Privacy Policy

This policy covers ordinary use of towerofwellness.com. Your health data — answers you save from our Functional Assessment — is governed by its own Consumer Health Data Privacy Policy, which is stricter and controls wherever the two overlap.

What we collect

• Account details — name, email address, password (stored by Shopify as a hash we never see), and any shipping addresses you add. Held by Shopify Inc., which operates our accounts, checkout and order system.
• Orders — what you bought, when, for how much, and its fulfilment status. Payment card details go directly to the payment processor at checkout; we never see or store card numbers.
• Contact messages — whatever you write to us through the contact form, delivered to our business email and kept in that mailbox.
• Cart — a cart identifier kept in your own browser's storage so your cart survives a page reload.

What we don't do

• No analytics or tracking scripts run on this site.
• No advertising networks receive anything from us.
• We sell no personal information, of any kind, to anyone.
• We send marketing email only if you ask for it, and every one lets you stop.

Cookies

One essential cookie (tow_customer) keeps you signed in to your account; it is httpOnly and never readable by scripts. Shopify's checkout sets its own essential cookies on our checkout domain. There are no advertising or analytics cookies.

Who processes data for us

• Shopify Inc. — accounts, orders, checkout, payments.
• Cloudflare, Inc. — hosting and infrastructure.
• Resend — the email service that delivers contact-form notifications to our mailbox.
• Google LLC (Gmail) — receives those notifications, as our business mailbox.

Your choices

You can see your account details and your order history in your account. There is no editing form there, so email team@towerofwellness.com to access, correct or delete what we hold about you, or to close your account. We will verify it is you and respond within 45 days. Rights over saved assessment data — including one-click export and deletion — are described in the Consumer Health Data Privacy Policy.

California: our notice at collection

Our business address is in California and we sell to California residents, so this section sets out — in the order the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the "CCPA"), asks for it — every category of personal information this website collects, why we collect it, how long we keep it, and what you can ask us to do about it. We honor the rights below for any California resident who asks. Nothing here is a practice the rest of this policy does not already describe; it is the same practice, sorted the way the CCPA sorts it.

What this section covers. Personal information collected through this website. It does not describe what happens to a physical sample you mail to a laboratory in a test kit, or to the result of that test — nothing about a sample or a laboratory result is collected by, sent to, or stored on this site.

Categories we collect, and why

Every category below comes from one source — you, directly: what you type into a form, and what your browser has to send in order to reach us. We buy no personal information, and we obtain none from data brokers, advertising networks or other websites.

• Identifiers — your name and email address, the account identifier Shopify assigns you, the cart identifier your own browser stores, and the network (IP) address your request arrives from. Collected to create and sign you into an account, to take and fulfill an order, to reply to a message, to keep your cart across a page reload, and to throttle sign-in and registration attempts so that nobody can work through a list of email addresses.
• Customer records — name, email address, any shipping address you add, and a phone number if you choose to type one into the contact form. Collected to fulfill and support orders and to answer what you write to us. Held by Shopify, which operates our accounts and checkout.
• Commercial information — what you bought, when, for how much, its fulfillment status, whether a membership is currently active, and how many one-time Functional Assessments you have bought and used. Collected to fulfill orders, to decide what your account may open, and to honor an assessment you have already paid for.
• Internet or other network activity — the request itself: the IP address it arrives from and, for a contact message or a newsletter signup, the two-letter country code our host puts on that request. Collected to serve the page, to rate-limit, and to stop form spam. We run no analytics and no tracking scripts, so we hold no browsing history, no search history, and no record of how you moved around this site.
• Geolocation — country level only, and only the code described above. We collect no precise location: this site asks for no location permission, and our own response headers deny the browser's location interface outright, so nothing on the page can ask for it either.
• Sensitive personal information — two things, both covered in their own section below: the answers you save from the Functional Assessment, and the password you type into the sign-in, registration and record-deletion forms.
• Inferences — one, and only for a saved assessment: the short list of nutritional products the assessment's key associates with the answers you gave, worked out and stored with that run so we can show you the result you asked for. We build no profile of you beyond that, and we infer nothing about your health from what you buy.

Categories we do not collect at all through this site: education information, professional or employment information, and audio, electronic, visual or similar information. Nothing here uses a camera or a microphone, and our response headers deny both outright so that nothing injected into a page could either.

Health data is Sensitive Personal Information

Under the CCPA, information about your health is Sensitive Personal Information, and we treat the answers you save from the Functional Assessment — and the product list derived from them — as exactly that. They are also consumer health data under Washington and Nevada law, which is why they have a separate and stricter policy of their own: Consumer Health Data Privacy Policy. Read that one for the full detail. In summary:

• Nothing is stored unless you press save, and your first save requires a consent checkbox that is never pre-ticked.
• It is used for one purpose — showing your own results back to you in your own account. Never for advertising, never for profiling, never for any secondary purpose, and it is not enriched with data from anywhere else.
• You can download all of it, or permanently delete all of it, yourself at any time, from Your Wellness Record.
• Because the assessment has categories specific to female health and to male health, a saved record can imply a characteristic the law protects — your sex — even though we never ask for it as a question. That is one more reason the whole record is handled as sensitive.
• The CCPA gives you a right to limit a business's use of Sensitive Personal Information to what is needed to provide the service you asked for. That is already the only use we make of it, so there is no further use for you to limit — which is why you will not find a "Limit the Use of My Sensitive Personal Information" link on this site. If that is not enough for you, delete it outright; the button does what it says.

Your password is sensitive too. It passes through this site to Shopify, which keeps it only as a hash. We never store it, never log it, and cannot read it. It is sent only to check that it is you — when you sign in, when you register, and when you confirm the permanent deletion of your wellness record.

