Skip to content
Free shipping on all orders.

Privacy Policy

Last Updated: November 4th, 2026

We at Namawell, LLC ("we," "us," "our") respect the privacy of your information and are committed to transparency about how we collect, use, share, and safeguard it. This Privacy Policy relates to the information collection and use practices of Namawell, LLC in connection with our Services, which are made available to you through our website located at namawell.com and our customer account portal located at account.namawell.com (collectively, the "Site"), as well as the Services made available through them (the “Services”). This Privacy Policy is published alongside our Terms of Service. While it is not incorporated into the Terms of Service, it governs the collection and use of your personal data. In the event of any conflict between the Terms of Service and this Privacy Policy with respect to the collection and use of personal data, this Privacy Policy shall control.

This Privacy Policy applies to consumers who visit or interact with our Site. If you are a California employee or job applicant, please refer to our California Employee and Applicant Privacy Notice for information about how we collect and use your personal data in that context.

From time to time, we may change this Privacy Policy. If we do, we will post an amended version on this webpage with a new "last updated" date. If we make material changes, we will provide you with additional notice, such as by adding a statement on the homepage of our Site or sending you an email notification. Please review this Privacy Policy periodically.

This Privacy Policy covers the following topics:

  1. Personal Data We Collect
  2. How We Use Your Personal Data
  3. How We Share Your Personal Data
  4. Cookies and Other Tracking Technologies
  5. Universal Opt-Out Mechanisms / Opt-Out Preference Signals
  6. Security
  7. Data Retention
  8. Third-Party Links and Services
  9. Children's Privacy
  10. Notice to Nevada Residents
  11. Your State Privacy Rights and Additional Disclosures
  12. Notice to California Residents
  13. Important Notices to Non-U.S. Residents
  14. Accessibility
  15. How to Contact Us

SECTION 1 — PERSONAL DATA WE COLLECT

We collect personal data from you through your use of the Site and Services. Personal data is information that is linked or reasonably linkable to an identified or identifiable individual.

We collect the following types of personal data:

Personal Data You Provide

Depending on how you interact with our Site and Services, we will collect the following personal data that you voluntarily provide:

Create an Account / Place an Order.

Customer accounts are created using Shopify's customer account functionality. Every customer order will generate an account. It is also possible to create an account without making a purchase, such as by selecting "sign in" during checkout or by entering your email address into a marketing pop-up.

When you register for an account or check-out, we collect:

  • Name
  • Business or personal email address
  • Mailing and/or billing address (at check-out)
  • Phone number
  • Session and authentication tokens generated during the sign-in process (such as one-time authorization codes and session identifiers, which are short-lived and not retained as standalone records)

Place an Order / Billing Information.

Payments are processed via our third-party payment processors. We do not collect full payment card numbers; however, we retain limited payment card data, specifically the card network and last four digits, as reflected through our payment processing records. We do not collect bank account information.

You authorize our third-party payment vendors to collect, process, and store your billing information in accordance with their respective privacy policies.

If you purchase a subscription-based product, you authorize Namawell to charge your selected payment method on a recurring basis at the frequency and rate disclosed at the time of purchase. Recurring billing is processed by our third-party payment processor. Your subscription will automatically renew until canceled. Information regarding how to cancel your subscription and the terms governing automatic renewal are set forth in our Terms of Service

Sign Up for Email / Marketing Pop-Ups.

If you subscribe to our marketing communications, we will collect your email address and, where applicable, other contact information you provide. You may subscribe through the following means: (i) by entering your email address into a marketing pop-up on our Site; (ii) by submitting your email address through our newsletter sign-up page; or (iii) by initiating a checkout on our Site while the marketing communications checkbox is enabled.

Please note that for customers in the United States, the marketing communications checkbox during checkout is pre-selected by default. For customers outside the United States, this checkbox is not pre-selected. If you begin a checkout and have enabled marketing communications, you may receive follow-up emails regarding your order if your purchase is not completed.

Our email marketing platform syncs user data back to our e-commerce platform. When a new user is added through any means, the e-commerce platform will sync, and continuously sync, profile changes such as phone number updates. To unsubscribe from our marketing emails, please click the unsubscribe link included in the footer of our emails. You may also manage your email and communication preferences through the preference center linked in the footer of any marketing email we send you. We also collect phone numbers during checkout for SMS marketing purposes. If you provide your phone number and opt in to SMS communications at checkout, you may receive text messages from us, including order updates and marketing messages. SMS marketing is available to customers in the United States and Canada. Standard message and data rates may apply. You may opt out at any time by replying STOP to any message. Our website uses cookies to help keep track of items you put into your shopping cart, including when you have abandoned your cart. This information may be used to determine when to send cart reminder messages by text message. SMS opt-in data and consent will not be shared with any third parties

Chatbot / Customer Service.

