Privacy Policy

Introduction and Commitment to Privacy

HepatoBurn Health, operating through our website https://hepatoburn.health (“Website”), is deeply committed to protecting and respecting your privacy. As a leading provider of natural liver health supplements and wellness solutions, we understand that trust is essential to our relationship with customers seeking to enhance their health and well-being.

This comprehensive Privacy Policy explains our data collection, processing, and protection practices when you visit our Website, purchase our liver health supplements, or interact with our customer service team. We believe in complete transparency about how we handle your personal information, and this policy reflects our commitment to maintaining the highest standards of data protection and privacy compliance.

By using our Website or purchasing our products, you acknowledge that you have read, understood, and consent to the practices described in this Privacy Policy. If you disagree with our privacy practices, please discontinue use of our Website and contact us to discuss your concerns.

Our privacy practices comply with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), as well as other relevant privacy legislation. We regularly review and update our practices to ensure ongoing compliance with evolving privacy regulations and industry best practices.

Information We Collect

Personal Information You Provide Directly

When you interact with HepatoBurn Health, we collect various types of personal information that you voluntarily provide to us through different touchpoints:

Account Registration Information:

• Full name and contact details
• Email address for communication and order updates
• Phone number for customer service and delivery coordination
• Mailing address for shipping and billing purposes
• Date of birth (for age verification and compliance purposes)
• Account login credentials and security preferences

Order and Purchase Information:

• Detailed billing and shipping addresses
• Payment method information (processed securely through third-party payment processors)
• Complete purchase history and order details
• Product preferences and quantity selections
• Special delivery instructions and preferences
• Gift recipient information when applicable

Health and Wellness Information (Optional):

• General health goals and wellness objectives
• Dietary preferences and restrictions
• Current supplement usage and health routines
• Product experience and satisfaction feedback
• Health-related survey responses and research participation

Customer Service Communications:

• Support ticket details and inquiry history
• Chat transcripts and email correspondence
• Phone call records and notes (with consent)
• Complaint resolution documentation
• Feedback and suggestion submissions

Automatically Collected Information

Our Website automatically collects certain technical and usage information to enhance your browsing experience and improve our services:

Technical Device Information:

• Internet Protocol (IP) address and approximate geographic location
• Browser type, version, and language settings
• Operating system and device specifications
• Screen resolution and display preferences
• Mobile device identifiers and carrier information
• Network connection type and speed

Website Usage Analytics:

• Pages visited, time spent on each page, and navigation patterns
• Click-through rates, bounce rates, and conversion metrics
• Search terms used within our Website
• Product pages viewed and interaction patterns
• Download activity and content engagement
• Referral sources and campaign attribution data

Performance and Diagnostic Data:

• Website loading times and performance metrics
• Error logs and technical diagnostic information
• Feature usage statistics and user interface interactions
• A/B testing participation and variant assignment
• Security monitoring and fraud prevention data

Third-Party Information Sources

We may receive additional information about you from legitimate third-party sources to enhance our understanding of your preferences and improve our services:

Marketing and Analytics Partners:

• Demographic and interest-based information from advertising networks
• Social media insights and engagement data (when you connect social accounts)
• Market research data and consumer behaviour insights
• Email deliverability and engagement statistics

Verification and Fraud Prevention Services:

• Identity verification and address validation data
• Credit and payment verification information
• Fraud risk assessment and security scoring
• Compliance and regulatory verification data

How We Use Your Personal Information

Primary Business Operations

We use your personal information to deliver exceptional customer service and ensure smooth business operations:

Order Processing and Fulfilment:

• Processing your supplement orders accurately and efficiently
• Coordinating secure payment processing and transaction verification
• Managing inventory allocation and shipping logistics
• Providing real-time order tracking and delivery updates
• Handling returns, exchanges, and refund processing
• Maintaining accurate accounting and financial records

Customer Service Excellence:

• Responding promptly to customer inquiries and support requests
• Providing personalised product information and usage guidance
• Resolving complaints and addressing customer concerns
• Offering technical support for website navigation and account management
• Facilitating communication between customers and our health experts

Account Management and Personalisation:

• Creating and maintaining secure customer accounts
• Personalising website content and product recommendations
• Storing order history and shipping preferences for convenience
• Managing subscription services and autoship programs
• Providing loyalty program benefits and rewards tracking

