Welcome to Thrive Well Supplements!
At Thrive Well Supplements (“we”, “our”, or “us”), your privacy is important to us. This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you visit our website, www.thrivewellsupplements.com (the “Site”), or interact with us through other means including email, SMS, or social media.
By accessing or using our Site or services, you agree to the terms of this Privacy Policy. If you do not agree with our practices, please do not use our Site or services.
This policy is intended to comply with relevant U.S. laws, including the California Consumer Privacy Act (CCPA), and international frameworks such as the General Data Protection Regulation (GDPR) for users residing outside the U.S.
Definitions
For the purposes of this Privacy Policy, the following terms have the meanings described below:
“Personal Data”
Any information that can be used to identify an individual, either directly or indirectly. This includes, but is not limited to, your name, email address, phone number, shipping and billing address, payment details, and account login information.
“Usage Data”
Information automatically collected through your interaction with our Site. This may include your IP address, browser type, operating system, referring URLs, page views, time spent on pages, and the date/time of your visit.
“Cookies”
Small data files placed on your device to enhance your experience. Cookies help us understand how users interact with our website, remember your preferences, and provide personalized content.
“Services”
The Thrive Well Supplements website, online store, subscription plans, promotional campaigns, customer support, and any other features or services provided via www.thrivewellsupplements.com.
Information We Collect
Thrive Well Supplements collects several types of information to provide you with the best possible experience and to fulfill our legal and business obligations. This includes both information you provide directly and data we collect automatically.
Information You Provide to Us
We may collect the following personal information when you:
- Create an account
- Full name
- Email address
- Password
- Place an order
- Billing and shipping address
- Phone number
- Payment method (handled via secure third-party processor)
- Contact customer support or fill out forms
- Any information you voluntarily share (e.g., inquiries, feedback)
- Subscribe to marketing communications
- Email address or mobile number for newsletters, promotional offers, and SMS alerts
Information Collected Automatically
When you interact with our Site, we automatically collect certain Usage Data using cookies and tracking technologies:
- IP address and general geolocation
- Device and browser type
- Pages visited, time on site, and navigation path
- Referring URLs and outbound links
- Device identifiers and session tokens
Information from Third Parties
We may receive personal data about you from:
- Payment processors (e.g., Shopify Payments, PayPal)
- Marketing platforms (e.g., Meta/Facebook, Google Ads)
- Analytics providers (e.g., Google Analytics)
- Social media networks, when you engage with our content or log in using a third-party account
How We Use Your Information
We use the information we collect to operate efficiently, fulfill your orders, enhance your experience, and comply with legal obligations. The purposes for collecting and using your Personal Data include:
To Provide and Manage Services
- Process orders, payments, and deliveries
- Set up and manage your account
- Respond to your questions, requests, or support inquiries
- Send transactional notifications (e.g., order confirmations, shipping updates)
To Personalize Your Experience
- Recommend products based on your preferences and past purchases
- Save your cart contents or preferences across visits
- Tailor email and SMS communications
For Marketing and Promotions
- Send newsletters, promotions, or special offers (with your consent)
- Run surveys, giveaways, or loyalty programs
- Use data for audience targeting via platforms like Google Ads and Meta Ads
You can opt out of these communications at any time by following the unsubscribe link in emails or replying “STOP” to SMS messages.
For Analytics and Site Improvement
- Analyze user behavior to understand how our website is used
- Optimize our user interface and mobile performance
- Identify and fix bugs or usability issues
For Legal, Compliance, and Security Purposes
- Detect, investigate, and prevent fraud or misuse of the Services
- Enforce our Terms of Service
- Comply with tax, legal, or regulatory obligations
- Protect the rights and safety of users, employees, and the public
How We Share Your Information
Thrive Well Supplements does not sell your personal data. However, we may share your information with trusted third parties under specific circumstances to operate our business, fulfill your orders, and improve your experience.
Service Providers
We share your Personal Data with vendors who perform services on our behalf. These include:
- Payment processors (e.g., Shopify Payments, PayPal)
- Shipping partners (e.g., USPS, UPS, FedEx)
- Email and SMS platforms (e.g., Klaviyo, Postscript)
- Analytics providers (e.g., Google Analytics)
- Advertising partners (e.g., Meta/Facebook, Google Ads)
These service providers are contractually obligated to protect your information and use it only to perform their designated functions.
Business Transfers
In the event of a merger, acquisition, asset sale, or other business transaction, your Personal Data may be transferred as part of the business assets.
Legal Requirements
We may disclose your Personal Data if required to do so by law, subpoena, court order, or other legal processes, or if we believe such disclosure is necessary to:
- Comply with legal obligations
- Protect and defend our rights or property
- Prevent or investigate possible wrongdoing
- Protect the personal safety of users or the public
With Your Consent
We may share your information with third parties for marketing or other purposes only when you give us explicit permission to do so (e.g., through a checkbox or opt-in form).
