Privacy Policy

Effective date: September 23, 2026
Last updated: September 23, 2026

Mystic BioLabs LLC (“Mystic BioLabs,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit https://mysticbiolabs.com, create an account, make a purchase, contact us, subscribe to communications, use Sign in with Google, or otherwise interact with our website and services (collectively, the “Services”).

By using the Services, you acknowledge the practices described in this Privacy Policy. If you do not agree with this Policy, please do not use the Services.

1. Personal Information We Collect

Depending on how you interact with us, we may collect the following categories of information:

Information you provide directly

  • Contact information, such as your name, email address, telephone number, billing address, and shipping address.
  • Account information, such as your username, encrypted password, account preferences, and order history.
  • Transaction information, such as products ordered, purchase amount, payment status, shipping details, returns, refunds, and related communications. Payment card and bank information is generally collected and processed directly by our payment service providers; we do not ordinarily store complete payment card numbers.
  • Communications, including messages submitted through contact forms, email, customer-support requests, reviews, survey responses, or dispute-related correspondence.
  • Marketing preferences, such as whether you have agreed to receive promotional email or SMS messages.
  • Verification information, when reasonably required for fraud prevention, account security, legal compliance, or age-related restrictions.

Information collected automatically

When you use the Services, we and our service providers may automatically collect:

  • Internet Protocol (IP) address;
  • browser type, device type, operating system, and device identifiers;
  • referring URLs, pages viewed, links clicked, searches, and interactions with the website;
  • approximate location derived from IP address;
  • date, time, duration, and frequency of visits;
  • cookie identifiers, advertising identifiers, and similar online identifiers; and
  • diagnostic, security, performance, and error data.

Information received from third parties

We may receive information from payment processors, shipping carriers, fraud-prevention providers, analytics and advertising partners, ecommerce integrations, social or identity providers, and other service providers involved in operating the Services.

2. Sign in with Google and Google User Data

If you choose Sign in with Google, Google may provide us with information associated with your Google Account, such as your name, email address, profile image, and a unique Google account identifier. We use this information only to authenticate you, create or connect your Mystic BioLabs account, maintain account security, and provide account-related functionality.

We do not receive your Google password. We do not use Google user data for unrelated advertising, and we do not sell Google user data. We do not request access to Gmail, Google Drive, contacts, calendars, or other Google services unless a feature clearly asks for that access and obtains your consent before access occurs.

Our use and transfer to any other application of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

You may disconnect Sign in with Google through your Google Account permissions. Disconnecting Google does not automatically delete your Mystic BioLabs account or information already retained for legitimate business or legal purposes. To request deletion of your Mystic BioLabs account, contact us using the information in Section 15.

Sign in with Google

Mystic BioLabs offers Sign in with Google as an optional method for creating and accessing a customer account.

When you choose Sign in with Google, Mystic BioLabs accesses the following information from your Google Account:

  • Your name
  • Your email address
  • Your Google profile image, if available
  • A unique Google account identifier used to authenticate your account

Mystic BioLabs uses this information only to authenticate you, create or connect your Mystic BioLabs customer account, maintain account security, and provide account-related functionality.

This information may be stored in our WordPress and WooCommerce customer-account records for as long as your account remains active or as reasonably necessary for security, legal, tax, fraud-prevention, and transaction-recordkeeping purposes.

Mystic BioLabs does not receive or store your Google password. We do not access your Gmail, Google Drive, Google contacts, Google Calendar, or other Google services. We do not sell Google user data, use Google user data for targeted advertising, or disclose Google user data except to service providers that help us operate and secure the customer-account functionality, when legally required, or at your direction.

You may disconnect Mystic BioLabs from your Google Account through your Google Account permissions. You may also request deletion of your Mystic BioLabs account and associated Google user data by emailing admin@mysticbiolabs.com with the subject line “Account Deletion Request.” Certain transaction records may be retained where required for tax, fraud-prevention, dispute-resolution, or other legal purposes.

Mystic BioLabs’ use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

3. How We Use Personal Information

We may use personal information to:

  • provide, operate, maintain, and improve the Services;
  • create and manage customer accounts;
  • process orders, payments, shipments, returns, refunds, and customer-service requests;
  • authenticate users and protect accounts;
  • communicate about orders, accounts, policy changes, security alerts, and support matters;
  • send marketing communications where permitted by law and consistent with your preferences;
  • personalize content, measure advertising performance, and understand how visitors use our website;
  • detect, investigate, and prevent fraud, abuse, unauthorized transactions, security incidents, and violations of our terms;
  • maintain business records, resolve disputes, enforce agreements, and protect our legal rights;
  • comply with applicable laws, lawful requests, tax obligations, and regulatory requirements; and
  • carry out another purpose disclosed to you at the time of collection or with your consent.

4. Cookies, Analytics, and Advertising

We use cookies, pixels, tags, local storage, and similar technologies to keep the website functional, remember preferences, maintain shopping sessions, secure accounts, understand website performance, and support advertising and measurement.

Google Analytics

We may use Google Analytics to understand website traffic and use. Google Analytics may collect information such as your IP address, device and browser information, pages visited, interactions, and cookie or device identifiers. Google uses this information to provide measurement and analytics services. Learn more at How Google uses information from sites or apps that use its services.

You may use the Google Analytics Opt-out Browser Add-on where available. Your browser and our cookie-consent controls may also allow you to reject nonessential analytics cookies.

Advertising

We may use Google Ads and other advertising services to measure campaigns, limit repeated ads, create audiences, or show ads that may be more relevant to visitors. These providers may use cookies and similar identifiers to associate activity across websites or services. You can manage Google advertising preferences at Google My Ad Center.

