Privacy policy

Privacy Policy

Last updated: July 30, 2026

This Privacy Policy explains how Toplux collects, uses, discloses, retains, and protects personal information when you visit the Toplux online store, place an order, create an account, contact customer support, subscribe to communications, submit a review, or otherwise interact with Toplux.

The online store and related services are referred to collectively as the “Services.”

Scope

This Privacy Policy applies to personal information processed by Toplux through the Services.

It does not control the independent privacy practices of third-party websites, payment providers, social networks, shipping carriers, or other services that operate under their own privacy notices.

Personal Information We Collect

“Personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to an individual or household.

The categories collected depend on how you use the Services.

Identifiers and Contact Information

Toplux may collect:

  • Name.
  • Email address.
  • Telephone number, when provided.
  • Billing address.
  • Shipping address.
  • Account username.
  • Online identifiers.
  • Internet Protocol address.
  • Order number.
  • Device identifiers.

Customer and Transaction Information

Toplux may collect:

  • Products viewed, searched for, purchased, returned, or reviewed.
  • Cart and checkout activity.
  • Order history.
  • Product quantities and variants.
  • Discounts and promotional offers used.
  • Payment status.
  • Shipping method.
  • Delivery status.
  • Returns, replacements, and refunds.
  • Customer-service history.
  • Product safety or quality complaints.
  • Lot numbers and expiration dates submitted in connection with a complaint.

Payment Information

Payments are processed by Shopify, payment processors, banks, card networks, or other providers made available during checkout.

Toplux may receive:

  • Payment status.
  • Transaction reference.
  • Amount paid in USD.
  • Payment method type.
  • Limited information identifying the payment method.
  • Fraud or risk-screening results.

Toplux generally does not receive or store complete payment card numbers or card security codes.

Account Information

When a customer account is available, Toplux may process:

  • Login credentials.
  • Saved addresses.
  • Order history.
  • Account preferences.
  • Authentication and security information.

Customer-Service Communications

Toplux may collect:

  • Messages and emails.
  • Photographs and attachments.
  • Return or refund requests.
  • Product questions.
  • Complaints.
  • Information submitted to verify identity.
  • Product safety and adverse-reaction reports.

Reviews and User Content

Toplux may collect reviews, ratings, photographs, comments, survey responses, testimonials, and other content that you voluntarily submit.

Do not include unnecessary medical, financial, or highly sensitive information in a public review.

Device and Internet Activity

Toplux, Shopify, and authorized service providers may automatically collect:

  • Browser type and version.
  • Device type.
  • Operating system.
  • Language.
  • Time zone.
  • Referring and exit pages.
  • Pages and products viewed.
  • Search activity.
  • Cart and checkout interactions.
  • Date, time, frequency, and duration of visits.
  • Interactions with advertisements and emails.
  • Cookie and similar-technology data.
  • Error, diagnostic, and security information.

Approximate Location

Toplux may derive an approximate location from an IP address for purposes such as:

  • Fraud prevention.
  • Shipping availability.
  • Tax calculation.
  • Localization.
  • Analytics.
  • Compliance with geographic restrictions.

Toplux does not request precise device location for an ordinary online purchase unless a particular feature clearly discloses that collection.

Inferences and Preferences

Toplux may infer product preferences, likely interests, shopping patterns, or marketing segments from activity on the Services.

Sensitive Personal Information

Depending on how you use the Services, Toplux or its providers may process:

  • Account login credentials.
  • Payment information.
  • Precise delivery information.
  • Health-related information voluntarily included in a customer-service or product-safety message.

Toplux does not use sensitive personal information to infer characteristics about customers for unrelated purposes.

Consumer Health Data Privacy Notice

This section applies where information processed by Toplux qualifies as “consumer health data” under applicable state law.

Because Toplux offers health and wellness products, information about product searches, product views, purchases, questions, or reported reactions may sometimes reveal or allow an inference concerning a person’s physical or mental health.

