Last updated: August 6, 2026

This Privacy Policy describes Our policies and procedures regarding the collection, use, disclosure, retention, and protection of Your information when You use the Service. It also explains Your privacy rights and how applicable laws may protect you. We use Your Personal Data to provide, maintain, personalize, and improve the Service. By accessing or using the Service, You acknowledge the collection and use of information in accordance with this Privacy Policy.

Interpretation and Definitions

Interpretation

Words with an initial capital letter have meanings defined under the following conditions. These definitions have the same meaning whether they appear in singular or plural form.

Definitions

For the purposes of this Privacy Policy:

Account means a unique account created for You to access Our Service or parts of Our Service.

Affiliate means an entity that controls, is controlled by, or is under common control with a party. “Control” means ownership of 50% or more of the shares, equity interests, or other securities entitled to vote for the election of directors or another managing authority.

Business, for the purposes of the CCPA/CPRA, refers to the Company as the legal entity that collects Consumers’ Personal Information and determines the purposes and means of processing Consumers’ Personal Information, or on behalf of which such information is collected, and that does business in the State of California.

CCPA and/or CPRA refers to the California Consumer Privacy Act, as amended by the California Privacy Rights Act of 2020.

Company, referred to as either “the Company,” “We,” “Us,” or “Our,” refers to F2 Nutrition, LLC, doing business as NovaPrime Labs, PO Box 916, Bath, Ohio 44210.

For the purposes of the GDPR, the Company is the Data Controller.

Consumer, for the purposes of the CCPA/CPRA, means a natural person who is a California resident. A resident, as defined under applicable law, includes:

1. Every individual who is in the United States for other than a temporary or transitory purpose; and
2. Every individual who is domiciled in the United States but is outside the United States for a temporary or transitory purpose.

Cookies are small files placed on Your computer, mobile device, or another device by a website. Cookies may contain details about Your browsing activity and may be used for several purposes.

Country refers to Ohio, United States.

Data Controller, for the purposes of the General Data Protection Regulation, refers to the Company as the legal person that, alone or jointly with others, determines the purposes and means of processing Personal Data.

Do Not Track or DNT is a concept promoted by United States regulatory authorities, including the Federal Trade Commission, to develop and implement mechanisms that allow internet users to control the tracking of their online activities across websites.

Facebook Fan Page means the public profile named NovaPrime Labs created by the Company on the Facebook social network and accessible at:

https://facebook.com/novaprimelabs

GDPR refers to the European Union General Data Protection Regulation.

Personal Data means any information relating to an identified or identifiable individual.

For the purposes of the GDPR, Personal Data includes information relating to You, such as a name, identification number, location data, online identifier, or one or more factors specific to Your physical, physiological, genetic, mental, economic, cultural, or social identity.

For the purposes of the CCPA/CPRA, Personal Data or Personal Information means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with You or Your household.

Service refers to the Website.

Service Provider means any natural or legal person who processes data on behalf of the Company. It includes third-party companies or individuals employed or engaged by the Company to facilitate the Service, provide the Service on behalf of the Company, perform services related to the Service, process transactions, deliver communications, or assist the Company in analyzing how the Service is used.

For the purposes of the GDPR, Service Providers may be considered Data Processors.

Usage Data refers to data collected automatically, either generated through the use of the Service or from the Service infrastructure itself, such as the duration of a page visit.

Website refers to NovaPrime Labs, accessible at:

https://novaprimelabs.com/

You means the individual accessing or using the Service or the company or other legal entity on behalf of which that individual is accessing or using the Service, as applicable.

Under the GDPR, You may also be referred to as the Data Subject or User.

Collecting and Using Your Personal Data

Types of Data Collected

Personal Data

While using Our Service, We may ask You to provide certain personally identifiable information that may be used to contact, identify, serve, or communicate with You.

Personal Data may include, but is not limited to:

• First name and last name
• Email address
• Phone number
• Billing address
• Shipping address
• State or province
• ZIP or postal code
• City
• Account login information
• Purchase and transaction history
• Product preferences
• Marketing preferences
• Communications with Us
• Website interactions
• Marketing engagement information
• Usage Data

Usage Data

Usage Data is collected automatically when You use the Service.

Usage Data may include information such as:

• Your Device’s Internet Protocol address
• Browser type
• Browser version
• Pages of the Service that You visit
• Date and time of Your visit
• Time spent on pages
• Referring and exit pages
• Unique Device identifiers
• Advertising identifiers
• Cookie identifiers
• Diagnostic data
• Shopping-cart activity
• Product views
• Purchase-related interactions
• Email engagement activity

When You access the Service through a mobile Device, We may automatically collect certain information, including:

• The type of mobile Device You use
• Your mobile Device’s unique identifier
• The Internet Protocol address of Your mobile Device
• Your mobile operating system
• The type of mobile internet browser You use
• Unique Device identifiers
• Advertising identifiers
• Other diagnostic information

We may also collect information that Your browser or Device sends whenever You visit or interact with the Service.

Tracking Technologies and Cookies

We use Cookies and similar tracking technologies to track activity on Our Service, store certain information, operate the Website, remember preferences, analyze performance, personalize content, measure advertising, and improve the Service.

Tracking technologies may include beacons, tags, pixels, local storage technologies, software development kits, and scripts.

The technologies We use may include the following.

Cookies or Browser Cookies

A Cookie is a small file placed on Your Device.

You can instruct Your browser to refuse all Cookies or to notify You when a Cookie is being sent. However, if You do not accept certain Cookies, You may not be able to use some parts or features of the Service.

Unless You have adjusted Your browser settings to refuse Cookies, the Service may use Cookies.

Web Beacons

Certain sections of the Service and Our emails may contain small electronic files known as web beacons, clear GIFs, pixel tags, tracking pixels, or single-pixel GIFs.

