Privacy Policy

Effective date / last updated: July 10, 2026

The following Privacy Policy governs the online information collection practices of BioRed Light, operated by [legal entity name] ("Company," "we," or "us"). It details the information we collect from users of bioredlights.com (the "Site") — both visitors who browse the Site and customers who purchase our products — and how we use that information. Our store is hosted by Shopify, which powers the Site and processes orders on our behalf. This policy is written to comply with applicable United States privacy laws, including the California Consumer Privacy Act as amended by the CPRA and the comprehensive privacy laws of other U.S. states.

Please review this Privacy Policy carefully. By accessing and using the Site, you acknowledge that your use of the Site is subject to this Privacy Policy. We may update this policy periodically to keep up with technological changes and evolving regulations; changes will be posted on this page with an updated effective date, and continued use of the Site after changes are posted constitutes acceptance of the revised policy.

Information we collect

We collect and store information you voluntarily provide while using the Site, and information generated automatically as you browse. This may include:

Name
Email address
Billing address and shipping address
Telephone number
Secured payment information (processed by our payment providers — we never see or store your full card number)
Order information, including the items you have ordered and your purchase history
Traffic source — how you arrived at the Site
Communications you send us, and any notes or testimonials you provide
Internet and device activity: IP address, browser and operating system, date and time of visits, pages viewed, and browsing activity, collected automatically through cookies, web beacons, and similar technologies

How we use your information

To operate, improve, and promote our products and the Site
To process payments, fulfill and ship orders, and handle returns and warranty claims
To provide customer service and respond to your inquiries — when you email us, the return address is used to answer your inquiry and is not shared with third parties for their own use
To send marketing emails where you have opted in (you can unsubscribe at any time)
To monitor and analyze trends, such as purchase history, sales reports, behavior on the Site, and email opens and clicks
To market our products, including advertising and retargeting through platforms such as Google and Meta (Facebook/Instagram)
To perform accounting, administrative, and legal functions, detect and prevent fraud, and secure the Site

Who has access to your data within our organization

Access to your data within our organization is limited to the people who need it to provide the products and services you purchase, contact you, and respond to your inquiries (including refund requests). Access is granted on a need-to-know basis.

Who we share your data with outside our organization, and why

We do not sell your personal information for money, and we will not share or transfer your data to unaffiliated third parties for their own independent use without your consent. We do engage service providers to help operate the Site and our business — including Shopify (platform hosting and order processing), payment processors, shipping and fulfillment carriers, email and marketing platforms, ad management, and analytics providers. We take steps to ensure these providers access, process, and store your information only for authorized purposes and under confidentiality obligations, including data-processing agreements where applicable.

Please note that sharing information with advertising partners for targeted advertising may be considered a "sale" or "sharing" of personal information, or "targeted advertising," under certain U.S. state privacy laws. You can opt out at any time on our Your Privacy Choices page.

Authorities: we may access, preserve, and disclose information about you if we believe it is necessary to comply with applicable laws, regulations, legal process, or audits; to enforce our Terms of Service; to protect the rights, property, or safety of the Company or others; or to prevent fraud or abuse.

Business transfers: as our business evolves, we may buy or sell assets. If some or all of our assets are acquired by another company, user information may be included in the transferred assets.

Third-party sites: the Site may link to websites we do not control. Their privacy practices are governed by their own policies, which we encourage you to review.

Why we retain the information we collect

So you can use the Site and we can fulfill your orders
To ensure we do not communicate with you if you have asked us not to
To provide you with a refund or honor a warranty claim, if entitled
To understand Site traffic so we can provide the best possible experience
To detect and prevent abuse of the Site, illegal activities, and breaches of our Terms of Service
To comply with applicable legal, tax, and accounting requirements

Cookies and tracking tools

We use cookies (standard browser features) to keep your cart working, retain your preferences, provide content aligned with your interests, analyze audience behavior and traffic patterns, and manage and display Site information tailored to you. You can control cookies through your browser settings; disabling some cookies may affect how the Site works.

We also use web beacons (small "tracker gifs") on Site pages, in online advertisements, and in our emails. These work with cookies to collect non-personal usage information — such as the date and time of your visit, pages viewed, referring web page, browser type, operating system, and Internet service provider domain. This data is aggregated and analyzed collectively to improve the Site and evaluate the effectiveness of our advertising.