If you use our chatbot feature on the Site, we will collect your interactions and the content of your messages. Our chatbot feature is powered by a third-party AI-assisted customer service platform. Please review the privacy policy of our customer service provider at https://www.gorgias.com/legal/privacy for more information on how it handles data collected through the chat interface. Our chatbot feature uses artificial intelligence to assist in preparing responses to your inquiries. Chat sessions with our AI assistant are recorded and stored using a cloud-based service. A notice to this effect is displayed within the chat interface prior to any interaction. By initiating a chat session, you acknowledge that the conversation is subject to the terms of this Privacy Notice.

During the current development and training phase, AI-generated responses may be reviewed before delivery. Once trained, the chatbot is designed to respond to inquiries without human review of each message. The chatbot interface is clearly identified as an automated tool and is not a human customer service representative.

Promotional Programs.

Customers may receive a promotional code from a third-party affiliate marketer, a Namawell email campaign, or website messaging. In order to receive an email campaign, you must provide your email address. All other means of receiving promotional codes do not require you to provide personal information, or are distributed by a third party on our behalf.

Careers.

If you apply for a job with us, we will collect personal information from you through our hiring platform. This may include your name, email address, and any other information you choose to provide in connection with your application.

Personal Data as You Navigate Our Site

In order to provide certain features and functionalities of our Site, assist in monitoring and troubleshooting errors, analyze web traffic, and improve our Site, we automatically collect certain information when you use the Site through our use of cookies and other tracking technologies. For more information on our use of cookies, including how to manage your preferences through our preference center, please see Section 4 (Cookies and Other Tracking Technologies) below. Information we collect automatically includes, without limitation:

  • IP addresses, browser type and language, and device information (UUID, operating system, carrier, etc.);
  • Usage information, such as the pages on the Site you access, the frequency of access, and what you click on while on the Site;
  • Purchase and order history and, where applicable, product and service preferences;
  • Session replay data, including user clicks, mouse movements, scrolling, keystrokes, page views, and navigation paths (collected via ContentSquare (formerly Hotjar));
  • Marketing email behavior, including open rates and clicks (tracked for marketing emails only; not tracked for transactional emails); and
  • Cookie and session data.

Geolocation Data.

We use geolocation to provide you with an estimated delivery date for your order prior to purchase. Although your approximate location is determined from your IP address, it is not stored for later access. Your IP address itself is always stored through Shopify. Your IP address is used to determine an approximate location. Although your approximate location is determined from your IP address for these purposes, it is not stored as a separate data point for later access. Your IP address itself is retained through our e-commerce platform.

Personal Data We Collect About You from Other Sources

In some cases, we may receive personal data about you from other sources, including advertising networks, data analytics providers, operating systems and platforms, social networks, and advertising and marketing partners. We also receive order and purchase data through our payment processing partners, including buy-now-pay-later providers and digital wallet services, as well as through third-party sales channels and online marketplaces through which our products may be made available.

If your order includes an electronic course, whether purchased or received as a complimentary promotion, your name and email address will be shared with our learning management platform to provision your course access. This sync is facilitated automatically upon order fulfillment via Zapier, a third-party workflow automation service.

When you place an international order, our international commerce partner shares certain personal data with us in connection with fulfillment of your order, including your name, shipping address, email address, and order details. Payment details are not shared with us.

SECTION 2 — HOW WE USE YOUR PERSONAL DATA

We use the personal data we collect to:

  • Maintain and improve our Site and Services;
  • Protect the security and integrity of our Site and Services;
  • Process payments and fulfill orders;
  • Conduct analytics or product development, including website analytics, chatbot analytics, and session replay analysis;
  • Engage in targeted and behavioral advertising, primarily for digital ad retargeting campaigns;
  • Support automated product recommendations (using anonymized user data);
  • Provide customer service, including through AI-assisted drafting tools reviewed by our team;
  • Investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, or violations of our Terms of Service, and to otherwise fulfill our legal obligations;
  • Defend our legal rights and the rights of others; and
  • For any purpose that is reasonably necessary to or compatible with the original purpose for which we collected the personal data, as disclosed to you, and to comply with applicable law.

