Privacy Policy
This page explains what information we collect, why, and what we do with it, in plain language. We read privacy policies the way you probably do: skimming for the part that matters. So here it is first: we don't sell your data, and what you tell us about your health stays between you and us. The details are below.
What we collect
When you place an order
Your name, email address, shipping address, phone number if you provide one, and your order details. Payment is handled by our payment processors; we never see or store your full card number.
When you download the playbook or join our emails
Your email address, and anything you choose to tell us along with it.
When you take our quiz
Your answers, which may include which GLP-1 medication you use, how long you've been on it, and which side effects you experience. This is sensitive information and we treat it that way. See the statement above: it lives in our email platform, is used only to personalize what we send you, and is never passed to advertising or analytics platforms.
When you visit the site
Standard technical data: device type, browser, pages visited, and how you found us. Some of this is collected through cookies. See the cookies section below.
When you email us
Whatever you include in your message, plus our reply. We keep support conversations so we don't ask you to repeat yourself.
How we use it
- To deliver your order: processing payment, shipping, and sending you order updates.
- To send you what you signed up for: the playbook, our guidance emails, and if you took the quiz, content matched to your phase and situation. Every email has an unsubscribe link, and it works in one click.
- To answer your questions and handle guarantee claims, replacements and refunds.
- To improve the site and our content: understanding which pages help and which don't.
- To advertise responsibly: we run ads and measure whether they work, using standard tools. What goes to those tools is purchase and browsing data, never your quiz answers or anything about your health.
Who we share it with
We share data with the companies that make the store run, and only what each of them needs to do their job:
- Shopify: hosts our store and processes orders
- Payment processors: handle your payment securely
- Fulfilment and shipping partners: receive your name and address to deliver your order
- Email platform: stores your email address and quiz answers, sends our emails
- Ad and analytics platforms: receive site and purchase data only, never health information
Each of these providers is bound to use your data only for the service they provide to us. Beyond this list, we share personal data only if the law requires it, or if Allay is ever sold or merged, in which case this policy still applies to your data.
What we never do: sell your personal information, rent our email list, or share your health details with advertisers. There is no version of this business where your data is the product.
Cookies and advertising
We use cookies for three things: making the store work (your cart, your checkout), understanding how the site is used, and measuring our ads. You can block or delete cookies in your browser settings, and where the law requires it, you'll see a consent banner with a real choice. Blocking cookies may break the cart, but the rest of the site will work.
You can opt out of personalized advertising through your device settings and through the ad platforms directly. Our emails always have an unsubscribe link at the bottom.
How long we keep it
Order data stays as long as we're legally required to keep it for tax and accounting. Email and quiz data stays until you unsubscribe or ask us to delete it. Support conversations are kept so we can help you faster next time. When data no longer serves a purpose, we delete it.
Your rights
Wherever you live, you can email support@tryallay.com and ask us to:
- Show you the personal data we hold about you
- Correct it if it's wrong
- Delete it
- Stop sending you marketing
We respond within 7 days, usually much faster, and we don't treat you differently for asking. Depending on where you live, you may have additional rights under laws like the California Consumer Privacy Act or the GDPR, including the right to complain to your local data protection authority. Exercising any of these starts the same way: one email to us.
Security
The store runs on Shopify's infrastructure with encryption in transit, payments are handled by certified processors, and access to customer data inside Allay is limited to the people who need it to help you. No system is perfect, and anyone who promises otherwise is selling something. If a breach ever affects your data, we will tell you directly and promptly.
Not for children
Allay is for adults. We don't knowingly collect data from anyone under 18, and if we learn we have, we delete it.
Changes to this policy
If we change this policy in a way that matters, we'll update the date at the top and, for significant changes, tell you by email. We won't quietly move the goalposts.
Contact
Questions about your data: support@tryallay.com. A human answers within one business day.