Privacy Policy

Last Updated: October 31, 2026

At TGA, we respect your privacy and believe you should understand how your personal information is collected, used, and protected.

TGA is an online retailer operated by The Gray Area LLC ("TGA," "we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and retain personal information when you visit tgahealth.com (the "Website"), place an order, communicate with us, or otherwise use our products and services (collectively, the "Services").

Our online store is powered by Shopify, which provides the technology that supports our Website, checkout, customer accounts, and related services.

Please review this Privacy Policy carefully. By accessing or using our Services, you acknowledge that you have been informed of the privacy practices described here.

If there is a conflict between this Privacy Policy and our Terms of Service regarding the processing of personal information, this Privacy Policy will control.

1. Personal Information We Collect

The personal information we collect depends on how you interact with TGA.

Contact and Identification Information

We may collect your name, email address, telephone number, billing address, shipping address, and other contact details you provide.

Order and Transaction Information

When you shop with us, we may collect information about products you view, add to your cart, purchase, return, or cancel. This includes order history, transaction amounts, payment status, fulfillment information, shipping preferences, and related purchase details.

Payment Information

Payments are processed through Shopify and applicable payment service providers.

Payment providers may collect payment card details, billing information, and other financial information necessary to authorize and complete transactions.

TGA may receive payment confirmations, transaction identifiers, payment method details, and limited payment information necessary for accounting, refunds, fraud prevention, and customer support.

Full payment card information is generally handled by the applicable payment processor rather than directly by TGA.

Customer Account Information

Shopify provides customer account features that allow customers to review orders and manage certain account details.

Depending on the account services available, we may collect or process your account identifiers, contact information, preferences, and order history.

Our current customer account experience uses Shopify's passwordless sign-in process rather than requiring customers to create a traditional account password.

Communications and Customer Support

We collect information you provide when contacting us, submitting a question, requesting a return, reporting a delivery problem, or communicating with our customer support team.

This may include messages, attachments, order references, and other information relevant to your request.

We encourage customers not to submit medical records, diagnoses, or other sensitive personal information unless it is necessary for a specific request.

Device and Website Activity Information

When you visit our Website, Shopify and other authorized service providers may automatically collect information such as:

• Internet Protocol (IP) address and approximate location derived from it.

• Device identifiers, browser type, and operating system.

• Pages viewed, referring websites, and browsing activity.

• Products viewed, cart interactions, and purchase-related events.

• Cookies, similar identifiers, and website performance information.

Marketing Preferences

If you subscribe to marketing communications or otherwise indicate a communication preference, we may collect your email address, subscription status, consent information, and engagement with communications.

We may also maintain records of unsubscribe requests and other marketing preferences.

2. Sources of Personal Information

We collect personal information from several sources.

Directly from you: When you place an order, contact customer support, provide account information, subscribe to communications, or otherwise interact with our Services.

Automatically through the Website: When you browse our store or interact with cookies, analytics technologies, or similar tools.

From service providers: Including Shopify, payment processors, shipping carriers, fraud prevention providers, and customer support or communication service providers.

From advertising and business partners: When applicable, and subject to your privacy choices and applicable law.

We may combine information from these sources where reasonably necessary for the purposes described in this Privacy Policy.

3. How We Use Personal Information

We process personal information for the following purposes.

Processing and Fulfilling Orders

We use personal information to accept purchases, process payments, verify transactions, manage inventory, prepare shipments, provide tracking information, and fulfill orders.

We also use information to process cancellations, returns, refunds, replacements, and other order-related requests.

Providing Customer Support

We use information to answer questions, investigate delivery issues, respond to complaints, and provide assistance relating to our products and Services.

Managing Accounts and Customer Preferences

We use relevant information to maintain customer accounts, display order history, remember preferences, and provide account-related communications.

Operating and Improving Our Website

We use website activity, device information, transaction data, and related information to maintain our store, understand how customers use it, troubleshoot errors, improve navigation, and evaluate business performance.

Marketing and Advertising

Where permitted by applicable law and consistent with your choices, we may use contact information, transaction history, and website interactions to send promotional communications, personalize shopping experiences, measure marketing performance, and display advertising.

Preventing Fraud and Protecting Security

We use personal information to verify transactions, detect suspicious activity, protect customer accounts, investigate potential fraud, and maintain the integrity and security of our Services.

Meeting Legal Obligations

We may process personal information to maintain required business records, comply with tax and accounting obligations, respond to valid legal requests, enforce our policies, or establish, exercise, and defend legal rights.

4. Email Marketing and Communications

Customers may choose to receive promotional emails containing product information, announcements, offers, or other marketing messages from TGA.

Where required, we obtain appropriate consent before sending marketing communications.