Washington and Nevada laws require covered businesses to maintain conspicuous consumer health data privacy disclosures and provide specific rights concerning such data.

Categories of Consumer Health Data

Toplux may collect:

  • Health or wellness products viewed, searched for, added to a cart, or purchased.
  • Information indicating an interest in vitamins, minerals, dietary supplements, sleep, stress, energy, nutrition, or other wellness topics.
  • Product-safety complaints.
  • Information about an actual or suspected adverse reaction.
  • Symptoms or health concerns voluntarily described to customer support.
  • Age, pregnancy, medication, allergy, or medical-condition information voluntarily submitted in a support request.
  • Product usage information.
  • Information that can reasonably infer that a customer is seeking a health-related product or service.
  • Device, browsing, or location information when it is reasonably linkable to health-related activity.

Toplux does not request medical records, diagnoses, prescription records, or detailed health histories for an ordinary purchase.

Sources of Consumer Health Data

Consumer health data may come from:

  • You directly.
  • Your browsing and purchase activity.
  • Your device or browser.
  • Shopify.
  • Customer-service providers.
  • Payment and fulfillment records.
  • Product-safety or quality communications.
  • A person authorized to communicate on your behalf.

Purposes for Processing Consumer Health Data

Toplux may process consumer health data to:

  • Provide a product or service you requested.
  • Process and fulfill an order.
  • Respond to product questions.
  • Investigate quality or safety complaints.
  • Manage replacements, returns, and refunds.
  • Identify affected products or lots.
  • Comply with product-safety and legal obligations.
  • Prevent fraud and abuse.
  • Protect customers and the public.
  • Personalize content or advertising only when permitted and after obtaining any consent required by law.

Sharing of Consumer Health Data

Toplux may share consumer health data only as reasonably necessary with:

  • Shopify, for operation of the online store.
  • Payment providers, to process transactions.
  • Fulfillment providers, to prepare orders.
  • Shipping carriers, to deliver products.
  • Customer-service providers.
  • Information-security and fraud-prevention providers.
  • Professional advisers.
  • Government authorities or courts when legally required.
  • Other processors acting under appropriate contractual restrictions.

Toplux does not share consumer health data with corporate affiliates for their independent marketing purposes.

Toplux will not share consumer health data with advertising partners unless the disclosure is permitted by law and any required affirmative consent has been obtained.

Sale of Consumer Health Data

Toplux does not sell consumer health data for money.

Toplux will not sell consumer health data unless a separate written authorization meeting all requirements of applicable law has first been obtained.

A customer is not required to authorize the sale of consumer health data as a condition of purchasing a Toplux product.

Consumer Health Data Rights

Where applicable, you may have the right to:

  • Confirm whether Toplux collects, shares, or sells your consumer health data.
  • Access your consumer health data.
  • Obtain a list of third parties or affiliates that received the data.
  • Withdraw consent to collection or sharing.
  • Request deletion.
  • Request correction where applicable.
  • Appeal a refusal to act on a request.
  • Exercise these rights without unlawful discrimination.

Washington law provides rights to confirm processing, access consumer health data, withdraw consent, and request deletion, subject to its terms and exceptions.

Exercising Consumer Health Data Rights

Email toplux.shop@hotmail.com with the subject line:

Consumer Health Data Request

Include:

  • Your full name.
  • The email address associated with your account or order.
  • Your state of residence.
  • The request you wish to make.
  • Information reasonably necessary to identify the relevant data.

Toplux may request additional information to authenticate the request.

Toplux will respond within the period required by applicable law.

To appeal a decision, email toplux.shop@hotmail.com with the subject line:

Consumer Health Data Appeal

Include the original request and the reason you believe the decision should be reconsidered.

Geofencing

Toplux does not use geofencing around in-person healthcare facilities to identify, track, or target consumers based on their presence at those locations.

Changes to Consumer Health Data Practices

Toplux will not collect, use, or share materially different categories of consumer health data for materially different purposes without providing any notice and obtaining any consent required by applicable law.

