your browser and can be used by your browser on subsequent visits to our Service. Our service providers and third-party partners (e.g., ad networks and advertising partners), may collect personal information and other unique identifiers via cookies and other tracking technologies. We also may use analytics services which provide us with a clearer picture of how you use the Service, and we may identify and track you when you use different devices and Service. In addition, we and our service providers and third-party partners may also collect and store your personal information via cookies (which are stored on your computer in a file), web beacons and remarketing pixel tags. Please review your web browser’s “Help” file to learn the proper way to modify your cookie settings. Please note that if you delete or choose not to accept cookies from the Service, then you might not be able to utilize the features of the Service to their fullest potential. By using the Service, you consent to the use of cookies and tracking technologies described in this Privacy Policy.

We, and our third-party partners, use tracking technologies to automatically collect usage and device information, such as:

We use these cookies for things like security, logins, site errors, and processing payments. We can't turn these necessary cookies off, but you can control them in your browser.

These cookies tell us how you use our Services, and provide information to help us improve your experience.

We do not use cookies to personalize content for you.

These cookies help us decide which products, services and offers may be relevant for you. We use this data to customize the marketing content you see on websites, apps and social media, and to measure your interactions with that content. We might use these cookies to advertise our products to you when you visit other websites.

We use cookies to improve your experience on our site and to allow us and third parties to personalize the marketing content you see on other websites and social media. Website visitors from European Privacy Law regions can control cookie settings.

We use these cookies for things like security, logins, site errors, and processing payments. We can't turn these necessary cookies off, but you can control them in your browser.

List of Essential Cookies

These cookies tell us how you use our sites and apps, and provide information to help us improve your experience.

List of Analytics Cookies

We do not use cookies to personalize content for you.

These cookies help us decide which products, services and offers may be relevant for you. We use this data to customize the marketing content you see on websites, apps and social media, and to measure your interactions with that content. We might use these cookies to advertise our products to you when you visit other websites.

List of Advertising Cookies

We may collect personal information about you from other sources, including Novalyx affiliates and subsidiaries or other third-parties.

The categories of information we may collect from third-party sources include:

We process personal information, including consumer health data (including with your consent, as may be required by applicable law), for the following business and commercial purposes:

For more information about our consumer health data practices, please review our Consumer Health Data Privacy Policy.

We may disclose personal information about you for business and commercial purposes when you purchase our products or engage with our Service:

We have implemented measures designed to secure your personal information from accidental loss or unauthorized access, use, alteration, and disclosure. However, because no measure is ever 100% effective when transmitting information over the Internet, we do not guarantee that your information will be secure from theft, loss, or unauthorized access.

We will usually store the personal information we collect about you for no longer than necessary to fulfil the purposes for which it was collected, and in accordance with our legitimate business interests and applicable law. However, if necessary, we may retain personal data for longer periods of time, until set retention periods and deadlines expire, for instance where we are required to do so in accordance with legal, tax and accounting requirements set by a legislature, regulator or other government authority.

To determine the appropriate duration of the retention of personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of personal data and if we can attain our objectives by other means, as well as our legal, regulatory, tax, accounting and other applicable obligations.

For example, if your personal information is subject to the EU GDPR or UK GDPR, the criteria used to determine the period for which personal data about you will be retained varies depending on the legal basis under which we process the personal data:

When an individual discontinues the use of our services, we will retain their personal data for as long as necessary to comply with our legal obligations, to resolve disputes and defend claims, as well as, for any additional purpose based on the choices they have made, such as to receive marketing communications. In particular, we will retain personal data supplied when joining our services, including complaints, claims and any other personal data supplied during the duration of an individual’s contract with us for the services until the statutory limitation periods have expired, when this is necessary for the establishment, exercise or defense of legal claims.

In all cases, in addition to the purposes and legal bases, we consider the amount, nature and sensitivity of the personal data, as well as the potential risk of harm from unauthorized use or disclosure of your personal data.

Once retention of the personal data is no longer necessary for the purposes outlined above, we will either delete or deidentify the personal data or, if this is not possible (for example, because personal data has been stored in backup archives), then we will securely store the personal data and isolate it from further processing until deletion or deidentification is possible.