Marketing and Customer Engagement

We use your information to provide relevant, valuable content and offers that align with your health and wellness interests:

Targeted Marketing Communications:

• Sending personalised email newsletters with health tips and product updates
• Providing special offers and promotions tailored to your interests
• Sharing educational content about liver health and natural wellness
• Announcing new product launches and exclusive member benefits
• Conducting customer satisfaction surveys and feedback collection

Website Optimisation and User Experience:

• Analysing user behaviour to improve website functionality and navigation
• Testing new features and interface improvements
• Optimising product pages and checkout processes
• Personalising content recommendations based on browsing history
• Improving search functionality and product discovery

Legal Compliance and Security

We process your information to meet legal obligations and maintain a secure environment:

Regulatory Compliance:

• Maintaining records for tax reporting and financial auditing
• Complying with supplement industry regulations and FDA requirements
• Meeting international trade and customs documentation requirements
• Responding to legitimate legal requests and court orders
• Maintaining anti-money laundering and know-your-customer compliance

Security and Fraud Prevention:

• Monitoring for suspicious activity and potential security threats
• Implementing authentication and access control measures
• Protecting against unauthorised account access and identity theft
• Detecting and preventing fraudulent transactions and abuse
• Maintaining data backup and disaster recovery capabilities

Legal Basis for Data Processing

For customers located in jurisdictions with specific data protection requirements, we process personal data based on the following legal grounds:

Contractual Necessity

We process your personal information when it’s necessary to fulfil our contractual obligations to you:

• Processing and delivering your supplement orders
• Providing customer service and technical support
• Managing your account and subscription services
• Processing payments and handling refunds

Legitimate Business Interests

We may process your information based on our legitimate business interests, provided these interests don’t override your privacy rights:

• Improving our products and services based on customer feedback
• Conducting business analytics and market research
• Maintaining website security and preventing fraud
• Direct marketing to existing customers (with easy opt-out options)

Legal Compliance

We process personal data when required by applicable laws and regulations:

• Maintaining transaction records for tax and accounting purposes
• Complying with consumer protection and supplement industry regulations
• Responding to valid legal requests and regulatory inquiries
• Meeting international trade and customs requirements

Consent

For certain activities, we rely on your explicit consent:

• Collecting optional health and wellness information
• Sending promotional communications to newsletter subscribers
• Using cookies for analytics and advertising purposes
• Participating in market research and customer feedback programs

Information Sharing and Third-Party Disclosures

Trusted Service Providers

We partner with carefully selected third-party service providers who assist us in delivering our services while maintaining strict data protection standards:

Payment Processing Partners:

• Secure payment gateways for credit card and digital payment processing
• Fraud detection and prevention services to protect against unauthorised transactions
• Financial institutions for payment settlement and currency conversion
• PCI-compliant service providers ensuring payment card data security

Shipping and Logistics Providers:

• National and international shipping carriers for product delivery
• Fulfilment centres for order processing and inventory management
• Package tracking services for real-time delivery updates
• Returns processing centres for efficient product exchanges

Technology and Infrastructure Partners:

• Cloud hosting providers for secure data storage and website operation
• Email service providers for customer communications and marketing
• Customer relationship management (CRM) systems for service excellence
• Analytics platforms for website optimisation and performance monitoring

Marketing and Advertising Partners:

• Digital advertising platforms for targeted marketing campaigns
• Email marketing services for newsletter delivery and automation
• Social media advertising networks for customer acquisition
• Affiliate marketing platforms for partnership management

Business Transactions

In the event of significant business changes, your information may be transferred as part of our business assets:

• Mergers and acquisitions involving HepatoBurn Health
• Sale of business divisions or product lines
• Corporate restructuring and reorganisation activities
• Asset transfers and business succession planning

We will notify you of any such transactions and ensure that your privacy rights remain protected under the new ownership structure.

