Privacy Policy

This Privacy Policy explains how SuppFiles ("SuppFiles," "we," "us," or "our") collects, uses, shares, and protects information when you visit suppfiles.com (the "Site") or subscribe to our newsletter. By using the Site, you agree to the practices described below.

1. Who we are

SuppFiles is an independent publisher of dietary supplement and e-commerce product reviews, comparisons, and buying guides. We do not manufacture, sell, or ship the products we write about. For the purposes of data protection law, SuppFiles is the controller of the personal information described in this policy.

2. Information we collect

Information you give us

• Newsletter and email signup. When you subscribe, we collect your email address and, if you choose to provide it, your first name.
• Messages you send us. If you contact us through our contact form, by email, or by phone, we collect your name, email address, phone number (if given), and the contents of your message.
• Comments and submissions. If you leave a comment or submit feedback about a product, we collect the name, email address, and content you provide.

Information collected automatically

• Usage and device data. Our hosting provider and analytics tools automatically record your IP address, browser type and version, operating system, device type, referring URL, pages viewed, and the date and time of your visit.
• Cookies and local storage. See Section 4.

Information we do not collect

We do not knowingly collect Social Security numbers, government identification numbers, financial account numbers, or precise geolocation data. We do not process payments on this Site, and we do not ask for health records or medical history.

3. How we use your information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

4. Cookies and similar technologies

Cookies are small text files placed on your device. We use:

• Strictly necessary cookies — required for the Site to load, remember your cookie preferences, and protect against spam.
• Analytics cookies — help us understand which pages are read, how long visitors stay, and where traffic comes from. These are aggregated and are not used to identify you personally.
• Preference cookies — remember choices such as dismissing a newsletter prompt.

You can block or delete cookies at any time through your browser settings. Most browsers let you refuse cookies entirely or alert you before one is set. Blocking cookies may cause parts of the Site to work less smoothly.

5. How we share information

We share personal information only in the following circumstances:

• Service providers. Companies that host the Site, deliver our email newsletter, provide analytics, and filter spam. They may process your information only on our instructions and may not use it for their own purposes.
• Legal and safety reasons. When required by law, subpoena, or court order, or when necessary to investigate fraud, protect our rights, or protect the safety of any person.
• Business transfers. If SuppFiles is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

We never sell, rent, or trade your email address or other personal information to third parties for their own marketing.

6. Data retention

We keep newsletter subscriber data until you unsubscribe, plus a short suppression record so we do not email you again by mistake. Contact form messages are kept for up to 24 months. Server logs and analytics data are retained in aggregated or truncated form for up to 26 months. We delete or anonymize information sooner where it is no longer needed.

7. Security

The Site is served over HTTPS, and we apply reasonable administrative and technical safeguards to protect the information we hold, including access controls and up-to-date software. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. If a breach affects your personal information, we will notify you and any regulator as required by law.

8. Your California privacy rights (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what categories of personal information we have collected about you, the sources, the purposes, and the categories of third parties we disclose it to.
• Access a copy of the specific pieces of personal information we hold about you.
• Delete personal information we have collected from you, subject to legal exceptions.
• Correct inaccurate personal information.
• Opt out of sale or sharing of personal information. SuppFiles does not sell or share personal information as those terms are defined by the CCPA/CPRA, so there is nothing to opt out of.
• Limit use of sensitive personal information. We do not collect sensitive personal information.
• Non-discrimination. We will not deny you service, charge you a different price, or provide a lower quality of service because you exercised any of these rights.

In the previous 12 months we have collected identifiers (email address, IP address), internet activity information (pages viewed, referral source), and, where you provide it, your name and message contents. To make a request, email privacy@suppfiles.com or use the details in Section 14. We will verify your request by asking you to confirm from the email address on file. You may use an authorized agent, who must provide written permission signed by you.

Shine the Light. California Civil Code § 1798.83 permits residents to request information about disclosure of personal information to third parties for direct marketing. We do not make such disclosures.

9. Rights under GDPR and UK GDPR

If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the right to access, rectify, erase, restrict, or object to processing of your personal data, and the right to data portability. Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of earlier processing. You may also lodge a complaint with your local supervisory authority.

Our servers are located in the United States. When we transfer data out of the EEA or UK, we rely on appropriate safeguards such as Standard Contractual Clauses.

10. Children's privacy

The Site is intended for adults aged 18 and over. We do not knowingly collect personal information from anyone under 13 (or under 16 in the EEA/UK). If you believe a child has provided us with personal information, contact us and we will delete it promptly.

11. Third-party sites and products

Our reviews and articles link to retailers, brand websites, and other third-party resources. Those sites have their own privacy policies, and we are not responsible for their content or practices. We encourage you to read the privacy policy of any site you visit from ours.

12. Do Not Track

Some browsers transmit a "Do Not Track" signal. Because no common industry standard for interpreting these signals has been adopted, the Site does not currently respond to them differently.

13. Changes to this policy

We may update this Privacy Policy to reflect changes to our practices or the law. The "Last updated" date at the top will always show the current version. Material changes will be announced on the Site, and where required, by email. Continued use of the Site after an update means you accept the revised policy.

14. Contact us

We aim to respond to every privacy request within 45 days, as required by California law.