This policy describes how XO Labs USA handles information through its website, accounts, orders, applications, and support requests.
Information you provide
Account and order information can include your name, email, phone number, organization, delivery address, ordered items, order history, and payment status. Account passwords are stored as password hashes. Checkout acceptance records include the acknowledgment, its acceptance time, and the Terms version and text accepted.
Manual payment review can include the payment method, reference, amount, notes, and a receipt or other proof you upload. Wholesale or professional applications can include business or practice details, professional address, license information, NPI, and other authorization details you submit. Affiliate applications can include public profiles, audience and marketing information, preferences, and acceptance records.
Contact requests include your contact details, subject, and message and are sent to our operations team by email. Certificate of Analysis requests collect an email address and the requested document or product information.
Website activity and cookies
The website uses session and browser cookies for features such as sign-in, cart continuity, the age gate, promotional-popup dismissal, and affiliate referral attribution. Certificate requests and access events can record your IP address, browser information, and request time to manage access and prevent abuse. Other security and operational logs can record activity needed to operate the site.
Google Analytics is supported on public pages when enabled. It can receive browser, device, page-visit, and interaction information through Google's scripts and cookies. You can manage cookies through your browser; restricting cookies can affect sign-in, checkout, and other site features.
How information is used
We use information to maintain accounts, process and review orders and payments, assess applications and purchaser eligibility, arrange fulfillment, provide certificate access, respond to requests, administer affiliate attribution, and maintain security and business records. Website analytics help us understand website use.
Required account, order, or policy acknowledgments are separate from optional marketing preferences. Where an optional communication preference is offered, you can choose whether to select it. Contact us about changing a communication preference.
Service providers and external services
Information needed for these activities may be handled by our hosting and email services, payment providers, address-validation services, shipping providers, and analytics services. The services involved depend on the features and payment methods used. We also retain records in our application database and file storage, and support messages in email.
When a hosted card-payment option is offered, you enter card information on the provider's payment page. XO Labs USA receives order and payment references and status information. Manual payment services and optional external contact links, such as WhatsApp, operate under their own privacy terms. Do not include passwords, full payment-card details, or unrelated sensitive information in messages or uploaded proof.
Records and requests
Account, order, application, payment-review, and security records may remain after a transaction or support request is complete. A record's retention depends on its purpose and applicable requirements; this policy does not promise automatic deletion after a fixed period.
Use our Contact page to ask about your information, request a correction or deletion, or raise a privacy question. We may need to verify the request and explain records that must be retained. Available rights and any exceptions depend on applicable law.
Policy updates
Updates will be posted on this page with a revised date. See also our Terms of Service and Return & Refund Policy.