These technologies may allow the Company and its Service Providers to:

• Count users who have visited certain pages
• Determine whether an email was opened
• Determine whether a link was clicked
• Measure the popularity of certain content
• Analyze marketing performance
• Verify system and server integrity
• Prevent fraud or misuse

Session and Persistent Cookies

Cookies may be either “Persistent” or “Session” Cookies.

Persistent Cookies remain on Your Device after You close Your browser or go offline until they expire or are deleted.

Session Cookies are generally deleted when You close Your browser.

We use Session and Persistent Cookies for the purposes described below.

Necessary or Essential Cookies

Type: Session and Persistent Cookies
Administered by: Us and Our Service Providers

Purpose: These Cookies are necessary to provide services available through the Website and enable You to use its features. They may be used to authenticate users, maintain shopping carts, process checkout activity, prevent fraudulent use of Accounts, secure the Website, and provide services You request.

Without these Cookies, certain requested services cannot be provided.

Cookies Policy or Notice Acceptance Cookies

Type: Persistent Cookies
Administered by: Us or Our consent-management Service Providers

Purpose: These Cookies identify whether users have accepted, rejected, or customized their Cookie preferences on the Website.

Functionality Cookies

Type: Persistent Cookies
Administered by: Us and Our Service Providers

Purpose: These Cookies allow Us to remember choices You make when using the Website, such as login details, account preferences, shopping-cart selections, regional settings, or language preferences.

Their purpose is to provide a more personalized experience and reduce the need to re-enter preferences each time You use the Website.

Tracking and Performance Cookies

Type: Persistent Cookies
Administered by: Third parties

Purpose: These Cookies are used to collect information about traffic to the Website and how visitors use the Website.

Information gathered through these Cookies may directly or indirectly identify a visitor because it is commonly linked to a pseudonymous identifier associated with the Device used to access the Website.

We may use these Cookies to:

• Understand how visitors use the Website
• Measure traffic and engagement
• Test new pages, features, products, or functionality
• Identify errors or performance problems
• Analyze customer journeys
• Improve Website performance
• Measure advertising and marketing effectiveness

Advertising and Marketing Cookies

Type: Persistent Cookies and similar technologies
Administered by: Us and third-party advertising or marketing partners

Purpose: These technologies may be used to measure advertising, personalize marketing, recognize Your Device, create or supplement marketing audiences, and display advertisements that may be more relevant to Your interests.

For additional information about the Cookies We use and Your choices regarding Cookies, please review any Cookies Policy, Privacy Preferences interface, or Cookie settings made available through the Website.

Online Data Partners and Email Recognition Technologies

When You visit Our Website, log in, register, make a purchase, subscribe, or open an email, Cookies, advertising beacons, pixels, and similar technologies may be used by Our online data partners or vendors to associate those activities with information they or others already have about You, including an email address.

Where permitted by law and consistent with Your consent or marketing preferences, We or Service Providers acting on Our behalf may use this information to deliver or personalize communications and marketing.

You may opt out of certain database-recognition activities by visiting:

https://www.smartrecognition.com/database-opt-out/

You may opt out of marketing emails from NovaPrime Labs by clicking the Unsubscribe link at the bottom of any promotional email You receive.

Use of Your Personal Data

The Company may use Personal Data for the following purposes.

To Provide and Maintain the Service

We may use Your information to operate, maintain, secure, monitor, troubleshoot, and improve the Service.

To Manage Your Account

We may use Your information to manage Your registration as a user of the Service.

The Personal Data You provide may give You access to different features and functionalities available to registered users.

To Process Purchases and Perform Contracts

We may use Your information to develop, comply with, and perform purchase contracts for products, items, or services You have purchased, as well as other contracts entered into with Us through the Service.

This may include:

• Processing and confirming orders
• Processing payments
• Delivering products
• Sending order confirmations
• Providing shipping updates
• Processing returns or refunds
• Providing customer support
• Preventing fraud
• Maintaining transaction records

To Contact You

We may contact You by:

• Email
• Telephone
• SMS
• Postal mail
• Account notifications
• Other equivalent electronic communications

We may contact You regarding:

• Account activity
• Purchases
• Order status
• Shipping or delivery
• Customer-service requests
• Security notices
• Policy updates
• Product safety information
• Service-related announcements
• Marketing communications, where permitted

To Provide Marketing Communications

Where You have subscribed, opted in, requested updates, or where otherwise permitted by applicable law, We may provide You with news, product launches, special offers, educational content, biohacking information, research-related content, Company announcements, and information about products, services, and events that may interest You.

You may unsubscribe from promotional emails at any time.

To Manage Your Requests

We may use Your information to attend to, respond to, and manage requests You submit to Us.

To Deliver Targeted Advertising

We may use information about You to develop and display advertising and content tailored to Your interests, interactions, or approximate location.

We may work with third-party vendors that assist Us in delivering and measuring such advertising.

To Personalize Your Experience

We may use Your information, including purchase history, product preferences, Website activity, and marketing engagement, to personalize:

• Product recommendations
• Website content
• Email communications
• Promotions
• Advertising
• Customer support
• Educational materials

For Business Transfers

We may use Your information to evaluate or conduct a merger, divestiture, financing, acquisition, reorganization, restructuring, dissolution, bankruptcy, liquidation, or another transfer of some or all of Our assets.

Personal Data held about Service users may be included among the transferred assets.

For Security and Fraud Prevention

We may use Personal Data to:

• Verify identities
• Detect suspicious activity
• Prevent unauthorized access
• Protect Accounts
• Prevent fraudulent transactions
• Enforce Our policies
• Protect Our customers, Company, Website, and Service Providers

For Legal and Compliance Purposes

We may process Personal Data to:

• Comply with applicable laws
• Respond to lawful requests
• Maintain required records
• Establish, exercise, or defend legal claims
• Enforce contracts and policies
• Fulfill tax, accounting, regulatory, and reporting obligations

For Other Business Purposes

We may use information for other legitimate business purposes, including:

• Data analysis
• Identifying usage trends
• Measuring promotional campaigns
• Improving products and services
• Conducting audits
• Conducting research
• Developing new features
• Improving customer experience
• Understanding customer preferences
• Maintaining business records

Sharing Your Personal Data

We may share Personal Data in the following circumstances.

