Global Privacy Policy

1Scope of Policy

This Global Privacy Policy applies to consumers engaging with Sloth MD® through slothmd.com, our WooCommerce-based online store, customer support, and our wholesale and affiliate programs, worldwide, unless a jurisdiction-specific notice provides supplemental rights (for example, our California Privacy Notice).

Depending on where you are located, one or more of the following frameworks may apply to our handling of your information:

• U.S. federal and state privacy laws
• CCPA/CPRA (California — see our separate California Privacy Notice)
• PIPEDA (Canada)
• CASL (Canada, for electronic marketing)
• GDPR (where we process the personal data of individuals in the EU/UK)

2Personal Information We Collect

We collect personal information you provide directly — for example, when you place an order, sign up for updates, contact customer service, or apply for a wholesale or affiliate account — along with limited technical information collected automatically through our website’s standard e-commerce functionality and website analytics.

We do not collect sensitive personal information (such as health data, government IDs, or biometric data) through slothmd.com, and we do not use advertising or retargeting pixels (such as Meta/Facebook Pixel or Google Ads tracking) on our site.

3Health & Wellness Information Disclaimer

Sloth MD® products are wellness and dietary supplement products, not medical services. Any health-related information voluntarily submitted through forms or inquiries is treated as general consumer information. It is not covered by HIPAA, and Sloth MD® is not a healthcare provider. Consumers should avoid transmitting sensitive medical records through standard website forms.

4Sources of Information

• Consumers directly, at checkout, sign-up, or through customer support
• Our payment processor
• Our shipping carriers
• Google Analytics (standard website traffic reporting)
• Wholesale and affiliate applicants

5How We Use Personal Information

We use personal information only where reasonably necessary to operate our store and wholesale/affiliate programs:

• Processing orders and payments
• Shipping fulfillment
• Customer support
• Fraud prevention
• Basic website analytics
• Marketing communications you’ve opted into
• Affiliate and wholesale account management
• Legal and regulatory compliance
• Security monitoring

6Legal Bases for Processing

Where GDPR or similar frameworks apply, we process personal data under lawful bases such as:

• Your consent
• Performance of a contract (e.g., fulfilling your order)
• Compliance with a legal obligation
• Our legitimate business interests (e.g., fraud prevention, basic analytics)

7Marketing Communications

If you voluntarily provide contact information through a purchase, sign-up form, wholesale inquiry, or affiliate application, we may send you communications related to the brand, such as order updates, product updates, or promotional offers. You may unsubscribe at any time using the unsubscribe link in any email or by contacting us directly.

• Promotional emails
• Product updates
• Affiliate and wholesale communications

Sloth MD® aims to comply with CAN-SPAM, CASL, and other applicable marketing laws.

8Cookies, Tracking & Analytics

Sloth MD® uses a limited set of cookies and analytics tools to operate the website and understand basic traffic patterns:

• Shopping cart and checkout functionality (standard WooCommerce cookies)
• Website security and spam prevention
• Basic traffic analytics via Google Analytics (standard configuration; no ads personalization or remarketing signals enabled)

Third-party providers who may place or read cookies on our site:

• Google Analytics
• Our payment processor
• Our hosting provider

We do not currently use advertising pixels, remarketing tools, or third-party marketing platforms beyond the above. Consumers may manage cookie preferences through their browser settings.

9Payment Security

All payment transactions are processed through our third-party payment processor. Sloth MD® does not directly retain full payment card information on its own servers.

• SSL encryption
• Secure checkout systems
• Payment processor compliance controls

While no digital system is entirely immune from risk, we use commercially reasonable measures to protect payment information.

10Sharing of Personal Information

We share personal information only with the service providers necessary to run our store and programs:

• Our payment processor, to process transactions
• Our shipping carriers, to deliver orders
• Google Analytics, for basic website traffic reporting
• Wholesale and affiliate program administration
• Legal or regulatory authorities, where required by law

Sloth MD® does not sell personal information, and does not share personal information for cross-context behavioral advertising.

11International Transfers

Because Sloth MD® ships to the United States, Canada, and certain international markets, personal information may be transferred to and processed in countries other than your own, including by our payment processor, shipping carriers, and hosting provider. We take commercially reasonable steps to ensure personal information is handled lawfully wherever it is processed, recognizing that privacy laws vary by jurisdiction.

12Data Retention

We retain personal information only as long as reasonably necessary for the purposes it was collected, including:

• Order and shipping records (kept for accounting and warranty purposes)
• Tax compliance
• Fraud prevention
• Customer service history
• Legal and regulatory obligations

Retention periods vary depending on jurisdiction and legal requirements. Once information is no longer needed, we take reasonable steps to securely delete or anonymize it.

13Consumer Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or export your personal information, withdraw consent, or opt out of marketing. We honor valid requests as required by applicable law, subject to legal exceptions (for example, records we must retain for tax or accounting purposes).

• Access the information we hold about you
• Correct inaccuracies
• Request deletion, subject to legal exceptions
• Request a copy of your data, where technically feasible
• Withdraw consent or opt out of marketing
• Exercise California-specific rights (see our California Privacy Notice)
• Exercise Canadian (PIPEDA) or GDPR rights, where applicable

Requests may be submitted through the contact information in Section 20. We may need to verify your identity before processing certain requests.

14Data Security & Breach Response

We use commercially reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, misuse, disclosure, alteration, or loss. No digital system can guarantee absolute security. In the event of a security incident affecting personal information, we aim to respond in accordance with applicable legal obligations, which may include investigation, containment, remediation, and notification to affected individuals and regulators where legally required.

15User-Generated Content

Where consumers submit reviews, testimonials, or other public-facing content:

• Content may become publicly visible
• Consumers remain responsible for content they submit
• Sloth MD® reserves the right to moderate or remove content
• Content may be used for lawful brand marketing purposes

16Children’s Privacy

Sloth MD® does not knowingly collect personal information from children. Our products and website are intended for adults.

17Third-Party Links

Our website may contain links to third-party sites. We are not responsible for the privacy practices, content, or claims of those external sites. We encourage consumers to review the privacy policies of any third-party site they visit.

18Regulatory Compliance

Sloth MD® aims to align its practices with applicable frameworks, including FDA/FTC digital marketing expectations, Health Canada standards, PIPEDA, CASL, GDPR (where applicable), and general consumer e-commerce protections.

19Policy Updates

Sloth MD® may update this Privacy Policy from time to time. Material changes will be reflected by an updated “Last Updated” date on this page. Continued use of our website after changes take effect constitutes acceptance of the revised policy.

This Policy describes our practices as of the Effective Date above and does not create any contractual right or guarantee beyond what is required by applicable law.

20Contact Information