Where required by law, nonessential analytics and advertising technologies will be used only after consent. You can adjust available choices through our cookie banner or cookie-preference tool. Blocking cookies may affect certain website features.

5. How We Disclose Personal Information

We may disclose personal information to:

  • Service providers that support hosting, content delivery, ecommerce, account management, payment processing, shipping, email and SMS delivery, analytics, advertising, fraud prevention, customer support, data storage, and security;
  • Payment processors and financial institutions to authorize and complete transactions, prevent fraud, and handle chargebacks or disputes;
  • Shipping and fulfillment providers to deliver orders and provide tracking;
  • Professional advisers, including attorneys, accountants, insurers, auditors, and compliance advisers;
  • Government authorities or other parties when required by law or reasonably necessary to protect rights, safety, property, users, or the public;
  • Business transaction participants in connection with a proposed or completed merger, financing, acquisition, reorganization, bankruptcy, or sale of assets; and
  • Other parties at your direction or with your consent.

We do not sell customer contact information for money. Some uses of advertising cookies or disclosure of online identifiers to advertising partners may be considered “sharing,” “targeted advertising,” or a “sale” under certain state privacy laws. Where applicable, you may opt out as described in Section 9.

6. Payment Information

Payments are processed by third-party payment providers. Those providers collect and process payment information under their own privacy policies and security practices. Mystic BioLabs may receive limited transaction information, such as payment confirmation, payment method type, billing details, fraud indicators, and the last digits of a payment card, but does not ordinarily receive or store complete card numbers or card security codes.

7. Data Retention

We retain personal information only as long as reasonably necessary for the purposes described in this Policy, including providing Services, maintaining transaction and tax records, preventing fraud, resolving disputes, enforcing agreements, meeting legal obligations, and protecting our rights. Retention periods vary according to the type of information, the nature of our relationship with you, and applicable legal or operational requirements.

When information is no longer required, we may delete, de-identify, or aggregate it. Backup copies may remain for a limited period before being overwritten.

8. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information. These measures may include encrypted connections, access controls, account authentication, monitoring, and use of established service providers. No website, transmission, or storage system is completely secure, and we cannot guarantee absolute security.

You are responsible for maintaining the confidentiality of your account credentials and for promptly notifying us of suspected unauthorized account use.

9. Your Privacy Choices and Rights

Depending on where you live, you may have rights to:

  • know or confirm whether we process your personal information;
  • access or obtain a copy of personal information;
  • correct inaccurate personal information;
  • delete personal information, subject to legal exceptions;
  • obtain certain information in a portable format;
  • opt out of targeted advertising, certain profiling, or the sale or sharing of personal information;
  • withdraw consent where processing is based on consent; and
  • appeal our response to a privacy request where applicable.

To exercise a privacy right, email admin@mysticbiolabs.com with the subject line Privacy Request or call 970-903-9621. Please describe your request and the state or country where you reside. We may need to verify your identity before completing a request. Authorized agents may submit requests where permitted by law, but we may require proof of authorization and identity verification.

We will not discriminate against you for exercising an applicable privacy right. We may retain information when permitted or required by law, including transaction records needed for taxes, fraud prevention, disputes, product recalls, or legal compliance.

Opting out of marketing

You may unsubscribe from promotional email by using the unsubscribe link in the message. You may opt out of promotional text messages by following the instructions in the message. Even if you opt out of marketing, we may still send nonpromotional communications about your account, orders, security, or our relationship with you.

Targeted advertising and browser signals

Where applicable, use our cookie-preference tool or contact us to opt out of targeted advertising or covered sharing. We will process legally recognized browser-based opt-out preference signals, such as Global Privacy Control, where required by law and where our systems can reasonably detect the signal.

10. Colorado and Other U.S. State Privacy Disclosures

Residents of Colorado and other states with applicable comprehensive privacy laws may have the rights described in Section 9. The categories of personal information we process, our purposes, and the categories of recipients are described throughout this Policy.

We do not knowingly sell personal information for monetary consideration. We may process or disclose online identifiers for advertising and measurement in a manner that may qualify as targeted advertising or sharing under certain laws. Eligible users may opt out through available cookie controls or by contacting us.

If we deny your privacy request, you may appeal by replying to our decision and stating that you wish to appeal. We will respond within the period required by applicable law and provide information about any further complaint process that may be available.

11. Children’s Privacy

The Services are intended for adults and are not directed to children under 18. We do not knowingly collect personal information from children under 13. If we learn that we collected personal information from a child under 13, we will take reasonable steps to delete it. A parent or guardian who believes a child provided personal information may contact us.

12. Sensitive and Health Information

Our website is not intended to collect medical records, diagnoses, biometric information, or other protected health information. Do not submit medical information through general website forms, product reviews, or customer-support channels. Product purchases do not establish a healthcare-provider relationship, and Mystic BioLabs is not acting as a healthcare provider through the Services.

13. Third-Party Websites and Services

The Services may link to or integrate with third-party websites, plugins, payment services, social networks, or other services. Their privacy practices are governed by their own policies. We are not responsible for the privacy or security practices of third parties.

14. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, technologies, services, or legal requirements. When we make changes, we will post the revised Policy and update the “Last updated” date. If required by law, we will provide additional notice or obtain consent.

15. Contact Us

For privacy questions, account-deletion requests, or privacy-rights requests, contact:

Mystic BioLabs
Colorado, United States
Email: admin@mysticbiolabs.com
Phone: 970-903-9621
Website: https://mysticbiolabs.com