Privacy policy

Privacy Policy

Last updated: August 15, 2026

This Privacy Policy describes how Evolance Wellness Inc. ("Evolance," "we," "us," or "our") collects, uses, discloses, and protects personal information when you visit evolance.com, purchase or subscribe to products, create or use an account, complete a wellness quiz, submit a review, communicate with us, use our customer-support or AI-assisted features, or otherwise interact with us (collectively, the "Services").

For purposes of this Privacy Policy, "you" and "your" mean the individual who uses the Services. Where required by law, Evolance Wellness Inc. is the controller of the personal information described in this Privacy Policy.

Our store is hosted by Shopify. Shopify also processes certain personal information when you interact with our store and may act as an independent controller for some of its services. Please review the Shopify Consumer Privacy Policy and Shopify Privacy Controls.

This Privacy Policy is a notice of our practices. Where applicable law requires consent, we will request it separately. Please read this Privacy Policy carefully. If you do not agree with it, please do not use the Services.

1. Information We Collect

1.1 Information You Provide Directly

Depending on how you interact with the Services, you may provide:

  • Contact information: name, email address, telephone number, billing address, and shipping address.
  • Order and payment information: products purchased, order history, billing and shipping details, discounts, returns, refunds, and payment confirmation. Payment card information is generally collected and processed by Shopify and our payment processors rather than stored by Evolance in complete form.
  • Account and authentication information: account identifiers, login or authentication information, saved preferences, and information received when you choose a third-party sign-in method.
  • Shopping and subscription information: products viewed, cart activity, purchases, subscription selections and status, delivery frequency, account preferences, referrals, rewards, gift cards, and reviews, when those features are available.
  • Communications and support information: information included in emails, contact forms, chats, customer-support requests, survey responses, reviews, and other messages to us.
  • Marketing information: email and SMS opt-in status, communication preferences, promotion participation, and interactions with our messages.
  • Wellness quiz and personalization information: answers about sleep quality, stress, mood, symptoms, wellness goals, lifestyle, prior use of supplements or medications, age range, gender, pregnancy or breastfeeding, menstrual or menopause-related information, and other information you choose to provide. We also collect the recommendations, profile, and safety flags generated from your answers. Some of this information may be considered sensitive personal information, health information, or consumer health data under applicable law.
  • AI-assisted and chat information: messages, prompts, feedback, and related interaction data when you use an AI-assisted feature or chat tool. Do not submit medical records or other sensitive information through chat. AI-assisted features are not medical services and should not be used for medical advice.

1.2 Information Collected Automatically

When you use the Services, we and our providers may automatically collect:

  • Device and network information: IP address, browser type and version, operating system, device type, device and cookie identifiers, language, time zone, and network connection information.
  • Usage information: pages viewed, links clicked, products searched or viewed, cart activity, referring and exit pages, dates and times of visits, session duration, form and page interactions, and interactions with emails or advertisements.
  • Approximate location: general location inferred from an IP address or similar technical information.
  • Cookie and tracking information: information collected through cookies, pixels, tags, web beacons, local storage, software development kits, analytics, session-replay technology, and similar tools. See Section 7.

1.3 Information We Obtain from Third Parties

We may receive information from:

  • Shopify and other providers that support our store, customer accounts, checkout, payments, fraud prevention, analytics, and related ecommerce services;
  • payment processors, shipping carriers, fulfillment providers, subscription-management providers, customer-support providers, review providers, and account-authentication providers;
  • email, SMS, analytics, testing, personalization, and advertising partners;
  • social networks or third-party sign-in providers when you choose to connect or authenticate through those services; and
  • publicly available sources, fraud-prevention providers, and other lawful sources.

1.4 Information We Create or Infer

We may create inferences from the information above, such as product interests, marketing segments, fraud or security indicators, and quiz-based sleep, stress, or wellness profiles and recommendations.

2. How We Use Your Information

We may use personal information to:

  • Provide products and Services: process payments, fulfill and ship orders, administer subscriptions, provide confirmations and updates, manage returns and refunds, maintain accounts, and provide requested features.
  • Personalize your experience: remember preferences, provide quiz results and product recommendations, display relevant content, and tailor communications where permitted.
  • Provide customer support: respond to inquiries, troubleshoot issues, maintain support records, and operate chat or AI-assisted features.
  • Communicate with you: send transactional messages about orders, subscriptions, accounts, returns, security, and policy changes.
  • Market and advertise: send promotional email or SMS messages where you have opted in or where otherwise permitted, measure campaign performance, build audiences, and deliver or measure relevant advertising.
  • Analyze and improve: understand how the Services are used, perform analytics and A/B testing, improve performance and design, develop products and features, and conduct research using aggregated or de-identified information where appropriate.
  • Protect the Services and our users: detect, investigate, and prevent fraud, abuse, security incidents, illegal activity, or violations of our terms.
  • Comply with law and enforce agreements: satisfy legal, tax, accounting, reporting, and regulatory obligations; respond to lawful requests; resolve disputes; and establish, exercise, or defend legal claims.
  • Complete business transactions: evaluate or carry out a financing, merger, acquisition, reorganization, bankruptcy, or sale of some or all of our business or assets.