With Service Providers

We may share Personal Data with Service Providers that perform services on Our behalf, including providers that assist with:

• Website hosting
• Ecommerce operations
• Order management
• Payment processing
• Fraud prevention
• Shipping and fulfillment
• Customer support
• Email marketing
• SMS communications
• Analytics
• Advertising
• Remarketing
• Personalization
• Data storage
• Security
• Legal or compliance services

For Business Transfers

We may share or transfer Personal Data in connection with, or during negotiations relating to, a merger, sale of Company assets, financing, acquisition, restructuring, or sale of all or part of Our business.

With Affiliates

We may share Personal Data with Our Affiliates.

When We do so, We require those Affiliates to handle Personal Data consistently with this Privacy Policy and applicable law.

Affiliates may include Our parent company, subsidiaries, joint-venture partners, and other entities under common control with Us.

With Business Partners

We may share information with business partners to provide products, services, promotions, integrations, or other offerings.

With Advertising and Analytics Partners

We may disclose certain identifiers, internet activity, Cookie information, advertising identifiers, hashed contact information, and similar information to advertising and analytics partners.

Such disclosures may be used to:

• Analyze Website activity
• Measure marketing performance
• Create advertising audiences
• Personalize advertisements
• Limit repeated advertisements
• Attribute purchases or conversions
• Provide cross-device advertising

Certain disclosures may be considered “sharing” or a “sale” under the broad definitions contained in some United States state privacy laws, even where no money is exchanged.

With Other Users

When You voluntarily share Personal Data or otherwise interact in public areas of the Service, that information may be viewed by other users and may be publicly distributed outside the Service.

With Your Consent

We may disclose Personal Data for another purpose with Your consent or at Your direction.

Nova Prime Labs Email Marketing Policy

At Nova Prime Labs, We respect Your privacy and are committed to sending relevant and valuable communications.

Email Subscription

By subscribing to Our email list, You agree to receive marketing emails from Nova Prime Labs.

These communications may include:

• Product launches
• Promotions and special offers
• Educational content
• Biohacking tips and research
• Product information
• Company news
• Company announcements
• Surveys or requests for feedback
• Information about events or programs

Subscribing to marketing communications is completely voluntary and is not required to make a purchase.

Declining or withdrawing consent to marketing emails will not prevent You from purchasing products or using the ordinary transactional features of the Service.

How We Collect Email Marketing Consent

We send marketing emails to individuals who have taken an action indicating that they wish to receive communications from Us or where We are otherwise permitted to do so by applicable law.

This may include individuals who have:

• Signed up through Our Website
• Submitted an email-subscription form
• Created an Account and opted in to marketing
• Entered a giveaway, sweepstakes, contest, or promotion with explicit consent
• Requested updates from Nova Prime Labs
• Chosen to receive product or Company announcements
• Otherwise provided valid consent to receive marketing communications

We do not purchase or rent email lists.

Where applicable, We may use a confirmation or double-opt-in process to verify an email subscription.

Email Frequency

Subscribers may receive marketing emails several times per month.

The frequency of communications may vary depending on:

• Promotions
• Product launches
• Product availability
• Educational content
• Company announcements
• Seasonal campaigns
• Subscriber interests
• Subscriber engagement

During certain promotions or product launches, the frequency of communications may temporarily increase.

Unsubscribing

You may unsubscribe from promotional emails at any time by clicking the Unsubscribe link located at the bottom of every marketing email.

You may also contact Us using the information provided in the Contact Us section.

After unsubscribing, You will no longer receive promotional marketing emails from the email program from which You unsubscribed, subject to a reasonable amount of time required to process the request.

You may still receive transactional or non-promotional communications relating to:

• Purchases
• Order confirmations
• Payment confirmations
• Shipping and delivery
• Returns and refunds
• Account activity
• Password resets
• Customer-service requests
• Product safety information
• Legal notices
• Security notifications
• Changes to Our policies or terms

Unsubscribing from promotional emails does not automatically delete Your Account or transaction records.

Information Collected for Email Marketing

In connection with email marketing, We may collect or use:

• Name
• Email address
• Subscription status
• Consent records
• Date and source of subscription
• Purchase history
• Website interactions
• Product preferences
• Marketing preferences
• Email-opening information
• Link-clicking information
• Marketing engagement data
• Device and browser information
• Approximate location derived from an Internet Protocol address
• Responses to surveys, promotions, or preference forms

This information may help Us:

• Deliver requested communications
• Personalize email content
• Recommend relevant products
• Avoid sending irrelevant messages
• Measure campaign performance
• Improve the customer experience
• Understand subscriber interests
• Maintain consent and suppression records
• Comply with applicable laws

Email Marketing Privacy

Nova Prime Labs does not sell Personal Data for monetary compensation.

We use email-marketing information to provide requested communications, personalize content, improve Our services, measure marketing performance, maintain customer preferences, and comply with applicable laws.

We may use Service Providers, including email-marketing platforms, to manage subscriptions and deliver communications on Our behalf.

These Service Providers may process Personal Data only as permitted by their agreements with Us, their applicable privacy policies, and applicable law.

Certain disclosures to advertising or analytics partners may be considered a “sale” or “sharing” under the broad definitions of the CCPA/CPRA or other state privacy laws, even if We do not receive money in exchange. California residents may exercise applicable opt-out rights as described in the CCPA/CPRA sections of this Privacy Policy.

For questions regarding email marketing or this policy, please contact Us using the contact information provided at the end of this Privacy Policy.

Retention of Your Personal Data

The Company will retain Personal Data only for as long as reasonably necessary for the purposes described in this Privacy Policy.

