LYMVELLA™ PRIVACY POLICY

Last Updated: September 2, 2026
Website: lymvella.com
Contact: support@lymvella.com

Lymvella™ (“Lymvella,” “we,” “us,” or “our”) respects your privacy and is committed to being transparent about how we collect, use, disclose, and protect personal information.

This Privacy Policy describes how we handle personal information when you visit lymvella.com (the “Site”), purchase our products, create or manage a subscription, communicate with us, interact with our advertisements, or otherwise use our products, websites, and related services (collectively, the “Services”).

For purposes of this Privacy Policy, “you” and “your” refer to any customer, prospective customer, website visitor, subscriber, or other individual whose personal information we process through the Services.

Please read this Privacy Policy carefully. By using the Services, you acknowledge the practices described in this Privacy Policy.

1. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes to our business practices, technologies, vendors, Services, or applicable legal and regulatory requirements.

When we update this Privacy Policy, we will post the revised version on the Site and update the “Last Updated” date above.

Where required by applicable law, we may provide additional notice of material changes or request your consent.

2. Personal Information We Collect

The personal information we collect depends on how you interact with Lymvella and the Services.

“Personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to an individual or household.

Information You Provide Directly

We may collect information you provide to us, including:

• Name
• Email address
• Telephone number
• Billing address
• Shipping address
• Order information
• Account information
• Subscription information and preferences
• Communications with customer support
• Product reviews or feedback you choose to submit
• Marketing preferences
• Information submitted through forms, surveys, promotions, or other features of the Site

If you contact customer support, we may retain the contents of your message and related correspondence so that we can respond to your request and maintain appropriate customer-service records.

Please avoid sending medical records, diagnoses, government identification numbers, passwords, or other highly sensitive information unless specifically necessary and requested.

Order and Transaction Information

When you make a purchase, we may collect or receive:

• Products purchased
• Purchase date and amount
• Discounts and promotional offers used
• Shipping method
• Order status
• Refund or replacement information
• Subscription status
• Renewal and cancellation information
• Transaction identifiers
• Payment confirmation information

Payment card and other financial information is generally processed through third-party payment processors and commerce providers. We may receive transaction confirmations or limited payment information rather than your complete payment-card number.

Subscription Information

If you enroll in a recurring subscription, we and our service providers may process information necessary to:

• Establish and administer the subscription
• Schedule recurring orders
• Process recurring payments
• Provide subscription discounts or benefits
• Send renewal, payment, and shipment communications
• Process cancellations or modifications
• Prevent fraud and subscription abuse

Your subscription is also subject to our applicable Subscription Policy and Terms of Service.

3. Information Collected Automatically

When you visit or interact with the Site, we and certain service providers may automatically collect information about your device and activity.

This may include:

• IP address
• Browser type
• Device type
• Operating system
• Approximate location derived from IP address
• Referring website
• Pages viewed
• Products viewed
• Links clicked
• Date and time of visits
• Shopping-cart activity
• Checkout activity
• Advertising interactions
• Cookie identifiers
• Device or advertising identifiers
• Other information concerning your interaction with the Services

We may collect this information through cookies, pixels, tags, software development kits, web beacons, local storage, and similar technologies.

4. Information We Receive From Third Parties

We may receive information from third parties that help operate our business, including:

Shopify and commerce providers. Our Site is powered by Shopify, which processes information necessary to operate the online store, checkout, customer accounts, payments, and related commerce functionality.

Payment processors. Payment providers process information necessary to authorize and complete transactions.

Shipping and fulfillment providers. We may provide and receive information needed to prepare, ship, track, and deliver orders.

Subscription providers. Service providers may process information necessary to administer recurring purchases and subscription preferences.

Analytics providers. We may use analytics technologies to understand how customers interact with our Site.

Advertising and marketing partners. We may work with advertising platforms, social media platforms, email providers, and other marketing companies to measure advertising performance, deliver marketing communications, and show relevant advertisements.

Fraud-prevention and security providers. We may receive information used to identify suspicious transactions, unauthorized activity, or other security threats.

Information obtained from third parties is handled in accordance with this Privacy Policy and applicable law.

5. How We Use Personal Information

We may use personal information for the following purposes.

Providing Our Products and Services

We use personal information to:

• Process and fulfill orders
• Process payments
• Administer subscriptions
• Arrange shipping and delivery
• Provide order and tracking updates
• Manage refunds, replacements, and cancellations
• Maintain customer accounts
• Provide customer support
• Respond to questions and requests
• Provide other features of the Services

Operating and Improving Lymvella

We may use information to:

• Maintain and operate the Site
• Understand how customers use our Services
• Improve website functionality and customer experience
• Develop or improve products and services
• Analyze business performance
• Troubleshoot technical problems
• Conduct internal reporting and analytics

Marketing and Advertising

Subject to applicable law and your preferences, we may use personal information to:

• Send promotional emails
• Send marketing text messages where you have provided any consent required by law
• Inform you about products, offers, promotions, or updates
• Measure advertising effectiveness
• Create or measure advertising audiences
• Personalize advertising and marketing
• Display advertisements on third-party websites and platforms

You may unsubscribe from promotional email communications by using the unsubscribe link included in those messages.