We use wellness quiz information to generate requested recommendations, administer safety-related warnings, personalize your experience and communications where permitted, provide support, and improve our quiz and Services. We do not use consumer health data to make decisions that produce legal or similarly significant effects.

3. How We Share Your Information

We may disclose personal information to the following categories of recipients:

3.1 Service Providers

We disclose information to providers that perform services for us, including:

  • Shopify: store hosting, checkout, accounts, payments, analytics, fraud prevention, and related commerce services. Depending on our Shopify settings, Shopify may also use activity across Shopify services to help provide customized shopping experiences, relevant advertising, and measurement, subject to Shopify's privacy notices and your choices.
  • Payment, fulfillment, and shipping providers: payment processing, order fulfillment, delivery, returns, and fraud prevention.
  • Subscription and account providers: subscription management, account access, authentication, and customer preferences.
  • Email, SMS, reviews, and support providers: customer communications, marketing preferences, product reviews, customer support, and chat. These providers may include Klaviyo and Shopify services.
  • Analytics, testing, and personalization providers: site analytics, heatmaps, session replay, A/B testing, performance measurement, and personalization. These providers may include Microsoft Clarity, Heatmap.com, Intelligems, Shopify, and Google services.
  • Cloud, security, and technical providers: hosting, databases, software, security, monitoring, and technical infrastructure.

Service providers are permitted to process personal information only for contracted or otherwise authorized purposes, subject to applicable law and our agreements with them.

3.2 Advertising and Marketing Partners

We may disclose online identifiers, device and usage information, commercial information, and limited contact information to advertising and marketing partners to provide, personalize, or measure advertising and communications. Some disclosures may be considered a "sale," "sharing," or "targeted advertising" under applicable privacy laws even when no money is exchanged. See Sections 5, 6, 7, and 8 for your choices.

We do not knowingly sell consumer health data, and we do not disclose consumer health data for cross-context behavioral advertising.

3.3 Legal, Safety, and Business Purposes

We may disclose information when reasonably necessary to comply with law or legal process, respond to lawful government requests, enforce our agreements, investigate fraud or security incidents, protect the rights and safety of Evolance or others, or complete a financing, merger, acquisition, reorganization, bankruptcy, or sale of assets.

3.4 At Your Direction or With Your Consent

We may disclose information when you direct us to do so, request an integration or third-party service, make information public through a review or similar feature, or otherwise consent.

4. SMS/Text Message Privacy

If you opt in to receive SMS or text messages from Evolance:

  • we collect your telephone number, consent status, message interactions, and related delivery information;
  • we may use cart and browsing information to send cart reminders where you have consented;
  • we may disclose your telephone number and opt-in information to messaging platforms, telecommunications providers, and vendors that help deliver and support the messaging service; and
  • we do not disclose SMS opt-in data or consent to third parties for their own unrelated marketing purposes.

Consent to marketing texts is not a condition of purchase. Message frequency varies, and message and data rates may apply. You may opt out at any time by replying STOP to a message or by contacting support@evolance.com. We may send a confirmation of your opt-out. Transactional or service messages may still be sent where permitted.

5. Behavioral Advertising and Your Choices

We and our partners may use cookies, pixels, and similar technologies to understand your activity, measure campaigns, and show advertising that may be relevant to you. Depending on the technology and applicable law, this activity may be called targeted advertising, cross-context behavioral advertising, selling, or sharing.

You may exercise available choices by:

Opt-outs may apply only to the browser or device used and may need to be repeated if you clear cookies or use another browser or device.

6. Your Privacy Rights

Depending on where you live and subject to applicable exceptions, you may have the right to:

  • request access to or confirmation of personal information we maintain about you;
  • request correction of inaccurate personal information;
  • request deletion of personal information;
  • receive certain personal information in a portable format;
  • request restriction of or object to certain processing;
  • withdraw consent where processing is based on consent;
  • opt out of sale, sharing, targeted advertising, or certain profiling;
  • limit certain uses or disclosures of sensitive personal information;
  • appeal a decision we make regarding a privacy request; and
  • not receive discriminatory treatment for exercising a privacy right.

