California Privacy Notice

HALEA LIFE – CALIFORNIA PRIVACY NOTICE

Last Updated: September 4, 2025

This California Privacy Notice (“Notice”) supplements the information in Halea Life Nutrition’s Privacy Policy and applies only to California residents. It explains what personal information we collect, how we use and disclose it, and the rights you may have under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, “CCPA/CPRA”). Capitalized terms not defined here have the meanings in our Privacy Policy.

Notice at Collection (Summary). We collect identifiers (like name, email, shipping address), commercial data (orders, subscriptions), internet/technical data (cookies, IP), and limited inferences to provide our site, fulfill orders, prevent fraud, offer support, and run analytics/advertising. We may “sell” or “share” data for cross-context behavioral advertising as those terms are defined by California law. You can manage preferences via Cookie Preferences and we honor Global Privacy Control (GPC). See details below.

Information We Collect

Depending on how you interact with us (site visit, purchase, subscription, support), we may collect the following categories of personal information:

  • Identifiers. Name, email address, phone number, billing/shipping address, IP address, device identifiers, and order IDs.
  • Commercial Information. Products viewed, items added to cart, order history, subscription status, loyalty/referral participation, and limited payment details (we receive payment authorization tokens and confirmations; card numbers are processed by our payment processor and not stored by us).
  • Internet or Other Electronic Network Activity. Browsing behavior on our site, interactions with emails, cookie/SDK data, and log files (including IP, timestamps, user agent, pages viewed).
  • Audio/Electronic Communications. Customer support emails or messages, and (if enabled) chat transcripts. We do not record phone calls.
  • Geolocation Data. Approximate location derived from IP address (e.g., city/region). We do not collect precise geolocation.
  • Inferences. Inferences about interests or preferences (e.g., categories you browse) to improve your experience and our marketing.
  • Sensitive Personal Information (SPI). We do not seek to collect SPI. In the limited case where SPI could be implicated (e.g., account login credentials for your customer account), we use it only to provide our services. We do not use or disclose SPI for purposes that require a “Right to Limit.”

Sources. We collect information directly from you (checkout, account, forms, support), automatically (cookies/SDKs), and from service providers (e.g., payment, fulfillment, analytics, advertising) and marketing partners (e.g., when you click our ads).

We do not intentionally collect the following from consumers: government IDs, precise geolocation, or protected classification characteristics (e.g., race, religion) unless you voluntarily provide such information (e.g., in a free-text field). Our site is a general-audience site and is not directed to children under 13.

Purposes of Collection and Use

We use personal information for the following business and commercial purposes:

  • Operate the site and services. Provide, maintain, and secure our Shopify storefront; display content; remember preferences.
  • Fulfill orders & provide support. Process purchases and returns; deliver products; communicate about orders; provide customer care; prevent fraud and abuse.
  • Accounts, subscriptions & rewards. Create and service customer accounts; manage subscriptions, discounts, or loyalty/referral programs you join.
  • Analytics & improvement. Measure and improve site performance, products, and features; debug and fix errors.
  • Marketing & advertising. Send you marketing (with your consent where required); perform interest-based advertising (including cross-context behavioral advertising); measure campaign performance; personalize content.
  • Security & legal. Protect our rights and users; comply with law; maintain records; obtain legal advice; enforce terms.

We may aggregate or de-identify information and use it for any lawful purpose.

Disclosures of Personal Information

We disclose personal information to the following categories of third parties:

  • Service Providers/Processors. Payment processors, fraud prevention, fulfillment/shipping, email/SMS providers, customer support/chat, analytics, and web hosting. These parties process data on our behalf under contracts that limit their use.
  • Advertising/Analytics Partners. We allow certain third parties to collect information on our site (e.g., through cookies, pixels, SDKs) to provide analytics and interest-based advertising. Under California law, these disclosures may be considered a “sale” or “sharing” of personal information.
  • Affiliates & Corporate Transactions. We may disclose to our affiliates (if any) and in connection with an actual or prospective merger, acquisition, or asset sale.
  • Legal/Safety. To comply with law, respond to valid legal requests, or protect rights, safety, and security.

We do not knowingly sell or share the personal information of consumers under 16.

Your California Privacy Rights

Subject to certain exceptions, California residents may have the rights below. You may exercise these rights by following the instructions in How to Submit a Request.

  • Right to Know/Access. Request the categories and specific pieces of personal information we have collected, the categories of sources, purposes, and third-party disclosures.
  • Right to Delete. Request deletion of personal information we collected, subject to legal/business exceptions (e.g., completing a transaction, security/fraud prevention, recordkeeping).
  • Right to Correct. Request correction of inaccurate personal information.
  • Right to Opt-Out of Sale/Sharing. Opt-out of disclosures that are considered a “sale” or “sharing” for cross-context behavioral advertising.
  • Right to Limit Use of SPI. We do not use or disclose Sensitive Personal Information for purposes that trigger the right to limit; therefore, we do not offer a separate “Limit Use of My Sensitive Personal Information” link.
  • Non-Discrimination. We will not discriminate against you for exercising rights under the CCPA/CPRA.

How to Submit a Request (Access/Delete/Correct; Do Not Sell/Share)

  • Access/Delete/Correct Requests (DSAR). Submit a request at Privacy Choices or email aloha@halealife.com. If you have an account, you may also review/update certain info by logging in.
  • Opt-Out of Sale/Sharing. Use Cookie Preferences in our site footer to adjust advertising/analytics cookies, or enable a browser that sends Global Privacy Control (GPC)—we honor GPC signals.
  • Verification & Authorized Agents. We will verify your request (e.g., by confirming control of your email or account). Authorized agents must provide proof of authority and we may require you to verify your identity directly.

Retention

We retain personal information for as long as reasonably necessary to provide the services and for the purposes described in this Notice, including to comply with legal, tax, or accounting obligations, resolve disputes, and enforce agreements. Typical retention periods (subject to change):

  • Order/transaction records: up to 7 years (tax/accounting).
  • Customer support records: up to 3 years after last interaction.
  • Marketing/subscription data: until you opt out or after 24 months of inactivity.
  • Cookie/analytics data: per vendor defaults or as configured in Cookie Preferences.

Cookies, Targeted Advertising & GPC

We use cookies and similar technologies for essential site functions, analytics, and advertising. Manage your preferences via Cookie Preferences in our footer at any time. We recognize and process Global Privacy Control (GPC) signals as a request to opt-out of sale/sharing for the associated browser.

Financial Incentives (e.g., Email/SMS Sign-Up, Subscribe & Save)

From time to time, we may offer discounts, perks, or rewards (e.g., Subscribe & Save or sign-up coupons) that may involve the collection of personal information such as your email or phone number. Participation is voluntary and you may opt out any time (e.g., unsubscribe). The value of the program is related to the discount offered and our good-faith estimate of the value of your data, which considers expenses related to the program (e.g., technology, marketing) and anticipated incremental revenue.

Children’s Privacy

Our site is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, please contact us so we can delete it.

Changes to This Notice

We may update this Notice from time to time. The “Last Updated” date indicates when this Notice was last revised. Material changes will be posted on this page.

Contact Us

Questions about this Notice or our privacy practices?

Email: aloha@halealife.com

Postal: Halea Life, Attn: Privacy, 9 Bolivar, Newport Beach, CA 92663