SECTION 3 — HOW WE SHARE YOUR PERSONAL DATA

We engage third-party service providers and vendors to perform functions on our behalf, including but not limited to: e-commerce platform hosting and order management; website analytics and session replay; email marketing; customer service and chatbot tools; affiliate marketing; order tracking and delivery communications; consent management; learning management; job applicant management; digital advertising; international commerce facilitation; and workflow automation. These companies have access to your personal data only as necessary to perform their functions. A current list of our material service providers is available upon request by contacting us as described in the "How to Contact Us" section below.

We may share the personal data we collect about you in the following ways:

Service Providers and Vendors. We employ third-party companies and individuals to perform functions on our behalf. These companies will have access to your personal data only as necessary to perform their functions and to the extent permitted by law.

Affiliated Companies. We may share some or all of your personal data with any of our parent companies, subsidiaries, joint ventures, or other companies under common control with us. Such affiliated entities operate under shared infrastructure with separate databases, users, and access controls maintained for each entity.

Marketing and Advertising Partners. We use a third-party affiliate marketing platform in connection with our promotional affiliate program. In connection with that program, our affiliate marketing provider may collect personal data from both customers who transact through affiliate links (such as name, email, and order data) and from affiliates themselves (such as name, contact information, payment details, and bank account information, and tax identification documentation).

Payment Processors. We share personal data with our third-party payment processors in order to process your transactions securely. For international sales, please see Section 8 for information on our cross-border commerce arrangements.

Affiliate Marketing. Our affiliate marketing platform, GoAffPro, collects the following data: for customers — name, email, and order data; for affiliates — name, email, phone, address, website, social handles, and payment and tax details. Affiliates should review GoAffPro's privacy policy for further information on how their personal data is handled.

Business Transfers. As we develop our business, we might take part in a merger, acquisition, dissolution, or similar corporate event, or we may sell or buy businesses or assets, and any acquiring entity may use your personal data for its own purposes.

Legal Obligations. We are required to disclose personal information in response to lawful requests by public authorities, including for the purpose of meeting national security or law enforcement requirements. To the extent permitted by law, we may also disclose information when required by law or regulation, court order or subpoena, or other government or law enforcement authority, or whenever we believe that disclosing such information is necessary or advisable to protect the rights, property, or safety of us, our business, or others.

Anonymous / Aggregated Data. We may analyze certain information in anonymized and/or aggregate form in order to operate, maintain, manage, and improve our Site and Services. This anonymous information does not identify you personally and may be shared with our affiliates, agents, business partners, and other third parties.

We do not sell personal information for direct monetary consideration. However, please see the "YOUR STATE PRIVACY RIGHTS AND ADDITIONAL DISCLOSURES" section below for information on how our use of advertising cookies and pixels may constitute a "sale" or "sharing" of personal information under certain state privacy laws.

SECTION 4 — COOKIES AND OTHER TRACKING TECHNOLOGIES

For detailed information on our use of cookies and other tracking technologies, including how to manage your preferences, please see our Cookie Policy. The following is a summary of our key practices. In the event of any conflict between this Section 4 and the standalone Cookie Policy, this Privacy Policy controls.

How We Use Cookies

Like many other companies, we use cookies and other tracking technologies (collectively, "Cookies"). Cookies are small files of information that are stored by your web browser software on your computer hard drive, mobile device, or other devices.

We use Cookies to:

  • Estimate audience size and usage patterns;
  • Understand and save your preferences for future visits, allowing us to customize the Site and Services to your individual needs;
  • Advertise new content and services that relate to your interests;
  • Keep track of advertisements and search engine results;
  • Compile aggregate data about site traffic and site interactions in order to resolve issues and offer better site experiences and tools in the future; and
  • Recognize when you return to the Site.

Specific Tracking Technologies We Use

Google Analytics. We use Google Analytics, a web analytics service provided by Google, Inc. Google Analytics uses Cookies to help us analyze how users interact with the Site and Services, compile reports on their activity, and provide other services related to their activity and usage. The technologies used by Google may collect information such as your IP address, time of visit, whether you are a returning visitor, and any referring website. The information generated by Google Analytics will be transmitted to and stored by Google and will be subject to Google's privacy policies. To learn more about Google's partner services and to opt out of tracking by Google Analytics, please visit: https://www.google.com/analytics.

