Privacy policy
ORABIO LABS PRIVACY POLICY
Effective Date: September 15, 2026
Last Updated: September 15, 2026
1. Who We Are and What This Policy Covers
ORABIO LABS LLC, a Wyoming limited liability company (“Orabio Labs,” “we,” “us,” or “our”), operates orabiolabs.com (the “Site”).
This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit our Site, purchase products, create an account, subscribe to email or text messages, or communicate with us.
Our online store is hosted on Shopify. Payments, once sales begin, will be handled through Whop and its payment partners.
As of September 15, 2026, sales have not yet begun, but we have already received pre-launch visits or contacts. This Policy covers those pre-launch interactions. The purchase, payment, fulfillment, refund, and order-history provisions apply when those activities begin.
“Personal information” means information that identifies, relates to, or can reasonably be linked to an individual or household, as defined by applicable law.
Our business serves the United States market. Privacy rights may depend on your state of residence, the nature of the information, and whether a particular law applies to our business.
This Policy provides information about our practices. Visiting the Site, making a purchase, or accepting our Terms of Service does not, by itself, constitute consent to marketing messages, advertising tracking, or another activity requiring separate consent.
2. Personal Information We Collect
The information involved depends on how you interact with us and which services you use.
| Category | Information involved | Principal purposes |
|---|---|---|
| Identity and contact information | Name, email address, telephone number, billing address, shipping address, and recipient details | Customer communication, order fulfillment, account management, and responding to requests |
| Account information | Account identifiers, authentication information, saved preferences, and account activity, where you create or use an account | Account access, security, and customer service |
| Commercial and transaction information | Products ordered, quantities, order history, transaction references, payment status, refunds, shipping records, and dispute information | Processing purchases, delivery, accounting, refunds, and dispute resolution |
| Eligibility and professional information | Age confirmation, business or institutional affiliation, professional role, purchasing authority, and information supplied during a necessary eligibility review | Verifying eligibility to purchase research materials and addressing suspected prohibited use |
| Communications | Messages, support inquiries, attachments you provide, and our responses | Customer support, resolving concerns, and maintaining relevant business records |
| Marketing preferences and consent records | Email address or telephone number used to subscribe, subscription choices, the consent disclosure presented, timestamps, and unsubscribe records | Delivering authorized marketing and respecting your communication choices |
| Technical and usage information | IP address, approximate location inferred from IP address, browser and device information, cookie identifiers, referring pages, timestamps, and interactions with our Site or messages | Operating and securing the Site, diagnosing problems, measuring engagement, and the activities disclosed in Section 7 |
| Profiles and inferences | Interests inferred from products viewed, cart activity, email engagement, subscription preferences, and, after sales begin, purchase activity | Segmenting our audience, personalizing communications, operating marketing automations, and the Shopify services described in Sections 5 and 7 |
Payment details entered during a Whop transaction are processed by Whop or its payment partners. Depending on the payment method and integration, we receive transaction information needed to administer the order, which may include a payment reference, payment status, billing information, and limited payment-method details.
Do not send full payment-card numbers, security codes, passwords, or unnecessary identity documents through ordinary email or customer support messages.
Additional collection practices:
We do not collect government-ID images, verification selfies, biometric identifiers or biometric templates, precise geolocation, call recordings, or session replay recordings through our Site or our own eligibility and support processes. Approximate location derived from an IP address is different from precise geolocation.
We do use customer profiles, audience segments, and inferences through Klaviyo and Shopify for the marketing, engagement measurement, automation, personalization, and enhanced services described in Sections 5 and 7. These profiles concern interactions and product interests; they are not intended to infer medical conditions or treatment needs. Marketing segmentation does not itself determine eligibility to purchase.
Whop and other providers may independently collect information under their own notices when you use their separate services. Their separate payment, identity, and security checks are governed by their own privacy notices.
Where information is necessary to complete a purchase or a reasonable eligibility check, we will identify that requirement. Without the necessary information, we may be unable to provide the requested service.
