Consumer Health Data Privacy Policy

Effective 8 October 2026.

This Consumer Health Data Privacy Policy supplements our Privacy Policy and applies to "consumer health data" as defined by the Washington My Health My Data Act and similar laws in Nevada and Connecticut. It describes how BioStack Labs LLC ("BioStack", "we") collects, uses and shares that data and the rights you have over it.

What counts as consumer health data

Because we sell dietary supplements, some information you give us or that we observe can reveal or be used to infer something about your health. We treat the following as consumer health data:

  • Your purchases of, and interest in, our products (for example viewing or buying NAD Regen), which could be read as an interest in healthy ageing, cellular energy or other health goals.
  • Health-related information you volunteer in reviews, survey answers, quiz answers, customer-service messages or emails, such as how a product made you feel.
  • Inferences we or our service providers draw from the above, such as which products to recommend to you.
  • Browsing data linked to health-related pages on this site when it is tied to you or your device.

We do not collect precise geolocation, biometric data, or data about medical conditions, diagnoses or treatments, and we do not use geofencing around any health facility.

Where it comes from

  • Directly from you when you browse, buy, subscribe, write a review, contact us, or sign up for email or SMS.
  • Automatically from your device through cookies, pixels and similar technologies described in our Privacy Policy, subject to your consent choices.
  • From service providers that process orders, payments, subscriptions and reviews on our behalf.

Why we use it

  • To provide what you asked for: process and deliver orders, manage subscriptions, handle refunds and guarantee claims, answer your questions and publish reviews you submit.
  • To communicate with you by email or SMS where you have signed up.
  • With your consent, to measure and improve our advertising and to show you relevant ads on other platforms.
  • To detect fraud, secure our systems and meet legal obligations.

Who we share it with

We share consumer health data only with the following categories of recipients, and only for the purposes above:

  • Service providers that run our store: Shopify (store, checkout and payments), Recharge (subscriptions), Klaviyo (email and SMS), Judge.me (reviews), GoAffPro (affiliate programme tracking) and analytics or attribution tools we use to measure our marketing.
  • Advertising platforms, such as Meta and Google, where you have consented to advertising cookies and pixels. They receive signals such as page views and purchases to measure and target advertising.
  • Shipping carriers and payment processors as needed to complete your order.
  • Authorities or advisers when the law requires it or to protect our rights.

We do not sell consumer health data in exchange for money. Where sharing with advertising platforms could be considered a "sale" or "sharing" under state law, we obtain your consent first and you can withdraw it at any time through Your privacy choices. We honour the Global Privacy Control browser signal as an opt-out.

Your rights

If you live in Washington, Nevada, Connecticut or another state with a consumer health data law, you can:

  • Confirm whether we are collecting, sharing or selling your consumer health data, and access it.
  • Receive a list of the third parties and affiliates with whom we have shared or sold it, with contact details.
  • Withdraw consent to our collection or sharing of it.
  • Have it deleted, including from our service providers and from anyone we shared it with.

To exercise a right, email support@biostacklabs.com with the subject "Consumer health data request", or call 775 451 2299. We will verify your identity using the email address or order details on file and respond within 45 days. If we decline a request, you may appeal by replying to our decision with "Appeal" in the subject line; we will answer the appeal within 45 days and tell you how to contact your state Attorney General if you are not satisfied. We will not discriminate against you for exercising these rights.

Changes and contact

We will update this policy when our practices change and show the new effective date above. Questions go to support@biostacklabs.com or BioStack Labs LLC, 732 S 6th Street, Suite R, Las Vegas, Nevada 89101, USA.