Privacy Policy

Draft for review — pending counsel. This document describes Saludlink's current practices and is not yet final. It is pending review by qualified legal counsel and may change before it takes effect.

This Privacy Policy explains how Saludlink, Inc. (“Saludlink,” “we,” “us”) collects, uses, shares, and protects personal information when you visit or make a purchase at saludlinkusa.com (the “Site”). Saludlink operates a commerce website that sells wellness products and compounded prescription medications. For prescription products, placing an order starts a review by a licensed physician on our care team, who may ask you follow-up health questions needed to evaluate your order; that limited health-screening information is handled under our Notice of Privacy Practices, not this Policy. Browsing the Site, creating an account, and purchasing non-prescription products does not involve protected health information (PHI). Our website also links to a separate, independent, licensed telehealth service for other kinds of care, governed by its own privacy practices, not this policy.

Information you provide to us. When you create an account, place an order, or contact us, we collect the information you give us: your name, email address, phone number, shipping and billing addresses, order and cart contents, and the content of messages you send our support team. Payments are processed by our payment provider (Stripe); we receive a payment confirmation and a truncated card reference, and we never see or store your full card number.

Information we collect automatically. When you use the Site we collect standard technical data such as your IP address, device and browser type, pages viewed, and referring links. Some of this is necessary to run and secure the Site; the rest (product analytics) runs only with your consent, as described below.

Cookies and similar technologies. We use first-party cookies to run the Site: preview_ok remembers that you entered our early-access preview code; age_verified records that you attested to meeting the minimum age for an age-restricted product; sl_analytics_consent stores your analytics choice; and _medusa_jwt and _medusa_cart_id keep you signed in and preserve your cart. These are set with the httpOnly and Secure flags where applicable and are used to operate the Site — not to sell or share your data.

Analytics and your consent. Product analytics (provided by PostHog) are turned OFF by default and run only after you opt in through our cookie-consent banner. Session recording is disabled, form inputs are masked, and analytics profiles are created only for signed-in users. You can withdraw consent at any time through the banner, which stops future analytics collection.

How we use your information. We use personal information to operate the store; process, fulfill, and deliver your orders; take payment and prevent fraud; provide customer support; send order and service communications; comply with legal obligations; and, with your consent, understand and improve how the Site is used.

How we share your information. We share personal information only with service providers who help us run the business under contract — for example payment processing (Stripe), order fulfillment and shipping carriers, cloud hosting, email delivery, and (with consent) analytics. We may disclose information if required by law or to protect our rights, and in connection with a business transfer such as a merger or acquisition. We do NOT sell your personal information, and we do not share it for cross-context behavioral advertising.

Data retention. We keep personal information for as long as your account is active and as needed to provide the store, then for the period required to meet legal, tax, accounting, and dispute-resolution obligations, after which it is deleted or de-identified.

Security. We use administrative, technical, and physical safeguards — including encryption in transit (TLS), access controls, and audit logging — designed to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Your choices and rights. You may access or update your account information by signing in, and you can ask us to correct or delete your personal information or to close your account. Depending on where you live, you may have additional rights — such as the right to know, access, correct, delete, or opt out of the “sale” or “sharing” of personal information (for example under the California Consumer Privacy Act). We do not sell personal information. To exercise any right, contact us at support@saludlinkusa.com; we will not discriminate against you for doing so.

Categories of personal information (California and similar states). In the past 12 months we have collected these categories of personal information: identifiers (such as name, email, phone, shipping/billing address, and IP address); commercial information (orders and purchase history); and internet or network activity (pages viewed and interactions), collected with your consent. We collect this information directly from you and automatically from your device, and we disclose it only to the service providers described above for the business purposes listed. Payment card numbers are handled by our processor (Stripe), not stored by us. We do not knowingly collect sensitive personal information to infer characteristics about you, and we do not use or disclose it for those purposes.

Opt-out preference signals. Because we do not sell or share personal information for cross-context behavioral advertising, there is nothing to opt out of in that respect. Where required, we honor recognized browser opt-out preference signals such as the Global Privacy Control (GPC).

Authorized agents and appeals. You may use an authorized agent to submit a request on your behalf, subject to verification of your identity and the agent’s authority. If we decline a request, you may appeal by replying to our response or writing to support@saludlinkusa.com, and — where your state requires it — we will inform you of the outcome and how to contact the relevant regulator. [Exact verification steps, response timelines, and state-specific disclosures to be finalized by counsel.]

Children’s privacy. The Site is intended for adults and is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Some products are age-restricted (18+ unless a higher age is stated).

Changes to this policy. We may update this Privacy Policy from time to time; the “last updated” date shows when it last changed, and material changes will be highlighted on this page.

Contact us. Questions or privacy requests? Email support@saludlinkusa.com or write to Saludlink, Inc. at the mailing address on our Contact page.