Privacy Policy

Effective Date: August 5, 2026
Last Updated: August 5, 2026

Next Level Pharm LLC (“Next Level Pharm,” “we,” “our,” or “us”), a Wyoming limited liability company, respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit nextlevelpharm.com (the “Website”) or purchase products from us.

By accessing or using the Website, you agree to the practices described in this Privacy Policy.

1. Information We Collect

To operate the Website and fulfill orders, we collect several categories of information:

1.1 Personal Information

We collect personal information you provide directly when you interact with the Website, including:

Identifying Information — name, email address, shipping address, billing address, and phone number.
Payment Information — billing details required to process your purchase. Payment card data is collected and processed by our third-party payment processors (see Section 3.1); we do not store full payment card numbers or CVV codes on our servers.
Account Information — if you create an account, we store your username, hashed password, and account preferences.
Order Details — items purchased, order history, shipping selections, applied discounts, and tax records.
Age & Use Confirmation — your affirmation that you are 21+ and that products are purchased for Research Use Only.

1.2 Non-Personal / Technical Information

We collect technical and usage information automatically when you visit the Website, including:

Device & Browser Data — IP address, browser type and version, operating system, device type, and screen resolution.
Mobile Device Data — if you access the Website on a mobile device, we may collect a mobile device identifier and IP address. This information is not, on its own, personally identifiable.
Website Usage Data — pages visited, time on page, referring URL, search terms, and on-site interactions.
Online Identifiers — cookie identifiers, a persistent visitor identifier and a session identifier stored in your browser, and advertising click identifiers (such as Google gclid and Meta fbclid) that let us determine which advertisement or referral link brought you to the Website.
Cookies & Similar Technologies — see Section 6.

1.3 Optional Information

Information you voluntarily provide through contact forms, customer-support inquiries, product reviews, or surveys.

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 Order Processing & Customer Support

Process payments, ship orders, manage returns, and respond to inquiries about your purchase.
Send transactional messages (order confirmations, shipping notices, refund notices) — these are not marketing communications.

2.2 Website & Service Improvements

Operate, maintain, and improve the Website.
Analyze traffic patterns and feature usage to enhance performance and stability.
Personalize your on-site experience (e.g., remembering your cart contents).

2.3 Compliance with Laws & Regulations

Comply with tax, accounting, and reporting obligations.
Verify Research Use Only confirmations consistent with applicable U.S. regulations.
Carry out fraud, sanctions, and identity checks where required by law or our payment processors.

2.4 Marketing & Promotional Communications

We may send marketing emails, newsletters, promotions, or other non-transactional communications only if you affirmatively opt in — for example, by subscribing through a sign-up form on the Website, checking an opt-in box during account creation or checkout, or otherwise providing explicit consent.

Providing your email address for account creation, order confirmation, or other transactional purposes does not, on its own, constitute consent to receive marketing communications.

You may withdraw your consent at any time by clicking the “Unsubscribe” link in any marketing email. Unsubscribing from marketing emails does not affect your ability to receive transactional communications such as order confirmations, shipping updates, or account notices.

We do not sell your personal information for money, and we do not provide it to third parties so that they can market their own unrelated products to you. Our use of advertising and measurement technologies (Section 6.2) may, however, constitute “sharing” for cross-context behavioural advertising under California law — you can opt out at any time, see Sections 6.3 and 4.6.

2.5 Record Keeping

Maintain accurate business records as required by tax, accounting, and consumer-protection laws.

2.6 Fraud Prevention & Access Control

We use automated and manual fraud-prevention tools to detect and prevent unauthorized, fraudulent, or abusive activity on the Website. These tools may analyze IP address, device characteristics, account activity, payment-history signals, and chargeback behavior to help secure our services.

If our fraud-prevention systems identify behavior that may indicate high-risk or fraudulent activity, we may temporarily or permanently restrict access to features, require identity verification, or decline to process an order to protect our business and customers.

Categories of data used for fraud-prevention decisions:

Device and browser information
IP address and geographic signals
Account activity and login patterns
Payment verification results
Chargeback or dispute history
Prior fraud-related events or attempted abuse

Right to access and correct. California residents may request access to the information used in fraud-prevention decisions and may request correction of inaccurate data.

Right to appeal a restriction or blacklisting. If you believe a fraud-prevention decision or access restriction was made in error, you may appeal by contacting us at hello@nextlevelpharm.com. We will review your request, investigate, and determine whether access can be restored.

Retention. Fraud-prevention and blacklist data is retained only as long as reasonably necessary to detect, prevent, and protect against fraudulent or abusive activity, and to comply with legal, regulatory, and accounting obligations — typically 12 to 48 months, depending on severity.

2.7 Other Lawful Purposes

For any other specific purpose related to providing, securing, or improving our products and services, where we have a legitimate basis to do so.

We do not sell your personal information for money. We disclose information to third parties only for the limited, specific purposes described below.

3.1 Service Providers

We share information with vetted third-party service providers who perform services on our behalf, including:

Payment processors and acquiring banks that process card or alternative-payment transactions.
Identity verification and fraud-prevention providers.
Shipping and logistics partners (e.g., USPS and other carriers) and our shipping-management platform (ShipStation) for order delivery and tracking.
Email and communications platforms (Omnisend, Mailjet) for sending order updates and opt-in communications.
Web hosting and infrastructure providers that host our servers, databases, and backups.
Analytics, advertising and measurement providers — Google (Google Tag Manager, Google Analytics, Google Ads and Google Merchant Center), Meta (Facebook and Instagram), TikTok, Microsoft (Clarity) and Automattic (Jetpack site statistics) — see Section 6.2 for what each of these does.
Marketing-attribution provider — Profit Geeks Analytics (operated at trytrakt.com), which records website visits and completed orders so that we can tell which marketing activity produced a sale.
Affiliate-program platform (GoAffPro), which records referral clicks and completed orders so that referring partners can be credited.
Social login providers (Facebook Login), where you choose to sign in using an existing social media account.

What we send for advertising and attribution. So that we can tell which advertisements and referral links produce sales, we transmit order information to the providers listed above:

To Google and Meta we send an order identifier, the order value and currency, the products ordered, and customer identifiers — email address, phone number, name and postal details — in hashed (irreversible) form, together with advertising click identifiers and your IP address and browser user agent. Hashing means the recipient cannot read the underlying values.
To our attribution provider (Profit Geeks Analytics) we send the order details — including the products ordered, quantities, totals and any coupon used — together with your name, email address, phone number, and billing city, state, postal code and country, so that orders can be matched to the marketing source that produced them.
We never transmit your card number, card security code, or bank credentials to any analytics, advertising or attribution provider. Payment credentials are handled only by our payment processors.

Service providers may use your information only as needed to provide the services we have contracted. The analytics, advertising and attribution providers listed above also process the information they receive in accordance with their own privacy policies, and we encourage you to review them.

3.2 Order Fulfillment

We share your name, shipping address, phone number (when required by the carrier), and order details with postal and logistics partners so they can deliver your order and provide tracking updates.

3.3 Fraud Prevention & Security

We may share information with fraud-prevention partners, payment processors, and security vendors to detect, investigate, or prevent fraud, unauthorized access, chargeback abuse, or other suspicious activity.

3.4 Legal Compliance

We may disclose information when required to comply with applicable laws, legal process, government requests, court orders, or to enforce our Terms and Conditions.

3.5 Business Transfers

If we undergo a business transaction such as a merger, acquisition, financing event, reorganization, or sale of assets, your information may be transferred as part of that transaction, subject to applicable confidentiality obligations.

We do not permit third parties to use your information for their own marketing purposes.

4. Your Privacy Rights

We are a United States business and our products and services are directed to customers in the United States. Depending on where you live, you may have specific privacy rights — in particular under the California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA) and comparable state privacy laws, including those of Virginia, Colorado, Connecticut, Utah and Texas.

As a matter of policy, we extend the core rights described below — access, correction, deletion, and opt-out of marketing and advertising measurement — to all of our customers, regardless of where they live. You may ask us for any of them at any time by emailing hello@nextlevelpharm.com.

4.1 Access & Correction

You may request access to personal data we hold about you and request corrections if any information is inaccurate.

4.2 Data Deletion

You may request that we delete personal information we hold about you, subject to legal retention requirements (see Section 8). Submit deletion requests via hello@nextlevelpharm.com.

4.3 Opt-Out of Marketing

You may unsubscribe from marketing communications at any time using the “Unsubscribe” link in marketing emails, or by contacting us directly.

4.4 Cookies & Tracking Preferences

See Section 6 for details on how to manage cookies and tracking technologies.

4.5 General Privacy Requests

To submit any privacy-related request, contact us at hello@nextlevelpharm.com. Requests should describe the right you are exercising and include enough information for us to verify your identity.

4.6 Additional Rights for California Residents (CCPA / CPRA)

If you are a California resident, you have the following rights:

Right to Know / Access. You may request that we disclose the categories and specific pieces of personal information we collect, the sources from which it is collected, the purposes for which we use it, and the categories of third parties with whom we share it.

Right to Delete. You may request deletion of personal information, subject to legal exceptions (e.g., security, fraud prevention, legal compliance, completing a transaction).

Right to Correct. You may request correction of inaccurate personal information.

Right to Opt-Out of Sale or Sharing. We do not sell your personal information for money. However, our use of the advertising and measurement technologies described in Section 6.2 may constitute “sharing” for cross-context behavioural advertising as that term is defined under the CPRA. You may opt out at any time by emailing hello@nextlevelpharm.com with the subject line “Do Not Sell or Share My Personal Information,” or by using any of the methods listed in Section 6.3, including a Global Privacy Control signal sent by your browser. We will not discriminate against you for exercising this right.

Right to Limit Use of Sensitive Personal Information. You may request that we limit our use and disclosure of sensitive personal information (such as payment information, geolocation, and login credentials) to those uses reasonably expected by the average consumer.

Right to Opt-Out of Automated Decision-Making. Where we use automated decision-making technologies that materially affect your access to services (such as fraud-prevention or access-restriction systems), you may request meaningful information about the logic involved and opt out where legally required.

Right to Non-Discrimination. We will not discriminate against you for exercising any of your privacy rights — for example, by denying goods or services, charging different prices, or providing a different level of quality.

Submitting Requests. Submit requests to hello@nextlevelpharm.com. We are an online-only business and therefore are exempt from the toll-free telephone requirement under California law.

Verification. We may need to verify your identity before processing your request, which may require matching information you provide with information we already maintain.

Response Timeframe. We will respond to verifiable consumer requests within 45 days, with the option to extend by an additional 45 days where reasonably necessary, as permitted by law.

Authorized Agents. You may designate an authorized agent to submit requests on your behalf, consistent with California law. We may require proof of authorization.

5. Data Security Measures

We implement industry-standard security measures to protect your personal information from unauthorized access, loss, alteration, or misuse:

Encryption in transit — all traffic to the Website is served over HTTPS/TLS.
Encryption at rest — sensitive systems and database backups are stored on secured, access-restricted servers.
Access controls — only authorized personnel have administrative access to systems containing personal information; access is reviewed periodically.
Hardening — server-level firewalls, brute-force protection, and security headers are in place to reduce attack surface.

However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

5.1 Data Breach Notification

In the event of a data breach involving unencrypted personal information, we will notify affected individuals in the most expedient time possible and without unreasonable delay, consistent with California Civil Code § 1798.82 and other applicable laws.

Required content of a breach notice. If notification is required, our notice will include, to the extent known at the time:

The types of personal information involved.
A general description of the incident.
The steps we are taking in response.
Any protective measures you may take.
Whether law enforcement has been notified.
Our contact information for further inquiries.
Where applicable, contact information for the major credit reporting agencies.

Notification to the California Attorney General. If a breach affects more than 500 California residents, we will notify the California Attorney General as required by law.

Wyoming residents. As a Wyoming-registered entity, we also comply with the Wyoming Data Breach Notification statute (Wyo. Stat. § 40-12-501 et seq.), which requires notification to Wyoming residents whose unencrypted personal information has been acquired without authorization.

Method of notification. We may notify affected individuals by email, written notice, prominent website notice, or substitute notice if direct notice is not feasible.

Law-enforcement exception. Notification may be delayed if a law-enforcement agency determines that immediate notification would impede an investigation. In such cases, we will provide notice as soon as the agency determines that notification no longer compromises the investigation.

6. Cookies & Tracking Technologies

We use cookies, pixels, and similar tracking technologies on the Website. We distinguish between essential cookies (required for the Website to function) and non-essential cookies (used for analytics, performance measurement, and advertising).

Essential cookies are necessary for core functionality:

Website security and load balancing.
Shopping-cart operation.
Checkout and payment processes.
Account login and authentication.
Site stability and session continuity.

You may disable essential cookies through your browser settings, but parts of the Website (including checkout) may not function correctly.

6.2 Analytics, Advertising & Measurement Technologies

We use analytics, performance-measurement, session-analysis and advertising technologies to understand how the Website is used and to measure the effectiveness of our marketing. Some of these run in your browser (cookies, pixels and scripts) and some operate server-side, meaning information about a completed order is sent from our server rather than from your browser. The technologies we currently use are:

Google — Google Tag Manager, Google Analytics, and Google Ads conversion measurement (including server-side upload of completed orders). Google Merchant Center receives product catalogue information, not customer information.
Meta (Facebook and Instagram) Pixel — advertising measurement, audience reporting and remarketing, including a server-side connection that reports completed orders.
TikTok Pixel — advertising measurement and audience reporting.
Microsoft Clarity — we partner with Microsoft Clarity to capture how you use and interact with the Website through behavioural metrics, heatmaps and session replay, so that we can find and fix usability problems. This data is captured using first- and third-party cookies and similar technologies. For information about how Microsoft handles this data, see the Microsoft Privacy Statement.
Profit Geeks Analytics (trytrakt.com) — our marketing-attribution provider. It sets a persistent visitor identifier and a session identifier so that a later order can be connected to the marketing activity that first brought you to the Website.
Omnisend — engagement measurement (opens and clicks) for email you have opted in to receive, and on-site sign-up forms.
GoAffPro — a referral cookie set when you arrive through an affiliate link, so the referring partner can be credited for your order.
Jetpack (Automattic) — aggregate site statistics.

These technologies are active when you visit the Website. We are a United States business and our products are offered to customers in the United States; applicable U.S. privacy law does not require prior opt-in consent for this category of technology. You can opt out at any time — see Section 6.3.

6.3 How to Opt Out or Limit Tracking

You can limit or stop non-essential tracking in any of the following ways:

Browser controls — most browsers let you block or delete cookies, and several block advertising trackers by default. Blocking essential cookies (Section 6.1) may prevent login and checkout from working.
Platform advertising settings — you can manage advertising personalisation directly with each platform, including Google Ad Settings (myadcenter.google.com), Meta Ad Preferences, and TikTok ad settings.
Industry opt-out tools — optout.aboutads.info (Digital Advertising Alliance) and optout.networkadvertising.org (Network Advertising Initiative).
Global Privacy Control — where your browser or extension transmits a GPC opt-out signal, we treat it as a request to opt out of advertising-related sharing for that browser.
Contact us — email hello@nextlevelpharm.com and we will action any opt-out available to us, including removing you from advertising audiences and deleting analytics identifiers associated with your account.
Marketing email — unsubscribe using the link in any marketing message (see Section 2.4).

You may also ask us, at any time, what information we hold about you, where it came from, and who we have shared it with — see Section 4.

7. International Data Transfers

Next Level Pharm operates in the United States. While we primarily target the U.S. market, individuals located outside the U.S. may still access the Website. As a result, personal information may be transferred to and processed in the United States or in other countries where our service providers operate, which may have data-protection laws that differ from those of your country.

Where such transfers occur, we apply appropriate safeguards — including contractual commitments with our service providers and the security measures described in Section 5 — designed to ensure that your personal information is protected in a manner consistent with applicable privacy laws.

8. Data Retention Policy

We retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. To meet data-minimization and retention expectations, we apply the following schedule:

Category	Retention Period
Transactional & order information (invoices, fulfillment data)	7 years, to comply with tax, accounting, and regulatory requirements
Customer-support correspondence	2 years, to maintain service history and resolve disputes
Fraud-prevention & security data	12–48 months, depending on severity of risk and operational needs
Marketing consent status	Retained until you withdraw your consent
Unsubscribed email addresses	Retained indefinitely for suppression-list / anti-spam compliance
Analytics & website activity data	12–24 months, depending on operational needs
Server & security logs	30–90 days
Account information	Duration of the account + 12 months after closure (to address fraud, misuse, or chargebacks)

When a retention period expires, or when personal information is no longer required for the purposes described above, we securely delete, anonymize, or aggregate the information in accordance with applicable law.

9. Third-Party Links & External Websites

The Website may contain links to third-party websites (for example, payment processors, social media platforms, or carrier tracking pages). We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policy of any external website you visit.

10. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in regulations, technologies, or business practices.

Updates will be posted on this page with the revised “Effective Date.”
Changes take effect when the updated policy is posted. Where advance notice of a material change is required by applicable law, we will provide it by email or by a notice on the Website.
Material changes will not apply retroactively. Continued use of the Website after the effective date of the updated policy will be subject to the then-current version.

11. User Verification & Account Security

Because our products are sold for Research Use Only, certain compliance protocols apply.

You must confirm you are 21 years of age or older and agree to our Research Use Only policy before purchasing.
Account creation and checkout may require verification steps such as email confirmation, name verification, or OTP (one-time password) verification by phone, to prevent misuse and protect your account from unauthorized access.
When you create an account you must confirm that you are 21 or older and that products are purchased for Research Use Only. Account creation and purchases are subject to this Privacy Policy and to our Terms of Service. Passively browsing the Website does not, on its own, constitute agreement to those terms.

12. Children’s Privacy

The Website is not intended for individuals under 21 years of age. We do not knowingly collect personal information from anyone under 21. If you believe a minor has provided us with personal information, please contact us at hello@nextlevelpharm.com and we will take appropriate steps to delete such information.

13. Contact Us

For any privacy-related questions, requests, or appeals, contact us at:

Legal entity: Next Level Pharm LLC
Email: hello@nextlevelpharm.com
Phone: 866-680-0484
Mailing Address: Next Level Pharm LLC, 30 N Gould St, Suite N, Sheridan, WY 82801, United States

We will respond to verifiable privacy requests within the timeframes required by applicable law.

End of Privacy Policy.