Privacy Policy

Last Updated: October 22, 2026

1. Introduction

Human Matter Labs LLC ("Human Matter," "we," "us" or "our") respects your privacy. This Privacy Policy explains how we collect, use, share and protect your personal data when you visit humanmatter.com (the "Website"), buy our products or contact us. It also explains the rights you have under applicable privacy laws in the United States, the European Union and the United Kingdom.

Human Matter Labs LLC is a Wyoming limited liability company (Filing ID 2026-002111477), 1309 Coffeen Avenue STE 1200, Sheridan, Wyoming 82801, USA. We are the "controller" of your personal data for the purposes of EU and UK data protection law, and the "business" or "controller" for the purposes of applicable US state privacy laws.

We use advertising technology, including the Meta Pixel and Meta's Conversions API, to measure our ads and to show ads to people who are likely to be interested in our products, including ads based on activity on our Website. Under some US state laws, this counts as "selling" or "sharing" personal data for targeted advertising. You can opt out at any time on our Your Privacy Choices page (humanmatter.com/pages/data-sharing-opt-out) or by using the Global Privacy Control signal. Section 8 explains how.

If this Privacy Policy and our Terms of Service conflict on how we handle personal data, this Privacy Policy applies.

2. Personal Data We Collect

"Personal data" means information that identifies you or can reasonably be linked to you. We collect it in the following ways.

2.1 Information you give us

When you place an order, contact us or sign up for our emails, you may give us:

  • your name, email address, billing address and shipping address;
  • your phone number, if you choose to provide one at checkout;
  • order details, such as the products you buy, prices, discounts and delivery instructions;
  • payment confirmation details (your full card number is handled by our payment providers, not by us; see Section 5);
  • the content of your emails to us, including any guarantee, refund or warranty request;
  • your marketing preferences;
  • your account details, if you create a customer account.

2.2 Information collected automatically

When you browse the Website, we, Shopify and our advertising and analytics partners automatically collect information through cookies, pixels, server logs and similar technologies, such as:

  • your IP address and the approximate location derived from it;
  • your browser type, device type, operating system and device identifiers;
  • the pages and products you view, the items you add to your cart, the checkouts you start and the purchases you complete;
  • the page or ad that brought you to the Website, and the date and time of your visit;
  • cookie identifiers, including those set by Meta.

2.3 Information from third parties

We may receive information from:

  • Shopify and our payment providers (Shopify Payments and PayPal), such as payment status and fraud-screening results;
  • our fulfillment partner and carriers, such as delivery status;
  • advertising platforms such as Meta, mainly in the form of campaign reports and attribution data, for example whether a purchase followed a click on one of our ads.

We do not buy personal data from data brokers.

2.4 Health information

We do not intentionally collect health information. Because our products relate to women's hormonal health, some information, such as the product pages you visit or the products you buy, could suggest something about your health. If you choose to describe symptoms or other health details in an email to us, for example when you use our guarantee, we use that information only to reply to you and handle your request.

3. How We Use Your Personal Data

We use personal data for the following purposes:

  • To process and deliver your orders: taking payment, preparing and shipping your order, sending order and shipping confirmations, and handling cancellations, refunds, guarantee requests and warranty claims.
  • To provide customer support: replying to your emails and resolving problems with your order.
  • To send marketing emails, only with your consent: news, offers and product information. Every marketing email contains an unsubscribe link, and you can opt out at any time.
  • To advertise and measure our ads: using the Meta Pixel, Meta's Conversions API and our other advertising and analytics partners to measure how our ads perform, to build advertising audiences and to decide who sees our ads, including ads based on your activity on our Website (see Sections 4 and 5).
  • To run and improve the Website: understanding how visitors use the Website, fixing technical problems and improving our pages and products.
  • To keep the Website and our customers safe: detecting and preventing fraud, abuse of our guarantee and unauthorized access.
  • To comply with the law and protect our rights: meeting tax, accounting and other legal obligations, responding to lawful requests from authorities, and establishing or defending legal claims.

We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects for you.

3.1 Legal bases (EU and UK)

If you are in the EU or the UK, we rely on the following legal bases under the GDPR and the UK GDPR:

  • Performance of a contract (Article 6(1)(b)): to process, deliver and support your orders, including refunds, guarantee requests and warranty claims.
  • Consent (Article 6(1)(a)): for marketing emails, and for non-essential cookies, pixels and similar technologies, including the Meta Pixel, where the law requires consent. You can withdraw your consent at any time; this does not affect processing carried out before you withdraw it.
  • Legitimate interests (Article 6(1)(f)): to keep the Website secure, prevent fraud, understand how the Website is used and improve our service, where these interests are not overridden by your rights.
  • Legal obligation (Article 6(1)(c)): to meet tax, accounting and other legal requirements.
  • Explicit consent (Article 9(2)(a)): where you choose to send us health information, we process it only to handle your request, on the basis of the consent you give by sending it. You can ask us to delete it at any time.

