Privacy policy
Effective Date: June 20, 2026 Last Updated: June 20, 2026
This Privacy Policy (“Policy”) describes how Blood Sugar Friendly (“Blood Sugar Friendly,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information that we process through our website located at bloodsugarfriendly.com and any related subdomains, pages, mobile experiences, social media pages, text-message and email programs, customer-support channels, and other online or offline services that link to this Policy (collectively, the “Services”). It also explains the choices and rights you have regarding your personal information.
By accessing or using the Services, making a purchase, or otherwise providing us with personal information, you acknowledge that you have read and understood this Policy. Our legal entity is BSF Nutrition Inc., a Georgia-organized company located at 1870 The Exchange SE, Ste 220 PMB 14642, Atlanta, GA 30339-2171.
1. Quick Summary
This summary is provided for convenience only and does not replace the full Policy below. We collect information you give us (such as your name, contact details, and order information), information collected automatically (such as device and usage data through cookies and similar technologies), and information from third parties (such as our payment, shipping, analytics, and advertising partners). We use this information to operate our store, fulfill orders, communicate with you, market our products, improve the Services, comply with law, and protect against fraud. We do not sell personal information for money, but some of our advertising and analytics activities may be considered a “sale” or “sharing” under certain U.S. state laws, and you can opt out as described below.
2. Personal Information We Collect
We collect personal information in three principal ways: (a) information you provide directly to us; (b) information we collect automatically through your use of the Services; and (c) information we obtain from other sources.
2.1 Information You Provide to Us
• Contact details – your first and last name, email address, shipping and billing addresses, and telephone/mobile number.
• Account information – username, password, and account preferences if you create an account.
• Order and transaction information – the products you purchase, order value, purchase and subscription history, gift messages, and customer-service communications.
• Payment information – payment card or other billing details. Payment card data is collected and processed by our third-party payment processors (such as Shopify Payments and other providers) in accordance with their own privacy policies; we do not store full payment card numbers on our own systems.
• Marketing data – your subscription and consent choices for email and SMS marketing, survey and contest responses, and reviews or other content you submit.
• User content – product reviews, ratings, photos, social-media posts, comments, and other content you create or share with us.
• Other information you choose to provide – such as preferences, interests, feedback, and any other information you submit through forms, surveys, or communications.
2.2 Information We Collect Automatically
When you interact with the Services, we and our service providers automatically collect certain information, including:
• Device information – operating system type and version, device type and model, browser type, screen resolution, language settings, mobile carrier, unique device and advertising identifiers, and Internet Protocol (IP) address.
• Usage and online-activity data – pages and screens you view, referring/exit pages, links and buttons clicked, search terms, access times, time spent, navigation paths, and whether you opened our emails or clicked links within them.
• Approximate location data – general geographic location inferred from your IP address.
• Cookies and similar technologies – information collected through cookies, pixels, web beacons, software development kits (SDKs), and local storage, as described in Section 5.
2.3 Information From Other Sources
• Service providers and platforms – our e-commerce platform (Shopify), payment processors, shipping and logistics partners, fraud-prevention vendors, and customer-support tools.
• Marketing and advertising partners – analytics providers and advertising networks (such as Meta and Google) that help us measure and target advertising.
• Social media – if you interact with us on social platforms or log in via a third-party account, we may receive profile and public information.
• Other third parties – data brokers, publicly available sources, and referral partners, where permitted by law.
If you provide personal information about another person (for example, a gift recipient), you represent that you have the authority to do so and to permit us to use that information in accordance with this Policy.
3. How We Use Personal Information
We use personal information for the following business and commercial purposes:
• Operate, provide, and maintain the Services, including processing and fulfilling orders, managing subscriptions, arranging shipping and delivery, and processing payments, returns, and refunds.
• Create and manage your account and authenticate your access.
• Communicate with you about your orders, account, and requests, and send administrative and transactional messages (such as order confirmations, shipping updates, and policy changes).
• Market and advertise our products, including sending newsletters, promotions, and offers by email and SMS (where you have consented), conducting surveys and contests, and delivering and measuring interest-based advertising.
