Privacy Policy

Effective date: August 10, 2026. Last updated: August 10, 2026.

BIO KRAUTER LLC ("BioKrauter," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, store, protect, disclose, and delete personal information when you visit biokrauter.com (the "Site"), purchase our products through the Site or through third-party marketplaces (including Amazon and TikTok Shop), or otherwise interact with us. It also describes the privacy rights of California residents and how to exercise them.

This policy covers the biokrauter.com brand only.

---

 

1. Who we are and how to contact us

• Business: BIO KRAUTER LLC
• Mailing address: 1601 N Gower St, 205, Los Angeles, CA 90028, United States
• Privacy contact email: support@biokrauter.com
  

We operate exclusively online and accept privacy requests by email and through the privacy request form on our Site.

2. Personal information we collect

In the preceding 12 months we have collected the following categories of personal information (using the categories defined in Cal. Civ. Code §1798.140):

Sources of personal information: directly from you; automatically from your device when you use the Site; from third-party marketplaces where you buy our products (Amazon, TikTok Shop); from our service providers and advertising partners.

3. Sensitive personal information

As a supplements brand, some information may reveal or allow inferences about health. Under California law, "health information collected and analyzed concerning a consumer" is sensitive personal information.

What we do and do not collect. We do not run health quizzes or surveys, and we do not collect health conditions, diagnoses, or medical information. We do not give individualized health recommendations — product pages describe what a product is intended for, and our support team does not advise on personal health conditions.

However, our Site organizes products into benefit-based collections with corresponding filters, and advertising/analytics technologies (§5(b)) operate across the Site, including on those pages. Browsing or purchasing benefit-categorized products could therefore allow health-related inferences by advertising platforms. California residents have the right to limit that use (see §8) and to opt out of sale/sharing (see §7–§8).

Health information you volunteer. If you contact customer support about a possible adverse reaction to a product, or otherwise choose to share health information with us, we use that information only to assist you, to meet product-safety and adverse-event reporting obligations for dietary supplements, and to comply with law. We do not use it for marketing or advertising.

We do not knowingly collect sensitive personal information of consumers we know to be under 16.

4. How we use personal information

To: provide products and services and fulfill orders (including subscriptions); process payments; arrange shipping and returns; provide customer support; screen for fraud and secure the Site; send transactional messages; send marketing communications (email) where you have opted in; perform analytics and improve the Site; personalize content and advertising; and comply with legal obligations.

5. How we disclose personal information

(a) Service providers / contractors (process data on our behalf under contract, for our business purposes): Shopify (e-commerce platform, payments processing, analytics); shipping and fulfillment providers (including Amazon Multi-Channel Fulfillment); Klaviyo (email marketing); Google Analytics (analytics); Appstle (subscriptions); fraud-prevention vendors.

(b) Sale / sharing for cross-context behavioral advertising. We use advertising and analytics technologies (cookies, pixels, tags) that transmit information about your activity to advertising and analytics platforms so that ads can be served to you across other sites and apps. Under California law this is considered "sharing" (and may be considered a "sale") of personal information, even though we do not receive money for it. The third parties involved are advertising/analytics platforms, including Meta (Facebook/Instagram), TikTok, and Google.

In addition to browser-based pixels, we and our vendors may send certain identifiers (such as your email address or phone number) to these advertising platforms in hashed (pseudonymized) form, server-to-server, so the platform can match conversions and ad audiences to its own user accounts. You can opt out of all of this — see §7–§8.

(c) Legal/operational. To comply with law, respond to lawful requests (subpoena, warrant), enforce our terms, or protect our rights, safety, and property; and in connection with a business transfer (merger, acquisition).

We do not knowingly sell or share the personal information of consumers under 16. (The Site is 18+, see §12.)

6. Marketplace purchases (Amazon, TikTok Shop)

When you purchase our products through a third-party marketplace, that marketplace is the primary controller of your account data and operates under its own privacy policy. We receive certain order information necessary to fulfill and support your order (such as name, shipping address, and contact details).

We use marketplace order data only to fulfill and support your orders, handle returns/refunds and disputes, and meet legal/tax requirements. We do not use it for unrelated marketing without your consent, and we handle it in accordance with the marketplaces' data-protection requirements.

7. Your California privacy rights

If you are a California resident, you have the right to:

• Know / Access — the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of third parties to whom we disclosed it (12-month lookback; longer on request if retained, back to Jan 1, 2022).
• Delete — request deletion of personal information we collected from you.
• Correct — request correction of inaccurate personal information.
• Opt out of sale/sharing — opt out of the sale or sharing of personal information for cross-context behavioral advertising (see §8).
• Limit the use of sensitive personal information — direct us to limit use of sensitive personal information to permitted purposes (see §8).
• Non-discrimination — we will not discriminate against you (deny service, charge different prices, or provide a different quality) for exercising your rights.

There is no general right to appeal a denied request under California law. (A right to appeal automated decisions takes effect January 1, 2027; we will update this policy before then if applicable.)