We process personal information, including consumer health data (including with your consent, as may be required by applicable law), for the following business and commercial purposes:

For more information about our consumer health data practices, please review our Consumer Health Data Privacy Policy.

We may disclose personal information about you for business and commercial purposes when you purchase our products or engage with our Service:

With Your Consent: We may disclose personal information about an individual to certain other third parties or publicly with their consent or direction. For example, with an individual’s consent or direction we may post their testimonial on our Sites or service-related publications.

We have implemented measures designed to secure your personal information from accidental loss or unauthorized access, use, alteration, and disclosure. However, because no measure is ever 100% effective when transmitting information over the Internet, we do not guarantee that your information will be secure from theft, loss, or unauthorized access.

We have included the use AI for this specific instances, but as you build on your AI use cases, it may make sense to expand to a broader disclosures about the use of AI. For now, this should be sufficient assuming this is accurate.

All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. Once you have opted-in, depending on the choices you made, we or our service providers may send you text messages (i) regarding your account, your purchase, and/or the status of your order; (ii) to investigate or prevent fraud; (iii) to alert you in the event of an emergency; or (iv) for transactional and promotional purposes described below. We may send you text messages and alerts (including cart reminders) using autodialer technology. We will not contact you via text messages or alerts for marketing purposes without your prior affirmative consent. You do not have to opt-in to text messages and alerts to use and enjoy our Service or to make purchases from Novalyx. If you opt-in, standard messaging and data rates may apply.

You can unsubscribe from receiving all Novalyx text messages (also known as Novalyx SMS) by texting “STOP”, “QUIT”, “END”, “CANCEL” or “UNSUBSCRIBE” to "25816", or by replying “STOP” , “QUIT”, “END”, “CANCEL” or “UNSUBSCRIBE” to any text message sent by Novalyx.

Transactional Messages and Alerts. When you agree to text messaging and alert services through our Service, we or our service providers may send you SMS text messages or push notifications related to your transaction or order.

Promotional Messages. By joining Novalyx’s promotional and marketing text messaging programs, you may receive reoccurring promotional SMS (text messages) about Novalyx products, services, or sales.

This section provides additional information for people in the European Economic Area (EEA) or United Kingdom (UK). The terms used in this section have the same meaning as in the General Data Protection Regulation and the UK Data Protection Act (GDPR). The term “personal information” as used in this notice has the same meaning as “personal data” in the GDPR.

The personal data we collect and how we share it is described above in our Privacy Policy.

We may disclose your personal information to the following third party controllers for business purposes: PayPal - Pay with PayPal, Venmo, Pay Later, USPS, FedEx, Claritas, Reddit Ads, Tiktok Ads. To understand how these parties handle your data, please refer to their respective privacy policies.

We process personal data on the following lawful bases:

Where we process personal data on the basis of our legitimate interests, we pursue the following interests: Analyzing Data, Creating Customer Profiles, Conducting Surveys, Delivering Targeted Ads, Fulfilling Customer Orders, Improving our Products & Services, Meeting Compliance & Legal Requirements, Operating Our Website or Mobile Apps, Preventing Fraud, Processing Payments, Providing Customer Support, Providing Cybersecurity, Sending Promotional Communications, and Tracking Purchases & Customer Data.

We may send the personal data of individuals in the EEA/UK/Switzerland to third countries, including the United States, where it may be stored or processed, for example on our service providers’ cloud servers. When we transfer personal data, we rely either on Adequacy Decisions as adopted by the European Commission (EC), the UK Information Commissioner's Office (ICO), or the Swiss Federal Data Protection and Information Commissioner (FDPIC) on the basis of the EU-US Data Privacy Framework, UK-US Data Bridge, and Swiss-U.S. Data Privacy Framework agreements, Standard Contractual Clauses (SCCs) issued by the EC or the FDPIC, or International Data Transfer Agreements (IDTAs) approved by the ICO. Data protection authorities have determined that the SCCs and IDTA provide sufficient safeguards to protect personal data transferred outside the EEA/UK/Switzerland. You may read more about international data transfer mechanisms at the following links:

Individuals in the EEA/UK/Switzerland have the following rights regarding their personal data. Once you submit a request, we will verify your identity and process your request in most cases within 30 days.