ContentSquare (formerly Hotjar) (Session Replay and Behavioral Analytics).

We use ContentSquare to better understand how users interact with our Site and to improve the user experience. ContentSquare operates by recording user sessions in a manner that simulates a screen share, capturing on-screen activity including clicks, text input, rage clicks, U-turns, survey responses, user feedback, errors, and behavioral events. ContentSquare also records session metadata, including the date, time, session duration, and landing page associated with each session. In addition, ContentSquare generates heatmaps that aggregate user interaction data across multiple sessions; while heatmaps are not based on individual-level analysis, they may be correlated with individual session recordings. ContentSquare also collects device and browser information, including IP address (processed during your session and stored in a de-identified form), device screen size, device type, browser type, geographic location (country only), and preferred language. For more information, please view ContentSquare’s privacy policy.

TripleWhale (Marketing Analytics and Attribution).

We use TripleWhale for marketing analytics, attribution, and performance measurement. TripleWhale connects to our e-commerce platform and the following integrated platforms: Shopify, Klaviyo, Meta (ads and social), Google Ads, Google Analytics, Google Search Console, Microsoft Ads, TikTok Ads, and Amazon Ads and Sales. In connection with these services, TripleWhale may collect and process the following categories of data: customer profile and identity data (including name, email address, phone number, mailing, billing, and shipping addresses, customer and platform IDs, and identity-matching keys); marketing consent data (including email and SMS subscription status, opt-in level, consent source, and consent timestamps); purchase and order data (including order history, product details, prices, refund amounts, payment gateway and transaction data, fulfillment status, subscription indicators, and gift card and discount code usage); customer lifecycle and value data (including lifetime value, purchase frequency, cohort calculations, predicted spending tier, and customer segmentation); website activity and attribution data (including page views, session events, advertising click identifiers, UTM parameters, customer journey touchpoints, and custom pixel events such as add-to-cart, checkout initiation, address submission, and checkout completion, collected via the TripleWhale Pixel); and, depending on active integrations, email and SMS campaign engagement, post-purchase survey responses, product reviews, and customer support data. TripleWhale acts as a data processor with respect to your customers' personal data.

Klaviyo (Email Marketing Tracking). We use Klaviyo for email marketing. Klaviyo tracks marketing email behavior, including open rates and clicks. This tracking applies to marketing emails only and is not applied to transactional emails. Klaviyo collects name, email, phone, location, time zone, source, and event timeline (behavioral data) in connection with its services.

WisePops. We use WisePops for marketing pop-ups. When an email subscription occurs through a WisePops pop-up, a Shopify customer record is created and the source is logged as WisePops. WisePops does not store individual user data but does compile aggregate behavioral reports (e.g., top pages, devices, countries, attributed revenue).

Platform-Specific Advertising Cookies. We use advertising cookies and pixels from the following platforms in connection with digital advertising and retargeting campaigns:

(Order Tracking and Delivery Communications).

We use AfterShip to provide order tracking and delivery date functionality. AfterShip receives order and customer data synced from our e-commerce platform in connection with these services. AfterShip uses geolocation information, derived from your IP address or, where you choose to enter it manually, your location, to display an estimated delivery date on our product pages and at checkout. This location information is used solely to generate delivery estimates and is not retained as a standalone data point. After your order is placed, AfterShip manages post-purchase transactional communications, including shipping confirmation, delivery status, and related notifications. These communications are sent by AfterShip on our behalf and may include promotional content; you may unsubscribe from such communications using the link provided in those emails. AfterShip also provides an order tracking portal accessible through your order emails or our Site. The order tracking portal may also display product recommendations and marketing content. Estimated delivery dates displayed in post-order communications are updated in real time based on live order and shipment data.

In connection with these services, AfterShip may collect certain browsing and interaction data through tracking technologies, including page views, product views, and cart and checkout activity. Please review AfterShip's privacy policy for more information.

Yotpo (Product Reviews). We use Yotpo to collect and display product reviews on our Site. Amplitude and Snowplow are used in connection with Yotpo’s product review services and may set cookies or use similar technologies to collect information about how you view and interact with product reviews on our Site.

Global-e and FullStory (International Checkout). Global-e, our cross-border commerce partner, uses FullStory in connection with the international checkout experience. FullStory may set cookies or use similar technologies to analyze how you interact with Global-e’s checkout pages, such as clicks, mouse movements, scrolling, and page navigation. Please see Section 8 (Third-Party Links and Services) for more information about Global-e.

