Legal
Privacy Policy
Last updated: September 22, 2025
Poppy Health, Inc. (USA) and Poppy Health (Canada), Inc. (together with their affiliates, "Poppy," "Company," "we," "our," or "us") are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you access or use the Poppy Dashboard (the "Dashboard"), www.poppy.com (the "Site"), and related services ("Services"). By using the Services, you agree to the practices described in this Policy.
- U.S. Users: Your data is controlled by Poppy Health, Inc.
- Canadian Users: Your data is controlled by Poppy Health (Canada), Inc.
- MENA Users: Your data is controlled by Poppy MENA LLC.
- Users outside the listed jurisdictions will have their data controlled by Poppy Health, Inc. unless a local affiliate exists to serve their region.
1. Collecting Personal Information
When you visit the Site or the Dashboard, we collect certain information about your device, your interaction with the Site, and information necessary to process your purchases. We may also collect additional information if you contact us for customer support. In this Privacy Policy, we refer to any information that can uniquely identify an individual as "Personal Information."
Device Information and Usage Data
Examples: version of web browser, IP address, time zone, cookie information, what sites or products you view, search terms, and how you interact with the Site. Information about interactions with the Dashboard, including IP addresses, browser type, device information, and log data.
Purpose: to load the Site accurately for you, and to perform analytics on Site usage to optimize our Site.
Source: Collected automatically when you access our Site using cookies, log files, web beacons, tags, or pixels such as Facebook, Google Analytics, Snapchat, TikTok, LinkedIn, and others.
Order Information
Examples: your name, billing address, shipping address, payment information (processed securely via third-party payment processors; we do not store full credit card numbers), email address, and phone number.
Purpose: to provide products or services to you, process your payment information, arrange for shipping, provide invoices and/or order confirmations, communicate with you, screen orders for potential risk or fraud, and provide you with information or advertising relating to our products or services.
Customer Support and Account Information
Examples: your name, phone number, email address, registration details, and login credentials.
Purpose: to provide customer support. Source: collected from you.
2. How We Use Information
- Provide our services to you, including: offering products for sale, processing payments, shipping and fulfillment
- Provide, operate, and improve the Dashboard and Services
- Authenticate users and maintain account security
- Respond to inquiries and provide customer support
- Comply with legal and regulatory obligations
- Conduct analytics and improve performance
- Communicate service updates and important notices
3. Minors
The Site and the Dashboard are not intended for individuals under the age of 16. We do not intentionally collect Personal Information from children. If you are the parent or guardian and believe your child has provided us with Personal Information, please contact us to request deletion.
4. Behavioural Advertising
We use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. We use Google Analytics to help us understand how our customers use the Site. We share information about your use of the Site, your purchases, and your interaction with our ads on other websites with our advertising partners.
You can opt out of targeted advertising by:
- Facebook — facebook.com/settings
- Google — google.com/settings/ads
- Bing — bingads.microsoft.com
- Apple — Settings > Privacy > Tracking on your iOS device
- TikTok — support.tiktok.com
Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance's opt-out portal at optout.aboutads.info.
5. Sharing of Information
We do not sell personal information. We may share information with:
- Service Providers: Trusted vendors who assist in operating the Dashboard (e.g., hosting, payment processing, analytics) and service providers who help us provide our services and fulfill our contracts with you.
- Legal & Compliance: We may share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant, or other lawful request for information we receive, or to otherwise protect our rights.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred.
6. Data Security
We implement safeguards to protect your information using industry-standard technical, administrative, and physical measures. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
7. Data Retention
We retain Client Data and Personal Information only for as long as necessary to provide Services, comply with legal obligations, resolve disputes, and enforce our agreements. Unless a longer retention period is required or permitted by law:
- Transaction and billing records are retained for up to 5 years for tax, accounting, and compliance purposes.
- Customer support communications and account details are retained for up to 5 years from the date of your last interaction with us.
- Marketing and preference data are retained until you withdraw your consent or up to 5 years, whichever comes first.
After these periods, we securely delete or anonymize your information, unless we are legally required to retain it longer.
8. Your Rights
Depending on your location, you may have additional privacy rights under applicable laws:
EEA / UK (GDPR)
If you are located in the European Economic Area or the United Kingdom, you have the right to: access, correct, or delete your personal data; restrict or object to our processing; request portability; and lodge a complaint with your local supervisory authority. Contact our DPO at privacy@poppy.com.
California (CCPA / CPRA)
California residents have the right to: know the categories of personal information we collect, use, and disclose; request access to and deletion of your personal information; opt out of the "sale" or "sharing" of personal information; and exercise your rights without discrimination. We do not sell personal information.
Canada (PIPEDA)
Canadian users have the right to: access and correct personal information we hold about you; withdraw your consent for certain processing activities; and receive information about how we use your data.
Other Regions
If you are located outside of the U.S., Canada, or EEA/UK, you may have rights under local laws. We will honor those rights to the extent required by applicable law. To exercise your rights, contact us at privacy@poppy.com.
9. International Data Transfers
Your information may be transferred to and processed in the United States, Canada, or other countries where we or our service providers operate. For transfers from the EEA or UK, we rely on appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission.
10. Automatic Decision-Making
We do not engage in fully automated decision-making that has a legal or otherwise significant effect using customer data. Services that include elements of automated decision-making include temporary denylists of IP addresses associated with repeated failed transactions and temporary denylists of credit cards associated with denylisted IP addresses.
11. Cookies and Tracking
We use a number of different cookies, including functional, performance, advertising, and social media or content cookies. Cookies make your browsing experience better by allowing the website to remember your actions and preferences. You can control and manage cookies through your browser settings. Please keep in mind that removing or blocking cookies can negatively impact your user experience.
12. Do Not Track
Because there is no consistent industry understanding of how to respond to "Do Not Track" signals, we do not alter our data collection and usage practices when we detect such a signal from your browser.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. Updates will be posted on the Dashboard. Continued use of the Services after updates indicates acceptance.
14. Contact Us
For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by email at privacy@poppy.com or by mail:
Poppy Health, Inc. (U.S.)
941 W. Morse Blvd, Suite 100, Winter Park, FL 32789
Poppy Health (Canada), Inc.
150 King St. W, Suite 200, Toronto, ON, M5H 1J9
Poppy MENA LLC (Qatar)
Burj Alfardan, Building No. 157, Zone 69, Street 303, Lusail, Qatar