Privacy policy

Turmeric Innovations Inc.

Effective date: November 3, 2026

1. About this policy

This Privacy Policy explains how Turmeric Innovations Inc. ("Turmeric Innovations," "we," "us" or "our") collects, uses and discloses personal information. Turmeric Innovations Inc. is a Connecticut corporation located at 30 Old Kings Highway South, Suite 155, Darien, CT 06820, USA.

This policy covers our online store at turmericusa.com, our company website at turmericinnovations.net (including our other domains that redirect to it), our marketing emails and text messages, and any other place that links to this policy (together, the "Services"). It covers our Turmeric Fusions, TuraNova, Turamint and other product lines.

It does not cover websites, apps or stores run by others, including retailers and distributors that sell our products. Their own privacy policies apply.

2. Personal information we collect

We collect only what we need to sell and ship our products, answer you, and market to people who have agreed to hear from us.

Category	Examples	Source
Contact details	Name, email address, phone number, mailing address	You, at checkout, account signup, newsletter or text signup, or our contact form
Order information	Products purchased, order amounts, billing and shipping address, order history, returns	You, when you order; retail partners whose customers' orders we fulfill
Payment information	Payment confirmation and the last four digits of a card. We never receive or store full card numbers.	Shopify and our payment processors
Account information	Login email and password (stored by Shopify)	You, if you create an account
Communications	Messages you send us, customer service history	You
Marketing preferences	Email and text subscription status, which emails you open or click	You; Mailchimp and Shopify Email
Device and usage data	IP address, browser and device type, pages viewed, items added to cart, referring site, approximate location derived from IP address	Collected automatically through cookies and similar technologies (Section 4)
Business contact information	Name, company, title and contact details of retailers, distributors, suppliers and other business contacts	You, through our company website or in the course of business

We do not ask for and do not want government ID numbers, health records, or information about medical conditions. Please don't include that kind of information in messages to us.

3. How we use personal information

We use personal information to:

• Fulfill orders: process payments, ship products, handle returns and refunds, and send order and shipping updates.

• Provide customer service: answer questions and resolve problems.

• Run our business: keep accounting and tax records, manage inventory, and work with retailers and distributors.

• Market to you, with your agreement: send marketing emails and, once launched, text messages to people who have signed up, and tailor those messages based on past purchases from us.

• Understand and improve the Services: measure site traffic and how visitors use our sites, and measure and target our advertising (Section 5).

• Protect the business: prevent fraud, secure our systems, enforce our terms, and comply with law, including product safety and recall obligations.

We do not use personal information to make decisions that produce legal or similarly significant effects about you, and we do not build profiles to infer health conditions or other sensitive characteristics.

4. Cookies, analytics and tracking

Our sites use cookies, pixels and similar technologies. They fall into these groups:

• Essential: set by Shopify to run the store, keep items in your cart, process checkout and prevent fraud. The store does not work without them. See Shopify's cookie notice.

• Analytics: Google Analytics measures traffic and how visitors use our sites.

• Advertising: Pixels from our advertising partners, including Google, Meta, TikTok and Pinterest, record pages viewed and purchases so these partners can measure our ads and show our ads to people who have visited our sites. Google signals may also connect this activity to signed-in Google accounts. See Section 5 for how to opt out.

• Email marketing: Mailchimp's site code connects store activity, such as purchases and abandoned carts, to subscribers' email records so we can send relevant messages to people who have subscribed.

You can block or delete cookies in your browser settings. Blocking essential cookies may stop the store from working.

Global Privacy Control. We treat a Global Privacy Control signal from your browser as a request to opt out of any sale of personal information and any targeted advertising for that browser.

Do Not Track. Browsers' "Do Not Track" setting has no common standard, so our sites do not respond to it. We honor Global Privacy Control instead.

5. How we disclose personal information

We share personal information only with the following recipients, and only as needed for the purposes in Section 3.

Recipient	Why	Information shared
Shopify and payment processors	Host the store, process payments, prevent fraud	Contact, order, payment, account, device data
Fulfillment partners and carriers (our third-party warehouse, its order-management software, and shipping carriers such as USPS)	Pack and deliver orders	Name, shipping address, phone, order contents
Email and text platforms (Mailchimp, Shopify Email)	Send messages you signed up for	Contact details, marketing preferences, order history
Advertising and analytics partners (Google, Meta, TikTok, Pinterest)	Measure site traffic and ads; show our ads on their services and other sites	Device identifiers, pages viewed, purchase events
Accounting systems (Oracle NetSuite, our accounting integrations)	Bookkeeping and tax records	Order and payment records
Retail and dropship partners	Fulfill orders their customers place for our products	Order and shipping details for those orders
Professional advisers	Legal, accounting and audit services	As needed for the engagement
Government authorities and others	Comply with law, respond to lawful requests, protect rights and safety	As required
A buyer or successor	A merger, financing, acquisition or sale of assets	As needed for the transaction, subject to this policy

Our service providers may use personal information only to perform services for us, under contract.

Targeted advertising. We work with advertising partners, including Google, Meta, TikTok and Pinterest, to measure our ads and to show our ads to people who have visited our sites. Through pixels on our sites, these partners receive device identifiers and information about the pages you view and purchases you make, and may link it to accounts you have with them.

Under some state laws this is "targeted advertising," and it may be treated as a "sale" or "sharing" of personal information. We do not otherwise sell personal information, and never for money. We do not target ads based on health conditions or to anyone we know is under 18.