Sources of Personal Information

Toplux may obtain personal information from:

  • You directly.
  • Your browser or device.
  • Shopify.
  • Payment providers.
  • Fulfillment and shipping providers.
  • Fraud-prevention services.
  • Analytics and advertising providers.
  • Social media platforms.
  • Referral or promotional partners.
  • A person purchasing a gift for you.
  • Publicly available sources where legally permitted.

How Toplux Uses Personal Information

Toplux may use personal information to:

  • Operate and maintain the Services.
  • Display products and content.
  • Process orders and payments.
  • Fulfill, ship, track, return, replace, and refund products.
  • Create and manage customer accounts.
  • Communicate about orders and account activity.
  • Provide customer support.
  • Investigate product quality or safety concerns.
  • Detect and prevent fraud, abuse, and security incidents.
  • Authenticate users.
  • Protect the Services and customers.
  • Personalize the shopping experience.
  • Recommend products.
  • Measure store and marketing performance.
  • Conduct analytics and testing.
  • Administer discounts, promotions, surveys, and reviews.
  • Send marketing communications where permitted.
  • Maintain business, tax, accounting, and compliance records.
  • Enforce policies and contractual rights.
  • Establish, exercise, or defend legal claims.
  • Respond to lawful government requests.
  • Complete a business merger, financing, acquisition, restructuring, or sale.
  • Carry out another purpose disclosed when the information is collected.

Cookies and Similar Technologies

Toplux, Shopify, and authorized partners may use:

  • Cookies.
  • Pixels.
  • Tags.
  • Local storage.
  • Software development kits.
  • Server-side technologies.
  • Similar tracking or recognition tools.

Essential Technologies

Essential technologies support:

  • Shopping-cart operation.
  • Checkout.
  • Payment processing.
  • Account authentication.
  • Security.
  • Fraud prevention.
  • Load balancing.
  • Privacy-preference storage.

Disabling these technologies may prevent parts of the Services from functioning.

Functional Technologies

Functional technologies may remember preferences and improve usability.

Analytics

Analytics technologies may help Toplux understand:

  • Traffic.
  • Page performance.
  • Product interest.
  • Checkout activity.
  • Errors.
  • General use of the Services.

Advertising

Advertising technologies may help Toplux:

  • Measure campaigns.
  • Attribute purchases.
  • Limit repeated advertisements.
  • Create audiences.
  • Display advertising based on activity across websites or services.

You may manage applicable technologies through:

  • The cookie or privacy controls displayed by the store.
  • Browser settings.
  • Device settings.
  • The store’s data-sharing opt-out page.
  • Recognized opt-out preference signals.

Blocking cookies may affect functionality and does not necessarily remove cookies already stored on your device.

Shopify

The Toplux online store is hosted on Shopify.

Shopify processes customer personal information to provide storefront, checkout, security, fraud-prevention, account, payment, analytics, and related services. Shopify’s current Data Processing Addendum describes Shopify’s role as a processor or service provider for merchant customer data.

Depending on the Shopify services and settings used, Shopify may also process information under its own consumer privacy policy, including information associated with Shop, Shop Pay, personalization, analytics, or enhanced Shopify services.

How Toplux Discloses Personal Information

Toplux may disclose personal information to:

Shopify

For hosting, storefront operation, checkout, security, accounts, analytics, and related commerce services.

Payment Providers

For payment authorization, settlement, fraud screening, refunds, and chargeback management.

Fulfillment and Shipping Providers

For order preparation, storage, packaging, tracking, delivery, returns, and customs processing.

Service Providers

For:

  • Customer support.
  • Email delivery.
  • Data storage.
  • Cybersecurity.
  • Fraud prevention.
  • Accounting.
  • Tax compliance.
  • Analytics.
  • Product reviews.
  • Marketing.
  • Advertising.
  • Returns management.
  • Product-safety investigations.

Advertising and Analytics Partners

Toplux may disclose identifiers, commercial information, approximate location, and internet activity to advertising or analytics partners.