The length of time We retain information may depend on:

• The type of information
• The reason it was collected
• The duration of Our relationship with You
• Legal obligations
• Tax and accounting requirements
• Fraud-prevention needs
• Security requirements
• Contractual requirements
• Dispute-resolution needs
• Applicable limitation periods

We may retain and use Personal Data as necessary to:

• Comply with legal obligations
• Maintain transaction records
• Resolve disputes
• Enforce agreements and policies
• Prevent fraud
• Protect the security of the Service
• Establish, exercise, or defend legal claims

We may retain records showing that You unsubscribed or opted out of marketing communications so that We can honor Your preference and avoid sending future promotional communications.

Usage Data is generally retained for a shorter period, except where it is used to strengthen security, prevent fraud, improve functionality, conduct analytics, or comply with a legal obligation requiring longer retention.

Transfer of Your Personal Data

Your information, including Personal Data, may be processed at the Company’s operating offices and in other locations where the parties involved in processing are located.

This means Personal Data may be transferred to and maintained on servers or computers located outside Your state, province, country, or other governmental jurisdiction, where privacy and data-protection laws may differ from those in Your jurisdiction.

Where consent is the applicable legal basis, Your submission of information following notice of this Privacy Policy represents Your acknowledgment of such transfer.

The Company will take steps reasonably designed to ensure Personal Data is handled securely and in accordance with this Privacy Policy.

Where required, We will use appropriate safeguards for international transfers, which may include:

• Contractual protections
• Standard Contractual Clauses
• Data-processing agreements
• Adequacy decisions
• Other legally recognized transfer mechanisms

No transfer of Personal Data will be made to an organization or country unless reasonable safeguards are in place regarding the security and lawful handling of Personal Data.

Accessing, Correcting, or Deleting Your Personal Data

You may have the right to access, correct, update, or request deletion of Personal Data We have collected about You, subject to applicable law.

The Service may allow You to manage certain information by signing in to Your Account and visiting the relevant Account settings.

You may also contact Us to request access to, correction of, or deletion of Personal Data You have provided.

We may need to verify Your identity before fulfilling a request.

We may retain certain information where required or permitted, including when necessary to:

• Complete a transaction
• Maintain financial records
• Comply with legal obligations
• Detect or prevent fraud
• Protect security
• Resolve disputes
• Enforce agreements
• Establish, exercise, or defend legal claims
• Maintain marketing opt-out records

Disclosure of Your Personal Data

Business Transactions

If the Company is involved in a merger, acquisition, financing, reorganization, bankruptcy, or asset sale, Personal Data may be transferred as part of that transaction.

Where required by law, We will provide notice before Personal Data becomes subject to a materially different privacy policy.

Law Enforcement

Under certain circumstances, the Company may be required to disclose Personal Data if required by law or in response to valid legal requests from public authorities, such as a court, regulator, or government agency.

Other Legal Requirements

The Company may disclose Personal Data in the good-faith belief that such action is necessary to:

• Comply with a legal obligation
• Respond to legal process
• Protect and defend the rights or property of the Company
• Prevent or investigate possible wrongdoing connected with the Service
• Protect the personal safety of users or the public
• Prevent fraud or security threats
• Protect against legal liability
• Enforce Our agreements and policies

Security of Your Personal Data

The security of Your Personal Data is important to Us.

We use commercially reasonable administrative, technical, and organizational safeguards designed to protect Personal Data from unauthorized access, use, loss, alteration, disclosure, or destruction.

However, no method of transmission over the internet, wireless transmission, or electronic storage is completely secure.

Although We strive to use commercially acceptable means to protect Personal Data, We cannot guarantee absolute security.

You are responsible for maintaining the confidentiality of Your Account credentials and for promptly notifying Us if You believe Your Account or information has been compromised.

Detailed Information About Service Providers

Service Providers We use may have access to Personal Data when necessary to perform services for Us.

These third-party vendors may collect, store, use, process, or transfer information about Your activity on the Service in accordance with:

• Their agreements with Us
• Their own privacy policies
• Applicable laws

Analytics

We may use third-party Service Providers to monitor and analyze the use of the Service.

Google Analytics

Google Analytics is a web analytics service offered by Google that tracks and reports Website traffic.

Google may use information collected through Google Analytics to track and monitor use of the Service. This information may also be shared with or processed through other Google services.

Depending on Our configuration and Your privacy preferences, Google may use collected information to contextualize or personalize advertisements within its advertising network.

You may opt out of making Your activity available to Google Analytics by installing the Google Analytics opt-out browser add-on.

The add-on prevents certain Google Analytics JavaScript from sharing information with Google Analytics about Website activity.

For more information about Google’s privacy practices, please visit:

https://policies.google.com/privacy

Email Marketing Service Providers

We may use Personal Data to contact You with newsletters, marketing materials, promotions, product information, educational content, Company announcements, and other information that may interest You.

You may opt out of promotional communications by:

• Clicking the unsubscribe link in an email
• Following the instructions included in the communication
• Contacting Us

We may use third-party email-marketing Service Providers to manage subscriptions, maintain consent records, personalize communications, and deliver emails.

Klaviyo

We may use Klaviyo to manage and send marketing and transactional communications.

Klaviyo’s Privacy Policy is available at:

https://www.klaviyo.com/legal/privacy

Payments

We provide paid products and may use third-party services for payment processing.

We do not directly store or collect complete payment-card details through Our Website.

Payment information is generally provided directly to Our third-party payment processors. Their use of Personal Data is governed by their respective privacy policies and agreements.

Payment processors may follow standards established under the Payment Card Industry Data Security Standard, or PCI DSS.

PCI DSS is managed by the PCI Security Standards Council, which includes participation from payment brands such as Visa, Mastercard, American Express, and Discover.

Stripe

Stripe’s Privacy Policy is available at:

https://stripe.com/us/privacy

PayPal

PayPal’s Privacy Policy is available at:

https://www.paypal.com/webapps/mpp/ua/privacy-full

Easy Pay Direct

Easy Pay Direct’s Privacy Policy is available at:

https://www.easypaydirect.com/privacy-policy/

Behavioral Remarketing and Advertising

The Company may use remarketing services to advertise to You after You access or visit the Service.