To exercise a right, use the privacy controls available on the Site or contact us at support@evolance.com. Please describe your request and the right you wish to exercise. We may request information reasonably necessary to verify your identity and authority. If we cannot verify a request, we may be unable to fulfill it. Authorized agents may submit requests where permitted by law, subject to verification of their authority and the consumer's identity.

6.1 California Notice

If the California Consumer Privacy Act, as amended ("CCPA"), applies to Evolance and you are a California resident, this section supplements the rest of this Privacy Policy.

During the preceding 12 months, we may have collected the following categories of personal information:

Category Examples
Identifiers Name, postal address, email address, telephone number, IP address, account ID, cookie ID, and device identifiers.
California customer-record information Contact, billing, shipping, order, and payment-confirmation information.
Protected classifications Age range, gender, pregnancy-related information, or similar information that you voluntarily provide through the quiz.
Commercial information Purchases, subscriptions, returns, product interests, cart activity, and reviews.
Internet or electronic network activity Browsing, search, click, interaction, advertising, and device activity.
Geolocation data Approximate location derived from an IP address or similar information.
Electronic and communications information Customer-support messages, chat content, reviews, survey responses, and other communications.
Inferences Product interests, marketing segments, fraud indicators, and quiz-based profiles or recommendations.
Sensitive personal information Account authentication information and voluntary quiz responses concerning health, medications, pregnancy, menstrual or menopause-related information, or similar wellness information.

We collect these categories from the sources described in Section 1, use them for the purposes described in Section 2, and disclose them to the recipients described in Section 3. We use voluntary wellness and health-related quiz responses to generate the assessment, profile, safety warnings, and recommendations you request. We do not otherwise use or disclose sensitive personal information to infer characteristics beyond providing the requested Services, obtaining your consent, or engaging in uses permitted by law.

During the preceding 12 months, we may have "sold" or "shared," as those terms are defined by the CCPA, the following categories for advertising or marketing purposes:

Category Categories of Recipients
Identifiers, such as email address, IP address, cookie ID, or device identifier Advertising, marketing, analytics, and Shopify-related partners
Commercial information, such as products viewed or purchased Advertising, marketing, analytics, and Shopify-related partners
Internet or electronic network activity, such as Usage Data Advertising, marketing, analytics, and Shopify-related partners

We do not knowingly sell or share the personal information of consumers under 16, and we do not knowingly sell consumer health data. California residents may request to know, access, delete, or correct personal information; opt out of sale or sharing; limit certain uses of sensitive personal information; and receive nondiscriminatory treatment. You may opt out through the Site's privacy controls, Global Privacy Control, or by contacting us.

6.2 Other U.S. State Privacy Rights

Residents of states with applicable comprehensive privacy laws may have rights to access, correct, delete, or obtain a copy of personal information and to opt out of targeted advertising, sale, or profiling in furtherance of decisions that produce legal or similarly significant effects. You may also have the right to appeal our decision. To appeal, reply to our decision or email support@evolance.com with "Privacy Appeal" in the subject line.

6.3 EEA, United Kingdom, and Switzerland

If the processing of your personal information is subject to data-protection law in the European Economic Area, United Kingdom, or Switzerland, our legal bases generally include:

  • Contract: to process orders, administer subscriptions and accounts, and provide requested Services.
  • Consent: for non-essential cookies, certain marketing, and sensitive or special-category information where consent is required. You may withdraw consent at any time without affecting processing that occurred before withdrawal.
  • Legitimate interests: to provide support, improve and secure the Services, prevent fraud, understand business performance, and market our products where those interests are not overridden by your rights. Where required, we obtain consent instead.
  • Legal obligations: to comply with tax, accounting, consumer-protection, regulatory, and other legal requirements.

You may have rights of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent, as well as rights concerning solely automated decisions with legal or similarly significant effects. You may lodge a complaint with your local data-protection authority.

6.4 Consumer Health Data

Depending on where you live, certain wellness quiz answers and related inferences may be regulated as consumer health data. Subject to applicable law, you may have rights to confirm whether we collect, share, or sell consumer health data; access or delete that data; withdraw consent; and appeal a decision regarding your request.

We collect quiz-based consumer health data directly from you. We use it to provide requested assessments, recommendations, safety warnings, personalization, and support and to improve the Services. We may disclose it to processors that host or operate the quiz, store customer profiles, deliver quiz results or related communications subject to applicable consent requirements, or provide support. We do not knowingly sell consumer health data. Contact support@evolance.com to exercise an applicable right or withdraw consent.