3. Where Information Comes From
We obtain personal information:
- Directly from you, including through checkout, account features, subscription forms, privacy requests, and customer support.
- Automatically through the Site, including through Shopify, server logs, cookies, and the technologies described in Section 7.
- From Whop and payment partners, including transaction confirmations, payment status, refunds, and information relevant to payment disputes or fraud prevention.
- From shipping and fulfillment providers, including delivery status and information needed to resolve shipping problems.
- From Klaviyo and Shopify, including subscription status, message delivery information, engagement events, and unsubscribe requests.
- During eligibility reviews, from information you supply and, where reasonably necessary, relevant public business or institutional sources.
We combine information from these sources when reasonably necessary for the purposes described in this Policy.
4. How We Use Personal Information
We use personal information to:
- Operate the Site and provide account features.
- Process, fulfill, deliver, cancel, and refund orders.
- Communicate about payments, delivery, support requests, recalls, and other product concerns.
- Verify purchasing eligibility, including our minimum age requirement and legitimate laboratory research purpose.
- Detect and investigate fraud, unauthorized access, security incidents, and suspected prohibited product use.
- Maintain accounting, tax, transaction, and compliance records.
- Send email and SMS marketing in accordance with your choices and applicable law.
- Understand Site performance and marketing effectiveness, personalize communications, and support the Shopify enhanced services described in Sections 5 and 7, subject to applicable consent and opt-out choices.
- Respond to privacy requests and maintain records of consent and opt-out choices.
- Comply with legal obligations, respond to valid legal process, and establish or defend legal claims.
Where consent is required, we obtain it before the relevant processing. We do not treat a general acceptance of this Policy as a substitute for that consent.
Before using information for a materially different purpose, we will provide any notice and obtain any consent required by applicable law.
5. Shopify, Whop, and Communication Providers
5.1 Shopify
Shopify provides the platform supporting our online store. Information about your visits, account activity, and purchases is processed through Shopify to operate the store and provide related services.
Shopify processes certain information on our behalf. Depending on the services used, Shopify may also process information for purposes for which it is independently responsible.
For more information, review the Shopify Consumer Privacy Policy.
Shopify Network Intelligence is enabled for our store.
Shopify Network Intelligence allows Shopify to use information from interactions with our store together with information from interactions with other merchants and Shopify to provide enhanced services. These include service improvements, personalization, and advertising-related uses. To provide these services, we share personal information with Shopify and relevant third parties that may be located in other countries. The information involved includes the identifiers and activity data described in Sections 2 and 7, and transaction data when purchases begin.
Section 7 explains the related tracking, advertising uses, and choices. Shopify also provides information and controls for processing for which it is responsible through its Privacy Portal. That portal is separate from the privacy choices for our store.
5.2 Whop Payments
We use Whop to facilitate payments. When you complete a transaction through a Whop checkout or payment interface, Whop and its payment partners process the information needed to handle that transaction, provide payment services, prevent fraud, and meet their legal obligations.
We exchange relevant order and transaction information with Whop to confirm purchases, reconcile payments, provide support, process refunds, and address disputes.
Whop may process information for its own payment, security, compliance, and platform purposes. Its practices are explained in the Whop Privacy Policy.
A request to Orabio Labs concerns information under our control. Whop may need to address a separate request concerning information it controls independently. We will reasonably assist in identifying the appropriate contact.
5.3 Email and SMS Providers
We use the following provider or providers to administer email and text-message communications:
Email marketing: Klaviyo and Shopify. See the Klaviyo Privacy Policy and the Shopify Consumer Privacy Policy.
SMS marketing: Klaviyo. See the Klaviyo Privacy Policy.
These providers process information such as contact details, consent records, communication preferences, message content, delivery status, and unsubscribe requests to operate our communication programs.
Message engagement tracking:
Email engagement tracking and marketing automations are enabled. Klaviyo and Shopify process delivery events, email opens where measurable, link clicks, associated identifiers, timestamps, and relevant Site or cart activity. We use this information to measure campaigns, segment recipients, personalize messages, and operate email follow-ups, including abandoned-cart emails. Purchase attribution applies once purchases begin.