We and Our third-party vendors may use Cookies and non-Cookie technologies to recognize Your Device and understand how You use the Service.

These activities may help Us:

• Improve the Service
• Understand interests
• Personalize advertisements
• Measure advertising performance
• Analyze browsing activity
• Create advertising audiences
• Attribute purchases and conversions
• Limit repeated advertisements

Third-party vendors may collect, store, use, process, and transfer information about Your activity on the Service in accordance with their privacy policies and agreements with Us.

Some third-party vendors may use non-Cookie technologies that are not affected by browser settings that block Cookies.

Your browser may not allow You to block all such technologies.

You may use third-party tools to decline certain collection and use of information for interest-based advertising:

Network Advertising Initiative opt-out platform:

http://www.networkadvertising.org/choices/

European Interactive Digital Advertising Alliance opt-out platform:

http://www.youronlinechoices.com/

Digital Advertising Alliance opt-out platform:

http://optout.aboutads.info/?c=2&lang=EN

You may also be able to limit personalized advertising through privacy settings on Your mobile Device, including settings such as:

• Opt Out of Ads Personalization
• Delete Advertising ID
• Limit Ad Tracking
• Allow Apps to Request to Track

The exact wording and availability of these settings may depend on Your Device and operating system.

We may share hashed email addresses, advertising identifiers, Cookie identifiers, or other online identifiers with third-party vendors to help recognize users and deliver or measure advertisements across Devices and browsers.

For additional information regarding the technologies used by these vendors, review their respective privacy policies.

Advertising and Remarketing Providers

Google Ads

Google Ads remarketing services are provided by Google.

You may adjust Google advertising preferences through Google’s advertising settings.

Google also offers a Google Analytics opt-out browser add-on at:

https://tools.google.com/dlpage/gaoptout

For more information about Google’s privacy practices, visit:

https://policies.google.com/privacy

X, Formerly Twitter

X or Twitter remarketing services may be provided by X Corp. or its applicable Affiliates.

Information about interest-based advertising preferences may be available at:

https://support.twitter.com/articles/20170405

The X or Twitter Privacy Policy is available at:

https://twitter.com/privacy

Facebook and Meta

Facebook remarketing services are provided by Meta Platforms and its Affiliates.

Information about interest-based advertising on Facebook is available at:

https://www.facebook.com/help/516147308587266

Instructions regarding Facebook advertising preferences are available at:

https://www.facebook.com/help/568137493302217

Facebook and Meta may participate in self-regulatory advertising programs.

You may also use industry opt-out tools, including:

• Digital Advertising Alliance in the United States: http://www.aboutads.info/choices/
• Digital Advertising Alliance of Canada: http://youradchoices.ca/
• European Interactive Digital Advertising Alliance: http://www.youronlinechoices.eu/

For more information about Facebook’s privacy practices, visit:

https://www.facebook.com/privacy/policy/

AdRoll

AdRoll remarketing services are provided by NextRoll, Inc.

You may opt out of certain AdRoll advertising through:

http://info.evidon.com/pub_info/573?v=1&nt=1&nw=false

Additional information about opting out of personalized advertising is available at:

https://help.adroll.com/hc/en-us/articles/216599538-Opting-Out-of-Personalized-Advertising

California residents may review the applicable California information in NextRoll’s Privacy Policy at:

https://www.nextroll.com/privacy

Perfect Audience

Perfect Audience remarketing services may be provided by NowSpots Inc. or its applicable service operator.

Opt-out resources may include:

http://pixel.prfct.co/coo

http://ib.adnxs.com/optout

For more information about Perfect Audience’s privacy practices, visit:

https://www.perfectaudience.com/privacy/

GDPR Privacy

Legal Bases for Processing Personal Data Under the GDPR

Where the GDPR applies, We may process Personal Data under one or more of the following legal bases.

Consent

You have given consent to the processing of Personal Data for one or more specific purposes.

Performance of a Contract

Processing Personal Data is necessary to perform a contract with You or to take steps at Your request before entering into a contract.

Legal Obligations

Processing Personal Data is necessary to comply with a legal obligation to which the Company is subject.

Vital Interests

Processing Personal Data is necessary to protect Your vital interests or the vital interests of another natural person.

Public Interests

Processing Personal Data is necessary for a task carried out in the public interest or in the exercise of official authority vested in the Company.

Legitimate Interests

Processing Personal Data is necessary for legitimate interests pursued by the Company or a third party, except where those interests are overridden by Your interests, rights, or freedoms.

Legitimate interests may include:

• Operating and improving the Service
• Preventing fraud
• Protecting security
• Maintaining business records
• Responding to inquiries
• Measuring Website performance
• Marketing similar products, where permitted
• Defending legal claims

The Company may help clarify the legal basis that applies to a particular processing activity, including whether the provision of Personal Data is a statutory requirement, contractual requirement, or requirement necessary to enter into a contract.

Your Rights Under the GDPR

Where the GDPR applies, You may have the following rights.

Right of Access

You may request access to the Personal Data We hold about You and request a copy of that information.

Right to Rectification

You may request correction of incomplete or inaccurate Personal Data.

Right to Object

You may object to processing based on legitimate interests where Your particular situation provides grounds for objection.

You also have the right to object at any time to the processing of Personal Data for direct-marketing purposes.

Right to Erasure

You may request deletion of Personal Data where there is no lawful reason for Us to continue processing it.

This right is subject to exceptions under applicable law.

Right to Restriction

You may request that We restrict the processing of Personal Data in certain circumstances.

Right to Data Portability

Where applicable, You may request Personal Data You provided to Us in a structured, commonly used, machine-readable format and may request that it be transferred to another organization where technically feasible.

This right generally applies to automated processing based on consent or performance of a contract.

Right to Withdraw Consent

Where processing is based on consent, You may withdraw consent at any time.

Withdrawal of consent does not affect the lawfulness of processing conducted before consent was withdrawn.