Gorgias (Customer Service Chat). Datadog is used in connection with the Gorgias customer service chat widget and may set cookies or use similar technologies to support the operation and performance of the chat widget.

Weglot (Language Translation). We use the Weglot app to provide language translation on our Site. Snize is used in connection with Weglot and may set cookies or use similar technologies to support the translation function.

Appikon (Back in Stock Notifications). We use the Appikon Back In Stock function to send you notifications when a product you have asked about is back in stock. Appikon uses Amazon technologies, which may set cookies or similar technologies to support these notifications.

Your Osano Preference Center and Cookie Choices

Our cookie management platform, Osano, displays a cookie consent banner to all users upon landing on our Site. You will be asked to either accept or decline non-essential cookies; continued browsing without making a selection does not constitute consent. You may also manage your preferences granularly by selecting “Manage Preferences” in the banner. We honor opt-out preference signals transmitted through your browser settings, including Global Privacy Control (GPC). You may update your cookie preferences at any time by clicking the cookie preferences link in the footer of our Site

Browser Settings. You can block Cookies by changing your Internet browser settings to refuse all or some Cookies. If you choose to block all Cookies (including essential Cookies), you may not be able to access all or parts of the Site.

Advertising Industry Resources. You can understand which entities have currently enabled Cookies for your browser or mobile device and how to opt out of some of those Cookies by accessing the Network Advertising Initiative's website at https://optout.networkadvertising.org or the Digital Advertising Alliance's website at https://optout.aboutads.info.

SECTION 5 — UNIVERSAL OPT-OUT MECHANISMS / OPT-OUT PREFERENCE SIGNALS

Our cookie consent management platform, Osano, supports opt-out signals set by browser tools and extensions, including the Global Privacy Control ("GPC"). If you are using a browser setting or plug-in that sends an opt-out preference signal to each website you visit, we will treat that as a valid request to opt out of the sale or sharing of your personal data. To download and use a browser supporting the GPC browser signal, click here: https://globalprivacycontrol.org/orgs. If you choose to use the GPC signal, you will need to turn it on for each supported browser or browser extension you use.

Some internet browsers incorporate a "Do Not Track" feature that signals to websites you visit that you do not want to have your online activity tracked. Given that there is not a uniform way that browsers communicate the "Do Not Track" signal, the Site does not currently interpret, respond to, or alter its practices when it receives "Do Not Track" signals.

SECTION 6 — SECURITY

We maintain commercially reasonable security measures to protect the personal data we collect and store from loss, misuse, destruction, or unauthorized access. However, no security measure or modality of data transmission over the Internet is 100% secure. Although we strive to use commercially acceptable means to protect your personal data, we cannot guarantee absolute security.

Our security practices include, among other measures:

  • Requiring all staff to use two-factor authentication (2FA) for accessing apps and computers;
  • Requiring staff to complete regularly scheduled training modules on cybersecurity, phishing attacks, and best practices, administered by an external vendor and managed by our IT team;
  • Conducting random phishing tests;
  • Monitoring IT security on company computers;
  • Sending automated alerts if staff download customer data from Shopify;
  • Limiting user permissions to the scope of each individual's role; and
  • Regularly auditing user permissions.

Fundamentally, we do not maintain custom databases or store data locally. We rely on managed software vendors to host all customer data.

SECTION 7 — DATA RETENTION

We retain your personal data for as long as necessary to fulfill the purposes for which we collect it and for the purpose of satisfying any legal, accounting, contractual, or reporting requirements that apply to us. Specific retention periods vary depending on the type of data and the platform on which it is stored:

Data / Platform Type Retention Period
E-commerce platform (customer and order data) Retained indefinitely while the store is active; if the store is deactivated, retained for two (2) years
Email marketing platform Retained until termination of the service agreement, then deleted within 90 days of the effective date of termination
Website pop-up and marketing tools Retained for two (2) years after account deactivation

Customers may submit a data request to inquire about the retention of their specific personal data. Please see the "How to Contact Us" section below.

SECTION 8 — THIRD-PARTY LINKS AND SERVICES

Certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies that govern how they use your information. We recommend that you read the privacy policies of these third-party providers so you can understand the manner in which your personal information will be handled.