We do not sell or share your personal information

We have never sold personal information and we do not share it, in the particular senses the CCPA gives those two words: we receive no money and no other valuable consideration for it, and we disclose it to nobody for cross-context behavioral advertising. The same is true of Sensitive Personal Information, and it is true for everyone — we have never sold or shared the personal information of a consumer under 16, because we have never sold or shared anyone's.

There is therefore no "Do Not Sell or Share My Personal Information" link on this site, because there would be nothing behind it to switch off. If that ever changes, the link goes up and this section changes with it.

What we do disclose, and to whom. Only to the vendors listed under "Who processes data for us" above, only for the business purposes named in this policy, and only what each one needs to do its job:

• Shopify — identifiers, customer records and commercial information, plus your password at the moment it is being checked. Your saved assessment answers are not sent to Shopify.
• Cloudflare — hosts this site, and operates both the encrypted database holding saved assessments and the storage holding contact messages and newsletter addresses.
• Resend — delivers the contact-form notification to our mailbox. That email carries your name, your email address, any phone number you gave, the topic, the time it arrived and the country code — not your IP address.
• Google (Gmail) — the business mailbox that email arrives in.

That is the complete list. No advertising network, analytics provider, data broker or social platform receives anything from us, and none is in a position to take it either: the content-security policy this site serves names every host a script or an asset on our pages is allowed to reach, and it names only this site and Shopify. We also deny the browser's advertising-topics interface outright in our response headers.

How long we keep it

• Your account — for as long as the account exists. There is no self-service account deletion on this site; email us and we will close it.
• Orders, and the record that a paid assessment was used — kept as the record of a payment, and deliberately not removed when you delete your health data or close your account. That record is an account reference, a date and the identifier of the assessment the payment covered — no answers and no results.
• Saved assessments and your consent record — until you delete them, which you can do yourself at any moment. Deletion here is immediate and permanent, with one limit we cannot remove: our database host keeps point-in-time backups of the whole system for up to 30 days. We cannot exclude individual records from those, and we do not use them to restore anything you have deleted.
• Contact-form messages — kept in our hosting storage and delivered to our business mailbox. We have set no automatic expiry on either, so a message stays until we delete it. Ask us and we will.
• A newsletter address — until you ask to come off the list. Stored with the date you signed up and the country code on that request.
• Anti-abuse counters — the counters that stop password guessing hold a network address, or a one-way hash of an email address and never the address itself, and are deleted once they are more than two hours old. The contact form's own one-message-per-minute counter expires after sixty seconds.
• What sits in your own browser — the session cookie lasts as long as the sign-in token Shopify issued for it. The cart identifier stays until it is replaced by a newer one, or until the basket behind it expires at Shopify and we discard the id. Neither is held on our servers, and clearing your browser's storage removes both.

Your California rights, and how to use them

Subject to the CCPA's own exceptions, you may ask us to:

• Tell you what we hold — the categories above, the sources, the purposes, who we disclosed it to, and the specific pieces of personal information themselves. Your account details and your order history are already in your account, and your whole wellness record downloads in one click — as a readable document or as a machine-readable JSON file — from Your Wellness Record.
• Delete it — your assessment history you can delete yourself, permanently, from that same page. For anything else, email us. We keep only what we are permitted to keep, which in practice means the payment records described above.
• Correct it — if something we hold about you is wrong, email us and we will fix it. There is no editing form on this site yet, so this one goes through the mailbox rather than a button.
• Give you a portable copy — the JSON export above is already exactly that for assessment data. For anything else, ask and we will send it in a portable, machine-readable form.
• Limit what we do with sensitive information — see the section above: we already do only the one thing with it.
• Opt out of sale or sharing — there is nothing to opt out of. See the section above.

How. One route for all of it: team@towerofwellness.com. Tell us what you want, and we will verify that the request comes from the account holder — usually by replying to the address on the account — before we act on it. We ask for no more information than we need to verify you, and we use what you send for that and nothing else. We respond within 45 days; if we cannot, we will tell you why and how much longer we need. If we decline a request we will say so in writing and explain why, and the appeal route set out in the Consumer Health Data Privacy Policy is open for any request, not only a health-data one.

Someone acting for you. An authorized agent may make a request on your behalf at the same address. Send us your written permission for them to do so, and expect us to verify your identity with you directly before we act on it.

Do Not Track, and Global Privacy Control

Some browsers can send a "Do Not Track" header, or a Global Privacy Control signal, asking a site not to track you or not to sell your data. This site reads neither signal, and neither would change anything here. Both exist to switch off tracking and the sale or sharing of personal information, and neither happens on this site at all — there is no analytics, no advertising network, no cross-site tracking, and no sale or sharing to turn off. Rather than record a preference that would change nothing, we have made the behavior the same for everyone. If we ever add anything a Global Privacy Control signal ought to switch off, we will honor the signal and say so here.

No discrimination for using your rights

We will not treat you differently for exercising any right in this policy. Asking what we hold, correcting it, deleting it or taking a copy of it will not cost you anything, will not change the price you pay or the products you can buy, will not reduce the quality of anything you receive from us, and will not affect a membership or an assessment you have already paid for. We run no financial incentive and no loyalty program that would ask you to trade your privacy for a discount. Deleting your assessment history does not close your account and does not touch your membership; the only thing it removes is the health data you asked us to remove.

Children

This site sells dietary supplements and is intended for adults. We do not knowingly collect personal information from children under 13.

Changes

Changes get a new version number and effective date on this page.

Contact

Tower of Wellness · team@towerofwellness.com