If You withdraw consent, We may be unable to provide certain optional features of the Service.

Right to Lodge a Complaint

You may have the right to complain to a competent Data Protection Authority regarding Our collection or use of Personal Data.

If You are located in the European Economic Area, You may contact the Data Protection Authority in Your country or region.

Exercising GDPR Data Protection Rights

You may exercise applicable rights by contacting Us.

We may ask You to verify Your identity before responding to a request.

We will respond within the period required by applicable law.

In some circumstances, We may deny or limit a request where permitted by law, including where fulfilling the request would adversely affect the rights and freedoms of another person.

Facebook Fan Page

Data Controllers for the Facebook Fan Page

The Company is responsible for certain Personal Data collected in connection with Our Facebook Fan Page.

As the operator of the Facebook Fan Page at:

https://facebook.com/novaprimelabs

the Company and Meta Platforms or the applicable operator of Facebook may act as Joint Controllers for certain processing activities.

The Company has entered into or is subject to agreements and terms with Facebook that define aspects of the parties’ respective responsibilities.

Facebook’s Terms of Service are available at:

https://www.facebook.com/terms.php

Facebook’s Privacy Policy is available at:

https://www.facebook.com/privacy/policy/

Facebook may also be contacted through the contact methods stated in its privacy materials.

Facebook Insights

We may use Facebook Insights in connection with operation of the Facebook Fan Page to obtain statistical information about visitors and interactions.

Facebook may place Cookies or use similar technologies on the Device of a user visiting the Facebook Fan Page.

These technologies may contain unique identifiers and may remain active until they expire or are deleted.

Facebook may receive, record, and process information when users visit:

• Facebook services
• The Facebook Fan Page
• Services provided by other Facebook users
• Websites or services using Facebook technologies

For additional information, review Facebook’s Privacy Policy:

https://www.facebook.com/privacy/policy/

CCPA/CPRA Privacy Notice for California Residents

This section supplements the information contained in the rest of this Privacy Policy and applies to Consumers who reside in California.

Categories of Personal Information Collected

We may collect information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a Consumer or household.

The categories and examples below are based on categories defined by the CCPA/CPRA.

The inclusion of an example does not mean We collect every type of information listed in that example.

Category A: Identifiers

Examples include:

• Real name
• Alias
• Postal address
• Unique personal identifier
• Online identifier
• Internet Protocol address
• Email address
• Account name
• Other similar identifiers

Collected: Yes.

Category B: Personal Information Described in California Civil Code Section 1798.80(e)

Examples include:

• Name
• Signature
• Address
• Telephone number
• Account information
• Payment-related information
• Other financial information

Some Personal Information in this category may overlap with other categories.

We do not intentionally collect Social Security numbers, driver’s-license numbers, passport numbers, medical information, or health-insurance information through ordinary ecommerce transactions unless specifically required and disclosed.

Collected: Yes, but only as applicable to the Service and information provided by the Consumer.

Category C: Protected Classification Characteristics

Examples include:

• Age
• Race
• Color
• Ancestry
• National origin
• Citizenship
• Religion
• Marital status
• Medical condition
• Disability
• Sex
• Gender identity
• Sexual orientation
• Veteran or military status
• Genetic information

Collected: No, except where voluntarily provided and necessary for a disclosed purpose.

Category D: Commercial Information

Examples include:

• Products purchased
• Products considered
• Purchase history
• Shopping activity
• Customer preferences

Collected: Yes.

Category E: Biometric Information

Examples include:

• Fingerprints
• Faceprints
• Voiceprints
• Iris or retina scans
• Keystroke patterns used for identification
• Gait patterns used for identification

Collected: No.

Category F: Internet or Other Electronic Network Activity

Examples include:

• Browsing history on the Service
• Search history on the Service
• Product views
• Interaction with the Service
• Interaction with advertisements
• Email engagement
• Cookie and Device information

Collected: Yes.

Category G: Geolocation Data

Examples include precise or approximate physical location.

Collected: We may collect approximate location based on Internet Protocol address. We do not ordinarily collect precise geolocation through the Website.

Category H: Sensory Data

Examples include:

• Audio
• Electronic
• Visual
• Thermal
• Olfactory
• Similar information

Collected: No, except where a Consumer voluntarily provides a photograph, video, audio recording, or similar material in a customer-service communication or review.

Category I: Professional or Employment-Related Information

Examples include current or past job history or performance evaluations.

Collected: No through ordinary customer use of the Service.

Category J: Non-Public Education Information

Examples include education records directly related to a student and maintained by an educational institution or a party acting on its behalf.

Collected: No.

Category K: Inferences

Examples include profiles reflecting preferences, characteristics, behavior, or interests.

Collected: We may generate limited inferences regarding product preferences, shopping interests, and likely marketing interests based on Website interactions and purchase activity.

Category L: Sensitive Personal Information

Examples include:

• Account login credentials
• Password information
• Precise geolocation
• Certain government identifiers
• Certain financial-account information
• Certain health, racial, religious, genetic, sexual, or biometric information

Collected: We collect Account login credentials where an Account is created.

We do not ordinarily collect the other categories of Sensitive Personal Information listed above through normal use of the Service.

Payment-card information is generally collected directly by payment processors rather than stored by Us.

Information Excluded From the CCPA/CPRA

Personal Information under the CCPA/CPRA does not include certain information, such as:

• Publicly available information from government records
• Deidentified information
• Aggregated Consumer information
• Information excluded under applicable sector-specific laws

These exclusions may include certain information governed by:

• The Health Insurance Portability and Accountability Act
• The California Confidentiality of Medical Information Act
• The Fair Credit Reporting Act
• The Gramm-Leach-Bliley Act
• The California Financial Information Privacy Act
• The Driver’s Privacy Protection Act

Sources of Personal Information

We may obtain Personal Information from the following sources.