You may unsubscribe from promotional emails at any time using the unsubscribe link included in those messages or by contacting support@tgahealth.com.

Unsubscribing from marketing communications does not prevent us from sending necessary transactional or service-related messages, such as order confirmations, shipping notifications, account notices, or communications concerning customer support requests.

If we introduce additional communication channels, such as promotional text messages, we will provide applicable disclosures and obtain any legally required permissions.

5. Cookies, Analytics, and Similar Technologies

TGA and its authorized service providers, including Shopify, may use cookies, pixels, and similar technologies to operate our Website and understand how visitors interact with it.

These technologies may support:

• Essential website functions, including cart, checkout, security, and account features.

• Website functionality and user preferences.

• Performance measurement and analytics.

• Advertising measurement and personalization, where enabled and permitted.

Some cookies are necessary for the Website to function properly. Other technologies may be optional or subject to consent or opt-out rights, depending on applicable law and the services enabled.

Where available, customers can manage certain cookie preferences using the privacy controls provided through our Website.

Browser settings may also allow you to block or delete certain cookies, although doing so may affect some website functions.

We respect applicable consent requirements and recognized privacy preference signals as described below.

6. How We Disclose Personal Information

We may disclose personal information to third parties where reasonably necessary to operate our business, provide our Services, or comply with applicable law.

Ecommerce and Technology Providers

We share relevant information with Shopify and service providers supporting website hosting, ecommerce operations, customer accounts, analytics, security, and technical infrastructure.

Payment Service Providers

Payment information and transaction details may be processed by authorized payment service providers to facilitate purchases, refunds, fraud screening, and related financial services.

Shipping and Fulfillment Providers

We share the information necessary to deliver orders with shipping carriers and related logistics service providers, including USPS, UPS, and FedEx.

This may include the recipient's name, delivery address, contact information, and shipment details.

Customer Support and Communications Providers

We may share information with service providers that help manage customer inquiries, transactional messages, and authorized marketing communications.

Marketing and Advertising Partners

Where applicable, and subject to relevant privacy laws and customer choices, we may share website activity, device identifiers, or related information with advertising and marketing partners to measure campaigns or provide personalized advertising.

Certain disclosures for cross-context behavioral advertising may be considered a "sale," "sharing," or "targeted advertising" under applicable privacy laws, even when personal information is not exchanged for money.

Customers may exercise applicable opt-out rights using our Your Privacy Choices page.

Legal and Business Purposes

We may disclose information when legally required, in response to valid legal process, to protect our rights or customers, or in connection with a merger, acquisition, reorganization, sale of business assets, or similar transaction.

We may also disclose information at your direction or with your consent.

We do not authorize service providers to use personal information for purposes unrelated to their services to us except as otherwise disclosed, permitted by their applicable terms, or required by law.

7. Our Relationship With Shopify

Our Website and online store are hosted by Shopify.

Shopify collects and processes personal information about visitors and customers to provide ecommerce functionality, support transactions, protect the platform, maintain accounts, and improve its services.

Information submitted through our Website may be shared with Shopify and other service providers, including providers located outside the country in which you reside.

Shopify Enhanced Services

When Shopify Network Intelligence and related enhanced services are enabled, Shopify may use information about interactions with our store, other merchants, and Shopify to provide enhanced functionality.

These services may support personalized shopping experiences, improved store performance, advertising measurement, fraud prevention, and more relevant advertising.

Depending on the service and applicable law, Shopify may process certain personal information for its own purposes and may be responsible for responding directly to requests relating to that processing.

For further information about Shopify's handling of personal information, please review the Shopify Consumer Privacy Policy.

You can also learn about rights relating to Shopify's processing of personal information through the Shopify Privacy Portal.

Depending on your location and applicable law, you may also exercise rights relating to certain advertising uses through TGA's Your Privacy Choices page.

8. Personalized Advertising and Privacy Choices

TGA may use advertising and analytics services to understand marketing performance, measure customer engagement, and reach potential customers.

Some advertising technologies use information about activity across websites, services, or merchants to provide more relevant advertisements.

Depending on your location, applicable laws may give you the right to opt out of certain disclosures or uses of your personal information for targeted advertising.

You can submit applicable opt-out requests through:

Your Privacy Choices — TGA

Where required by applicable law and supported by our privacy systems, we also recognize Global Privacy Control (GPC) signals as requests to opt out of certain sales, sharing, or targeted advertising activities.

The scope of a browser-based preference signal may depend on the information available to associate the request with a particular device, browser, or customer account.

We do not generally respond to browser "Do Not Track" signals that are not legally recognized or supported by our privacy systems.

9. Data Security

We take reasonable measures designed to protect personal information against unauthorized access, misuse, alteration, disclosure, and loss.

