Privacy policy

Tolvane Privacy Policy

Last updated: October 27, 2026

Saaf Nutrition LLC, which operates the Tolvane Labs brand (“Tolvane,” “we,” “us,” or “our”), operates this store and website, including all related information, content, features, tools, products, and services, to provide you, the customer, with a curated shopping experience (the "Services"). This Privacy Policy describes how we collect, use, and disclose your personal information when you visit our website, use our Services, make a purchase or other transaction, or otherwise communicate with us.

Please read this Privacy Policy carefully. By using and accessing our Services, you acknowledge that you have read this Privacy Policy and understand how we collect, use, and disclose your information as described in this policy.

Personal Information We Collect or Process

When we use the term "personal information," we refer to information that identifies or can reasonably be linked to you or another person. Personal information does not include information collected anonymously or de-identified so that it cannot identify or reasonably be linked to you.

Depending on how you interact with our Services, where you live, and as permitted or required by applicable law, we may collect or process the following categories of personal information:

• Contact details: Your name, billing address, shipping address, phone number, and email address.

• Financial information: Payment card details, financial account information, transaction details, payment method, payment confirmations, and other payment-related information.

• Account information: Your username, password, security questions, preferences, and settings.

• Transaction information: Products you view, add to your cart or wishlist, purchase, return, exchange, or cancel, as well as your transaction history.

• Communications with us: Information you provide when contacting our customer support team or otherwise communicating with us.

• Device information: Information about your device, browser, network connection, IP address, and other unique identifiers.

• Usage information: Information about your interactions with our Services, including how and when you navigate our website.

Personal Information Sources

We may collect personal information from the following sources:

• Directly from you: When you create an account, visit or use our Services, communicate with us, or otherwise provide personal information.

• Automatically through our Services: From your device when you use our website, including through cookies and similar technologies.

• From our service providers: When third-party providers collect or process personal information on our behalf.

• From our partners or other third parties: When information is provided to us for legitimate business purposes, subject to applicable law.

How We Use Your Personal Information

Depending on how you interact with us and which Services you use, we may use your personal information for the following purposes:

• Providing, Tailoring, and Improving Our Services: To process payments, fulfill orders, remember your preferences, send account notifications, manage customer accounts, arrange shipping, handle returns and exchanges, enable product reviews, recommend relevant products, and improve your shopping experience.

• Marketing and Advertising: To send promotional communications by email, text message, or postal mail and to display advertisements for products or services based on your previous purchases, cart activity, and other interactions with our website, subject to your preferences and applicable law.

• Security and Fraud Prevention: To authenticate accounts, support secure transactions, detect and investigate suspected fraud or unlawful activity, protect our customers, and safeguard our Services. You are responsible for keeping your account credentials secure and should not share your username, password, or other access details with others.

• Communicating with You: To respond to customer inquiries, provide customer support, communicate about orders, and maintain our business relationship with you.

• Legal Reasons: To comply with applicable laws, respond to valid legal requests, participate in legal proceedings, enforce our terms and policies, and protect our rights and the rights of our customers.

How We Disclose Personal Information

We may disclose your personal information to third parties for legitimate business purposes, subject to this Privacy Policy and applicable law. These circumstances may include:

• Service Providers: We may share information with vendors and service providers that help us operate our business, including payment processors, IT providers, data analytics services, customer support providers, cloud storage providers, fulfillment partners, and shipping companies.

• Business and Marketing Partners: We may share information with advertising and marketing partners to provide marketing services and display advertisements. These partners may process your information according to their own privacy notices. Depending on where you live, you may have the right to opt out of certain data sharing or targeted advertising. You can exercise applicable rights through our [Data Sharing Opt-Out Page URL].

• At Your Direction or With Your Consent: We may disclose information when you request or authorize us to do so, including when arranging product delivery or using social media integrations.

• Affiliates and Business Partners: We may share information with affiliated businesses where applicable and permitted by law.

• Legal and Business Transactions: We may disclose information in connection with a merger, acquisition, bankruptcy, legal obligation, valid government request, enforcement of our policies, or protection of our business, customers, and other parties.

Service Providers and Third-Party Processing

We may use third-party service providers to support our website, process transactions, fulfill orders, manage customer communications, analyze website activity, and provide other business services.

These providers may process personal information as necessary to perform services on our behalf. Depending on the services involved, your information may be processed or stored in countries other than your country of residence.

We take reasonable steps to work with service providers that handle personal information appropriately. However, third-party services may have their own privacy policies and practices. We encourage you to review the applicable privacy notices when using their services.