• Personalize your experience and present content, products, and offers tailored to your interests.
• Analyze, improve, and develop the Services, including conducting analytics, monitoring usage and trends, testing new features, and developing new products.
• Detect, prevent, investigate, and respond to fraud, abuse, security incidents, and other harmful or unlawful activity, and to protect the rights, property, and safety of Blood Sugar Friendly, our customers, and others.
• Comply with applicable laws, regulations, legal processes, and governmental requests, and to establish, exercise, or defend legal claims.
• De-identify or aggregate information so that it no longer identifies you, and use such data for any lawful purpose.
4. Legal Bases for Processing (Where Applicable)
Where required by applicable law (such as the GDPR/UK GDPR described in Section 14), we rely on the following legal bases to process your personal information: performance of a contract with you; your consent (which you may withdraw at any time); our legitimate interests in operating, improving, securing, and marketing our business in a manner that does not override your rights; and compliance with our legal obligations.
5. Cookies, Analytics, and Advertising Technologies
We and our partners use cookies and similar tracking technologies to operate and secure the Services, remember your preferences, analyze traffic and performance, and deliver and measure advertising. These technologies include:
• Strictly necessary cookies – required for core functionality such as shopping cart, checkout, and security.
• Functional cookies – remember your settings and preferences.
• Analytics cookies – help us understand how visitors use the Services (for example, Google Analytics and Shopify analytics).
• Advertising and targeting cookies and pixels – used by us and advertising partners (such as the Meta Pixel and Google advertising tags) to deliver and measure interest-based advertising across websites and apps.
You can control cookies through your browser settings and, where available, through our cookie-preferences tool or the “Your Privacy Choices” link in our website footer. You can also opt out of certain interest-based advertising through industry tools such as the Digital Advertising Alliance (optout.aboutads.info) and the Network Advertising Initiative (optout.networkadvertising.org). Disabling some cookies may affect the functionality of the Services. See Section 13 for state-specific opt-out rights and our treatment of the Global Privacy Control (GPC).
6. How We Disclose Personal Information
We disclose personal information to the following categories of recipients for the purposes described in this Policy:
• E-commerce platform – Shopify Inc., which hosts our online store and processes information about your access to and use of the Services. Information you submit may be transmitted to and shared with Shopify and its sub-processors, which may be located in countries other than where you reside. See Shopify’s privacy policy at shopify.com/legal/privacy.
• Payment processors – such as Shopify Payments and other providers, which process your payment information.
• Shipping and fulfillment partners – carriers and logistics providers that deliver your orders.
• Email and SMS marketing providers – platforms that deliver our email and text-message communications.
• Analytics and advertising partners – such as Google and Meta, for analytics and interest-based advertising.
• Other service providers – customer-support, fraud-prevention, hosting, IT, and professional-services vendors that process information on our behalf and pursuant to our instructions.
• Professional advisors and authorities – lawyers, accountants, auditors, and insurers, and law enforcement, regulators, courts, or other government authorities where required by law or to protect our rights.
• Business transferees – in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our business or assets.
• With your direction or consent – such as when you post to public areas of the Services or ask us to share your information.
We do not disclose personal information to third parties for their own independent direct-marketing purposes without your consent.
7. Email and SMS Marketing; Communications Consent
7.1 Email Marketing
If you sign up to receive marketing emails or otherwise consent, we may send you newsletters, promotions, and product updates. You can opt out at any time by clicking the “unsubscribe” link in any marketing email or by contacting us. We may still send you non-promotional transactional and administrative messages (such as order confirmations).
7.2 SMS / Text-Message Marketing (TCPA)
By providing your mobile telephone number and opting in to our text-message program, you expressly consent to receive recurring automated marketing and transactional text messages (including via an automatic telephone dialing system) from or on behalf of Blood Sugar Friendly at the number provided. Consent is not a condition of any purchase. Message and data rates may apply, and message frequency varies. We comply with the Telephone Consumer Protection Act (TCPA) and applicable state telemarketing laws.