We also rely on Shopify and other authorized service providers to maintain appropriate safeguards for information processed through their systems.

However, no website, electronic transmission, or storage system can be guaranteed to be completely secure.

We encourage customers to use secure devices and connections and avoid sharing sensitive personal information through unsecured channels.

If you believe your information has been compromised in connection with our Services, please contact us at support@tgahealth.com.

10. How Long We Retain Personal Information

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, including:

• Processing and documenting orders.

• Maintaining customer accounts.

• Providing support and administering returns.

• Complying with tax, accounting, and legal obligations.

• Resolving disputes and enforcing agreements.

• Protecting against fraud and security risks.

Retention periods may vary based on the category of information, the purposes for which it is processed, and applicable legal requirements.

When information is no longer reasonably required, we may delete, de-identify, or securely retain it only as permitted or required by law.

11. Your Privacy Rights

Depending on where you reside and which privacy laws apply, you may have certain rights regarding your personal information.

These rights may include:

Access: Requesting information about the personal data we maintain about you.

Correction: Requesting correction of inaccurate personal information.

Deletion: Requesting deletion of certain personal information, subject to applicable exceptions.

Portability: Requesting a copy of eligible personal information in a portable format.

Opt-Out: Requesting that we stop certain sales, sharing, or processing for targeted advertising.

Consent Withdrawal: Withdrawing previously provided consent where processing depends on that consent.

Appeal: Appealing certain decisions relating to privacy rights requests where applicable law provides that right.

These rights are not absolute and may be limited by applicable legal obligations or exceptions.

To submit a privacy-related request, contact us at support@tgahealth.com.

For applicable advertising opt-outs, visit our Your Privacy Choices page.

We may take reasonable steps to verify your identity before processing a request, where permitted or required by law.

Authorized agents may submit requests on behalf of individuals where applicable law allows, subject to reasonable verification of authorization.

We will respond to requests within the timeframes required by applicable law.

We will not unlawfully discriminate against customers for exercising their privacy rights.

12. Health-Related and Sensitive Information

As a retailer of dietary supplements and wellness products, TGA recognizes that customers may have personal health interests or preferences.

We do not require customers to submit medical records or diagnoses to complete an ordinary retail purchase.

Information such as purchase history, customer inquiries, or voluntarily provided details may sometimes reveal health-related interests or other sensitive information.

Where particular information is protected as sensitive personal information or consumer health data under applicable law, we will apply the relevant requirements concerning collection, use, disclosure, consent, and customer rights.

We encourage customers to avoid providing unnecessary medical or sensitive information in customer support communications.

If we introduce features that collect additional health-related information, such as wellness questionnaires or personalized health assessments, we will review and update the applicable disclosures and consent practices before implementing those features.

13. Children's Privacy

Our Services are intended for a general retail audience and are not directed toward children under the age of majority in their jurisdiction.

We do not knowingly collect personal information from children in violation of applicable law.

If you are a parent or legal guardian and believe a child has provided personal information to us inappropriately, please contact support@tgahealth.com so we can review the request and take appropriate action.

As of the effective date of this Privacy Policy, we do not have actual knowledge that we sell or share, as those terms are defined under applicable law, the personal information of individuals under the age of 16.

14. Third-Party Websites and Services

Our Website may contain links to third-party websites, services, or platforms that are not owned or controlled by TGA.

These third parties may have their own privacy policies and data practices.

We encourage customers to review the privacy notices of any third-party services they access.

TGA is not responsible for the privacy practices, content, or security of independently operated third-party websites.

15. International Processing and Transfers

Although TGA currently ships only within the United States, some of the technology providers supporting our Services may process or store information in other countries.

Those countries may have privacy and data protection laws that differ from the laws where you reside.

Where required, international transfers of personal information will be supported by applicable legal safeguards, contractual protections, or recognized transfer mechanisms.

If European Economic Area or United Kingdom data protection rules apply to a particular transfer, we will rely on appropriate lawful transfer mechanisms where required.

16. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our Services, technology providers, business operations, legal obligations, or privacy practices.

When we make changes, we will publish the revised policy on our Website and update the "Last Updated" date.

Where required by applicable law, we will provide additional notice or obtain consent before implementing certain changes.

We encourage customers to review this page periodically.

17. Contact Us

If you have questions about this Privacy Policy, would like to exercise a privacy right, or have concerns about how your personal information is handled, please contact us.

TGA
Operated by The Gray Area LLC

Website: https://tgahealth.com
Email: support@tgahealth.com
Contact Page: https://tgahealth.com/pages/contact

For applicable advertising and data-sharing opt-outs:

Your Privacy Choices: https://tgahealth.com/pages/data-sharing-opt-out

We take privacy inquiries seriously and will work to respond in accordance with applicable law.