Third-Party Tools and Integrations
To enhance functionality, personalize user experiences, and analyze usage patterns, Thrive Well Supplements integrates with trusted third-party platforms. These services may collect, process, or store your data in accordance with their own privacy policies.
E-Commerce Platform: Shopify
Our store is hosted on Shopify Inc., which provides the online platform allowing us to sell our products. Shopify securely processes order information, manages inventory, and stores customer account data.
For more information, see Shopify’s Privacy Policy.
Payment Processors
We do not store full payment details. Transactions are handled through secure payment gateways such as:
- Shopify Payments
- PayPal
- Apple Pay / Google Pay (via Shopify)
These services may collect your billing address, credit/debit card info, and verification data as needed to authorize payments.
Analytics: Google Analytics
We use Google Analytics to collect anonymized data about how users interact with our website. This includes:
- Pages visited
- Duration of visits
- Device/browser types
- Traffic sources
You can opt out using the Google Analytics Opt-out Browser Add-on.
Advertising and Retargeting
We may use Facebook Pixel, Google Ads, and other tracking technologies to:
- Serve targeted ads
- Measure campaign effectiveness
- Understand user demographics and preferences
These platforms may collect and use data about your interactions with our site to show relevant ads on other websites.
Email and SMS Communications
Marketing messages are sent via providers such as:
- Klaviyo (email)
- Postscript or similar (SMS)
These platforms track open rates, click activity, and subscription preferences to improve communication.
Your Rights and Choices
We believe in empowering you to control how your personal data is used. Depending on your location, you may have certain rights under the California Consumer Privacy Act (CCPA), the General Data Protection Regulation (GDPR), or other applicable laws. Below are your available rights and how to exercise them:
Right to Know (Access)
You have the right to request:
- What categories of Personal Data we collect
- The sources from which we collect it
- The business purpose for collecting or sharing it
- The third parties with whom it is shared
- Specific pieces of information we have collected about you
Note: California residents can make two such requests per 12-month period.
Right to Correct
You may request that we correct inaccurate Personal Data that we maintain about you.
Right to Delete
You can ask us to delete your Personal Data, subject to certain legal exceptions (e.g., compliance, fraud prevention, transaction completion).
Right to Object or Restrict Processing (GDPR)
If you are in the EU/EEA, you may object to or request restriction of certain data uses, particularly those based on legitimate interest or direct marketing.
Right to Opt Out of Sale or Sharing (CCPA)
We do not “sell” Personal Data for money. However, under CCPA definitions, some advertising or tracking tools may qualify as “sharing.” You may opt out by:
- Clicking the “Your Privacy Choices” link in the footer
- Adjusting your cookie settings via our Cookie Preferences section
- Enabling the Global Privacy Control (GPC) signal in your browser
Right to Data Portability
You may request a copy of your Personal Data in a portable format.
Right to Withdraw Consent (GDPR)
You may withdraw your consent at any time for processing based on consent (e.g., marketing emails).
Non-Discrimination
We will not discriminate against you for exercising any of these rights.
How to Exercise Your Rights
Submit your request by contacting us:
- Email: [email protected]
- Phone: (TBD)
- Or use our Privacy Request Form (if applicable)
We may verify your identity before fulfilling requests. Authorized agents may also act on your behalf with written permission.
Cookies and Tracking Technologies
Thrive Well Supplements uses cookies and similar tracking technologies to improve your experience, analyze site traffic, and support marketing efforts. This section explains how we use these tools and how you can control them.
What Are Cookies?
Cookies are small data files placed on your device (computer, tablet, or smartphone) when you visit a website. They allow websites to recognize your device and remember your preferences or actions over time.
We may also use pixels, tags, and scripts—collectively referred to as tracking technologies—that work alongside cookies to track behavior and improve services.
Types of Cookies We Use
- Strictly Necessary Cookies
Required for the operation of our website. These include cookies that allow you to log in, add items to your cart, or complete purchases. - Performance and Analytics Cookies
Help us understand how visitors interact with our website by collecting anonymous usage data. For example, we use Google Analytics to track page views and user behavior. - Functional Cookies
Enhance your experience by remembering your preferences, such as language, region, or login status. - Targeting/Advertising Cookies
These cookies track browsing habits across websites to deliver relevant ads through platforms like Facebook and Google Ads. This may be considered “sharing” under the CCPA.
Third-Party Cookies
Some cookies are placed by third parties on our behalf. These include services such as:
- Google Analytics
- Facebook/Meta Pixel
- Klaviyo (email tracking)
- Postscript or other SMS tools
These third parties may use cookies to track your behavior across websites and devices.
Your Cookie Choices
You have control over your cookie preferences:
- Adjust your browser settings to block or delete cookies
- Use our Cookie Preferences tool (link in footer) to manage consent
- Enable the Global Privacy Control (GPC) setting in your browser to signal opt-outs automatically
- Opt out of Google Analytics using the Google Opt-Out Add-on
Please note that disabling cookies may affect the functionality and performance of our website.
Data Security
Thrive Well Supplements takes your privacy seriously and implements a range of technical, organizational, and administrative measures to protect your Personal Data from unauthorized access, disclosure, alteration, or destruction.
Security Measures We Use
We utilize industry-standard security protocols, including:
- Secure Socket Layer (SSL) encryption for data transmission
- Encrypted storage of sensitive information where applicable
- Access controls and role-based permissions for internal staff
- Regular system and software updates to address vulnerabilities
- Monitoring and auditing of our systems for suspicious activity
Limitations of Security
While we strive to protect your data, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee the absolute security of your data. You share information with us at your own risk.
We recommend you take steps to protect your account, including:
- Using a strong, unique password
- Logging out of your account when using public or shared devices
- Contacting us immediately if you suspect unauthorized access to your account
Third-Party Services
Our partners and service providers (such as Shopify, Klaviyo, and payment processors) are expected to uphold strong security standards. However, we are not responsible for their privacy or security practices. We encourage you to review their policies directly.
Data Retention
We retain your personal information only as long as necessary to fulfill the purposes for which it was collected, including to provide services, comply with legal obligations, resolve disputes, and enforce our agreements.
How Long We Keep Your Information
The length of time we retain data depends on the type of information and the reason it was collected:
- Account Information: Retained for as long as your account is active or as needed to provide you with services.
- Order and Transaction Data: Retained for a minimum of 7 years for tax, audit, and legal compliance purposes.
- Marketing Preferences: Retained until you unsubscribe or request deletion.
- Analytics and Usage Data: Typically retained in anonymized or aggregated form, unless needed for security, legal, or business continuity purposes.
Your Right to Request Deletion
You can request deletion of your personal information at any time, subject to applicable legal exceptions (e.g., retention required for financial reporting or fraud prevention).
To request deletion, please contact us at:
Email: [email protected]
We will respond to your request in accordance with applicable privacy laws.
Data Transfers
Thrive Well Supplements is based in the United States and processes all personal data in accordance with U.S. laws. If you access our website or services from outside the United States, your information will be transferred to, stored in, and processed within the U.S.
International Users
By using our services or submitting your information from outside the U.S., you acknowledge and agree that:
- Your personal data will be transferred to and processed in the United States, where data protection laws may not offer the same level of protection as those in your country.
- We will take reasonable steps to ensure your data is treated securely and in accordance with this Privacy Policy.
Legal Basis for Transfers (GDPR)
For users in the European Economic Area (EEA) or the United Kingdom (UK), we rely on one or more of the following legal bases to transfer data:
- Your Consent
- Performance of a contract (e.g., to ship your order)
- Compliance with legal obligations
- Our legitimate interests, provided these are not overridden by your rights and freedoms
Where required by law, we will implement appropriate safeguards, such as Standard Contractual Clauses (SCCs), to ensure that your personal data remains protected.
Children’s Privacy
Thrive Well Supplements is committed to protecting the privacy of children. Our services are not intended for or directed toward individuals under the age of 13, and we do not knowingly collect personal information from children without verifiable parental consent.
Users Under 13
We do not knowingly collect or solicit personal information from children under 13. If we learn that we have inadvertently collected personal data from a child without parental consent, we will promptly delete that information from our records.
If you believe that a child under 13 has provided us with personal information, please contact us immediately at:
Email: [email protected]
Users Under 16 (California Residents)
Under the California Consumer Privacy Act (CCPA), Thrive Well Supplements does not sell or share personal data of users we know to be under 16 years of age without affirmative authorization.
If you are a parent or guardian and become aware that your child under 16 has submitted personal information to us, you may contact us to request removal.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or technologies.
How We Notify You
When we make changes, we will:
- Post the updated Privacy Policy on this page
- Update the “Last Updated” date at the top of the policy
- In some cases, provide additional notice (such as via email or a pop-up notification) if the changes are material or significantly affect your rights
Your Continued Use Constitutes Agreement
By continuing to use our website or services after updates are posted, you agree to the revised Privacy Policy. We encourage you to review this page regularly to stay informed about how we are protecting your information.
Contact Information
If you have any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us using one of the methods below:
General Inquiries and Privacy Requests
Email: [email protected]
Phone: (TBD)
Mailing Address:
Thrive Well Supplements
1700 Broadway, Suite 2200
Denver, CO 80290
United States
For California Residents
You may also call us or submit your request through our online Privacy Request Form (if available) to exercise your CCPA rights.
For EU/EEA Residents
To inquire about your GDPR rights or data transfers, please include “GDPR Inquiry” in the subject line of your message.
We aim to respond to all privacy-related requests within the timeframes required by law.