Right to access. You have the right to request a copy of the personal data we hold about you.

Right of portability. You have the right to ask us to transfer your data to another party.

Right to rectification. You have the right to request that we rectify any incorrect information we have about you.

Right of erasure. You have the right to request that we erase (delete) any personal information we hold about you.

Right to withdraw consent. You have the right to withdraw your consent at any time when we rely on your permission to process your personal data.

Right to object. You have the right to object to our use of data about you.

Right to restrict processing. In certain circumstances, you have the right to restrict our processing of your personal data to storage only, subject to some exceptions. This right applies when:

Right to lodge a complaint with a supervisory authority. You have a right to lodge a complaint with a supervisory authority. For more information, you can visit the Information Commissioner’s Office website at https://ico.org.uk/, the Federal Data Protection and Information Commissioner’s website at https://www.edoeb.admin.ch/, or see a list of EU Data Protection Authorities athttps://www.gdprregister.eu/gdpr/dpa-gdpr/.

These US State Privacy Disclosures (“US Disclosures”) provide additional information about our personal information processing practices relating to individual residents of the States of California, Colorado. Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Tennessee, Utah, Nevada, and Virginia. For the purposes of these US Disclosures, personal information does not include publicly available information or deidentified, aggregated or anonymized information that is maintained in a form that is not capable of being associated with or linked to you.

In the last 12 months, we have collected each of the categories of personal information as noted in the table below and disclosed it, for business purposes, to the categories of recipients listed below. The table also indicates when we sold or shared the personal information to third parties in the last 12 months or processed such information for targeted or cross-contextual advertising and the types of third parties. For purposes of these US Disclosures, when we use the term “third party” we mean entities that are not a Novalyx entity or processors providing services on behalf of Novalyx and that are not entities with whom you interact with directly.

As described in the “Personal Information We Collect and How We Collect It” section of this Privacy Policy, we collect personal information directly from you when you provide it to us, automatically using cookies and other online tracking technologies, from third parties, and by combining personal information we may otherwise obtain.

We process personal information for different purposes, depending on how you interact with the Services. We collect, sell, share, or disclose personal information about you for the business and commercial purposes described in the "Why we process your information" section of this Privacy Policy.

The period for which we retain your personal information varies, depending on the type of personal information and the purpose for which it was collected. The duration is limited to time necessary to fulfill the purposes for which the information was collected, in light of any restrictions or deletion you might request, as well as our need to address our legal obligations or rights. Details can be found in the “How long we keep your data” section of this Privacy Policy.

In some cases, we may offer you financial incentives as permitted by law in exchange for the collection, retention, or use of certain personal information about you. Each financial incentive related to the collection and use of personal information is based upon our reasonable, good-faith determination of the estimated value of such information to us. When applicable, we will provide information about the specific terms of the financial incentive and your rights on the webpage or form where the financial incentive is made available.

Opting Out of Cookies and Tracking Technologies. The Help portion of the toolbar on most browsers will tell you how to prevent your browser from accepting new Cookies, how to have the browser notify you when you receive a new Cookie, or how to disable Cookies altogether. If you choose, you may also use the Digital Advertising Alliance (“DAA”) WebChoices Toolto globally opt-out of third-party tracking via website cookies. Please keep in mind that, without Cookies, you may not have access to certain features on our Services, including access to your profile or account and certain personalized content. Removing all Cookies from your computer could also affect your subsequent visits to certain Services, by requiring that, for example, you enter your login name when you return. Please note that not all tracking will stop even if you delete cookies.

Mobile Device Location Tracking. You can manage how your mobile device shares location data or prevent geolocation tracking by adjusting the controls and disabling location services on your mobile device or within our mobile application. For example, if you no longer wish to receive location-based offers when visiting our store, you can disable location services or adjust the push notification settings on your device.