Advertiser disclosures

Google Analytics

We use Google Analytics, including its advertiser features, to optimize our business. These features may include remarketing, display network impression reporting, and demographics and interest reporting. We and third-party vendors use first-party cookies (like the Google Analytics cookie) and third-party cookies or identifiers together to collect data about your activity on the Site — for example, to reach people who have previously visited the Site with relevant advertising. You can opt out of Google's use of cookies via Google's Ads Settings, and opt out of third-party vendors' cookies via the Network Advertising Initiative opt-out page.

Meta (Facebook and Instagram)

As advertisers on Meta platforms, we (not Meta) may collect content or information from users interacting with our ads or pages, used in accordance with this Privacy Policy. We abide by Meta's data use restrictions: advertising data collected, received, or derived from our Meta ads is shared only with those acting on our behalf (such as service providers), is kept confidential and secure, is used only to assess the performance and effectiveness of our advertising campaigns on an aggregate and anonymous basis, is not used to build or augment user profiles, and is never transferred to any ad network, ad exchange, data broker, or other advertising or monetization service.

Your privacy rights (U.S. state laws)

Depending on where you live — including if you are a resident of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Nevada, or another state with an applicable privacy law — you may have some or all of the following rights:

Right to know / access: request a copy of the personal information we hold about you, including the categories collected and the categories of third parties with whom it has been shared.
Right to delete: request that we delete personal information we maintain about you.
Right to correct: request that we correct inaccurate personal information.
Right to portability: receive your personal information in a portable format.
Right to opt out: opt out of the "sale" or "sharing" of personal information and of targeted advertising, via our Your Privacy Choices page. Nevada residents may additionally direct us not to sell their personal information by emailing us.
Right to non-discrimination: we will not discriminate against you for exercising any of these rights.
Right to appeal: if we decline a request, you may appeal our decision, and depending on your state you may lodge a complaint with your state Attorney General.

To exercise any of these rights, email support@bioredlights.com with the subject line "Privacy Request." We may need to verify your identity before fulfilling a request, as permitted or required by law. You may use an authorized agent, subject to proof of authorization. Every effort will be made to respond to a verified request within a reasonable time, or the timeframe required by law.

Global Privacy Control

If you visit the Site with the Global Privacy Control (GPC) opt-out preference signal enabled, we treat it as a request to opt out of the sale or sharing of personal information for that browser and device, as required by applicable state law. Other than GPC, we do not currently respond to "Do Not Track" browser signals.

Residents of the European Economic Area (GDPR)

We market our products in the United States and do not specifically target the EU. However, if data you provide to us is governed by the General Data Protection Regulation, we will abide by its relevant provisions. If you are an EEA or UK resident, you may have the right to request access to, correction of, deletion of, portability of, and restriction of or objection to the processing of your personal data, including the "right to be forgotten." Contact support@bioredlights.com to make a request.

Data security

We implement administrative, managerial, and technical security measures to help protect your personal information, and our platform providers (including Shopify and our payment processors) maintain their own industry-standard safeguards. However, no method of transmission or storage is completely secure, and we cannot guarantee that security measures will prevent every unauthorized access. If we discover a security breach affecting your data, every effort will be made to provide notification within 72 hours of our team learning of the occurrence, consistent with applicable law. Please also take your own precautions to protect your personal information online.

Email marketing and unsubscribing (CAN-SPAM)

We adhere to our obligations under anti-spam laws. Every marketing email we send includes an unsubscribe link — click it at any time and you will be promptly removed from our mailing list. All of our emails clearly identify us as the sender in the "From" field.

Children's privacy

The Site is not intended for children. We do not knowingly collect personally identifiable information from children under thirteen; if we discover we have unintentionally collected such information, we will promptly delete it. We do not allow children under thirteen to publicly post or distribute personal information through the Site, nor do we condition participation on providing it. Additionally, we do not knowingly sell or share the personal information of consumers under sixteen years of age.

Revisions to this policy

We reserve the right to revise, amend, or modify this policy and our other policies and agreements at any time by updating this posting; the effective date above reflects the most recent revision.

Where to direct questions

If you have any questions about this Privacy Policy or the practices described here, email support@bioredlights.com or reach us through our Contact page.