4. Cookies and Similar Technologies

Cookies are small text files stored on your device when you visit a website. Pixels and similar technologies are small pieces of code that send information about your visit to the company that provides them. We use the following types:

  • Essential cookies: needed for the Website to work, for example to keep items in your cart, run the checkout securely and prevent fraud. They are set by us and by Shopify and do not require consent.
  • Preference and analytics technologies: help us remember your settings and understand how visitors use the Website. Shopify provides some of these analytics, and our other analytics partners may provide others.
  • Advertising technologies: used to measure and target our ads. They include:

- Meta Pixel. We use the Meta Pixel (Facebook and Instagram) through the Facebook & Instagram app in our Shopify store. It records events such as page views, product views, items added to the cart, checkouts started and purchases, and sends them to Meta Platforms, Inc. together with cookie and device identifiers. These events may include the names of the products you view or buy.

- Meta Conversions API. The same events are also sent to Meta directly from our servers through Shopify, not only from your browser. This means events can reach Meta even when your browser limits cookies.

- Automatic advanced matching. To help Meta match these events to Facebook and Instagram accounts, contact information such as your email address and phone number is hashed (converted into a scrambled code) before it is sent to Meta. Meta uses this hashed information to match events to the people who have those accounts.

- Other advertising and analytics partners. We also use tracking code from other advertising and analytics partners, installed through our store's customer event settings, to measure the performance of our marketing.

Meta uses the information it receives in accordance with its own Privacy Policy, available at facebook.com/privacy/policy.

Your choices. Where the law requires consent, for example in the EU and UK, we ask for it through the cookie banner shown when you first visit the Website, and you can change your choice at any time. Depending on where you live, you can also opt out of targeted advertising on our Your Privacy Choices page or with the Global Privacy Control signal (Section 8.1). You can block or delete cookies in your browser settings; if you block essential cookies, parts of the Website, such as the cart and checkout, may not work. You can also manage how Meta uses your information for ads in your Facebook and Instagram ad settings.

Do Not Track. Other than the Global Privacy Control signal, the Website does not respond to browser "Do Not Track" signals, because there is no common industry standard for them.

5. How We Share Your Personal Data

We share personal data only as described below.

  • Shopify. Our store runs on Shopify, which hosts the Website and processes store and checkout data on our behalf. Shopify may also use information about your interactions with our store, together with information from other merchants, to provide and improve its own services, and Shopify is responsible for that processing. If you use the Shop app or other Shopify consumer services, Shopify's own privacy policy applies. You can learn more at privacy.shopify.com.
  • Payment providers. Card payments are processed by Shopify Payments, and PayPal payments by PayPal. Your payment details go directly to them, and we do not store your full card details.
  • Fulfillment partner and carriers. We share your name, shipping address, email address and, if you provided it, phone number with our fulfillment partner and with carriers, so they can deliver your order and send you delivery updates.
  • Email service provider. If you sign up for marketing emails, we use an email service provider to send them on our behalf.
  • Advertising and analytics partners. We share information about your activity on the Website, cookie and device identifiers and hashed contact information with Meta, and activity and device information with our other advertising and analytics partners, as described in Section 4. These partners use the information to measure our ads and to show our ads to you and to others, and they may also use it for their own purposes under their own privacy policies.
  • Professional advisers and authorities. We may share information with lawyers, accountants and auditors, and with courts, regulators or law enforcement where the law requires it or where it is needed to protect our rights, our customers or others.
  • Business transfers. If our business is involved in a merger, acquisition, financing, reorganization or sale of assets, personal data may be transferred as part of that transaction, subject to protections consistent with this Privacy Policy.
  • With your consent. We may share information in other ways when you ask us to or agree to it.

5.1 "Selling" and "sharing" under US state laws

We do not sell personal data for money. However, our use of the Meta Pixel, the Conversions API, automatic advanced matching and our other advertising partners may be considered a "sale" or "sharing" of personal data for cross-context behavioral advertising, or processing for "targeted advertising," under the laws of California and other US states. The categories of personal data involved are identifiers (such as IP address, cookie and device identifiers, and hashed email address and phone number), commercial information (such as products viewed, added to the cart and purchased) and internet activity on the Website. You can opt out at any time, as described in Section 8.1. We do not have actual knowledge that we sell or share the personal data of consumers under 16.

6. International Data Transfers

Human Matter Labs LLC is based in the United States, and our service providers are located in countries including the United States and the member states of the European Union. If you live outside the United States, your personal data will be transferred to and processed in the United States and other countries whose data protection laws may differ from those of the country where you live.

When we transfer personal data out of the European Economic Area or the United Kingdom to a country that has not been recognized as providing an adequate level of protection, we rely on appropriate safeguards where required, such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or a recipient's certification under the EU-US Data Privacy Framework. You can contact us for more information about these safeguards.

