Privacy Policy

What we collect

• Order data: name, email, shipping address, phone, and the contents and total of your order
• Account data: email and a hashed password, plus saved addresses if you add them
• Payment data: handled by our payment processors. Card numbers are sent directly to them and are never stored on our servers
• Technical data: your cart is held against a random token in a cookie; server logs record request data such as IP address for security and debugging
• Advertising measurement data: the products you view, add to your cart and order with their values, when you create an account or join the newsletter, your browser and IP address, and the ad reference described under Cookies
• Marketing data: your email address, if you subscribe to the newsletter
• Cart reminder: if you are signed in, or type your email in the cart or at checkout, we keep it with your cart. If the cart is left without an order, we send one reminder email with a discount code. Every reminder has an unsubscribe link

Why we hold it

To take payment, ship your order, send order and shipping notifications, handle returns and support, keep required commercial records, and — only if you opted in — send you offers.

Who we share it with

Only the processors an order needs, and only the data they need to do their part:

• Payment processing: Authorize.net and PayPal
• Fulfillment and shipping labels: ShipStation and the carrier
• Transactional and marketing email: Resend
• Our own hosting and database infrastructure
• Advertising measurement: OpenAI, so we can tell whether our ads in ChatGPT lead to orders. When you view a product, add to your cart, start checkout, place an order, create an account or join our newsletter, we and the OpenAI pixel send OpenAI which products and amounts were involved, your browser and IP address, the ad reference, and, when we have them, your email address, name, phone number and customer number as one way hashes, never in readable form, plus the city, state and ZIP code of your shipping address

We do not sell your personal information. Some US state privacy laws treat advertising measurement as sharing. If your browser sends a Global Privacy Control signal, we honour it as your opt out: the OpenAI pixel does not load and our server sends OpenAI nothing about your visit.

Cookies

We use cookies that the store needs to work: one to keep your cart across pages, and one to keep you signed in. We also load the OpenAI Ads measurement pixel, which stores two cookies on our own domain (__oppref and __obref) so that a visit that began at one of our ads in ChatGPT can be matched to that ad. It is not loaded when your browser sends a Global Privacy Control signal.

Retention

Order records are kept for as long as required for tax and commercial record-keeping. Account data is kept until you ask us to delete it. Newsletter subscriptions are kept until you unsubscribe, which every marketing email links to. A cart and the email kept with it are used for at most one reminder, sent within a week.

Your choices

Email orders@muscle-nutrition.us to see what we hold about you, correct it, or have it deleted. We will need to verify that the request comes from the account holder. Deleting an account does not remove completed order records we are required to keep.

Children

This store is not directed at children under 13, and we do not knowingly collect their data. Supplements are intended for adults.

Changes

If this policy changes materially we will update this page. Continuing to use the store after a change means the updated policy applies.