Effective Date: April 13, 2026 | Last Updated: April 13, 2026
1. Introduction
TONIC LABS (“Company,” “we,” “us,” or “our”) operates the website located at stacked.example (the “Site”). This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you visit our Site, create an account, make purchases, or interact with us. By using our Site, you consent to the practices described in this Privacy Policy.
2. Information We Collect
2.1 Information You Provide Directly
- Account Information: Name, email address, phone number, and account credentials when you register.
- Order Information: Billing and shipping addresses, phone number, and order details when you make a purchase.
- Payment Information: Credit card details, cryptocurrency wallet addresses, or other payment credentials. Payment information is processed by our third-party payment processors (PeptiPay, Coinbase Commerce) and is not stored on our servers.
- Communication Data: Information you provide when contacting customer support, submitting inquiries, or responding to surveys.
- Research Acknowledgment Data: Your affirmation of research-use-only terms during checkout.
2.2 Information Collected Automatically
- Device and Browser Information: IP address, browser type and version, operating system, device type, and unique device identifiers.
- Usage Data: Pages viewed, time spent on pages, links clicked, referring URLs, and navigation paths.
- Cookies and Tracking Technologies: We use cookies, pixel tags, and similar technologies to enhance your experience, analyze usage patterns, and deliver relevant content. See Section 7 for details.
- Location Data: Approximate geographic location derived from your IP address.
2.3 Information from Third Parties
We may receive information from payment processors regarding transaction status, fraud prevention services, and analytics providers.
3. How We Use Your Information
We use collected information for the following purposes:
- Order Fulfillment: Processing, shipping, and managing your orders and membership subscriptions.
- Account Management: Creating and maintaining your customer account, managing membership tiers, and processing credits.
- Customer Support: Responding to inquiries, resolving disputes, and providing technical assistance.
- Communications: Sending order confirmations, shipping notifications, membership updates, and (with your opt-in consent) marketing communications.
- Site Improvement: Analyzing usage patterns to improve our Site, products, and services.
- Security and Fraud Prevention: Detecting and preventing fraudulent transactions, unauthorized access, and other illegal activities.
- Legal Compliance: Complying with applicable laws, regulations, and legal processes.
4. How We Share Your Information
We do not sell, rent, or trade your personal information to third parties. We may share your information with:
- Payment Processors: PeptiPay and Coinbase Commerce process your payment information under their own privacy policies.
- Shipping Partners: Carriers receive your shipping address and contact information to deliver orders.
- Service Providers: Third-party vendors who assist with hosting, analytics, email delivery, and customer support, bound by contractual confidentiality obligations.
- Legal Requirements: We may disclose information when required by law, subpoena, court order, or government request, or to protect our rights, safety, or property.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the successor entity.
5. Data Retention
We retain personal information for as long as necessary to fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce agreements. Order records are retained for a minimum of seven (7) years for tax and accounting compliance. You may request deletion of your account data at any time, subject to legal retention requirements.
6. Data Security
We implement industry-standard security measures to protect your personal information, including:
- SSL/TLS encryption for all data in transit
- Encrypted storage for sensitive data at rest
- PCI DSS-compliant payment processing through certified third-party providers
- Role-based access controls limiting employee access to personal data
- Regular security assessments and vulnerability testing
No method of electronic transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.
7. Cookies and Tracking Technologies
We use the following categories of cookies:
- Essential Cookies: Required for site functionality, shopping cart, and checkout operations.
- Analytics Cookies: Help us understand how visitors interact with our Site (e.g., Google Analytics).
- Preference Cookies: Remember your settings and preferences for future visits.
You can manage cookie preferences through your browser settings. Disabling essential cookies may affect site functionality.
8. Your Rights and Choices
Depending on your jurisdiction, you may have the following rights:
- Access: Request a copy of the personal information we hold about you.
- Correction: Request correction of inaccurate or incomplete information.
- Deletion: Request deletion of your personal information, subject to legal retention requirements.
- Portability: Request a machine-readable copy of your data.
- Opt-Out: Unsubscribe from marketing communications at any time via the link in any marketing email or by contacting us.
- Do Not Sell (CCPA): We do not sell personal information. California residents may contact us to confirm this.
To exercise any of these rights, contact us at privacy@stacked.example. We will respond within 30 days.
9. California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have the right to: (a) know what personal information we collect and how it is used; (b) request deletion of your personal information; (c) opt out of the sale or sharing of personal information (we do not sell your data); and (d) not be discriminated against for exercising your privacy rights.
10. International Users
Our Site is operated from the United States. If you are accessing the Site from outside the U.S., please be aware that your information may be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.
11. Children’s Privacy
Our Site is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected information from a minor, we will take steps to delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last Updated” date. Continued use of the Site after changes constitutes acceptance of the revised policy.
13. Contact Us
For privacy-related questions, data requests, or concerns:
Email: privacy@stacked.example
Subject Line: Privacy Inquiry