Privacy Policy

1. Who we are

NuuVive is operated by H2Op Brands, Inc., 1968 S. Coast Hwy #6217, Laguna Beach, CA 92651. We are the controller of the personal information described here. This policy covers nuuvive.com and the orders placed through it.

2. What we collect

• Account information — name, email address, password (stored hashed, never in readable form).
• Order information — items, quantities, prices, billing and delivery addresses, phone number where given for delivery, order history, and the lot number supplied against each item.
• Compliance records — the exact wording of the research-use acknowledgment you agreed to at checkout, with the date and time you agreed to it, and correspondence with us about an order. We keep the wording rather than a yes/no flag because a flag records nothing about what was actually agreed.
• Payment information — we do not receive or store your full card number. The card step takes place on the payment provider’s own page. We receive a confirmation, the card type, the last four digits and the billing address.
• Technical and usage information — IP address, browser and device type, pages viewed, referring page, and the dates and times of those visits; and how you move through pages (clicks, scrolling and session replays, with anything you type masked). When you order, we also report the order number, items and value (never your name, email or address) to our analytics provider. Analytics is on by default and you can opt out at any time under Cookie settings at the foot of any page; a Global Privacy Control signal from your browser is treated as an opt-out (see the Cookie Policy).
• Messages you send us — the content of emails, forms and support tickets.
• Product reviews — if you review a product: the name, rating and text you give, which we publish on the product page (your name as first name and last initial); your email address, which we never publish; and your IP address, which we use only to stop spam.
• Referral information — if you arrive through a partner or referral link, the code in the link, the page you landed on and when, kept in your browser (see the Cookie Policy) and recorded on any order you then place.
• Partner program information — if you apply to or join the affiliate program: your name or organization, email address, the channels and audience you describe, your country, your payout method and the account email you give for it, whether we have received your tax form (we do not store the form or your taxpayer identification number in our systems), your acceptance of the partner agreement with its exact text, version and time and the IP address and browser it was given from, commission and payout records, content reviews and any compliance notices.

We do not ask for and do not want health information, medical history or any information about a person’s own use of a material. Do not send it to us. See the Research Use Policy for what happens if you do.

3. How we use it

• to take, process, ship and support your order;
• to keep the compliance record that shows what each customer agreed to, and to enforce the Research Use Policy;
• to send transactional messages — order confirmation, dispatch and tracking, refunds, and service notices about your account;
• to send marketing email only where you have asked for it, with an unsubscribe link in every message;
• to detect and prevent fraud, chargeback abuse and unauthorized use of payment instruments;
• to understand aggregate site usage so we can improve the site;
• to run the affiliate and referral programs: attribute orders, calculate and pay commissions, review partner content, and meet tax reporting obligations;
• to meet tax, accounting, payment-network and other legal obligations, and to establish or defend legal claims.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

4. Legal bases

Where data protection law requires a legal basis, we rely on: performance of our contract with you, for orders and support; our legitimate interests, for fraud prevention, security, compliance records, and for analytics (including session replays) to improve the site, which you can opt out of at any time; your consent, for marketing email; and legal obligation, for tax and accounting records.

5. How long we keep it

• Order, invoice and tax records — seven years from the end of the tax year in which the order was placed.
• Research-use acknowledgments and related correspondence — for as long as the associated order record is kept. These records exist to evidence what was agreed and to show that we enforce it.
• Account data — while the account is open, and for the order-record period afterwards.
• Records of accounts closed for a breach of the Research Use Policy — the minimum identifying information needed to prevent the person opening a new account, kept indefinitely.
• Shop assistant chats — the questions typed into the assistant, its answers and any thumbs-up or thumbs-down, with email addresses, phone numbers, card-like numbers and street addresses removed first, are kept for 180 days to find questions it could not answer, and are not linked to your account.
• Sign-in and cart records — when you sign in (date, sign-in method) and what is in your cart, kept for up to 180 days (the account's first and last sign-in while the account is open) so we can help with your orders and account.
• Analytics data — no longer than 26 months.
• Partner program records — for the life of the partnership and seven years after the tax year of the last payout. Applications that are not approved — two years from the decision. Records of partnerships ended for a breach of the content rules — the minimum identifying information needed to prevent re-enrollment, kept indefinitely.
• Referral codes on orders — as part of the order record.
• Marketing consent and suppression records — until you unsubscribe, and the suppression record indefinitely so we do not email you again.

6. Who we share it with

We share personal information only with service providers acting on our instructions, and only with what they need:

• our payment provider, which processes the card step and holds the card data we never see;
• the shipping carrier, which receives the delivery name, address, phone number and parcel details;
• our commerce and hosting providers, which store order and account records;
• our email service provider, which sends transactional and, where you have asked for it, marketing email;
• our analytics providers, which receive usage data and session replays unless you opt out;
• professional advisers, and public authorities where the law requires it or where it is necessary to establish or defend a legal claim.
• affiliate partners, when you arrive through their link or use their code: a partner sees that an order was placed, the date, its commissionable value and its status. We never give a partner your name, contact details, address or the items you ordered.

If the business is sold or reorganized, records may transfer with it, and this policy continues to apply to them.

7. Your rights

Depending on where you live, you may ask us to give you a copy of your information, correct it, delete it, port it to another provider, restrict how we use it, or object to a use based on legitimate interests. You may withdraw consent to marketing at any time.

Email support@nuuvive.com and we will respond within the period the applicable law allows, normally within 30 days. We may ask you to confirm your identity. Some information we must keep — order and tax records (with your name, street address, phone and email removed), the delivery details kept with each shipped lot in case of a product recall, a log of emails already sent (up to 400 days), and records of accounts closed for a breach of the Research Use Policy — and we will tell you when that is why a deletion request is refused in part.

8. California residents

California residents have the right to know what personal information we collect and disclose, to request deletion or correction, and not to be discriminated against for exercising those rights. We do not sell personal information and do not share it for cross-context behavioral advertising, so there is no opt-out to offer. Use the contact details in section 14 to make a request, or to have an authorized agent make one for you.

9. Cookies

Cookies and similar browser storage are covered in the Cookie Policy, which lists what is set and how to control it.

10. Security

The site is served over TLS, passwords are stored hashed, card data never reaches our systems, and administrative access is restricted to the people who need it. No method of transmission or storage is completely secure, and we do not claim otherwise. If a breach affects your information we will notify you and the relevant regulator as the law requires.

11. International transfers

We operate in the United States and process information there. If you are outside the United States, using this site means your information is transferred to and processed in the United States, where data protection law may differ from your own. Where a transfer is subject to European or United Kingdom data protection law, we rely on standard contractual clauses with the recipient.

12. Children

This site is not for anyone under 21, and we do not knowingly collect information from anyone under that age. If we learn that we have, we delete it and close the account.

13. Changes

We may update this policy. The date at the top shows when it last changed. If a change materially affects how we use your information we will tell account holders by email before it takes effect.

14. Contact

Privacy inquiries: support@nuuvive.com. Postal: H2Op Brands, Inc., 1968 S. Coast Hwy #6217, Laguna Beach, CA 92651. General inquiries go through the contact page.