Your data, handled plainly.

We collect information you give us directly: name, email, shipping address, phone (optional), order contents, payment method metadata (handled by our payment processor — we do not store full card numbers), quiz responses if you use our wellness consult, and messages you send through contact forms or support.

We also receive technical data automatically: device type, browser, approximate region, pages viewed, and referral URLs — to run the site, prevent fraud, and improve performance.

We use personal data to fulfill orders, send transactional emails (confirmations, shipping updates), provide customer support, improve our products and site, comply with law, and — only if you opt in — send marketing you can unsubscribe from anytime.

We use cookies and local storage for essential functions (session, cart, region preference), analytics in aggregate, and optional marketing pixels if enabled. You can control cookies through your browser settings; disabling essential cookies may limit checkout or login.

We share data with vendors who help us operate, including:

• Convex — application database and real-time backend.
• Resend (or similar) — transactional and marketing email delivery.
• Stripe— payment processing; subject to Stripe's privacy policy for card data.
• Hosting / CDN — serving the website securely.

We require processors to use data only as instructed and to protect it appropriately.

We keep order and account records as long as needed for legal, accounting, and dispute resolution — typically several years after your last transaction. Marketing lists are kept until you unsubscribe.

Depending on where you live, you may have rights to access, correct, delete, or export your personal data, and to object to certain processing. For PIPEDA (Canada) and GDPR (EU) requests, contact us at privacy@getbhlabs.com. We will respond within the timeframes required by applicable law.

Our products are intended for adults. We do not knowingly collect personal information from children under 13 (or the age required in your jurisdiction). If you believe we have, contact us and we will delete it.

Questions about this policy: privacy@getbhlabs.com or our contact page.