How to exercise your rights

Submit a request by: (1) email to support@biokrauter.com, or (2) the privacy request form on our Site. We operate exclusively online, so requests by email and web form are the available methods. You may use an authorized agent to submit a request on your behalf, with proof of authorization.

• We will acknowledge Know/Delete/Correct requests within 10 business days and respond within 45 calendar days (extendable once by 45 days with notice).

• We will honor opt-out and limit requests as soon as feasible, no later than 15 business days. We do not require identity verification for opt-out or limit requests.

8. Opt-out controls

• "Do Not Sell or Share My Personal Information" — available via the link in our Site footer. This stops the sharing of personal information for cross-context behavioral advertising.
• "Limit the Use of My Sensitive Personal Information" — available via the link in our Site footer.
• Opt-out preference signals (Global Privacy Control / GPC). We honor GPC and other opt-out preference signals transmitted by your browser/device as a valid request to opt out of sale/sharing, and we will display confirmation when we have processed your signal.
• Platform-level ad controls (supplementary). You can also limit personalized advertising directly with the platforms: Meta — Settings → Ad preferences; TikTok — Settings → Privacy → Ads personalization; Google — adssettings.google.com; industry-wide opt-outs at aboutads.info/choices (DAA). These platform controls supplement, and do not replace, your rights above.

9. Data retention

We retain each category of personal information only as long as reasonably necessary for the purposes described in this policy, or as required by law. Specifically: order and customer records are retained for as long as needed for customer service, returns, subscriptions, and tax/accounting obligations, and until you request deletion; marketing data (email lists) until you unsubscribe or request deletion; analytics and advertising data per the applicable cookie lifetimes and our partners' retention rules. Marketplace order information is retained only as long as needed for fulfillment and legal/tax purposes and as required by the applicable marketplace's data-protection rules.

10. How we protect personal information

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction, appropriate to the nature of the information we handle. These safeguards include:

• Encryption. Personal information is encrypted in transit using modern transport security (TLS), and sensitive data — including credentials and backups — is encrypted at rest using strong, industry-accepted encryption standards with managed encryption keys.
• Access controls. Access to personal information is limited to personnel who need it to perform their work, using unique user accounts, multi-factor authentication, and role-based, least-privilege access controls. Access rights are reviewed regularly and revoked promptly when no longer needed.
• Monitoring and logging. We log access to systems that store sensitive information and monitor our infrastructure for unauthorized activity. Security events generate alerts that are reviewed and investigated, and audit records are retained to support security reviews.
• Backups and resilience. We maintain encrypted backups of critical systems and periodically test our ability to restore them.
• Incident response. We maintain an incident response process for identifying, containing, and remediating security incidents. If an incident affects your personal information, we will notify you and the relevant authorities as required by applicable law.

Our internal data-handling and security practices are governed by our internal Data Protection & Information Security Policy.

No method of transmission over the internet or method of electronic storage is completely secure. While we work to protect your personal information, we cannot guarantee its absolute security. If you have reason to believe your interaction with us is no longer secure, please contact us immediately using the contact details in §1.

11. Cookies and tracking technologies

We use cookies and similar technologies (web beacons, tags, pixels) for site functionality, analytics, and advertising. Cookies also keep track of items you add to your shopping cart, including when a cart is abandoned; we use that information to send cart/checkout reminder messages by email if you have opted in to receive them. You can control cookies through your browser settings, through the opt-out mechanisms in §8, and via a Global Privacy Control-enabled browser.

12. Children's privacy

The Site is intended for adults (18+). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us to request deletion.

13. Other US state privacy rights

Residents of other US states may have similar rights under their state privacy laws (such as the right to access, correct, delete, or opt out of targeted advertising). To exercise any of these rights, contact us using the methods in §7; we will honor requests as required by the law of your state.

14. European Economic Area (EEA) & United Kingdom residents (GDPR / UK GDPR)

BioKrauter is a US-based business and does not target or market to the EEA or the UK. This section applies only if you are an EEA or UK resident whose personal data we nonetheless process (for example, if you place an order with us).

• Controller: BIO KRAUTER LLC (contact details in §1).
• Lawful bases for processing: performance of a contract (to fulfill your order); your consent (e.g., marketing email and non-essential cookies); our legitimate interests (site security, fraud prevention, analytics, and improving our products and services); and compliance with legal obligations.
• Your rights: access, rectification, erasure, restriction of processing, data portability, objection to processing (including to direct marketing and profiling), and the right to withdraw consent at any time (without affecting processing already carried out).
• International transfers: your personal data is processed in the United States. Where required, we rely on appropriate safeguards for transfers out of the EEA/UK, such as the EU Standard Contractual Clauses and the UK International Data Transfer Addendum.
• Complaints: you may lodge a complaint with your local data protection supervisory authority (EEA) or the UK Information Commissioner's Office (ICO).

To exercise any of these rights, contact us using the details in §1.

15. Changes to this policy

We may update this policy to reflect changes in our practices or for legal/operational reasons, and will review it at least annually. The "Last updated" date above reflects the latest revision.

16. Contact

BIO KRAUTER LLC · 1601 N Gower St, 205, Los Angeles, CA 90028, United States · support@biokrauter.com