Privacy Policy

Effective Date: 27th of October 2025

LVLUP Health respects your privacy and complies with major international privacy frameworks, including the Hong Kong Personal Data (Privacy) Ordinance (PDPO), the EU and UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and where applicable, the Australian Privacy Principles (APPs).

We also strive to align with equivalent privacy standards in other key markets, including Singapore’s PDPA, Canada’s PIPEDA, and Japan’s APPI, ensuring your personal data is handled securely and transparently regardless of where you live.

1. Information Collected

  • Name, email, phone, billing and shipping address
  • Payment details (handled securely by third-party gateways)
  • Order and support history
  • Device and browser data (IP, cookies, usage)
  • Marketing preferences and email engagement

2. How We Use It

  • Process orders and deliver products
  • Communicate with you about orders or support
  • Send marketing emails if you opt in
  • Improve website performance and user experience
  • Meet legal and accounting requirements

3. Service Providers & Storage

Your information may be processed by trusted partners:

  • WooCommerce / WordPress Automattic Inc. (website hosting & checkout)
  • ShipBob Inc. (fulfilment & logistics)
  • Klaviyo Inc. (email marketing)
  • Google LLC (Analytics & Ads)
  • Meta Platforms Inc. (Ads & Pixels)
  • Amazon Web Services (AWS) (cloud infrastructure)

Data may be stored in Hong Kong, the United States, and other regions under Standard Contractual Clauses (SCCs) or equivalent safeguards.

4. Cookies & Tracking

We use:

  • Essential cookies – for checkout and security
  • Performance/Analytics cookies – Google Analytics
  • Functional cookies – remember preferences
  • Advertising cookies – Google & Meta ads

By using our site, you consent to cookies. EU/UK users can adjust preferences via our cookie banner.

5. Your Rights

You may:

  • Request access, correction, or deletion of data
  • Opt out of marketing
  • Request data portability
  • For US users, exercise your CCPA opt-out rights (“Do Not Sell or Share My Personal Information”)

Contact us at [email protected] to exercise these rights. Responses within 30 days.

6. Security & Retention

We apply encryption, limited access, and secure servers.

Order records are retained for 6–7 years for legal obligations.

7. Updates

This policy may change; the latest version will always appear on this page.