The Site may also contain links to third-party websites. Once you leave our Site or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy or our Terms of Service. Namawell, LLC is not responsible for the content of external websites or the privacy policies of any such third parties.

International Orders / Global-e. For international sales, Namawell is not the merchant of record. We have partnered with a third-party international commerce provider to facilitate international orders. When you place an international order, you are purchasing from Global-e, subject to Global-e's Terms & Conditions. Your personal information (excluding payment details) will be handled by Global-e in accordance with Global-e's Privacy Policy, and will also be shared with Namawell in connection with the fulfillment of your order. Namawell handles the personal data it receives from Global-e in connection with international orders in accordance with this Privacy Policy. Payment details for international transactions are handled exclusively by Global-e and its payment partners and are not shared with Namawell.

Namawell and Global-e operate as independent data controllers with respect to the personal data processed in connection with international transactions. Each party is independently responsible for compliance with applicable privacy laws in respect of the personal data it controls. For information about Global-e’s privacy practices, please visit Global-e’s Consumer Privacy Policy at https://www.global-e.com/consumer-privacy-policy/.

SECTION 9 — CHILDREN'S PRIVACY

The Site and Services are not intended for children under 13 years of age. We do not knowingly collect, use, or disclose personal data from children under 13. If you are under 13, please do not give us any personal information. We encourage parents and legal guardians to monitor their children's Internet usage and to help enforce our Privacy Policy by instructing their children never to provide personal information through the Site without their permission. If you have reason to believe that a child under the age of 13 has provided personal information to us, please contact us and we will endeavor to delete that information from our databases.

SECTION 10 — NOTICE TO NEVADA RESIDENTS

Nevada law allows Nevada residents to opt out of the sale of certain types of personal information. We do not currently sell personal information as defined in Nevada Revised Statutes Chapter 603A. However, if you are a Nevada resident, you may still submit a verified request to opt out of sales, and we will record your instructions and incorporate them in the future if our policy changes. You may send opt-out requests through our data request webform at https://namawell.com/pages/data-request or by emailing data-request@namawell.com with the subject line "Nevada Do Not Sell Request.”

SECTION 11 — YOUR STATE PRIVACY RIGHTS AND ADDITIONAL DISCLOSURES

Depending on the state in which you reside, you may have certain privacy rights regarding your personal data. For example, California, Colorado, Connecticut, Delaware, Minnesota, Oregon, and other states have passed privacy laws. If you are a California resident, please see our "NOTICE TO CALIFORNIA RESIDENTS" section below. For other state residents, your privacy rights may include (if applicable):

  • The right to confirm whether or not we are processing your personal data and to access such personal data and the categories of personal data we are processing or have processed;
  • The right to obtain a copy of your personal data in a portable and, to the extent technically feasible, readily usable format;
  • The right to delete personal data that we collected from and/or about you, subject to certain exceptions;
  • The right to correct inaccurate personal data that we maintain about you, subject to certain exceptions;
  • The right, at our option, to obtain a list of the specific third parties to which we have disclosed personal data;
  • The right to question decisions made solely based on automated processing, including the right to be informed of the reason for the decision and what actions could have secured a different outcome;
  • The right to withdraw consent for the processing of sensitive personal data as defined under applicable law;
  • The right, if applicable, to opt out of the processing of your personal data for purposes of: (1) targeted advertising; (2) the "sale" of your personal data (as that term is defined by applicable law); and (3) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you; and
  • The right not to receive discriminatory treatment by us for the exercise of your privacy rights.

Sale, Sharing, and Targeted Advertising. We use cookies and other tracking technologies to display advertisements about our products to you on non-affiliated websites, applications, and online services. This is "targeted advertising" under applicable privacy laws. When we engage in those activities, we may sell or share personal data (i.e., information from cookies) with third-party advertisers and analytics companies. Our use of advertising cookies and pixels may constitute a "sale" of personal data under some states’ laws.

Submitting a Rights Request. To exercise your rights, please submit a request through our data request webform at https://namawell.com/pages/data-request or by emailing data-request@namawell.com.

We will respond to verified requests within the timeframe required by applicable law. If we decline to take action on your request, we will notify you of our decision and the basis for it.

Appeals. If you wish to appeal our decision, you may do so by responding through the correspondence portal associated with your original data request submission, or by emailing data-request@namawell.com with the subject line “Privacy Request Appeal.” We will review your appeal and respond within the timeframe required by applicable law in your state. If your appeal is denied, and you are a resident of a state that provides this right (such as Colorado or Connecticut), you may contact your state Attorney General to submit a complaint.