Where SMS marketing is offered, applicable messages will include instructions for opting out.

Even after opting out of marketing communications, we may continue sending transactional or administrative communications relating to your purchases, subscriptions, account, security, or customer-service requests.

Security and Fraud Prevention

We may process information to:

• Authenticate transactions
• Detect suspected fraud
• Protect customer accounts
• Prevent unauthorized transactions
• Investigate abuse
• Protect our systems and Services
• Enforce our policies
• Protect Lymvella, our customers, and others

Legal and Compliance Purposes

We may use personal information when reasonably necessary to:

• Comply with applicable laws and regulations
• Respond to lawful governmental requests
• Respond to subpoenas, court orders, or legal proceedings
• Establish, exercise, or defend legal claims
• Enforce our agreements and policies
• Maintain financial, tax, and business records
• Investigate suspected violations of law or our policies

6. Cookies and Similar Technologies

We use cookies and similar technologies to operate the Site, remember preferences, understand customer behavior, maintain shopping-cart functionality, measure Site performance, and support advertising and analytics.

Shopify also uses cookies and related technologies as part of the services used to power our store. Information about Shopify's cookies is available through Shopify's cookie documentation.

Cookies may include:

Essential cookies, which are necessary for the Site, cart, checkout, security, and other basic functionality.

Analytics cookies, which help us understand how visitors use the Site.

Functional cookies, which remember selections and improve functionality.

Advertising cookies and pixels, which may help us measure marketing campaigns and provide more relevant advertising.

You may be able to manage cookies through your browser or through any cookie/privacy controls made available on the Site.

Blocking certain cookies may affect the functionality of the Services.

7. Global Privacy Control and Do Not Track

Where required by applicable law and supported by our Site configuration, we recognize Global Privacy Control (“GPC”) signals as requests to opt out of certain sales, sharing, or targeted advertising for the browser or device transmitting the signal.

Where we can associate a legally valid GPC signal with an account, additional opt-out preferences may also apply as required by law.

Because there is currently no universally accepted standard for browser-based “Do Not Track” signals other than legally recognized mechanisms such as GPC in applicable jurisdictions, we may not respond to other Do Not Track signals.

8. How We Disclose Personal Information

We may disclose personal information when reasonably necessary to operate Lymvella and provide the Services.

Recipients may include:

• Shopify and commerce-platform providers
• Payment processors
• Banks and payment networks
• Fulfillment providers
• Shipping carriers
• Subscription-service providers
• Customer-support providers
• IT and hosting providers
• Analytics providers
• Advertising and marketing partners
• Email and communications providers
• Fraud-prevention and security providers
• Professional advisers, including attorneys, accountants, and insurers
• Government authorities where legally required
• Business successors in connection with a merger, financing, acquisition, restructuring, bankruptcy, sale, or transfer of assets

We may also disclose information when you direct us to do so or provide consent.

9. Advertising, “Sale,” and “Sharing” of Personal Information

Some U.S. state privacy laws use broad definitions of the terms “sale,” “sharing,” or “targeted advertising.”

Certain disclosures to advertising or analytics partners may be considered a “sale” or “sharing” under those laws even where no money is exchanged for personal information.

Depending on the advertising and analytics services used on the Site, categories of information potentially involved may include:

• Identifiers, such as online identifiers or email-related identifiers
• Commercial information, such as products viewed or purchased
• Internet or network activity
• Device information
• Advertising interaction information

Such information may be disclosed to advertising, analytics, and marketing partners for advertising measurement, attribution, audience creation, or targeted advertising.

Where applicable law provides you with the right to opt out, you may exercise that right through any privacy-choice mechanism made available on the Site, through a legally recognized GPC signal, or by contacting us at support@lymvella.com.

We do not knowingly sell personal information for direct monetary compensation.

We do not use or disclose sensitive personal information for the purpose of inferring characteristics about individuals except as permitted by applicable law.

10. Third-Party Websites and Services

The Site may contain links to websites, platforms, applications, or services operated by third parties.

Lymvella does not control the privacy, security, content, or practices of unaffiliated third parties.

If you follow a third-party link or interact with a third-party platform, the information you provide may be governed by that third party's privacy policy rather than this Privacy Policy.

We encourage you to review the privacy policies of third parties before providing personal information to them.

11. Children's Privacy

The Services are not directed to children under the age of 13, and we do not knowingly collect personal information directly from children under 13.

Our products are intended for adult consumers.

If you are a parent or legal guardian and believe that a child has provided personal information to us without appropriate authorization, contact support@lymvella.com so that we can review and, where appropriate, delete the information.

We do not knowingly sell or share the personal information of individuals under 16 for targeted advertising in circumstances prohibited by applicable law.

12. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information.

However, no website, transmission method, database, or storage system can be guaranteed to be completely secure.

Accordingly, we cannot guarantee absolute security.

You are responsible for maintaining the confidentiality of any account credentials associated with the Services.

If you believe your interaction with us is no longer secure, please contact support@lymvella.com promptly.

13. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

• Provide products and Services
• Maintain transaction and subscription records
• Provide customer service
• Comply with tax, accounting, regulatory, and legal obligations
• Prevent fraud and abuse
• Resolve disputes
• Enforce agreements
• Establish or defend legal claims

Different categories of information may therefore be retained for different periods.

When personal information is no longer reasonably necessary, we may delete, anonymize, or otherwise dispose of it in accordance with applicable law and our business practices.

14. Your Privacy Rights

Depending on where you live, applicable privacy law may provide you with some or all of the following rights:

Right to know or access. You may have the right to request information concerning the personal information we maintain about you and how it is processed.

Right to deletion. You may have the right to request deletion of certain personal information, subject to legal exceptions.

Right to correction. You may have the right to request correction of inaccurate personal information.

Right to portability. You may have the right to receive certain personal information in a portable format.

Right to opt out of sale or sharing. You may have the right to opt out of certain disclosures classified as a sale or sharing under applicable law.

Right to opt out of targeted advertising. You may have the right to opt out of processing for targeted advertising.

Right to restrict processing. In certain jurisdictions, you may have the right to request restrictions on particular processing activities.

Right to withdraw consent. Where processing is based on consent, you may have the right to withdraw that consent.

Right to appeal. Depending on your jurisdiction, you may have the right to appeal our refusal of a privacy-rights request.

Right to non-discrimination. We will not unlawfully discriminate against you for exercising a privacy right.

To exercise a privacy right, contact:

support@lymvella.com

We may need to verify your identity before processing a request.

Where permitted by law, you may use an authorized agent. We may require evidence that the agent is authorized to act on your behalf and may require you to independently verify your identity.

We will respond within the time required by applicable law.

Certain information may be exempt from deletion or other requests where retention is required or permitted for legal, security, fraud-prevention, transactional, or other lawful purposes.

15. Marketing Preferences

You can opt out of promotional emails at any time by selecting the unsubscribe link provided in the email.

Opting out of marketing does not prevent Lymvella from sending non-promotional messages necessary to:

• Confirm orders
• Provide shipment updates
• Administer subscriptions
• Provide customer support
• Send security notices
• Communicate policy or account information

16. Legal Bases for EEA, UK, and Similar Jurisdictions

Where the General Data Protection Regulation (“GDPR”), UK GDPR, or similar laws apply, we process personal information based on one or more legally recognized grounds.

These may include:

Performance of a contract, such as processing an order, payment, shipment, or subscription.

Legitimate interests, such as operating and improving our business, preventing fraud, providing customer support, and understanding Site performance, provided those interests are not overridden by applicable privacy rights.

Consent, where required for certain cookies, marketing communications, or advertising activities.

Compliance with legal obligations, such as maintaining tax records or responding to valid legal requests.

Where we rely on consent, you may withdraw consent at any time, without affecting processing that occurred before withdrawal.

17. International Data Transfers

Lymvella is operated from the United States, and our service providers may operate in the United States and other countries.

Accordingly, your personal information may be transferred to, stored in, or processed in jurisdictions different from where you live.

Where applicable law requires safeguards for international transfers, we and our service providers may rely on recognized mechanisms such as:

• Adequacy decisions
• Standard Contractual Clauses
• UK International Data Transfer mechanisms
• Other lawful transfer mechanisms

Data-protection laws in destination countries may differ from those in your country of residence.

18. Complaints

If you have concerns about how we process your personal information, please contact us first at:

support@lymvella.com

We will review your concern and respond as appropriate.

Depending on your location, you may also have the right to submit a complaint to an applicable privacy or data-protection authority.

19. Business Transfers

If Lymvella is involved in a merger, acquisition, financing, restructuring, bankruptcy, sale of assets, or similar corporate transaction, personal information may be disclosed or transferred as part of that transaction, subject to applicable law.

Any successor organization may continue to process personal information consistent with this Privacy Policy or provide notice of materially different practices where required by law.

20. Deidentified and Aggregated Information

We may create aggregated or deidentified information from personal information where permitted by law.

We may use such information for analytics, research, business improvement, fraud prevention, and other lawful purposes.

Where required by applicable law, we will maintain deidentified information in deidentified form and will not attempt to reidentify it except as permitted by law.

21. Contact Us

If you have questions about this Privacy Policy, our privacy practices, or would like to exercise an applicable privacy right, contact:

Lymvella Support
Email: support@lymvella.com
Website: lymvella.com

For purposes of applicable data-protection laws, Lymvella is the controller of personal information collected directly through the Services unless another party is identified as independently responsible for particular processing.