Effective Date

5th February 2026

LVLUP Health respects your privacy and complies with applicable international privacy and data protection laws, including, where relevant, the Hong Kong Personal Data (Privacy) Ordinance (PDPO), the EU and UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act and California Privacy Rights Act (CCPA/CPRA), and, where applicable, the Australian Privacy Principles (APPs).

We also seek to align with comparable privacy standards in other jurisdictions, including Singapore’s Personal Data Protection Act (PDPA), Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), and Japan’s Act on the Protection of Personal Information (APPI), to ensure personal data is handled lawfully, securely, and transparently regardless of location.

Information We Collect

We may collect and process the following categories of personal information:

  • Name, email address, telephone number, and billing and shipping addresses
  • Payment information (processed securely by third-party payment providers)
  • Order history and customer support communications
  • Device, browser, and usage data, including IP address and cookies
  • Marketing preferences and email engagement data

How We Use Personal Information

Personal information is used for the following purposes:

  • Processing orders and delivering products and services
  • Communicating with you regarding orders, accounts, or customer support
  • Sending marketing communications where consent has been provided
  • Improving website functionality, performance, and user experience
  • Complying with legal, regulatory, accounting, and tax obligations

Cookies & Tracking Technologies

We use cookies and similar technologies for the following purposes:

  • Essential cookies for website functionality, checkout, and security
  • Performance and analytics cookies, including Google Analytics
  • Functional cookies to remember user preferences
  • Advertising cookies for Google and Meta advertising services

By continuing to use our website, you consent to the use of cookies. Where required by law, users in the EU and UK may manage cookie preferences through the cookie consent banner

Service Providers & Data Storage

Personal information may be processed by trusted third-party service providers acting on our instructions, including:

  • WooCommerce / WordPress (Automattic Inc.) – website and checkout services
  • ShipBob Inc. – order fulfilment and logistics
  • Klaviyo Inc. – email marketing and communications
  • Google LLC – analytics and advertising services
  • Meta Platforms Inc. – advertising and tracking pixels
  • Amazon Web Services (AWS) – cloud infrastructure and data storage

International Data Transfers

Personal data may be stored or processed in Hong Kong, the United States, and other jurisdictions. Where cross-border transfers occur, appropriate safeguards such as Standard Contractual Clauses or equivalent legal mechanisms are implemented.

Security & Data Retention

We implement reasonable technical and organizational measures to protect personal information, including encryption, access controls, and secure server infrastructure.

Order and transaction records are retained for a period of six to seven years to comply with legal and regulatory requirements.

Your Rights

Depending on your jurisdiction, you may have the right to:

  • Request access to, correction of, or deletion of your personal information
  • Withdraw consent or opt out of marketing communications
  • Request data portability
  • For United States residents, exercise rights under the CCPA/CPRA, including the right to opt out of the sale or sharing of personal information

How to Contact Us

Requests may be submitted by contacting us at: [email protected]. We aim to respond to all verified requests within 30 days, subject to applicable law.

Policy Updates

This Privacy Policy may be updated from time to time. The most current version will always be published on this page and will take effect upon posting.