SECTION 12 — NOTICE TO CALIFORNIA RESIDENTS

The California Consumer Privacy Act, as amended by the California Privacy Rights Act of 2020 ("CCPA"), requires that we provide California residents with a privacy policy that contains a comprehensive description of our online and offline practices regarding the collection, use, disclosure, sale, sharing, and retention of personal information and of the rights of California residents regarding their personal information. This section is intended solely for, and is applicable only as to, California residents. If you are not a California resident, this section does not apply to you and you should not rely on it.

Notice at Collection of Personal Information

We currently collect, and in the 12 months prior to the Last Updated Date of this Privacy Policy, have collected, the following categories of Personal Information:

  • Identifiers — including name, postal address, online identifier, Internet Protocol address, email address, and account name;
  • Unique personal identifiers — including device identifiers, cookies, beacons, pixel tags, mobile ad identifiers, customer numbers, and other similar persistent or probabilistic identifiers;
  • Personal information described in California's Customer Records statute — including telephone number, credit card number, and debit card number and bank account information (collected from affiliates in connection with our affiliate marketing program);
  • Commercial information — including records of products or services purchased, obtained, or considered, and other purchasing or consuming histories or tendencies;
  • Internet or other electronic network activity information — including browsing history, search history, session replay data, and information regarding a consumer's interaction with a website, application, or advertisement;
  • Geolocation data — approximate location derived from IP address; and
  • Inferences — drawn from the above information to create a profile about a consumer reflecting the consumer's preferences, characteristics, predispositions, behavior, and aptitudes.

We collect Personal Information directly from California residents and from advertising networks, data analytics providers, operating systems and platforms, social networks, marketplace partners, and from our international commerce partner (Global-e) in connection with the fulfillment of international orders. We do not collect all categories of Personal Information from each source.

Sale, Sharing, and Disclosure of Personal Information

The CCPA defines "sale" as the transfer of Personal Information for monetary or other valuable consideration. Although we do not "sell" Personal Information as that term may be commonly interpreted, we engage in online activities that may constitute a sale or a share of Personal Information under California law, such as displaying advertisements about our products on other websites through advertising cookies and pixels.

Categories of Personal Information Sold or Shared in the Prior 12 Months:

Category of Personal Information Categories of Third Parties
Unique personal identifiers (device identifiers, cookies, pixel tags, mobile ad identifiers, session and authentication tokens)

Advertising networks; data analytics providers

Shopify App-Based Event Pixels:

  • AfterShip Tracking
  • Facebook & Instagram
  • Global-e CrossBorder
  • GoAffPro (affiliate marketing)
  • Google & Youtube
    Connects Google Ads, YouTube Store, & Google Analytics, but actual tracking occurs using custom pixels below.
  • Klaviyo
  • Microsoft
  • TikTok
  • Wisepops

Custom Event Pixels:

  • Google Tag Manager:
    • Google Ads
    • Google Analytics
  • ContentSquare (formerly Hotjar)
  • Yotpo
Internet or other electronic network activity information Advertising networks; data analytics providers (e.g., Yotpo (including Amplitude and Snowplow) and Global-e (including FullStory)

Categories of Personal Information Disclosed for a Business Purpose in the Prior 12 Months:

Category of Personal Information Categories of Recipients
Identifiers

Service providers (e.g. Shopify, Klaviyo, Gorgias, JobVite, GoAffPro, Global-e (data shared with and received from Global-e in connection with international order fulfillment)

Learning management platform (course fulfillment e.g., Thinkific)
Commercial information Service providers (e.g. Shopify, Global-e, Zapier, Narvar for return processing only, TripleWhale)
Internet / electronic network activity Analytics providers (e.g. Google Analytics, ContentSquare; TripleWhale); service providers (e.g., Gorgias (Datadog), Weglot (Snize), Appikon Back In Stock (Amazon))
Payment card information (partial) Payment processors (e.g Shopify Payments, Global-e)
Geolocation data Service providers (e.g. Shopify, Weglot, AfterShip)

We do not knowingly sell or share the Personal Information of consumers under 16 years of age.

Retention of Personal Information

For an explanation of how long we retain Personal Information, please see the "DATA RETENTION" section above.

