Effective date: August 2, 2026.
1. Who this policy covers
This Privacy Policy explains how Caliber Sciences, doing business as Caliber Sciences (calibersciences.com), collects, uses, shares, and protects personal information when you visit our site or place an order. It applies to visitors and customers in the United States, including California and Colorado residents, and to anyone else whose personal information we process in connection with the site.
We sell products only to individuals in the United States who are at least 18 years old.
2. Information we collect
Order and account information. When you place an order or create an account, we collect information through our store platform (self-hosted WordPress and WooCommerce), including your name, email address, shipping address, billing address, phone number (if you provide one), and your order history. If you create an account, we also store your login credentials.
Payment information. We do not store your full card number on our own servers. Card payments are processed by a third-party payment processor that tokenizes your card data at the time of payment, so your actual card number never touches our servers or database; we receive only a payment confirmation and a token or last-four-digits reference from the processor.
Terms-acceptance record. When you accept our Terms of Sale at checkout, our system records the version of the Terms you accepted, the date and time, your IP address at the time of acceptance, and a cryptographic hash of the exact text you agreed to. We keep this record on your order so we, and you, can confirm exactly what you agreed to if a question ever comes up. See our Terms of Sale for more detail on how this works.
Cookies. We use a small number of cookies described in Section 4 below: an age-verification cookie, and standard shopping-cart and session cookies. We do not install advertising or cross-site tracking cookies on the site at this time.
Analytics information. We use a privacy-respecting analytics tool to understand overall site traffic and how our pages perform, for example page views and general traffic sources. We do not install advertising pixels (such as an ad platform's conversion pixel) on the site at this time.
How you found us. Our marketing runs as paid campaigns on TikTok. If you click a TikTok ad or post to reach our site, the web address you land on may include campaign-tracking parameters in the URL itself, which tell us which campaign referred you. We do not install TikTok's advertising pixel or any other third-party advertising tracker on our site. TikTok's own collection and use of your information when you view or interact with content on TikTok is governed by TikTok's privacy policy, not this one.
Information you send us. If you contact customer service, we collect whatever information you include in that communication, such as your name, email, order number, and the content of your message.
3. How we use information
We use the information above to: process and fulfill your order, including shipping and customer service; verify your age before you can shop; calculate applicable sales tax and any required delivery fee; detect and prevent fraud and abuse; keep the compliance and acceptance records described above; send you transactional communications about your order (confirmations, shipping updates, and similar messages); send you marketing communications if you have opted in, which you can opt out of at any time; understand and improve site performance using aggregated or de-identified analytics; and comply with our legal obligations, including tax and recordkeeping law.
We do not sell your personal information, and we do not share it with third parties for cross-context behavioral advertising, as those terms are defined under the CCPA/CPRA. We do not use your data for any purpose beyond what is described in this policy.
4. Cookies we use
| Cookie | Purpose | Typical duration |
|---|---|---|
Age-verification cookie (caliber_age_gate_verified) | Remembers that you confirmed you meet the site's age requirement, so you are not asked again on every page. | 30 days |
| Shopping-cart and session cookies (WooCommerce platform defaults) | Remembers what is in your cart and keeps your session active while you shop. | Typically expires after a period of inactivity (around 2 days, the platform default) or when the browser session ends, depending on the specific cookie. |
We do not currently use advertising cookies, cross-site tracking cookies, or a TikTok advertising pixel. If that changes in the future, we will update this policy and this table before any such cookie is deployed, and we will provide any consent mechanism required by law at that time.
5. How we share information
We share personal information only with service providers who need it to help us run the store, and only for that purpose:
- Our hosting provider, to run the website and store your order and account data.
- Our payment processor, to process your payment (see Section 2; they never receive your full card number from us because they tokenize it directly).
- A transactional email service, to send order confirmations, shipping notifications, and other account-related email on our behalf.
- Shipping carriers (USPS and/or UPS), to deliver your order and provide tracking.
- Our analytics provider, to help us understand site traffic in aggregate.
- Professional advisors (such as our accountant or attorney) and law enforcement or regulators, where required by law or to protect our legal rights.
We do not sell personal information to third parties, and we do not share it for cross-context behavioral advertising. If a future business transition (such as a merger or sale of the business) would move your personal information to a new owner, we will notify you and this policy will continue to apply until it is updated.