Email tracking may use small embedded images and tracked links that associate engagement with a recipient. Tracking can also connect a click with later Site activity where cookies and privacy settings permit. Email opens are estimates and may be affected by email-provider privacy features.
SMS subscription and delivery information is processed through Klaviyo. Where a message contains a tracked link, interactions and attributable Site activity may be associated with the subscriber. SMS marketing requires the separate enrollment described in Section 8. Email automation does not enroll anyone in SMS. Cart-reminder texts, if offered, are subject to Section 8.2.
6. Other Disclosures of Personal Information
We disclose relevant personal information in the following circumstances:
- Operational services. To providers assisting with hosting, customer support, order management, shipping, fulfillment, fraud prevention, and other services described in this Policy. The information disclosed is limited to what is reasonably needed for the relevant function.
- Professional advice. To legal counsel, accountants, auditors, insurers, and other professional advisers when reasonably necessary for their services.
- Legal requirements and protection of rights. Where required by applicable law or valid legal process, or where disclosure is otherwise legally permitted and reasonably necessary to investigate fraud, address a security threat, protect safety, or establish or defend legal claims.
- Business transactions. In connection with a proposed or completed merger, acquisition, restructuring, financing, or transfer of the relevant business or assets, subject to appropriate safeguards and applicable legal requirements. Such a transaction does not automatically authorize materially different uses of your information.
- At your direction. Where you ask us to disclose information or separately authorize a clearly explained disclosure.
Disclosures involving advertising, sale, or sharing as defined by state privacy laws are addressed in Section 7. The protections for SMS subscription information in Section 8 also apply to disclosures under this section.
Where a provider acts on our behalf, we require appropriate contractual restrictions and safeguards. A provider acting independently may have its own privacy obligations and notices.
7. Cookies, Analytics, Advertising, and Privacy Signals
7.1 Cookies and Similar Technologies
The Site uses cookies and similar technologies to support functions such as shopping-cart operation, account sessions, security, and remembering preferences.
Additional technologies may support analytics, personalization, or advertising where identified below and permitted by your choices and applicable law.
Active analytics, advertising, and enhanced Shopify services:
Shopify operates the storefront and related security, cart, preference, performance-measurement, and personalization functions. Shopify Network Intelligence is enabled. The information involved includes IP addresses, device and cookie identifiers, browsing and cart activity, and related profile or transaction information where available. Shopify's Cookie Policy and cookie tables describe its cookies and published lifetimes; the cookies actually used depend on the relevant feature and your privacy choices.
Klaviyo supports our email and SMS programs, engagement measurement, customer profiles, and marketing automations. Its tracking technologies can connect product views, cart activity, and message interactions with an identified profile. Klaviyo's __kla_id cookie may persist for up to two years, subject to browser limits, cookie deletion, and the applicable configuration. See Klaviyo's cookie information. These tracking functions are analytics or marketing functions and are not treated as essential merely because a cookie is placed under our domain.
We do not currently use Meta Pixel, TikTok Pixel, or Google Analytics on our Site. Our use of Shopify and Klaviyo still involves the tracking described here.
You can adjust browser settings to limit or delete cookies. Blocking essential cookies may prevent parts of the Site from working correctly.
Where the Shopify cookie banner is displayed, you can use its controls to make choices about nonessential cookies and, where available, reopen Cookie Settings to change those choices. Where prior consent is required, the relevant nonessential tracking must remain disabled until you consent. You can also contact support@orabiolabs.com about your choices.
Cookie Settings: OPERATIONAL FIELD — insert the verified Shopify link or working control for reopening cookie preferences.
Browser settings alone may not control information transmitted through server-side integrations or customer-list uploads. Applicable choices must also be implemented for those activities.
7.2 Sale, Sharing, and Targeted Advertising
Some state privacy laws define “sale” to include exchanges for valuable consideration other than money. “Sharing” can include disclosure for advertising based on activity across different businesses, websites, or services.