7. Cookies and Tracking Technologies

We and our providers use cookies and similar technologies to operate, secure, analyze, test, personalize, and advertise the Services. Cookies may be session cookies that expire when you close your browser or persistent cookies that remain until they expire or you delete them.

Category Purpose and Examples
Strictly Necessary Checkout, cart, account login, security, fraud prevention, network management, and privacy-preference storage. These include Shopify cookies required to operate the store.
Functional Remember preferences and support subscriptions, reviews, chat, quiz progress, and personalization.
Analytics and Performance Measure traffic, page interactions, errors, experiments, and performance. We may use Shopify analytics, Microsoft Clarity and Heatmap.com session-replay or interaction analytics, Intelligems testing, and Google analytics services.
Advertising Measure campaigns, build audiences, limit repeated ads, and provide advertising based on activity across sites or services where permitted.

For information about Shopify cookies, see the Shopify Cookie Policy. Most browsers allow you to block or delete cookies. Doing so may impair functionality. Where required, non-essential cookies and pixels will not be used until you provide consent through our cookie controls. You may later change your preferences through the privacy or cookie controls available on the Site.

8. Global Privacy Control and Do Not Track

Where required by applicable law, the Site recognizes Global Privacy Control (GPC) signals as a request to opt out of sale, sharing, or targeted advertising for the associated browser or device. If we can associate the browser or device with your account, we may apply the preference to that account as required. Learn more at globalprivacycontrol.org.

Because there is no consistent industry standard for other "Do Not Track" signals, we do not currently respond to signals other than GPC unless required by law.

9. Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to maintain your account or subscription, fulfill orders, provide support, honor privacy and marketing preferences, prevent fraud, comply with legal, tax, accounting, or reporting obligations, resolve disputes, and enforce agreements.

Retention periods vary based on the nature and sensitivity of the information, the reason it was collected, our relationship with you, legal requirements, applicable limitation periods, security needs, and whether you request deletion or withdraw consent. When information is no longer required, we may delete, de-identify, or aggregate it. Backup copies may remain for a limited period until overwritten or deleted in the ordinary course.

10. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, loss, misuse, alteration, or disclosure. Payment information transmitted through checkout is protected by Shopify and payment-provider security controls. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Do not send medical records, complete payment-card numbers, account passwords, or other highly sensitive information through email, ordinary contact forms, or chat. If you believe your account or information has been compromised, contact us promptly.

11. Children's Privacy

The Services are not directed to individuals under 18, and we do not knowingly collect personal information from children. If you are a parent or guardian and believe a child provided personal information to us, contact us so we can review and delete it as required by law. We do not knowingly sell or share personal information of individuals under 16.

12. Automated Decision-Making, Profiling, and AI

We use automated rules and scoring to generate quiz profiles, product recommendations, safety warnings, marketing segments, and personalized content. Shopify and other providers may also use automated systems for fraud prevention, security, analytics, and advertising. Our AI-assisted features may generate responses based on information you provide and may be monitored or stored for safety, quality, training, and improvement as disclosed at the point of use.

These activities are not intended to make decisions that produce legal or similarly significant effects. AI-generated information may be inaccurate and is not medical advice. Where applicable law provides rights regarding automated processing, you may contact us to object, request information, or seek human review.

13. Third-Party Websites and Services

The Services may link to websites, apps, social networks, payment options, or other services operated by third parties. We do not control their privacy or security practices. Review their policies before providing information. A link does not necessarily imply our endorsement.

14. International Data Transfers

We and our providers may process personal information in the United States, Canada, and other countries where we or they operate. Those countries may have privacy laws different from those in your country.

Where required for transfers from the EEA, United Kingdom, or Switzerland, we rely on recognized safeguards such as adequacy decisions, the European Commission's Standard Contractual Clauses, the United Kingdom's approved transfer mechanisms, or another valid legal mechanism.

15. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, Services, or legal obligations. We will post the revised policy, update the "Last updated" date, and provide any additional notice required by law. Material changes will apply prospectively unless otherwise permitted by law.

16. Contact Us

For questions, complaints, or privacy-rights requests, contact:

Evolance Wellness Inc.
Attn: Privacy
1221 Brickell Avenue, Suite 900
Miami, FL 33131
United States
Email: support@evolance.com
Phone: 1 (800) 842-1193

If you are not satisfied with our response, you may have the right to appeal our decision or complain to your state attorney general, privacy regulator, or local data-protection authority.