PRIVACY POLICY

Last updated: June 26, 2026

Glutenful operates this website, online store, products, content, tools, and related services. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit our website, place an order, create an account, contact us, interact with our ads, or otherwise use our services.

Glutenful is powered by Shopify. Shopify and other service providers may process personal information to help us operate our store, process payments, prevent fraud, provide analytics, personalize shopping experiences, and support advertising and marketing.

If there is a conflict between this Privacy Policy and our Terms of Service, this Privacy Policy controls with respect to personal information.

CALIFORNIA NOTICE AT COLLECTION

If you are a California resident, this section serves as our Notice at Collection under the California Consumer Privacy Act, as amended by the California Privacy Rights Act. California law gives consumers rights to know, access, delete, correct, opt out of sale or sharing, limit certain uses of sensitive personal information, and not be discriminated against for exercising privacy rights. California also requires covered businesses to honor valid Global Privacy Control signals as opt-out requests.

We collect the categories of personal information listed below for the purposes described in this Privacy Policy, including order fulfillment, payment processing, fraud prevention, customer support, analytics, advertising, legal compliance, and business operations.

PERSONAL INFORMATION WE COLLECT

Identifiers: name, email address, phone number, billing address, shipping address, account login details, IP address, device identifiers, and similar information.

Commercial Information: products viewed, cart activity, orders placed, transaction history, shipping information, customer support history, preferences, and product interests.

Payment Information: payment method details, payment confirmation, billing information, and transaction records. Payment card numbers are processed by our payment processors and are not stored directly by Glutenful in full card-number form.

Internet or Network Activity: browser type, device type, pages visited, referring URLs, session activity, interactions with emails or ads, cookies, pixels, and similar technologies.

Geolocation Information: approximate location inferred from IP address or shipping/billing information. We do not intentionally collect precise geolocation unless you choose to provide it.

Communications: information you provide when contacting customer support, submitting forms, responding to surveys, leaving reviews, or communicating with us.

Inferences: preferences, likely interests, shopping behavior, and marketing segments created from the information above.

Sensitive Personal Information: account login credentials, payment-related information, and any sensitive information you voluntarily provide. We do not use or disclose sensitive personal information for purposes requiring a “Limit the Use of My Sensitive Personal Information” link unless we are legally required to provide one.

SOURCES OF PERSONAL INFORMATION

We collect personal information directly from you, automatically from your browser or device, from Shopify and other service providers, from payment processors, shipping carriers, fraud-prevention tools, analytics providers, advertising partners, social media platforms, customer support tools, review tools, and other third parties you interact with in connection with our services.

HOW WE USE PERSONAL INFORMATION

Order Fulfillment: to process orders, accept payments, ship products, provide order confirmations, manage delivery issues, and provide customer support.

Store Operations: to operate our Shopify storefront, maintain accounts, improve site performance, personalize shopping experiences, troubleshoot issues, and maintain security.

Marketing and Advertising: to send promotional emails or texts where permitted, show targeted ads, measure ad performance, create customer segments, and understand shopping behavior.

Analytics: to understand traffic, product interest, conversion, site usage, and campaign performance.

Security and Fraud Prevention: to detect fraud, prevent unauthorized transactions, protect our website, enforce our Terms, and secure customer accounts.

Legal Compliance: to comply with tax, accounting, food-safety, recall, consumer protection, law-enforcement, dispute, and regulatory obligations.

COOKIES, PIXELS, AND TARGETED ADVERTISING

We and our partners may use cookies, pixels, tags, SDKs, local storage, and similar technologies to operate the website, remember preferences, measure performance, prevent fraud, analyze traffic, personalize content, and deliver targeted advertising.

Depending on the laws that apply to you, our use of advertising cookies, retargeting tools, Meta Pixel, Google advertising tools, Shopify advertising features, analytics tools, or similar technologies may be considered a “sale,” “sharing,” or processing for targeted advertising. You may opt out through our “Do Not Sell or Share My Personal Information” or “Your Privacy Choices” link, where available, and by using a browser-enabled Global Privacy Control signal where required by law.

HOW WE DISCLOSE PERSONAL INFORMATION

We may disclose personal information to:

• Service Providers and Contractors: Shopify, payment processors, fulfillment partners, shipping carriers, IT providers, cloud hosting providers, email and SMS providers, customer support tools, analytics providers, fraud-prevention providers, and professional advisors.