Directly From You

For example:

• Forms You complete
• Accounts You create
• Orders You place
• Communications You send
• Preferences You provide
• Promotions You enter
• Marketing subscriptions You submit

Indirectly From You

For example, by observing Your activity on the Service.

Automatically From You

For example, through Cookies, pixels, Device information, and similar technologies used as You navigate or interact with the Service.

From Service Providers

For example:

• Analytics providers
• Advertising providers
• Payment processors
• Fraud-prevention providers
• Shipping providers
• Email-marketing providers
• Ecommerce platforms
• Customer-support providers

From Business Partners

We may receive information from partners involved in promotions, referral programs, advertising campaigns, or services You request.

Use of Personal Information Under the CCPA/CPRA

We may use or disclose Personal Information for business or commercial purposes, including:

• Operating the Service
• Providing products and services
• Processing orders
• Delivering products
• Processing payments
• Providing support
• Responding to inquiries
• Investigating concerns
• Improving the Service
• Personalizing communications
• Sending requested marketing
• Measuring advertising
• Preventing fraud
• Detecting security incidents
• Debugging errors
• Conducting internal analytics
• Maintaining records
• Complying with law
• Responding to legal requests
• Protecting rights and safety
• Performing internal administrative and auditing activities

Where We collect additional categories of Personal Information or use Personal Information for materially different purposes, We will provide notice as required by law.

Disclosure of Personal Information for Business Purposes

We may have disclosed the following categories of Personal Information for business purposes during the preceding 12 months:

• Category A: Identifiers
• Category B: California customer-record information
• Category D: Commercial information
• Category F: Internet or electronic network activity
• Category G: Approximate geolocation information
• Category K: Limited inferences regarding preferences
• Category L: Account login information

The categories above do not mean that every example listed under each category was disclosed.

When We disclose Personal Information to a Service Provider or contractor, We may enter into an agreement that limits the recipient’s use, retention, and disclosure of that information.

Categories of Third Parties

We may disclose Personal Information to:

• Service Providers
• Contractors
• Payment processors
• Shipping and fulfillment providers
• Analytics providers
• Advertising and marketing partners
• Email and communication providers
• Fraud-prevention and security providers
• Affiliates
• Business partners
• Professional advisers
• Government authorities, where required
• Third parties involved in a business transfer
• Third parties authorized by You

Sale or Sharing of Personal Information

Under the CCPA/CPRA, “sell,” “sale,” “share,” and “sharing” have specific legal meanings.

These definitions may include making Personal Information available to a third party for monetary or other valuable consideration or disclosing Personal Information for cross-context behavioral advertising.

Nova Prime Labs does not sell Personal Information for monetary compensation in the ordinary meaning of the word “sell.”

However, We may allow advertising, analytics, and marketing partners to collect or receive certain information through the Website for interest-based advertising, analytics, measurement, attribution, or audience-building purposes.

These activities may be considered a “sale” or “sharing” under the CCPA/CPRA even when We do not receive money in exchange.

During the preceding 12 months, We may have sold or shared, as those terms are broadly defined under California law, the following categories:

• Category A: Identifiers
• Category D: Commercial information
• Category F: Internet or electronic network activity
• Category G: Approximate geolocation information
• Category K: Limited inferences regarding preferences

We do not knowingly sell or share Personal Information of Consumers under 16 years of age.

Personal Information of Minors Under 16

We do not knowingly collect Personal Information from minors under 16 for the purpose of selling or sharing that information.

We do not knowingly sell or share the Personal Information of Consumers We actually know are under 16 unless the legally required affirmative authorization has been obtained.

Consumers between 13 and 16 years old may have the right to opt in personally.

For Consumers under 13, authorization may need to be provided by a parent or guardian.

A person who has opted in may later opt out.

If You believe that a child has provided Personal Information to Us, please contact Us with sufficient information to allow Us to investigate and, where required, delete the information.

Your Rights Under the CCPA/CPRA

If You are a California resident, You may have the following rights, subject to applicable exceptions.

Right to Notice

You have the right to be informed about the categories of Personal Information collected and the purposes for which the information is used.

Right to Know and Access

You may request information concerning Our collection, use, disclosure, sale, and sharing of Personal Information.

After receiving and verifying a request, We may disclose:

• Categories of Personal Information collected
• Categories of sources
• Business or commercial purposes for collection
• Business or commercial purposes for selling or sharing
• Categories of third parties
• Categories of Personal Information disclosed for business purposes
• Categories of Personal Information sold or shared
• Specific pieces of Personal Information collected

Right to Opt Out of Sale or Sharing

You may direct Us not to sell or share Your Personal Information as those terms are defined under the CCPA/CPRA.

Right to Correct

You may request correction of inaccurate Personal Information.

After receiving and verifying a request, We will use commercially reasonable efforts to correct inaccurate Personal Information unless an exception applies.

Right to Limit Certain Uses of Sensitive Personal Information

Where applicable, You may request that We limit the use or disclosure of Sensitive Personal Information to uses necessary to provide the goods or services reasonably expected by an average Consumer.

We generally use Sensitive Personal Information, such as Account login information, only for permitted business purposes, including operating Accounts, providing the Service, preventing fraud, and maintaining security.

Right to Delete

You may request deletion of Personal Information, subject to exceptions.

We may retain information where necessary to:

• Complete a transaction
• Provide a requested product or service
• Perform a contract
• Maintain an ongoing business relationship
• Detect security incidents
• Prevent fraudulent, deceptive, malicious, or illegal activity
• Prosecute those responsible for illegal activity
• Debug products
• Exercise or protect free-speech rights
• Comply with the California Electronic Communications Privacy Act
• Conduct certain lawful research
• Enable lawful internal uses aligned with Consumer expectations
• Comply with a legal obligation
• Establish, exercise, or defend legal claims
• Maintain opt-out or suppression records

Right to Data Portability

You may request that certain Personal Information be provided in a readily usable format that allows transmission from one entity to another without unreasonable hindrance.

Right to Non-Discrimination

You have the right not to receive discriminatory treatment for exercising applicable privacy rights.

