Privacy Policy

02 · How we use it

We use your information to process orders, arrange cold-chain shipping, issue documentation, provide support, meet legal and record-keeping obligations, and — only with consent — to send occasional product updates.

03 · Sharing

We share information only with service providers necessary to operate — payment processors, shipping carriers, and the independent laboratory that supports analysis — and where required by law. We do not sell personal information.

Measurement. Our analytics provider, Aranova, processes how the site is used on our behalf, and receives a record of each order — its number, contents, and total, along with the name and email address given at checkout — so that orders can be attributed to how people found us. It acts on our instructions, and the record is deleted if an order is cancelled or refunded. You can switch this off at any time using the cookie preferences control in the footer.

The sharing described above does not permit marketing-related sharing of mobile information. Mobile numbers, SMS opt-in data, and SMS consent records are not sold, rented, or shared with third parties or affiliates for their marketing purposes.

04 · Accounts and Google sign-in

You can create a CRX account with an email address or by signing in with Google. Both run through our identity provider, Clerk, and exist for one purpose: authenticating you so orders and order history can be attached to your account.

If you choose Google sign-in, we receive your basic Google profile — name, email address, and profile picture — and nothing else. We use it solely to create and authenticate your account. We do not use information received from Google for advertising, do not sell it, do not use it to train models, and do not share it with anyone beyond the service providers described in the Sharing section. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

You may disconnect Google from your account or request deletion of your account and its data at any time; deletion requests are handled as described under Your rights.

05 · Cookies, storage, and partner referrals

Strictly necessary. Local storage holds the cart you are building, and your signed-in session is kept by our identity provider, Clerk. The site does not work without these.

Partner referral attribution. If you arrive through a partner link, we set two first-party cookies: crx_ref, kept for 180 days, which records which partner sent you, and crx_vid, kept for two years, which is a random identifier for this browser so repeat visits are not counted twice. They exist so that a partner is credited when you order. They are first-party, are never shared with anyone else, are never used for advertising, and we keep no IP address and no device profile alongside them. Referral codes identify a partner account to us and nothing about you.

Measurement and advertising. We measure how the site is used — pages viewed, time spent, how far down a page you read, and clicks on the main buttons — through our analytics provider, Aranova. If you arrive from an advertisement or a campaign link, the identifier that link carries is stored in a first-party cookie for 90 days so the visit can be credited to it: gclid, wbraid, gbraid, ylpcid and fbclid from ad platforms, and utm_source, utm_medium, utm_campaign, utm_term and utm_content from campaign links. A random visitor and session identifier is kept in your browser's local storage. This is first-party measurement: we do not currently run advertising tags on this site, and nothing here is used to build a profile of you across other websites.

You can turn measurement off. Use the cookie preferences control in the footer of any page — a decline is remembered for 90 days, and the site works exactly the same either way. Strictly necessary storage and partner referral attribution are unaffected, because the site and our partner payments depend on them.

You can remove the referral at any time by clearing this site's data in your browser, which deletes both cookies. The trade-off is worth stating plainly: once it is gone, the partner who sent you may not be credited for your order.

06 · Data retention

Order and certification records are retained as long as needed to meet legal, tax, and compliance obligations, after which they are securely deleted or anonymized.

07 · Your rights

Under Canadian privacy law (PIPEDA), you may request access to, correction of, or deletion of your personal information, and may withdraw marketing consent at any time. We respond to verified requests within a reasonable period.

08 · Contact

Privacy questions, access and deletion requests, and withdrawals of consent go to support@crxbiotech.com, and we respond to verified requests within a reasonable period.

Written enquiries: CRX Longevity Biotech Inc., Toronto, Ontario, Canada.

This page is provided for information and does not constitute legal advice.