Legal and Regulatory Requirements

We may disclose personal information when required by law or to protect legitimate interests:

• Compliance with valid legal processes, court orders, and subpoenas
• Cooperation with law enforcement investigations and regulatory inquiries
• Protection of our rights, property, and the safety of our customers and employees
• Prevention and investigation of fraud, security breaches, and illegal activities

Aggregated and Anonymised Data

We may share aggregated, anonymised, or de-identified information that cannot reasonably be used to identify you:

• Industry research and market analysis reports
• General usage statistics and trend analysis
• Public health research and supplement efficacy studies
• Business intelligence and competitive analysis

Data Security and Protection Measures

Technical Safeguards

We implement comprehensive technical security measures to protect your personal information:

Encryption and Data Protection:

• Industry-standard SSL/TLS encryption for all data transmission
• Advanced encryption at rest for stored personal and payment data
• Secure tokenisation of sensitive payment information
• End-to-end encryption for internal communications and data transfers

Access Controls and Authentication:

• Multi-factor authentication for administrative system access
• Role-based access controls limiting data access to authorised personnel
• Regular access reviews and privilege management audits
• Secure password policies and account lockout protections

Network and Infrastructure Security:

• Firewalls and intrusion detection systems protecting our networks
• Regular vulnerability assessments and penetration testing
• Secure data centres with physical access controls and monitoring
• Redundant systems and backup infrastructure for business continuity

Organizational Safeguards

Our organisational security measures ensure that your data is handled responsibly:

Employee Training and Awareness:

• Comprehensive privacy and security training for all staff members
• Regular updates on data protection best practices and regulatory requirements
• Clear data handling policies and procedures for different roles
• Confidentiality agreements and security awareness programs

Incident Response and Monitoring:

• 24/7 security monitoring and threat detection systems
• Formal incident response procedures for security breaches
• Regular security audits and compliance assessments
• Continuous improvement of security controls and procedures

Third-Party Security Requirements

All third-party service providers must meet our stringent security standards:

• Contractual data protection and security requirements
• Regular security assessments and compliance certifications
• Secure data transmission and storage protocols
• Incident notification and response procedures

Your Privacy Rights and Choices

Universal Privacy Rights

Regardless of your location, you have certain fundamental rights regarding your personal information:

Right to Access:

• Request copies of the personal data we hold about you
• Receive information about how your data is processed and shared
• Obtain details about data retention periods and deletion practices
• Access your account information and transaction history

Right to Rectification:

• Correct inaccurate or incomplete personal information
• Update your contact details and account preferences
• Modify shipping and billing address information
• Correct any errors in your order or communication history

Right to Deletion:

• Request deletion of your personal data (subject to legal limitations)
• Close your account and remove associated personal information
• Opt out of marketing communications and newsletters
• Request removal from specific databases or processing activities

Right to Data Portability:

• Receive your personal data in a structured, machine-readable format
• Transfer your data to another service provider when technically feasible
• Export your account information and transaction history
• Obtain copies of your communications and interaction records

GDPR Rights for EU Residents

If you are located in the European Union, you have additional rights under the General Data Protection Regulation:

Enhanced Consent Management:

• Withdraw consent for specific data processing activities
• Object to automated decision-making and profiling
• Request restriction of processing in certain circumstances
• Lodge complaints with your local data protection authority

Data Protection Officer Contact: Our designated Data Protection Officer can be reached at dpo@hepatoburn.health for GDPR-related inquiries and requests.

CCPA Rights for California Residents

California residents have specific rights under the California Consumer Privacy Act:

Comprehensive Disclosure Rights:

• Right to know what personal information is collected and how it’s used
• Right to know whether personal information is sold or disclosed to third parties
• Right to access specific pieces of personal information collected

Control and Deletion Rights:

• Right to delete personal information (subject to certain exceptions)
• Right to opt out of the sale of personal information
• Right to non-discrimination for exercising CCPA rights

Note: HepatoBurn Health does not sell personal information as defined by the CCPA.

Exercising Your Privacy Rights

To exercise any of your privacy rights, you can:

Online Request Portal: Visit our privacy request centre at https://hepatoburn.health/privacy-requests

Email Communication: Send detailed requests to privacy@hepatoburn.health

Phone Support: Call our dedicated privacy hotline at 1-800-HEPATO-1 (1-800-437-2861)

Written Correspondence: Mail requests to our Privacy Officer at the address listed in the contact section

We will respond to your requests within 30 days (or as required by applicable law) and may request additional information to verify your identity before processing certain requests.