We will not unlawfully:

• Deny goods or services
• Charge different prices or rates
• Impose unlawful penalties
• Provide a different level or quality of service
• Suggest that You will receive a different price or level of service

This does not prohibit lawful loyalty, rewards, premium-feature, discount, or financial-incentive programs that comply with applicable law.

Exercising CCPA/CPRA Rights

To exercise applicable rights, California residents may contact Us:

Email: cs@novaprimelabs.com

Only You or an authorized agent may submit a verifiable request concerning Your Personal Information.

A request must:

• Provide sufficient information to allow Us to reasonably verify Your identity or authority
• Describe the request with sufficient detail to allow Us to understand, evaluate, and respond

We may be unable to respond to a request if We cannot verify:

• Your identity
• Your authority to make the request
• That the Personal Information relates to You

We will respond within the time required by applicable law.

California law generally provides an initial response period of 45 days after receipt of a verifiable request. This period may be extended where reasonably necessary and permitted by law, provided that We notify You of the extension.

Disclosures may be limited to the period required by applicable law.

For data-portability requests, We will select a reasonably usable format.

Authorized Agents

You may designate an authorized agent to submit a request on Your behalf.

We may require:

• Written proof that the agent is authorized
• Verification of Your identity directly with Us
• Confirmation that You gave the agent permission

These requirements may not apply where the agent holds a valid power of attorney under applicable law.

Do Not Sell or Share My Personal Information

You have the right to opt out of the sale or sharing of Personal Information as those terms are defined under the CCPA/CPRA.

To submit a request, You may:

• Use any “Privacy Preferences,” “Update Privacy Preferences,” “Do Not Sell or Share My Personal Information,” or similar interface made available through the Service
• Contact Us at cs@novaprimelabs.com
• Use a legally recognized opt-out preference signal where supported and required

An opt-out submitted through a Cookie or browser interface may apply only to the browser or Device used to submit it.

You may need to submit the preference on each browser or Device You use.

You may also use industry opt-out tools, including:

Network Advertising Initiative:

http://www.networkadvertising.org/choices/

European Interactive Digital Advertising Alliance:

http://www.youronlinechoices.com/

Digital Advertising Alliance:

http://optout.aboutads.info/?c=2&lang=EN

Opt-out tools may place a Cookie on Your browser to record Your preference.

If You delete Cookies, use another browser, or change Devices, You may need to opt out again.

Mobile Device Advertising Choices

Your mobile Device may allow You to limit use of information for interest-based advertising.

Settings may include:

• Opt Out of Ads Personalization
• Delete Advertising ID
• Limit Ad Tracking
• Allow Apps to Request to Track

You may also be able to limit location collection through Your Device settings.

Limit the Use or Disclosure of Sensitive Personal Information

California residents may have the right to limit the use and disclosure of Sensitive Personal Information to uses necessary to provide requested goods or services and other uses permitted by law.

We use Account credentials and similar Sensitive Personal Information primarily to:

• Provide Account access
• Authenticate users
• Secure the Service
• Prevent fraud
• Complete transactions
• Maintain customer support
• Comply with legal obligations

We do not use Sensitive Personal Information to infer characteristics about Consumers unless clearly disclosed and permitted by law.

To submit a request, contact Us at:

cs@novaprimelabs.com

Global Privacy Control and Opt-Out Preference Signals

Where required by applicable law, We may recognize browser-based opt-out preference signals, such as Global Privacy Control, as a request to opt out of certain sales or sharing for the browser or Device sending the signal.

The effectiveness of such signals may depend on:

• Browser support
• Device configuration
• Applicable law
• The technologies used by the Website

Do Not Track Policy

The Service does not currently respond to traditional Do Not Track browser signals.

Some third-party websites may track browsing activity independently.

You may enable or disable Do Not Track through Your browser’s settings.

Where applicable, legally recognized opt-out preference signals may be treated differently from traditional Do Not Track signals.

California Shine the Light Law

California Civil Code Section 1798.83 may allow California residents with an established business relationship with Us to request certain information regarding disclosure of Personal Data to third parties for their own direct-marketing purposes.

To submit a request, contact Us using the information provided in the Contact Us section.

California Privacy Rights for Minor Users

California Business and Professions Code Section 22581 may allow California residents under 18 who are registered users of online sites, services, or applications to request removal of content or information they publicly posted.

To request removal, contact Us and include the email address associated with the Account and sufficient details to identify the content.

Removal may not be complete or comprehensive, and applicable law may not require removal in every circumstance.

Children’s Privacy

The Service is not directed to children under 13.

We do not knowingly collect personally identifiable information from anyone under 13.

If You are a parent or guardian and believe Your child has provided Personal Data to Us, please contact Us.

If We learn that We collected Personal Data from a child under 13 without legally valid parental consent, We will take reasonable steps to delete it.

Where consent is the legal basis for processing and applicable law requires parental consent, We may require consent from a parent or guardian before collecting or using a child’s information.

Links to Other Websites

The Service may contain links to websites that are not operated by Us.

When You click a third-party link, You will be directed to the third party’s website or service.

We encourage You to review the Privacy Policy of every website You visit.

We do not control and are not responsible for the content, privacy policies, security, or practices of third-party websites or services.

Changes to This Privacy Policy

We may update this Privacy Policy periodically.

When We make changes, We will post the updated Privacy Policy on this page and revise the “Last updated” date.

Where required by law, We may provide additional notice through:

• Email
• An Account notification
• A notice on the Website
• A Cookie or privacy-preference interface
• Another appropriate method

Changes become effective when posted unless a different effective date is stated.

You are encouraged to review this Privacy Policy periodically.

Contact Us

If You have questions, concerns, or requests regarding this Privacy Policy, email marketing, or Your Personal Data, You may contact Us:

By email: cs@novaprimelabs.com

By mail:

F2 Nutrition, LLC
dba NovaPrime Labs
PO Box 916
Bath, Ohio 44210
United States