Your Rights as a California Resident

If you are a California resident, you have the following rights with respect to your Personal Information, subject to certain exceptions:

  • The right to know what Personal Information we have collected about you, including the categories of Personal Information, the categories of sources from which we collected it, the business or commercial purpose for collecting, selling, or sharing Personal Information (if applicable), the categories of third parties to whom we disclose Personal Information (if applicable), and the specific pieces of Personal Information we collected about you;
  • The right to delete Personal Information that we collected from you, subject to certain exceptions;
  • The right to correct inaccurate Personal Information that we maintain about you;
  • The right to opt out of the sale or sharing of Personal Information;
  • If we use or disclose sensitive Personal Information for purposes other than those allowed by the CCPA and its regulations, the right to limit our use or disclosure; and
  • The right not to receive discriminatory treatment by us for the exercise of privacy rights the CCPA confers.

How to Submit a Request

You may submit a request to know, delete, and/or correct by contacting us through our data request webform at https://namawell.com/pages/data-request or by emailing us at data-request@namawell.com. If you submit a request to delete online, you may be asked to confirm separately that you want your Personal Information deleted. If you are submitting a request on behalf of a California resident, please submit the request through one of the designated methods discussed above, after which we will require additional information to verify your authority to act on that person's behalf.

Right to Opt Out of Sale or Sharing

If you are a California resident, you have the right to direct us to stop selling or sharing your Personal Information. You may submit a request to opt out of sales or sharing through our interactive webform at https://namawell.com/pages/data-request. If you have enabled privacy controls on your browser (such as a plug-in), we will also treat that as a valid request to opt out in accordance with applicable law. Please see the "UNIVERSAL OPT-OUT MECHANISMS / OPT-OUT PREFERENCE SIGNALS" section above for more information.

Shine the Light Law

If you are a California resident and have an established business relationship with us, California Civil Code § 1798.83 permits you to request information regarding the disclosure of your personal information by us to third parties for the third parties' direct marketing purposes. To make such a request, please send an email to data-request@namawell.com with the subject line "Shine the Light Request."

Erasure Law

If you are a California resident under the age of 18 and a registered user of the Services, California Business & Professions Code § 22581 permits you to request and obtain removal of content or information posted on the Services by you. Please contact us at data-request@namawell.com. Please be aware that removal does not ensure complete or comprehensive removal of the content or information posted by you, and there may be legal reasons for denying your request.

SECTION 13 — IMPORTANT NOTICES TO NON-U.S. RESIDENTS

The servers used in connection with the operation and use of the Services are operated in the United States and elsewhere. Please be aware that your information, including your personal information, may be transferred to, processed, maintained, and used on computers, servers, and systems located outside of your state, province, country, or other governmental jurisdiction where the privacy laws may not be as protective as those in your jurisdiction.

International orders account for approximately 15% of all orders, with roughly 20 countries accounting for the bulk of that volume. For international sales, Namawell is not the merchant of record. We have partnered with Global-e to facilitate international orders. Shopify now stores certain merchant and customer personal data in Europe. For information on Shopify's international data transfer practices, please visit Shopify's privacy resources.

We use Osano to support GDPR compliance services for our European customers. If you are located outside the United States and choose to use the Services, you consent to the transfer, processing, and use of your information in the United States and elsewhere as described in this Privacy Policy.

SECTION 14 — ACCESSIBILITY

We are committed to ensuring this Privacy Policy is accessible to individuals with disabilities. If you wish to access this Privacy Policy in an alternative format, please contact us as described below. All legal aspects of our website are designed to be accessible, and we are actively working to address remaining accessibility issues across the Site, including updates to cookie banner color contrast.

SECTION 15 — CHANGES TO THIS PRIVACY POLICY

We reserve the right to modify this Privacy Policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this policy, we will notify you by posting a notice on the homepage of our Site or by sending you a notification. Your continued use of the Site after the effective date of any modification means you accept and agree to be bound by the Privacy Policy as modified.

SECTION 16 — HOW TO CONTACT US

If you would like more information about our privacy practices or to submit a data rights request, please contact our Privacy Compliance Officer:

Namawell, LLC
Attn: Privacy Compliance Officer
2975 Red Hill Ave., Suite 100
Costa Mesa, CA 92626 USA

Email: data-request@namawell.com

Data Request Webform: https://namawell.com/pages/data-request

Primary Privacy / Compliance Contact: Joseph Krahn, Digital Director