7. Data Retention

We keep personal data only for as long as we need it for the purposes described in this Privacy Policy, unless the law requires or allows us to keep it longer:

  • Order and transaction records: for as long as tax and accounting laws require, up to 7 years after the order.
  • Customer support emails: for as long as needed to handle your request and any related refund, guarantee or warranty claim, and after that only where needed to resolve disputes or meet legal obligations.
  • Marketing data: until you unsubscribe or withdraw your consent. After that, we keep your email address on a suppression list so that we do not email you again.
  • Account data: until you ask us to delete your account, subject to the retention of order records described above.
  • Website and security logs: for a limited period, for security, fraud prevention and troubleshooting.
  • Advertising data: information received by Meta and our other advertising and analytics partners is retained under their own policies.

When we no longer need personal data, we delete or anonymize it.

8. Your Rights and Choices

Depending on where you live, you may have the rights described below. To exercise any of them, email hello@humanmatter.com. We may need to verify your identity before acting on a request, and we will not discriminate against you for exercising your rights.

8.1 Opting out of targeted advertising, "sale" and "sharing"

You can opt out of the sale or sharing of your personal data and of targeted advertising in two ways:

  • Your Privacy Choices page: visit humanmatter.com/pages/data-sharing-opt-out and submit your choice.
  • Global Privacy Control: if your browser or browser extension sends the Global Privacy Control (GPC) signal, we treat it as a valid opt-out request for that browser and device and, where we can link it to your customer account, for your account as well. You can learn more at globalprivacycontrol.org.

Once you opt out, we stop selling or sharing your personal data for targeted advertising. You may still see our ads, for example ads based on the content of the website or app you are using.

8.2 EU, EEA and UK residents (GDPR and UK GDPR)

You have the right to:

  • access the personal data we hold about you and receive a copy;
  • rectification of inaccurate or incomplete personal data;
  • erasure of your personal data, where there is no overriding reason for us to keep it;
  • restriction of processing in certain circumstances;
  • data portability, to receive the personal data you gave us in a structured, commonly used and machine-readable format;
  • object to processing based on our legitimate interests, and to object at any time to direct marketing;
  • withdraw your consent at any time, without affecting processing carried out before you withdraw it.

We respond to requests within one month of receiving them. If a request is complex, we may extend this period by up to two further months, in which case we will tell you why. You also have the right to lodge a complaint with your local data protection supervisory authority or, in the UK, with the Information Commissioner's Office (ICO).

8.3 California and other US states

If you live in California or another US state with a comprehensive privacy law, such as Colorado, Connecticut, Virginia or Texas, you may have the right to:

  • know and access the categories and specific pieces of personal data we collect, its sources, the purposes for which we use it and the categories of third parties we disclose it to;
  • delete personal data we have collected from you;
  • correct inaccurate personal data;
  • portability, to receive your personal data in a usable format;
  • opt out of the sale or sharing of personal data and of targeted advertising (Section 8.1);
  • non-discrimination for exercising any of these rights.

We do not use or disclose sensitive personal information for purposes that would give you a right to limit its use under California law.

You can submit a request yourself or through an authorized agent. We will ask an agent for proof that you authorized them, and we may ask you to verify your identity directly with us. We will confirm receipt of your request within 10 business days and respond within 45 days. If we need more time, we may extend this by up to another 45 days and will tell you. If we decline your request, you can appeal by replying to our decision, and we will respond to your appeal within the period required by the law of your state.

8.4 Other jurisdictions

If you live elsewhere, we will honor the privacy rights that your local law gives you.

8.5 Marketing emails

You can unsubscribe from marketing emails at any time with the link in each email, or by emailing us. We will still send you emails about your orders, refunds and guarantee requests.

9. Data Security

We use reasonable technical and organizational measures to protect personal data, including encrypted connections (HTTPS), access restrictions and the security measures of our platform and payment providers. Payments are processed by PCI-compliant payment providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a data breach affects your personal data, we will notify you and the relevant authorities where the law requires. We will never ask for your password or full card number by email.

10. Children

Our products and the Website are not intended for anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has given us personal data, email hello@humanmatter.com and we will delete it.

11. Third-Party Links

The Website may link to other websites and social media platforms, such as Facebook and Instagram. We do not control them, and their own privacy policies apply when you visit or use them.

12. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, technology or legal obligations. We will post the updated version on this page with a new "Last Updated" date and, where the law requires, tell you about significant changes by email or with a notice on the Website.

13. Contact Us

For questions about this Privacy Policy, or to exercise your rights, email hello@humanmatter.com. A real person replies within 24–48 hours on business days, and we respond to privacy requests within the time limits set out in Section 8.

Controller: Human Matter Labs LLC, 1309 Coffeen Avenue STE 1200, Sheridan, Wyoming 82801, USA.