Depending on applicable law, these disclosures may be considered a “sale,” “sharing,” or processing for targeted advertising even when no money is exchanged.

Professional Advisers

Toplux may disclose information to attorneys, accountants, auditors, insurers, consultants, and other professional advisers.

Government and Legal Recipients

Toplux may disclose information when reasonably necessary to:

  • Comply with law.
  • Respond to legal process.
  • Protect customers or the public.
  • Investigate fraud or security incidents.
  • Enforce agreements.
  • Exercise or defend legal claims.

Business Transactions

Information may be disclosed or transferred as part of an actual or proposed merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction.

Sale, Sharing, and Targeted Advertising

Toplux does not sell personal information in exchange for money.

However, disclosures involving advertising cookies, pixels, Shopify services, or advertising partners may be defined as a sale, sharing, or targeted advertising under certain state privacy laws.

Where applicable, you may opt out by:

  • Using the “Your Privacy Choices,” “Do Not Sell or Share My Personal Information,” or similar control displayed by the store.
  • Using the store’s data-sharing opt-out page.
  • Enabling Global Privacy Control in a supported browser or extension.
  • Emailing toplux.shop@hotmail.com.

California requires covered businesses to honor qualifying opt-out preference signals such as Global Privacy Control as a request to opt out of sale or sharing.

Toplux does not knowingly sell or share the personal information of consumers under 16 years of age.

U.S. State Privacy Rights

Depending on your state of residence and whether the relevant law applies to Toplux, you may have the right to:

  • Confirm whether Toplux processes your personal information.
  • Access or obtain a copy of personal information.
  • Correct inaccurate information.
  • Delete personal information.
  • Obtain information in a portable format.
  • Opt out of the sale or sharing of personal information.
  • Opt out of targeted advertising.
  • Opt out of certain profiling producing legal or similarly significant effects.
  • Limit certain uses of sensitive personal information.
  • Withdraw consent.
  • Obtain a list of certain third-party recipients.
  • Appeal a refusal to act on a request.
  • Receive equal service and not be unlawfully discriminated against.

The CCPA provides California consumers with rights concerning access, deletion, correction, sale, sharing, and other uses of personal information, subject to statutory conditions and exceptions.

California Notice at Collection

During the preceding 12 months, Toplux may have collected the following categories of personal information:

  • Identifiers.
  • Customer records.
  • Commercial information.
  • Internet or electronic network activity.
  • Approximate geolocation.
  • Inferences.
  • User-generated content.
  • Account and payment-related sensitive personal information.
  • Consumer health data where applicable.

These categories are collected for the purposes described in this Policy, including commerce, fulfillment, security, customer support, analytics, marketing, product safety, legal compliance, and business administration.

Toplux may disclose these categories for business purposes to the recipients described in this Policy.

Depending on enabled advertising technologies and privacy choices, Toplux may disclose the following categories in a manner that applicable law defines as sale, sharing, or targeted advertising:

  • Identifiers.
  • Commercial information.
  • Internet activity.
  • Approximate location.
  • Inferences.

Toplux does not sell personal information for money.

Toplux retains each category only for as long as reasonably necessary for the disclosed purposes, taking into account legal obligations, transaction history, security, fraud prevention, customer requests, warranty or return periods, and applicable limitation periods.

Privacy Requests

To submit a privacy request, email toplux.shop@hotmail.com with the subject line:

Privacy Request

Include:

  • Your full name.
  • The email associated with your account or orders.
  • Your state of residence.
  • The right you wish to exercise.
  • Details reasonably necessary to understand the request.

Where available, you may also use the privacy-request form, account controls, or privacy choices displayed by the store.

Verification

Toplux may request additional information to verify your identity and protect personal information from unauthorized access, correction, or deletion.

Verification information will be used only for authentication, security, and legal compliance.

Toplux may deny or limit a request when:

  • Identity cannot reasonably be verified.
  • An exception applies.
  • The request is fraudulent or abusive.
  • Toplux is legally required to retain the information.
  • Fulfillment would adversely affect the rights of another person.