Marketing and Interest-Based Advertising. Some content or applications, including advertisements, on the Platforms may be served by our service providers, including advertisers, ad networks and servers, content providers, and application providers, in which event (i) these service providers may use Cookies alone or collect information about your online activities over time and across different sites, (ii) these service providers may use this information to provide you with interest-based (behavioral) advertising or other targeted content on our behalf, and (iii) we do not permit service providers to use this information for the service provider’s or a third party’s own direct marketing or other purposes. We will not control these third parties’ tracking technologies or how they may be used. Many of our marketing service providers are members of the Network Advertising Initiative (NAI), or the Digital Advertising Alliance (DAA), and have agreed to honor consumers' opt-out preferences submitted through those organizations' websites. To learn more about your choices regarding this type of data collection or to opt-out of interest-based advertising by members of the NAI or the DAA, please visit http://optout.networkadvertising.org or https://www.aboutads.info.

Communication Preferences. You may choose not to receive commercial emails from us by following the unsubscribe instructions contained in the commercial emails we send you. Please note that even if you unsubscribe from commercial email messages, we may still email you non-marketing emails related to your account and your transactions. Further, opting out of email marketing does not affect any digital advertising that does not rely on your email information. If you wish to opt out of receiving offers from our business or advertising partners, you can follow the opt-out or unsubscribe instructions in the emails that they send you.

You may also change the push notification and alert settings on your device to adjust whether or when you receive location-based offers and other features available through the app.

Where available, you may choose to enable an online tool that automatically communicates your universal opt-out preferences, such as Global Privacy Control (“GPC”). You may need to use a specific browser or an extension that supports these tools and universal signals. When such signal is detected, we will process as a request to opt out of tracking personal information and as a request to opt out of “sale” or “sharing” your personal information as explained in “Your Privacy Choices” section below.

If you are a California, Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Tennessee, Utah, or Virginia resident, you may be able to exercise the following rights in relation to the personal information that Novalyx or our processors, service providers, or contractors have collected (subject to certain limitations at law):

Right to Appeal.Depending on your state of residency, if your request is denied, we will provide an explanation for the denial and instructions on how you may appeal a denied request. You may appeal a denied request by contact us at customersupport@livepeak.us.

Right to Know Specific Third Parties. If you are a resident of Oregon or Minnesota, you may have a right to request information about specific third parties with whom we share personal information. You may exercise this request by filling emailing us at customersupport@livepeak.us.

Right to Revoke Consent. Once you make an opt-out request, you may change your mind and opt back into personal information sales at any time by contacting us at customersupport@livepeak.us.

We will need to verify your identity and confirm you are a resident of a state that affords these rights before processing most requests, which may require us to request additional personal information from you. In order to verify your identity, we will generally require either the successful authentication of your account, or the matching of information you provide us to the information we maintain about you in our systems. We will use the personal information provided in connection with a request as needed to review and comply with the request. If you do not provide the necessary information, we may not be able to verify or complete your request in all circumstances.

If you wish to submit a verifiable consumer request on behalf of another individual, then we will also need sufficient information to verify that the individual is the person about whom we collected personal information and that you are authorized to submit the request on their behalf. Please see the "Authorized Agents" section below for more information.

We do not discriminate against you for requesting any of the rights noted above. In certain circumstances, we may decline a request to exercise the rights described above, in accordance with applicable law.

Please submit a request by calling 1-800-228-1966.

To exercise your right to opt-out of personal information sales or sharing, please submit a request by emailing customersupport@livepeak.us.

Please see the section entitled “Your Choices” above for additional information on how you may exercise your choice over personal information collected through cookies and other tracking technologies and used for advertising purposes.

We do not process personal information of consumers we know to be less than 18 years of age. If a parent or guardian becomes aware that his or her child has provided us with personal information without their consent, he or she should contact us at customersupport@livepeak.us. If we become aware that a child under age 18 has provided us with Information, we will delete such information from our files.

In certain circumstances, you are permitted to use an "authorized agent" (as that term is defined by applicable law) to submit privacy requests on your behalf. We may verify the authorized agent's authority to act on your behalf as follows: