top of page

Privacy Policy

​

Last Updated: September 22, 2025

​

Poppy Health, Inc. (USA) and Poppy Health (Canada), Inc. (together with their affiliates, “Poppy,” “Company,” “we,” “our,” or “us”) are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you access or use the Poppy Dashboard (the “Dashboard”), www.poppy.com (the “Site”), and related services (“Services”). By using the Services, you agree to the practices described in this Policy.

​

  • U.S. Users: Your data is controlled by Poppy Health, Inc.

  • Canadian Users: Your data is controlled by Poppy Health (Canada), Inc.

  • MENA Users: Your data is controlled by Poppy MENA LLC.

  • Users outside the listed jurisdictions will have their data controlled by Poppy Health, Inc. unless a local affiliate exists to serve their region.

​

  1. Collecting Personal Information

    • When you visit the Site or the Dashboard, we collect certain information about your device, your interaction with the Site, and information necessary to process your purchases. We may also collect additional information if you contact us for customer support. In this Privacy Policy, we refer to any information that can uniquely identify an individual (including the information below) as “Personal Information”. See the list below for more information about what Personal Information we collect and why.

      • Device information and Usage Data:

        • Examples of Personal Information collected: version of web browser, IP address, time zone, cookie information, what sites or products you view, search terms, and how you interact with the Site. Information about interactions with the Dashboard, including IP addresses, browser type, device information, and log data.

        • Purpose of collection: to load the Site accurately for you, and to perform analytics on Site usage to optimize our Site.

        • Source of collection: Collected automatically when you access our Site using cookies, log files, web beacons, tags, or pixels such as Facebook, Google Analytics, Snapchat, TikTok, LinkedIn, and others.

      • Order information:

        • Examples of Personal Information collected: name, billing address, shipping address, payment information, email address, and phone number.Examples of Personal Information collected: your name, billing address, shipping address, payment information (processed securely via third-party payment processors; we do not store full credit card numbers), email address, and phone number.

        • Purpose of collection: to provide products or services to you to fulfill our contract, to process your payment information, arrange for shipping, and provide you with invoices and/or order confirmations, communicate with you, screen our orders for potential risk or fraud, and when in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.

        • Source of collection: collected from you.

      • Customer Support and Account Information

        • Information you or your Authorized Users upload, provide, or access through the Dashboard or the Site. Registration details such as name, email address, and login credentials.

        • Examples of Personal Information collected: Your Name, Your Phone Number, Your E-Mail

        • Purpose of collection: to provide customer support.

        • Source of collection: collected from you.

  2. How We Use Information

    • We use information to:

      • Provide our services to you, which include: offering products for sale, processing payments, shipping and fulfillment of your order, and keeping you up to date on new products, services, and offers.

      • Provide, operate, and improve the Dashboard and Services;

      • Authenticate users and maintain account security;

      • Respond to inquiries and provide customer support;

      • Comply with legal and regulatory obligations;

      • Conduct analytics and improve performance.

      • Communicate service updates and important notices.

  3. Minor

    • The Site and the Dashboard are not intended for individuals under the age of 16. We do not intentionally collect Personal Information from children. If you are the parent or guardian and believe your child has provided us with Personal Information, please contact us at the address below to request deletion.

  4. Behavioural Advertising

  5. Sharing of Information

    • We do not sell personal information. We may share information with:

    • Service Providers: Trusted vendors who assist in operating the Dashboard (e.g., hosting, payment processing, analytics) and service providers to help us provide our services and fulfill our contracts with you. 

    • Legal & Compliance: We may share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant, or other lawful request for information we receive, or to otherwise protect our rights.

    • Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred.

  6. Data Security

    • We implement safeguards to protect your information using industry-standard technical, administrative, and physical measures. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

  7. Data Retention

    • We retain Client Data and Personal Information only for as long as necessary to provide Services, comply with legal obligations, resolve disputes, and enforce our agreements. Unless a longer retention period is required or permitted by law:

      • Transaction and billing records are retained for up to 5 years for tax, accounting, and compliance purposes.

      • Customer support communications and account details are retained for up to 5 years from the date of your last interaction with us.

      • Marketing and preference data are retained until you withdraw your consent or up to 5 years, whichever comes first.

    • After these periods, we securely delete or anonymize your information, unless we are legally required to retain it longer.

  8. Your Rights

    • Depending on your location, you may have additional privacy rights under applicable laws:

      • EEA / UK (GDPR)

        • Pursuant to the General Data Protection Regulation (“GDPR”), if you are a resident of the European Economic Area (“EEA”), we process your personal information under the following lawful bases:

          • Your consent;

          • The performance of the contract between you and the Site;

          • Compliance with our legal obligations;

          • To protect your vital interests;

          • To perform a task carried out in the public interest;

          • For our legitimate interests, which do not override your fundamental rights and freedoms.

        • If required under GDPR, Poppy has appointed a Data Protection Officer. You can contact our DPO at privacy@poppy.com

      • If you are located in the European Economic Area (“EEA”) or the United Kingdom (“UK”), you have the right to:

        • Access, correct, or delete your personal data.

        • Restrict or object to our processing of your personal data.

        • Request portability of your personal data.

        • Lodge a complaint with your local supervisory authority.

        • If required, Poppy may appoint an EU or UK representative. Contact us at privacy@poppy.com for further details.

      • California (CCPA / CPRA)

        • If you are a resident of California, you have the right to:

          • Know the categories of personal information we collect, use, and disclose.

          • Request access to and deletion of your personal information.

          • Opt out of the “sale” or “sharing” of personal information (we do not sell personal information, but you may still contact us to exercise this right).

          • Exercise your rights without discrimination.

      • Canada (PIPEDA)

        • If you are located in Canada, you have the right to:

          • Access and correct personal information we hold about you.

          • Withdraw your consent for certain processing activities.

          • Receive information about how we use your data in plain language.

      • Other Regions

        • If you are located outside of the U.S., Canada, or EEA/UK, you may have rights under local laws. We will honor those rights to the extent required by applicable law.

        • To exercise your rights, contact us at privacy@poppy.com.

  9.  International Data Transfers

    • Your information may be transferred to and processed in the United States, Canada, or other countries where we or our service providers operate. These countries may have data protection laws that differ from those in your country of residence.

      • For transfers from the EEA or UK to the U.S. or Canada, we rely on appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission or other lawful mechanisms, to ensure your data is adequately protected.

  10. Automatic Decision-Making 

    • If you reside in the EEA, you have the right to object to any processing based solely on automated decision-making (including profiling) when such processing produces legal effects concerning you or otherwise significantly affects you.

      • We do not engage in fully automated decision-making that has a legal or otherwise significant effect using customer data.

    • Services that include elements of automated decision-making include:

      • Temporary denylist of IP addresses associated with repeated failed transactions. This denylist persists for a small number of hours.

      • Temporary denylist of credit cards associated with deny-listed IP addresses. This denylist persists for a small number of days.

  11. Cookies and Tracking

    • A cookie is a small amount of information that’s downloaded to your computer or device when you visit our Site or our Dashboard. 

    • We use a number of different cookies, including functional, performance, advertising, and social media or content cookies. Cookies make your browsing experience better by allowing the website to remember your actions and preferences (such as login and region selection). This means you don’t have to re-enter this information each time you return to the site or browse from one page to another. Cookies also provide information on how people use the website, for instance, whether it’s their first time visiting or if they are a frequent visitor.

    • We use the following cookies to optimize your experience on our Site and dashboard, to provide our services, improve user experience, analyze performance, and provide functionality.

      • Reporting and Analytics

        • The length of time that a cookie remains on your computer or mobile device depends on whether it is a “persistent” or “session” cookie. Session cookies last until you stop browsing, and persistent cookies last until they expire or are deleted. Most of the cookies we use are persistent and will expire between 30 minutes and two years from the date they are downloaded to your device.

      • You can control and manage cookies in various ways, including managing cookie preferences through your browser settings. Please keep in mind that removing or blocking cookies can negatively impact your user experience, and parts of our website may no longer be fully accessible.

      • Most browsers automatically accept cookies, but you can choose whether or not to accept cookies through your browser controls, often found in your browser’s “Tools” or “Preferences” menu. For more information on how to modify your browser settings or how to block, manage, or filter cookies, please consult your browser’s help file or through such sites as www.allaboutcookies.org.

      • Additionally, please note that blocking cookies may not completely prevent how we share information with third parties, such as our advertising partners. To exercise your rights or opt out of certain uses of your information by these parties, please follow the instructions in the “Behavioural Advertising” section above.

  12. Do Not Track

    • Please note that because there is no consistent industry understanding of how to respond to “Do Not Track” signals, we do not alter our data collection and usage practices when we detect such a signal from your browser.

  13. Changes to This Policy

    • We may update this Privacy Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons. Updates will be posted on the Dashboard. Continued use of the Services after updates indicates acceptance.

  14. Contact Us

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at privacy@poppy.com or by mail using the details provided below:

​

Poppy Health, Inc. (U.S.)

941 W. Morse Blvd, Suite 100, Winter Park, FL 32789

​

Poppy Health (Canada), Inc. (Canada)

150 King St. W, Suite 200, Toronto, ON, M5H 1J9

bottom of page