Authorized Agents

Where permitted by law, an authorized agent may submit a request on your behalf.

Toplux may require:

  • Proof of the agent’s authority.
  • Verification of the agent’s identity.
  • Direct confirmation from you.
  • A valid power of attorney or another legally sufficient authorization.

Appeals

Where applicable law grants an appeal right, email toplux.shop@hotmail.com with the subject line:

Privacy Appeal

Include the original request, the decision, and the reason you believe the decision should be reconsidered.

Marketing Communications

Toplux may send marketing emails when you subscribe, consent, make a qualifying purchase where legally permitted, or otherwise authorize communications.

You may unsubscribe by:

Unsubscribing from marketing does not prevent Toplux from sending non-promotional messages concerning:

  • Orders.
  • Payments.
  • Shipping.
  • Returns.
  • Refunds.
  • Account security.
  • Product-safety alerts.
  • Legal notices.
  • Customer-service requests.

Toplux may retain limited suppression-list information to ensure that an unsubscribe request continues to be honored.

Financial Incentives and Promotions

Toplux may offer a discount, promotion, loyalty benefit, or other incentive in connection with the voluntary submission of contact information.

The material terms will be presented when the offer is made.

Participation is optional. A customer may withdraw from the program as described in the applicable offer.

If a program qualifies as a financial incentive under applicable law, Toplux will provide any separate notice required by that law.

Data Retention

Toplux retains personal information only for as long as reasonably necessary to:

  • Fulfill orders.
  • Maintain accounts.
  • Process returns and refunds.
  • Investigate safety and quality issues.
  • Provide customer support.
  • Prevent fraud.
  • Maintain tax, accounting, and business records.
  • Comply with legal obligations.
  • Resolve disputes.
  • Enforce agreements.

Retention periods vary according to:

  • The category of information.
  • The purpose of processing.
  • Applicable legal requirements.
  • Whether an account remains active.
  • Whether a transaction or dispute remains unresolved.

When information is no longer required, Toplux may delete, anonymize, or securely isolate it, subject to legal and technical limitations.

Data Security

Toplux uses reasonable administrative, technical, and organizational safeguards designed to protect personal information.

No transmission, payment system, website, or storage method is completely secure. Toplux cannot guarantee absolute security.

Customers are responsible for protecting account credentials and should contact Toplux promptly if they suspect unauthorized activity.

Children’s Privacy

The Services are intended for a general adult audience and are not directed to children under 13 years of age.

Toplux does not knowingly collect personal information directly from a child under 13 without legally valid parental consent.

COPPA applies to services directed to children under 13 and to general-audience services that have actual knowledge that they are collecting personal information from a child under 13.

A parent or guardian who believes that a child provided personal information may contact toplux.shop@hotmail.com.

International Visitors

Toplux operates in the United States.

If you access the Services from another country, your information may be transferred to and processed in the United States and other countries where Shopify or service providers operate.

Privacy laws in those countries may differ from those in your location.

Third-Party Links

The Services may contain links to third-party websites, applications, social networks, payment services, or other resources.

Toplux does not control the privacy or security practices of independent third parties. Review their policies before providing information.

Do Not Track

Some browsers offer a “Do Not Track” setting.

Toplux may not respond to ordinary Do Not Track signals because there is no single method used by all browsers and services. Where legally required, Toplux will process recognized opt-out preference signals, including qualifying Global Privacy Control signals.

Changes to This Privacy Policy

Toplux may update this Privacy Policy to reflect changes in:

  • Law.
  • Technology.
  • Shopify settings.
  • Installed applications.
  • Service providers.
  • Business practices.
  • Data-processing activities.

The revised Policy will be posted with a new “Last updated” date.

Where required, Toplux will provide additional notice or obtain consent before a material change takes effect.

Contact

For questions about this Privacy Policy or to exercise a privacy right, contact Toplux:

Email: toplux.shop@hotmail.com