Certain advertising integrations and Shopify enhanced services can fall within these definitions.
Our actual practices:
We do not sell customer lists for money. However, Shopify Network Intelligence is enabled and permits advertising-related uses of information from our store together with activity across other merchants and Shopify. We therefore treat the covered advertising uses as sharing or targeted advertising, and as a sale where an applicable law's broader definition includes the exchange. You may opt out of those covered uses.
The categories involved are online and customer identifiers, internet or electronic-network activity, product-interest information, and related marketing inferences. Commercial information includes products considered before launch and purchase information after sales begin. Recipients include Shopify and the advertising, personalization, and analytics partners involved in its enhanced services.
Klaviyo and Shopify also process contact details, engagement information, and marketing preferences to operate our own communication programs. Service-provider processing for our communications is not, solely for that reason, a sale or cross-context advertising disclosure. SMS subscriber numbers, opt-in records, and consent information are subject to Section 8.3 and are excluded from the advertising disclosures authorized by this Policy.
Where you have an applicable opt-out right, exercise it through:
Do Not Sell or Share My Personal Information / Your Privacy Choices: OPERATIONAL FIELD — insert the actual Shopify data-sharing opt-out page URL after Shopify creates the page. This field must be completed with the verified store link before the final policy is published.
You may also email support@orabiolabs.com with an opt-out request, or use a valid GPC signal as described below. An advertising opt-out does not necessarily stop all advertising; it limits the particular uses covered by the request.
7.3 Global Privacy Control
Where required by applicable law, we recognize valid opt-out preference signals, including Global Privacy Control (GPC), as requests to opt out of covered sale, sharing, or targeted advertising. Shopify supports applying these choices to the advertising uses of Shopify Network Intelligence through its customer privacy controls. Our responsibility to honor an applicable opt-out also extends to relevant integrations and information we control.
We apply the signal to the browser or device sending it and, where required and reasonably identifiable, to the associated customer profile. You may need to enable the signal on each browser or device you use.
An opt-out request does not require you to create an account. We do not require identity verification for an opt-out where applicable law prohibits that requirement.
7.4 Do Not Track
Some browsers transmit a “Do Not Track” signal, which is distinct from GPC.
We do not treat the general Do Not Track browser setting as a substitute for a request through our privacy controls or a legally recognized opt-out signal. A Do Not Track setting alone should not be understood as disabling all tracking described in this Policy. Use the cookie controls, a valid GPC signal, or contact us to exercise the applicable choices.
This response does not limit our obligation to honor GPC or another legally recognized opt-out mechanism.
8. Email and SMS Marketing
8.1 Email Marketing
We use your email address to send marketing communications where permitted by law and consistent with your subscription choices.
You can unsubscribe using the link in a marketing email or by contacting us. We honor requests promptly and no later than 10 business days after receipt, or sooner if applicable law requires.
Unsubscribing from marketing does not prevent necessary nonpromotional communications about an order, a refund, a security issue, or a privacy request.
We retain a limited suppression record where necessary to avoid sending further marketing after you unsubscribe.
8.2 SMS Marketing
If you separately enroll in our SMS program, we use Klaviyo to process your telephone number and related subscription information and send the types of messages described at enrollment. Messages may be sent using automated technology.
Consent to marketing text messages is not a condition of purchase. Providing a telephone number for delivery or customer support does not, by itself, enroll you in SMS marketing.
We obtain any required prior express written consent through a separate enrollment process. The enrollment disclosure identifies Orabio Labs, the nature of the messages, and the applicable program terms.
Message frequency is disclosed at enrollment. Message and data rates may apply.
If cart-reminder texts are offered as part of your SMS enrollment, Site cookies and cart or checkout events are used to identify when items remain in a cart without a completed purchase and to trigger those reminders. Such messages are sent only under the consent and program terms applicable to them; agreeing to email reminders is not consent to SMS reminders.
To stop marketing text messages, reply STOP to a message. You may also contact us or use another reasonable method that clearly communicates your request. For assistance, reply HELP or use the contact information in Section 17.
We honor revocation requests within applicable legal deadlines. You may receive a single nonpromotional confirmation of your opt-out where permitted by law. We will not use an unrelated subscription as a reason to disregard a legally effective revocation.
8.3 SMS Subscription Information
We do not sell, rent, or disclose SMS subscriber telephone numbers, opt-in records, or consent information to third parties or affiliates for their own marketing or promotional purposes.
We disclose this information only as necessary to providers supporting our messaging program, to honor your choices, or as otherwise legally required or permitted for a nonmarketing purpose described in this Policy.
This restriction applies to Shopify Network Intelligence, advertising integrations, audience disclosures, and every other general disclosure described in this Policy. We do not authorize SMS opt-in records or consent status to be used for purposes unrelated to operating the messaging program, honoring your choices, or a permitted nonmarketing legal purpose. A business transfer does not, by itself, authorize the purchaser to use SMS subscription information outside the scope of the applicable consent.
9. Research Eligibility and Sensitive Information
Our products are intended for lawful laboratory research and are not offered for human or veterinary administration.
Eligibility reviews may involve information about age, professional qualifications, institutional affiliation, purchasing authority, and intended research use. We use relevant records to assess eligibility, address suspected misuse, and document decisions where reasonably necessary.
An eligibility review does not justify collecting unrelated sensitive information.
Please do not submit medical records, prescriptions, diagnoses, treatment histories, patient information, or other unnecessary health information. Such information is not required to purchase research materials.
If you provide unsolicited sensitive information, we will restrict its handling and delete or redact it where appropriate, subject to a legitimate legal or operational need to retain it.
Our current eligibility process does not collect government-ID images, verification selfies, or biometric information. Before introducing a materially different verification process involving sensitive information, we will provide any required additional notice and obtain any required consent.
Certain information or inferences may qualify as consumer health data under state law even when collected outside a healthcare setting. Where those laws apply to our actual processing, we will provide the required separate disclosures and choices. This general Policy does not replace a legally required consumer health data notice.
10. How Long We Keep Information
We retain personal information for periods reasonably necessary for the purposes described in this Policy, taking account of the category of information, legal requirements, and the need to resolve disputes or prevent fraud.
| Information category | Retention criteria |
|---|---|
| Account and contact information | For the duration of the account or relevant customer relationship, followed by any justified period needed to address outstanding matters or legal obligations |
| Orders, payments, refunds, and delivery records | For applicable accounting, tax, transaction, dispute, and recordkeeping requirements |
| Eligibility records | For the period reasonably needed to establish eligibility, support a documented decision, investigate a concern, or meet a legal obligation; underlying documents may require a shorter period than the verification result |
| Customer support communications | Until the request is resolved and for a proportionate period needed for follow-up, dispute handling, or legal requirements |
| Marketing and consent records | While a subscription remains active and afterward where necessary to demonstrate consent, address a dispute, or preserve an opt-out |
| Technical logs and tracking information | According to the security or operational purpose and the configured lifetime of the relevant technology |
We do not retain information indefinitely merely because it might be useful.
When information is no longer needed, we delete it or deidentify it, subject to applicable law. Backup copies are subject to controlled retention and deletion processes and are not retained as a way to avoid a valid deletion obligation.
Where we retain information after a deletion request because an exception applies, we limit its use to the purpose supporting that exception.
11. Security
We use reasonable administrative, technical, and organizational safeguards appropriate to the information and risks involved.
These measures are intended to reduce unauthorized access, loss, misuse, alteration, and disclosure. Access is limited to people and providers who need the information for an authorized purpose.
No website, transmission method, or storage system can be guaranteed completely secure. This statement does not waive any security or notification obligation imposed by law.
Protect your login credentials and contact us promptly if you suspect unauthorized activity involving your account.
12. Your Privacy Rights and Requests
Depending on your state of residence and applicable law, you may have rights to:
- Confirm whether we process your personal information.
- Access information about our processing and obtain a copy of your information.
- Correct inaccurate personal information.