Cookies and Tracking Technologies

Types of Cookies We Use

Our Website uses various types of cookies and similar technologies to enhance your browsing experience and improve our services:

Essential Cookies:

• Authentication cookies for secure account access
• Shopping cart functionality and checkout process
• Security cookies for fraud prevention and protection
• Website functionality cookies for core features

Analytics and Performance Cookies:

• Google Analytics for website traffic and user behaviour analysis
• Performance monitoring cookies for website optimisation
• Heat mapping tools for user interface improvement
• Conversion tracking for marketing effectiveness measurement

Marketing and Advertising Cookies:

• Retargeting cookies for personalised advertising campaigns
• Social media integration cookies for content sharing
• Affiliate tracking cookies for partnership attribution
• Email marketing cookies for campaign effectiveness

Cookie Consent and Management

Consent Banner: We display a clear cookie consent banner on first visit, allowing you to accept or customise your cookie preferences.

Cookie Preference Centre: Access our comprehensive cookie preference centre to:

• View detailed information about each cookie category
• Enable or turn off specific types of cookies
• Update your preferences at any time
• Learn about third-party cookie providers

Browser Controls: You can manage cookies through your browser settings:

• Block all cookies or specific types of cookies
• Delete existing cookies from your device
• Receive notifications when cookies are set
• Set preferences for different websites

Third-Party Analytics and Advertising

Google Analytics: We use Google Analytics to understand how visitors interact with our Website. Google Analytics collects information anonymously and reports website trends without identifying individual visitors.

Facebook Pixel: Our Website includes the Facebook Pixel to measure the effectiveness of our advertising and create targeted advertising campaigns for users who have shown interest in liver health supplements.

Opt-Out Options:

• Google Analytics Opt-Out: https://tools.google.com/dlpage/gaoptout
• Facebook Opt-Out: https://www.facebook.com/settings/?tab=ads
• Network Advertising Initiative: http://www.networkadvertising.org/choices/

International Data Transfers

Cross-Border Data Processing

As a US-based company serving customers globally, HepatoBurn Health may transfer and process your personal information in countries other than your country of residence. We ensure that all international data transfers comply with applicable data protection laws and regulations.

Primary Processing Locations:

• United States (primary data processing and storage)
• European Union (for EU customer data processing)
• Other countries where our service providers operate

Transfer Safeguards

Standard Contractual Clauses (SCCs): We utilise European Commission-approved Standard Contractual Clauses for the transfer of EU personal data to countries that do not have adequacy decisions.

Adequacy Decisions: We rely on adequacy decisions issued by relevant data protection authorities when transferring data to countries with recognised adequate protection levels.

Additional Safeguards:

• Binding corporate rules for intra-group transfers
• Certification schemes and codes of conduct
• Specific authorisation from data protection authorities when required

Data Retention Policies

Retention Periods by Data Category

We retain your personal information for different periods based on the type of data and legal requirements:

Account Information:

• Active accounts: Retained while the account remains active
• Closed accounts: 3 years after account closure for legal compliance
• Authentication data: Retained for security and fraud prevention

Transaction and Order Data:

• Purchase records: 7 years for tax and legal compliance requirements
• Payment information: Deleted immediately after transaction completion (tokens retained)
• Shipping information: 2 years for customer service and warranty purposes

Marketing and Communication Data:

• Email marketing lists: Until the unsubscribe or account deletion
• Customer service records: 3 years from last interaction
• Survey responses: 5 years for research and improvement purposes

Technical and Analytics Data:

• Website analytics: 26 months (Google Analytics default setting)
• Security logs: 1 year for security monitoring and compliance
• Performance data: 2 years for system optimisation

Automated Deletion Processes

Scheduled Purging: We maintain automated systems that regularly delete data that has exceeded its retention period, ensuring compliance with our data minimisation principles.

Secure Deletion Methods: When data is deleted, we employ secure deletion methods that render the information unrecoverable, including overwriting data storage locations and destroying physical media as necessary.

Children’s Privacy Protection

Age Restrictions and Compliance

HepatoBurn Health is committed to protecting children’s privacy and complying with the Children’s Online Privacy Protection Act (COPPA) and similar international regulations.

Age Verification:

• Our Website and products are intended for individuals 18 years of age and older
• We do not knowingly collect personal information from children under 13
• Age verification is required during account registration
• Parental consent is required for users between 13 and 18 years of age

Parental Rights and Controls: If we learn that we have collected personal information from a child under 13, we will:

• Delete the information promptly from our systems
• Notify the parents or guardians when possible
• Implement additional safeguards to prevent future collection

Reporting Concerns: If you believe we may have collected information from a child under 13, please get in touch with us immediately at privacy@hepatoburn.health. We will investigate and take appropriate action.