• Advertising and Marketing Partners: partners that help us deliver, personalize, measure, and improve advertising and marketing campaigns.

• Legal and Safety Recipients: courts, regulators, law enforcement, government authorities, or other parties where disclosure is required or appropriate to comply with law, enforce our rights, investigate fraud, protect safety, or respond to legal process.

• Business Transaction Parties: buyers, investors, lenders, advisors, or successors in connection with a merger, acquisition, financing, restructuring, bankruptcy, sale of assets, or similar transaction.

• Parties You Direct Us To Share With: such as social media platforms, review platforms, payment providers, or other third parties you choose to interact with.

SALE, SHARING, AND TARGETED ADVERTISING DISCLOSURE

We do not sell personal information for money. However, some privacy laws define “sale” or “sharing” broadly to include disclosure of identifiers, internet activity, or commercial information to advertising and analytics partners for cross-context behavioral advertising or targeted advertising.

In the preceding 12 months, we may have sold or shared the following categories of personal information for advertising or analytics purposes: identifiers, internet or network activity, commercial information, approximate location, and inferences. We do not knowingly sell or share personal information of consumers under 16 years of age.

You may opt out of sale or sharing by using our “Do Not Sell or Share My Personal Information” or “Your Privacy Choices” link, by emailing us at eat@glutenful.com, or by enabling a valid Global Privacy Control signal in your browser. Shopify provides merchant privacy tools and customer privacy settings that can help support these controls.

MOBILE MESSAGING AND SMS PRIVACY

If you opt in to receive text messages from us, we may collect your phone number, consent status, message history, and related information needed to operate the messaging program.

Mobile opt-in data and text messaging consent information will not be sold, rented, leased, or shared with third parties or affiliates for their own marketing or promotional purposes. We may disclose this information to service providers that help us operate our messaging program.

You may opt out of marketing text messages at any time by replying “STOP” to a text message from us. Message and data rates may apply.

RELATIONSHIP WITH SHOPIFY

Our store is powered by Shopify. Shopify may process personal information when you visit our store, make a purchase, use Shopify-supported checkout, interact with Shopify consumer services, or use Shopify features connected to our store. Shopify may process this information as our service provider, processor, independent business, or controller depending on the context and applicable law. Shopify publishes its own privacy policy and consumer privacy controls.

RETENTION

We retain personal information only as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide services, fulfill orders, maintain accounts, comply with tax, accounting, food-safety, recall, shipping, fraud-prevention, legal, and dispute-resolution obligations, enforce our agreements, and maintain business records.

Retention periods vary based on the type of information, purpose of collection, legal requirements, operational needs, and whether deletion is requested. We may retain de-identified or aggregated information that no longer identifies you.

SECURITY

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

CHILDREN’S PRIVACY

Our website and services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. We also do not knowingly sell or share personal information of consumers under 16. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

YOUR PRIVACY RIGHTS

Depending on where you live, you may have the right to request access to personal information, receive a portable copy, delete personal information, correct inaccurate personal information, opt out of sale or sharing, opt out of targeted advertising, limit certain uses of sensitive personal information, withdraw consent where applicable, appeal a denied request where required by law, and not be discriminated against for exercising privacy rights.

To exercise your rights, contact us at eat@glutenful.com or use the privacy controls available on our website, including “Do Not Sell or Share My Personal Information” or “Your Privacy Choices,” where available.

We may need to verify your identity before fulfilling a request. Verification may require matching information you provide with information we already maintain. Authorized agents may submit requests on your behalf where permitted by law, but we may require proof of authorization and may ask you to verify your identity directly.

We will respond to privacy requests within the time required by applicable law. If we deny a request, we will explain the reason where required and provide appeal instructions where applicable.

EMAIL MARKETING

You may unsubscribe from marketing emails by using the unsubscribe link in our emails or contacting us. Even if you opt out of marketing, we may still send transactional or service-related messages, such as order confirmations, shipping updates, account notices, recall notices, or customer support messages.

THIRD-PARTY LINKS

Our website may link to third-party websites, platforms, plug-ins, or services. We are not responsible for the privacy, security, content, or practices of third parties. Review their privacy policies before providing information to them.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. When we make changes, we will update the “Last updated” date above and provide additional notice where required by law.

CONTACT

Questions or privacy requests should be sent to:

Glutenful
21800 Oxnard Street, Suite 250
Woodland Hills, CA 91367
United States
eat@glutenful.com