Privacy Policy

We collect what we need to send you your order, keep the shop running and let you know when something new arrives. We do not sell your personal information. We do use advertising tools that share some data with Meta and Google, and you can switch that off see Advertising and tracking below.

This policy applies to our website, the emails we send you, and the messages you send us. It does not cover other companies' websites we link to, or what happens on social media platforms those have their own policies, and we have no say in them.

When you order: your name, email address, shipping and billing address, phone number if you give one, and what you bought. Your card details go straight to our payment processor we never see or store the full number.

Automatically, while you browse: your IP address, roughly where in the world that puts you, your browser and device type, screen size, operating system, which pages you looked at, how long you stayed, what you clicked, where you arrived from, and whether you opened our emails.

When you contact us: whatever you write in the message, plus your email address so we can reply.

When you subscribe: your delivery schedule and the payment method on file, held by our payment processor.

From others: if a friend refers you, we receive the email address they gave us. If you ask someone to contact us on your behalf, we get what they tell us.

We do not ask for and do not want your health details, medical history, social security number, or anything about your race, religion, politics or criminal record. Please leave it out of your emails.

We know that is easy to forget when you are writing to a supplement company about how you feel. If you do send it, we only use it to answer your question and we delete it once that is done.

Some of it you type in yourself. The rest arrives through cookies and similar technology: small files your browser stores that let the site remember your cart, keep you logged in, and measure which pages actually work.

We use three kinds. Necessary ones keep the shop functioning without these, checkout breaks. Analytics ones tell us how people move through the site; we use Google Analytics for this, and you can block it entirely with Google's opt-out browser add-on. Advertising ones let us show ads to people likely to be interested, and measure whether those ads led to anything.

Your browser lets you refuse cookies. Refuse the necessary ones and parts of the shop will stop working that is not us being difficult, it is how carts work.

• Running the shop. Taking your order and payment, shipping it, answering your emails, telling you about changes to our terms.
• Your subscription. Managing your plan and sending renewal reminders.
• Marketing. Only if you asked for it. Every email has an unsubscribe link and it works immediately.
• Making things better. Seeing which pages work, which do not, and whether our ads were worth the money.
• Security and fraud. Spotting fraudulent orders and keeping the shop safe.
• Anonymising. Turning data into aggregate numbers that are no longer about you personally.
• The law. Tax records, legal requests, and defending ourselves if we have to.

We share only what a partner needs to do its job, and only with companies that are contractually bound to protect it. We do not sell your personal information.

If ORGIN is sold, merged, or goes through a reorganisation or bankruptcy, customer information may transfer to whoever takes over, together with the obligations in this policy. If that ever happens, we will say so on this page.

Our shop runs on servers in the United States, and several of our partners are based there too. If you order from outside the US, your information will be transferred to and stored in a country whose privacy rules differ from your own. By ordering, you understand that.

We use advertising pixels from Meta and Google. These place cookies that let those platforms recognise you across sites and show you our ads. Under several state laws this counts as sharing personal information for targeted advertising, even though no money changes hands.

Three ways to stop it:

• Use the My Privacy Choices link in our footer.
• Turn on the Global Privacy Control signal in your browser. We honour it automatically, on every page, without you having to ask.
• Email us with the subject Do Not Sell or Share My Personal Information.

To switch off this kind of advertising across many companies at once, use the industry tools at optout.aboutads.info and optout.networkadvertising.org. Those cover the browser you are using at that moment, so you will need to repeat it on every device.

When you pay through a third-party wallet, that company collects your details under its own policy, not ours. The same goes for any site we link to. We are not responsible for what they do, and a link from us is not an endorsement.

The table below is required by law in several US states. It sets out, for the last twelve months, what we collect, who receives it, and whether any of it is shared for targeted advertising.

Wherever you live, we give you the right to:

• Know whether we hold personal information about you, and get a copy in a portable format.
• Correct anything that is wrong.
• Have your information deleted.
• Opt out of targeted advertising and of the sharing of your information.
• Be treated exactly the same either way. Exercising a privacy right will never cost you a discount or a service.

Residents of California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia have these rights by law. We extend them to everyone, because running two sets of rules would be absurd.

We do not sell personal information, and we have not done so in the twelve months before the date at the top of this page. We do not knowingly share or sell the information of anyone under 16.

Email us and say what you want. We confirm within 10 days and answer in full within 45. If it is complicated we may take another 45 days, and we will tell you before we do.

We will ask you to confirm the email address on your order, so we do not hand your data to the wrong person. If you ask us to delete everything, we will ask you to confirm once deletion cannot be undone.

Someone acting for you. You may authorise another person to make a request on your behalf. We will ask them for written proof that you gave permission, and we may still verify your identity directly.

If we say no. We will tell you why, and you can appeal simply by replying to that email. A different person reviews the appeal and answers within 45 days.

We do not keep things forever, and we do not keep things for a fixed number of years just because it sounds tidy. What decides it:

• How long you are a customer, plus a reasonable period afterwards in case a question comes up about an old order.
• What the law requires. Tax and accounting rules make us keep transaction records for a set period normally seven years whatever you or we would prefer.
• Whether we may need it for a legal claim, an audit, or an insurance matter.

Marketing contacts are removed when you unsubscribe. Once data is aggregated and no longer identifies you, we keep it and will not try to turn it back into you.

The site runs on Shopify, encrypted end to end. Payments are handled by PCI-compliant processors. Inside our team, access to customer data is limited to the people who need it.

No system is perfect, and anyone who claims otherwise is selling something. If a breach ever affects your information, we will tell you and the relevant authorities as quickly as the law requires.

ORGIN is not intended for anyone under 18, and we do not knowingly collect information from children under 13. If you believe a child has given us their information, email us and we will delete it.

The date at the top tells you when this page last changed, and a change takes effect the moment it is posted. If something materially affects your rights, we will email everyone on our list rather than quietly editing the page and hoping nobody notices.

Privacy pages are written by lawyers and read by nobody. If something here is unclear, or you want to know exactly what we hold about you, just email us. A person will answer.