State-Specific Privacy Rights

Nevada Privacy Rights

Nevada residents have the right to opt out of the sale of covered personal information. Currently, HepatoBurn Health does not sell personal information as defined by Nevada law. If our practices change, we will update this policy and provide appropriate opt-out mechanisms.

Other State Privacy Laws

We monitor developments in state privacy legislation and update our practices to comply with new requirements as they become effective. This includes emerging privacy laws in states such as Virginia and Colorado, among others.

Uniform Approach to Privacy Rights

While specific state laws may vary, HepatoBurn Health strives to provide consistent privacy protections to all customers, often extending the highest standard of protection to all users regardless of their location.

Marketing Communications and Preferences

Email Marketing Program

Newsletter Subscriptions:

• Health and wellness tips for liver support
• New product announcements and educational content
• Exclusive subscriber promotions and early access offers
• Personalised product recommendations based on purchase history

Transactional Communications: You cannot opt out of essential transactional emails, including:

• Order confirmations and shipping notifications
• Account security alerts and password reset emails
• Important policy updates and safety notices
• Customer service correspondence and support tickets

Communication Preferences

Granular Control Options:

• Promotional emails and newsletters
• Product launch announcements
• Educational content and health tips
• Special offers and discount notifications
• Survey invitations and feedback requests

Opt-Out Methods:

• Click the unsubscribe link in any marketing email
• Log in to your account and update communication preferences
• Email unsubscribe@hepatoburn.health with your request
• Contact customer service for assistance with preference changes

SMS and Mobile Communications

Text Message Marketing: With your explicit consent, we may send promotional text messages about:

• Flash sales and limited-time offers
• Important product updates and recalls
• Shipping notifications and delivery alerts
• Exclusive mobile subscriber benefits

Opt-Out for SMS: Reply “STOP” to any promotional text message to unsubscribe immediately from SMS marketing communications.

Privacy Policy Updates

Update Notification Process

Material Changes: For significant changes to our privacy practices, we will:

• Send email notifications to registered users
• Display prominent notices on our Website homepage
• Provide a 30-day advance notice period when possible
• Offer easy access to previous policy versions for comparison

Minor Updates: For minor clarifications or technical updates, we will:

• Update the “Last Modified” date at the top of this policy
• Maintain a changelog of modifications for transparency
• Ensure continued compliance with applicable privacy laws

Continued Use and Acceptance

Your continued use of our Website and services after privacy policy updates constitutes acceptance of the revised terms. If you disagree with any changes, please discontinue use and contact us to discuss your concerns.

Version Control and Archives

We maintain archived versions of our privacy policy to provide transparency about how our practices have evolved over time. Previous versions are available upon request for reference and comparison purposes.

Contact Information

Privacy-Related Inquiries

General Privacy Questions: Email: privacy@hepatoburn.health
Phone: 1-800-HEPATO-1 (1-800-437-2861)
Response Time: Within 2 business days

Data Protection Officer (GDPR): Email: dpo@hepatoburn.health
For EU residents and GDPR-related matters

Privacy Request Processing: Online Portal: https://hepatoburn.health/privacy-requests
Processing Time: 30 days maximum (may be extended for complex requests)

Business Address

HepatoBurn Health Corporate Office:
Privacy Officer
123 Wellness Boulevard, Suite 456
Health City, HC 12345
United States

Customer Service Hours

Privacy Support Availability:

• Monday – Friday: 9:00 AM – 8:00 PM EST
• Saturday: 10:00 AM – 6:00 PM EST
• Sunday: 12:00 PM – 5:00 PM EST
• Emergency privacy concerns: 24/7 email support

Regulatory Contact Information

California Privacy Rights: For CCPA-related requests: ccpa@hepatoburn.health

International Privacy Concerns: For customers outside the US: international-privacy@hepatoburn.health

Document Information:
Version: 2.0
Effective Date: January 15, 2025
Next Review Date: July 15, 2025
Approved By: Chief Privacy Officer, HepatoBurn Health

This Privacy Policy demonstrates our unwavering commitment to protecting your personal information while providing transparent insight into our data handling practices. We encourage you to review this policy periodically and contact us with any questions or concerns about your privacy rights.

By choosing HepatoBurn Health for your liver wellness journey, you can trust that your personal information will be handled with utmost care, security, and respect for your privacy preferences.