- Request deletion, subject to legal exceptions.
- Receive information in a portable format.
- Opt out of a sale, sharing, or targeted advertising.
- Opt out of certain profiling or automated decisions producing legal or similarly significant effects.
- Limit certain uses or disclosures of sensitive personal information.
- Withdraw consent where processing relies on consent.
- Appeal a refusal to act on a request.
- Exercise applicable rights without unlawful discrimination.
These rights are subject to the relevant law’s scope and exceptions.
How to Submit a Request
Email: support@orabiolabs.com
Submit privacy requests directly by email to support@orabiolabs.com.
Describe the right you wish to exercise and provide enough information for us to locate the relevant records. We may ask for your state of residence to determine the applicable requirements.
We use proportionate verification measures where necessary to protect your information, such as matching information already held or confirming control of an existing contact address. We do not ask for government-ID images, selfies, biometric data, or full payment-card details to submit or verify a request. We do not require unnecessary sensitive information or require a new account solely to submit a request.
Authorized agents may submit requests where permitted by law. We may require evidence of authority and any verification allowed by the applicable rules.
We respond within the applicable legal deadline. If an extension is permitted and necessary, we will explain the reason and expected response period.
Requests are generally free. We charge a fee or decline a request only where permitted by law and will explain the basis.
Appeals and Complaints
If we deny a request, we will explain the decision and any available appeal process.
To appeal, contact support@orabiolabs.com with the subject “Privacy Appeal” and identify the original request. We will review the appeal and respond within the applicable deadline.
You may also complain to your state attorney general or another competent privacy regulator.
13. Additional California Disclosures
Where the California Consumer Privacy Act, as amended, applies to our processing, California residents have the relevant rights described in Section 12, including rights concerning access, deletion, correction, sale or sharing, certain sensitive information uses, and nondiscrimination.
Sections 2 through 7 identify the information categories, sources, purposes, and recipient categories relevant to our practices.
Disclosures covering the preceding 12 months
These disclosures cover our pre-launch activity within the twelve-month period ending September 15, 2026. We have received visits or contacts, but customer sales have not begun. We therefore do not report completed customer purchases, customer payment transactions, fulfilled orders, or post-sale refunds as historical activity. Pre-launch browsing, contacts, and marketing interactions can still involve personal information and the Shopify advertising uses described in Section 7.
The table describes pre-launch processing. Contact, subscription, cart, and profile information is included only where the relevant interaction occurred or information was recorded. Order-related processing applies when orders begin.
| Information category and pre-launch scope | Business-purpose recipients | Sale or sharing for advertising |
|---|---|---|
| Identifiers and customer-record information: online identifiers, IP addresses, and contact details where supplied in pre-launch contacts or subscriptions | Shopify; Klaviyo for messaging and engagement; providers supporting Site operation and customer communications | Online and customer identifiers may be used by Shopify and its enhanced-service partners under Section 7; SMS subscription information is excluded under Section 8.3 |
| Internet or other electronic-network activity: Site visits, device and cookie information, and message engagement where recorded | Shopify; Klaviyo for relevant tracking and engagement; technical and security providers | Covered activity may be used by Shopify and its advertising, personalization, and analytics partners under Section 7 |
| Commercial information: products considered or placed in a cart where those events occurred; no completed customer purchase history before launch | Shopify; Klaviyo for relevant marketing automations | Product-interest activity may be used by Shopify and its enhanced-service partners; no completed customer purchase records exist to share before sales begin |
| Communications, subscription preferences, and consent records: information supplied through actual contacts or enrollments | Shopify and Klaviyo where they support the relevant communication; customer-support providers | Support-message content and consent records are not authorized for cross-context advertising; SMS protections in Section 8.3 apply |
| Inferences: product interests or engagement segments where derived from recorded interactions | Shopify and Klaviyo for personalization, measurement, and our communications | Relevant non-sensitive marketing inferences may be used by Shopify and its enhanced-service partners under Section 7 |
Age confirmations, institutional or professional information, and account authentication information are collected only if a relevant account or eligibility interaction occurs. Their operational recipients, where applicable, are Shopify and providers supporting account access or eligibility review; eligibility documents and account authentication secrets are not authorized for advertising sharing.
Our Site does not collect government-ID images, verification selfies, biometric identifiers or templates, precise location, call recordings, or session replay recordings. We do not request medical records, genetic information, patient information, or nonpublic student education records as part of our research-material sales process. Age confirmation and professional affiliation are distinct from those excluded categories. Any unsolicited sensitive material is handled as described in Section 9.
We do not sell customer lists for money. The pre-launch information described above may be used in the Shopify Network Intelligence processing covered by Section 7, including before any sale of products. General legal, advisory, business-transfer, and directed disclosures remain subject to Section 6 and the limitations stated there. The purposes, sources, and retention criteria for each category are described in Sections 2 through 10.
Sensitive personal information
We do not collect the government-ID images, biometric data, precise location, recordings, or health records excluded above as part of our current Site processes. Account authentication information, when an account is used, and financial account or payment credentials handled by Whop when payments begin may qualify as sensitive personal information under California law. We have no completed customer payment transactions before launch.
Such account and payment information is processed only as necessary for the requested account or transaction, security, fraud prevention, and legally permitted related purposes. We do not use it to infer sensitive characteristics or authorize its use for advertising. We do not use or disclose sensitive personal information for purposes that require offering a California right-to-limit control. If our practices change, we will provide any required notice, consent mechanism, and limitation control before the new processing begins. You may contact support@orabiolabs.com concerning sensitive information or an applicable right.
We do not knowingly sell or share personal information about individuals under 16 years old.
Where California’s “Shine the Light” law applies, you may contact us to request information about qualifying disclosures of personal information to third parties for their own direct marketing.
Nothing in this Policy or our Terms of Service requires you to waive a nonwaivable California privacy right.
14. Age Restrictions and Children’s Privacy
Our Site and purchasing services are intended for people aged 21 or older. Individuals under 21 are not eligible to purchase.
Our Site is not directed to children under 13. We do not knowingly collect personal information from children under 13 in circumstances prohibited by the Children’s Online Privacy Protection Act.
If we learn that information has been collected from a child contrary to applicable law, we will take appropriate steps to stop the processing and delete the information, subject to any legally permitted exception.
If you believe a child has provided personal information to us, contact us using Section 17.
Our purchasing age restriction does not replace legal obligations concerning children or other minors.
15. Processing Locations and External Services
Although we serve the United States market, personal information may be processed in the United States and other countries where Shopify, Whop, Klaviyo, or our other providers operate.
Those countries may have different privacy laws. We apply any safeguards required by laws applicable to the processing. Serving U.S. customers does not mean that all information is stored exclusively in the United States.
The Site may link to external websites or allow you to interact with independent services. Their processing is governed by their own privacy notices.
Information you intentionally publish through a public review or similar feature may be visible to others. Avoid including sensitive personal information in public submissions.
16. Changes to This Policy
We may revise this Policy as our services, providers, practices, or legal obligations change. The updated version will display a revised date.
For material changes, we will provide additional notice where appropriate or required, such as a prominent Site notice or a message using available contact information.
Where a new use requires consent, we will obtain that consent before beginning the use. Posting a revised Policy or your continued use of the Site does not replace legally required consent.
Changes do not retroactively remove rights concerning information previously collected.
17. Contact Us
For questions about this Policy, personal information, privacy requests, or communication preferences, contact:
ORABIO LABS LLC
A Wyoming limited liability company
Website: orabiolabs.com
Privacy email: support@orabiolabs.com
Customer support email: support@orabiolabs.com
Mailing address: support@orabiolabs.com (email correspondence only; this is not a physical postal address).
Submit privacy requests directly by email to support@orabiolabs.com.
Your Privacy Choices: OPERATIONAL FIELD, add the same verified Shopify data-sharing opt-out page URL used in Section 7.2.
Please do not include passwords, full payment-card details, medical records, or unnecessary identity documents in your request.