To stop receiving text messages, reply STOP (or HELP for help) to any message, or contact us at Team@bloodsugarfriendly.com. After you opt out, you may receive a single confirmation message. We will process opt-out requests as required by applicable law. Carriers are not liable for delayed or undelivered messages.
8. Your Marketing Choices
You can manage your communication preferences at any time by following the unsubscribe instructions in our emails, replying STOP to text messages, adjusting your account settings (if applicable), or contacting us. You may also control certain advertising and tracking as described in Section 5 and exercise the state-law rights described in Section 13.
9. Data Retention
We retain personal information for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law. Criteria used to determine our retention periods include the length of our ongoing relationship with you, our legal and contractual obligations (such as tax, accounting, and recordkeeping requirements), and whether retention is advisable in light of applicable statutes of limitation, disputes, or investigations. When personal information is no longer needed, we will delete, anonymize, or de-identify it in accordance with our retention practices.
10. Data Security
We maintain reasonable organizational, technical, and administrative safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. Payment transactions are encrypted and processed by PCI-DSS-compliant payment processors. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential. If you believe your interaction with us is no longer secure, please contact us immediately at Team@bloodsugarfriendly.com.
11. Children’s Privacy
The Services are intended for adults and are not directed to children. Our products are not intended for use by children, and we do not knowingly collect personal information from children under the age of 16 (or under 13 within the meaning of the U.S. Children’s Online Privacy Protection Act, “COPPA”). If you are under the applicable age, please do not use the Services or provide any personal information. If we learn that we have collected personal information from a child in violation of applicable law, we will delete it. If you believe a child has provided us personal information, please contact us at Team@bloodsugarfriendly.com.
12. Your Privacy Rights
Depending on where you live and subject to applicable law and exceptions, you may have the right to: (a) confirm whether we process your personal information and access a copy of it; (b) correct inaccurate personal information; (c) delete personal information; (d) obtain a portable copy of certain information; (e) opt out of targeted advertising, the “sale” or “sharing” of personal information, and certain profiling; (f) limit the use and disclosure of sensitive personal information; and (g) withdraw consent. We will not discriminate or retaliate against you for exercising these rights. How to exercise your rights is described in Section 13.4.
13. U.S. State Privacy Disclosures
This Section provides additional disclosures and rights for residents of U.S. states that have enacted comprehensive consumer privacy laws. To the extent of any conflict with the rest of this Policy, this Section controls for residents of the applicable state.
13.1 California (CCPA/CPRA)
Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”), California residents have specific rights regarding their personal information. In the preceding 12 months, we have collected the following categories of personal information (as defined by the CCPA): identifiers; customer records (such as name, contact, and payment information); commercial information (such as purchase history); internet or other electronic network activity information; geolocation data; audio/visual information (such as photos in reviews); inferences; and, only where you provide it, certain sensitive personal information (such as account log-in credentials). We collect this information from the sources, and use and disclose it for the purposes, described in Sections 2, 3, and 6.
“Sale” and “Sharing.” We do not sell personal information for monetary consideration. However, our use of cookies, analytics, and advertising technologies (such as the Meta Pixel and Google advertising tags) may be considered a “sale” or “sharing” of personal information for “cross-context behavioral advertising” under the CCPA. The categories that may be “sold” or “shared” are identifiers, internet activity information, commercial information, and inferences, disclosed to advertising and analytics partners. We do not knowingly sell or share the personal information of consumers under 16 years of age.
Your California Rights. You have the right to know/access, correct, and delete your personal information; to opt out of the sale or sharing of your personal information; to limit the use and disclosure of sensitive personal information; and to be free from discrimination for exercising your rights. To opt out, use the “Your Privacy Choices” / “Do Not Sell or Share My Personal Information” link in our website footer, or contact us as described in Section 13.4. We honor opt-out preference signals such as the Global Privacy Control (GPC).