Third-Party Websites and Links

Our Services may contain links to websites or online platforms operated by third parties. If you visit a website that is not affiliated with or controlled by Tolvane, you should review its privacy and security policies and other applicable terms.

We are not responsible for the privacy, security, accuracy, completeness, or reliability of information on third-party websites.

Information you share in public or semi-public spaces, including third-party social networking platforms, may be visible to other users and may be used by those platforms or other parties according to their own policies. Including a third-party link on our website does not necessarily imply endorsement of that website or its operators.

Children's Data

Our Services are not intended for children, and we do not knowingly collect personal information from children under the age of majority in their jurisdiction.

If you are a parent or guardian and believe that a child has provided us with personal information, please contact us using the contact details below to request its deletion.

Where required by applicable law, we will handle children's personal information in accordance with the relevant legal requirements.

Security and Retention of Your Information

We take reasonable measures to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. However, no security measure is perfect or impenetrable, and we cannot guarantee absolute security. Information transmitted over the internet may not always be secure.

We recommend that you avoid using unsecured channels to communicate sensitive or confidential information to us.

How long we retain your personal information depends on several factors, including whether the information is needed to maintain your account, provide our Services, fulfill orders, comply with legal obligations, resolve disputes, or enforce our agreements and policies.

Your Rights and Choices

Depending on your location and applicable law, you may have some or all of the following rights regarding your personal information. These rights may be subject to exceptions and limitations.

• Right to Access or Know: You may have the right to request access to personal information we hold about you.

• Right to Delete: You may have the right to request deletion of personal information we maintain about you.

• Right to Correct: You may have the right to request correction of inaccurate personal information.

• Right to Data Portability: You may have the right to receive a copy of your personal information and, in certain circumstances, request that it be transferred to another party.

• Right to Opt Out of Sale, Sharing, or Targeted Advertising: Depending on applicable law, you may have the right to opt out of certain sales or sharing of personal information or its processing for targeted advertising. You can exercise applicable rights through our [Data Sharing Opt-Out Page URL].

• Managing Communication Preferences: You may unsubscribe from promotional emails at any time using the unsubscribe option provided in those emails. Even if you opt out of marketing communications, we may continue sending non-promotional messages relating to your account, purchases, or orders.

Where supported and required by applicable law, we may recognize the Global Privacy Control (GPC) signal as a request to opt out of certain data sharing or targeted advertising. You can learn more at https://globalprivacycontrol.org/.

If you reside in the United Kingdom or European Economic Area, you may also have the following rights, subject to applicable law:

• Right to Object to or Restrict Processing: You may have the right to request that we stop or restrict the processing of your personal information for certain purposes.

• Right to Withdraw Consent: Where we rely on your consent to process personal information, you may withdraw that consent. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

To exercise your rights, please contact us using the details provided below. We may need to verify your identity before processing your request, as permitted or required by law.

Where permitted by applicable law, you may authorize another person to submit a request on your behalf. We may require proof of authorization and may also need to verify your identity directly.

We will respond to valid requests within the timeframes required by applicable law. We will not unlawfully discriminate against you for exercising your privacy rights.

Complaints

If you have concerns or complaints about how we process your personal information, please contact us using the details provided below.

Depending on where you live, you may have the right to appeal our decision or submit a complaint to your local data protection authority. Residents of the European Economic Area can find information about relevant supervisory authorities at https://edpb.europa.eu/about-edpb/about-edpb/members.

International Transfers

Your personal information may be transferred to, stored in, or processed in countries other than the country in which you reside.

Where required by applicable law, we will use appropriate safeguards for international transfers of personal information. For transfers from the European Economic Area or the United Kingdom, these safeguards may include the European Commission's Standard Contractual Clauses or equivalent mechanisms recognized by the relevant authorities, unless another lawful transfer mechanism applies.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business practices, operational requirements, or legal and regulatory obligations.

When we make changes, we will publish the revised policy on our website, update the "Last updated" date, and provide notice where required by applicable law.

Contact

If you have questions about this Privacy Policy, our privacy practices, or wish to exercise your privacy rights, please contact us at:

Brand: Tolvane Labs

Legal entity: Saaf Nutrition LLC

Email: hello@tolvanelabs.com

Business address: 1309 Coffeen Avenue, STE 1200, Sheridan, WY 82801, United States

For applicable data protection laws, Saaf Nutrition LLC is the data controller of your personal information where required by law.