6. Your privacy rights
Colorado residents (Colorado Privacy Act)
If you are a Colorado resident, you have the right to: know whether we process your personal data, and access it; correct inaccurate personal data; delete personal data we hold about you; obtain a portable copy of personal data you provided to us; and opt out of the processing of your personal data for targeted advertising, the sale of personal data, or profiling that produces legal or similarly significant effects. We do not currently sell data or use it for targeted advertising, so an opt-out request against those uses will already be satisfied, but we will still honor and record it.
Regardless of whether our current size meets the Colorado Privacy Act's own applicability thresholds, we intend to honor these rights for Colorado residents as a matter of policy.
If we deny your rights request, you may appeal that decision using the contact information in Section 11, and if the appeal is denied, you may contact the Colorado Attorney General.
California residents (CCPA/CPRA)
If you are a California resident, you have the right to: know what personal information we have collected, used, disclosed, and sold or shared about you; request deletion of your personal information; correct inaccurate personal information; opt out of the sale or sharing of personal information; limit the use of sensitive personal information; and not be discriminated against for exercising any of these rights. We do not sell or share personal information as those terms are defined under the CCPA/CPRA.
Residents of other states
A number of other states have their own comprehensive privacy laws with rights similar to Colorado's and California's. We sell nationwide, so as a matter of policy we apply the same core rights, access, correction, deletion, and opt-out of sale or targeted advertising, to requests from residents of any US state, whether or not your state's law currently requires it of a company our size.
7. Universal opt-out signals
We honor the Global Privacy Control (GPC) signal, a browser or extension setting that tells websites you want to opt out of the sale or sharing of your personal data and its use for targeted advertising, as a valid opt-out request under the Colorado Privacy Act and the CCPA/CPRA. Because we do not currently sell data or use it for targeted advertising, honoring GPC does not change what happens to your data today, but we will continue to honor it as our practices evolve.
8. Sensitive data
Some of the categories our products fall into (for example, general wellness and supplement categories) could mean that your purchase history reveals something about your health or wellness interests. We treat that information conservatively: we do not use it to build an advertising profile of you, we do not sell it, and we use it only to fulfill your order, provide customer service, and meet our own legal and accounting obligations.
We do not otherwise intentionally collect sensitive personal data, such as precise geolocation, biometric data, or government ID numbers.
9. How to exercise your rights
To make a request about your personal information (access, correction, deletion, portability, or opt-out), contact us using the information in Section 11. We may need to verify your identity before completing certain requests, using information you have already given us (such as your order email address). You may designate an authorized agent to make a request on your behalf, consistent with applicable law.
We will respond to Colorado and California requests within 45 days of receipt, with one 45-day extension available where reasonably necessary, and we will tell you if we take an extension.
10. Data retention
We keep order and transaction records for as long as necessary to meet our tax, accounting, and legal obligations.
We keep the terms-acceptance record described in Section 2 for as long as necessary to establish what you agreed to, including for as long as a legal claim could reasonably be brought about your order.
If you have an account, we keep your account information while your account remains active. If you close your account or ask us to delete your data, we will delete or de-identify it, except information we are required to keep for tax, accounting, fraud-prevention, or other legal reasons.
11. Data security
We use reasonable administrative, technical, and physical safeguards designed to protect your personal information, including encrypting data in transit (HTTPS/TLS) and never storing your full card number on our own servers. Our payment processor maintains its own PCI DSS compliance for the card data it handles. No method of storing or transmitting data is completely secure, and we cannot guarantee absolute security.
12. Children's privacy
calibersciences.com is not directed to children, and our age gate requires visitors to confirm they are at least 18 before they can shop. We do not knowingly collect personal information from anyone under 13, consistent with the Children's Online Privacy Protection Act (COPPA), or, given our own age requirement, from anyone under 18. If we learn that we have collected personal information from a child, we will delete it promptly. If you believe a child has provided us with personal information, contact us using the information in Section 11.
13. Changes to this policy
We may update this policy from time to time. When we do, we will post the updated version here with a new version number and effective date. If a change is material, we will provide additional notice, for example by email or a notice on the site, before the change takes effect.
14. Contact us
Questions about this policy or your personal information: support@calibersciences.com.
Write to support@calibersciences.com.