Sensitive Personal Information. We do not use or disclose sensitive personal information for purposes other than those permitted under the CCPA for which a right to limit does not apply. Financial Incentives. If we offer loyalty programs, discounts, or referral rewards in exchange for personal information, any such program is offered in accordance with the CCPA; the value of your information is reasonably related to the cost of the benefits provided, and you may withdraw at any time. Shine the Light. California’s “Shine the Light” law permits California residents to request information about disclosures to third parties for their direct-marketing purposes; we do not make such disclosures.
13.2 Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and Other States
Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCPA), Montana (MCDPA), and other states with comprehensive privacy laws now in effect — including Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Minnesota, Maryland, Tennessee, Indiana, Kentucky, and Rhode Island — have rights that may include the right to: confirm and access their personal data; correct inaccuracies; delete personal data; obtain a portable copy; and opt out of targeted advertising, the sale of personal data, and certain profiling that produces legal or similarly significant effects. We do not sell personal data for monetary consideration, but our advertising and analytics activities may constitute a “sale” or “targeted advertising” under these laws, and you may opt out as described in Section 13.4. We obtain consent before processing sensitive data where required, and we honor recognized universal opt-out mechanisms (such as the GPC) where required by law.
Residents of Oregon, Connecticut, and Minnesota may, where applicable, request a list of the specific third parties to which we have disclosed personal data. Nevada residents may submit a verified request to opt out of the sale of certain covered information; we do not sell such information as defined under Nevada law.
13.3 Appeals
If we decline to act on your request and you are a resident of a state that provides an appeal right, you may appeal our decision by replying to our response or contacting us at Team@bloodsugarfriendly.com with the subject line “Privacy Appeal.” If your appeal is denied, you may contact your state attorney general.
13.4 How to Exercise Your Rights
To exercise any of the rights described above, you (or your authorized agent) may: (a) email us at Team@bloodsugarfriendly.com; (b) use the “Your Privacy Choices” link in our website footer for opt-out requests; or (c) write to us at 1870 The Exchange SE, Ste 220 PMB 14642, Atlanta, GA 30339-2171. We will verify your identity before responding, which may require you to provide information that matches our records. We will respond within the timeframe required by applicable law. You may use an authorized agent to submit requests; we may require written authorization and verification of identity. We do not charge a fee for exercising your rights unless a request is excessive or unfounded, as permitted by law.
14. International Visitors (GDPR / UK GDPR)
We are based in the United States, and the Services are intended for customers in the United States. If you access the Services from the European Economic Area (EEA), the United Kingdom, or another jurisdiction with data-protection laws, you understand that your information will be transferred to, stored, and processed in the United States, where data-protection laws may differ from those in your jurisdiction. Where the EU/UK General Data Protection Regulation applies, Blood Sugar Friendly acts as a “controller” of your personal information, and you may have rights to access, rectify, erase, restrict, or object to processing, to data portability, and to lodge a complaint with your local supervisory authority. Our legal bases for processing are described in Section 4. Where we transfer personal data internationally, we use appropriate safeguards such as the European Commission’s Standard Contractual Clauses where required. To exercise your rights, contact us at Team@bloodsugarfriendly.com.
15. Third-Party Links and Services
The Services may contain links to, or integrations with, third-party websites and services that we do not control. This Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third party before providing them with your information. Payments made through third-party processors are governed by those providers’ privacy policies.
16. Do Not Track and Global Privacy Control
Some browsers offer a “Do Not Track” (DNT) signal. Because there is no common industry standard for DNT, we do not currently respond to DNT signals. We do, however, honor the Global Privacy Control (GPC) and similar recognized opt-out preference signals as an opt-out of “sale”/“sharing” and targeted advertising where required by applicable law, on the browser or device from which the signal is sent.
17. Changes to This Policy
We may update this Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make changes, we will revise the “Last Updated” date above and, if the changes are material, provide additional notice as required by law. Your continued use of the Services after the effective date of any changes constitutes acceptance of the revised Policy.
18. Contact Us
If you have questions, concerns, or requests regarding this Policy or our privacy practices, please contact us at:
Blood Sugar Friendly
Email: Team@bloodsugarfriendly.com
Mailing Address: 1870 The Exchange SE, Ste 220 PMB 14642, Atlanta, GA 30339-2171
Website: bloodsugarfriendly.com