How to opt out. Use the Your Privacy Choices link at the bottom of our pages or go to turmericusa.com/pages/data-sharing-opt-out, turn on Global Privacy Control in your browser, or email us. You can also manage Google's ad personalization at myadcenter.google.com.

6. Purchase information about wellness products

We sell dietary supplements and functional beverages. We know the products you buy could suggest something about your personal interests, so we limit how we use that information:

• We use your purchase history only to fulfill and support your orders, keep business records, and send marketing to people who have subscribed.

• We do not use purchases to infer, record or label any health condition.

• Our advertising partners receive purchase events for ad measurement and targeting (Section 5), but we do not use purchases to target ads based on health conditions. We never share purchase history with data brokers or sell it for money.

• You can ask us at any time to stop using your purchase history for marketing, or to delete it, subject to the records we must keep by law (Section 10).

Our products are dietary supplements and foods, not medicines. Nothing you provide to us is protected health information under HIPAA, but we handle it with the care described here.

7. Email and text messages

Email. If you subscribe, or if you buy from us and do not opt out where permitted, we may send marketing emails. Every marketing email has an unsubscribe link. Unsubscribing does not stop order, shipping and account emails.

Text messages. If you opt in to marketing texts, we will send recurring automated messages to the number you provide. Consent is not a condition of purchase. Message frequency varies. Message and data rates may apply. Reply STOP to cancel or HELP for help.

We do not share or sell mobile numbers or text-message opt-in information with third parties for their marketing purposes. We share them only with the platform that sends our texts.

8. Your privacy rights

We extend the following rights to all U.S. residents, whether or not your state's law requires it. You may ask us to:

• Access the personal information we hold about you, and get a copy in a portable format.

• Correct inaccurate personal information.

• Delete personal information, subject to records we must keep by law.

• Opt out of targeted advertising and any sale or sharing of personal information (Section 5), through the Your Privacy Choices link or a Global Privacy Control signal. We do not engage in profiling that produces legal or similarly significant effects.

• Stop marketing by unsubscribing or replying STOP, or by contacting us.

• Get a list of the categories of third parties to which we have disclosed your personal information.

How to make a request. Email corporate@turmericinnovations.com with the subject line "Privacy Request," or write to us at the address in Section 10. Tell us which right you want to exercise and the email address you use with us.

Verification. We will confirm your identity before acting, usually by matching the email address on your orders or account. We will ask only for what we need to verify you.

Authorized agents. You may have someone make a request for you. We will ask for written proof that you authorized them and may ask you to verify your identity directly.

Timing. We respond within 45 days. If we need more time, we will tell you why, and we may take up to 45 more days where the law allows.

Appeals. If we decline your request, you may appeal by replying to our decision with "Appeal" in the subject line. We will answer within 60 days and explain our reasons. If you are still not satisfied, you may contact your state attorney general. Connecticut residents may file a complaint at portal.ct.gov/AG.

No discrimination. We will not deny you goods, charge you a different price, or give you a different level of service because you exercised your rights.

9. Visitors in the European Economic Area and United Kingdom

This section applies if you are in the EEA or the UK. Turmeric Innovations Inc. is the controller of your personal information. Our representative in Europe is Silvia Serafini, Via Zuccoli 12, 6900 Paradiso, Switzerland, silvia@turmericinnovations.com.

Where you buy our products through a European retailer or distributor, that business is responsible for your information under its own privacy policy.

Legal bases.

Purpose	Legal basis
Processing and delivering your order, customer service	Performance of our contract with you
Marketing emails and texts	Your consent, which you can withdraw at any time
Analytics and advertising cookies	Your consent, given through our cookie banner
Business contacts, fraud prevention, security, improving the Services	Our legitimate interests in running and protecting our business
Tax, accounting and product safety records	Compliance with legal obligations

Your rights. In addition to the rights in Section 8, you may object to processing based on our legitimate interests, ask us to restrict processing, and withdraw consent at any time without affecting earlier processing. You may also complain to the data protection authority where you live or work.

International transfers. We are based in the United States, and our service providers process data in the United States and elsewhere. We transfer personal information out of the EEA and UK under the European Commission's Standard Contractual Clauses (and the UK addendum), or to recipients certified under the EU–U.S. Data Privacy Framework and its UK extension.

10. Other important information

Children. Our sites are not directed to children under 13, and we do not knowingly collect personal information from them. Purchases must be made by adults. We do not knowingly sell personal information of, or target advertising to, anyone under 18. If you believe a child has given us personal information, contact us and we will delete it.

Retention. We keep personal information only as long as needed for the purposes above:

Information	How long we keep it
Order, payment and accounting records	7 years after the order, for tax and accounting purposes
Customer accounts	Until you close your account, plus up to 2 years
Marketing contacts	Until you unsubscribe, plus the minimum needed to honor your opt-out
Contact-form and customer service messages	3 years
Analytics data	14 months

Security. We use reasonable administrative, technical and physical safeguards, and we rely on established service providers such as Shopify for payment processing. No system is completely secure, so we cannot guarantee security.

Artificial intelligence. We do not collect, use or sell personal information to train large language models.

Changes to this policy. We will post any changes here and update the effective date. If a change is material, we will give notice on our sites or by email before it takes effect.

Contact us. Questions or requests about privacy: