Privacy policy
Last Updated: July 28, 2026
Effective Date: July 28, 2026
1. Privacy Commitment
This Privacy Policy provides notice of our privacy practices and is provided for transparency and informational purposes. UNI NUTRITION INC. (d/b/a "Hexabiome", "we", "our", or "us") respects your privacy and is committed to handling your personal information responsibly.
This Privacy Policy explains how we collect, use, disclose, and protect information when you:
• Visit our website
• Purchase our products
• Subscribe to our services
• Contact customer support
• Interact with our communications
Our website is https://hexabiome.com (the "Site"). We encourage you to review this Privacy Policy periodically for information about our privacy practices.
2. About Hexabiome
Hexabiome is operated by UNI NUTRITION INC., a corporation incorporated under the laws of the Province of British Columbia, Canada. UNI NUTRITION INC. currently operates Hexabiome from Canada and does not maintain a registered U.S. corporate entity; the United States address listed on our website is a mailing address used for customer correspondence only. If Hexabiome operates through additional legal entities in the future, applicable entity information and privacy responsibilities will be updated accordingly.
Applicable privacy law. As a British Columbia corporation that collects personal information from Canadian and U.S. consumers, we operate under the Personal Information Protection Act (BC PIPA) and the federal Personal Information Protection and Electronic Documents Act (PIPEDA). We also comply with applicable U.S. state privacy laws that may apply to our processing activities, including privacy laws such as those enacted in California (the California Consumer Privacy Act as amended by the California Privacy Rights Act, CCPA/CPRA), Colorado, Connecticut, Virginia, Utah, Oregon, and Texas, and other jurisdictions where applicable, as well as consumer health data privacy laws, including Washington's My Health My Data Act (MHMDA), where applicable. Nothing in this Privacy Policy limits any privacy rights or consumer protections available to you under applicable law.
California residents should review Section 12 (California Privacy Rights). Residents of other U.S. states with applicable privacy laws should review Section 11 (Your Privacy Rights).
3. Information We Collect
3.1 Information You Provide
Account information: name, email address, phone number, and account details.
Order information: shipping address, billing information, order history, and purchase records.
Subscription information (Subscribe & Save): subscription preferences, subscription status, selected subscription plan, billing frequency, renewal date, subscription history, skipped, paused, or cancelled subscriptions, renewal information, cancellation requests, and subscription communications and preferences.
Customer support information: messages, requests, order-related information, and communication history when you contact us.
Marketing information: email address and communication preferences, if you choose to receive marketing communications.
Voluntarily provided information: responses to surveys, questionnaires, and product feedback, which may include information about your product preferences, supplement-related interests, wellness goals, or feedback about your experience with our products.
We do not require consumers to provide health information to purchase Morning Clarity. Certain information you voluntarily provide, including wellness goals, supplement preferences, or product experiences, may be considered consumer health data under certain privacy laws depending on the context. For additional protections that may apply, please review our Consumer Health Data Privacy Notice (Section 13).
Social media: if you interact with us on social media or post on our social media pages, we may collect publicly available information such as your username and any content you have made public. The social media platform's own privacy policy governs their use of your information.
If you provide us with personal information relating to other individuals, you represent that you have the authority to do so.
Certain personal information is necessary to use our Site and purchase our products. If you choose not to provide it, you may not be able to complete a purchase, create an account, or access certain features of our Site.
3.2 Information Collected Automatically
When you visit our Site, we and our partners may automatically collect: IP address, browser type, device information, operating system, pages visited, and website interactions, through cookies and similar technologies.
We may also collect referral URLs, advertising interactions, shopping behavior, cart activity, product page interactions, and approximate location derived from your IP address. Please review our Cookie Policy for details.
4. How We Use Information
Provide products and services: process orders, deliver products, and provide customer support.
Manage subscriptions: process recurring orders, send renewal notices, manage subscription preferences, and provide subscription-related support.
Operate our business: process payments, maintain accounts, prevent fraud, maintain website security.
Communicate with you: order confirmations, shipping updates, subscription notifications, customer service responses.
Improve our products and services: analyze website usage, improve customer experience, evaluate marketing performance.
Marketing: where permitted by law and based on your preferences, send product updates, educational content, and promotional communications. You may unsubscribe at any time (see Section 7).
We may also use information about your shopping activity — including items added to your cart — to send cart reminder messages. Cart reminders may be delivered by email or other communication channels where permitted by applicable law and based on your preferences. This information is used solely for cart reminders and is not shared with third parties except service providers who support message delivery.
5. How We Share Information
Hexabiome does not sell personal information for monetary consideration. However, certain disclosures of information to advertising partners may constitute "sharing" under California privacy law.
Service providers: vendors that help us operate our business and process information on our behalf. Depending on the service, service providers may include:
• Shopify — ecommerce platform, checkout, customer accounts, orders, and subscription management;
• payment processors — payment authorization and transaction processing;
• fulfillment and shipping providers — order fulfillment and delivery;
• Klaviyo — email marketing and customer communications;
• analytics providers — website analytics and performance measurement;
• advertising platforms — marketing measurement and targeted advertising.
Analytics and advertising providers: we may use analytics and advertising technologies, including Shopify Analytics, Google Analytics 4, Meta Pixel, and similar technologies, where implemented on our Site, to help us understand website performance and marketing effectiveness. For purposes of California privacy law, certain disclosures to advertising partners may be considered "sharing" even when no money is exchanged. See our Cookie Policy for details and opt-out options.
Legal requirements: we may disclose information when necessary to comply with legal obligations, respond to lawful requests, protect rights and safety, or prevent fraud.
Business transfers: if UNI NUTRITION INC. is acquired by or merges with another organization, or if substantially all of our assets are transferred, personal information about our users may be included among the transferred assets.
1. Cookies & Tracking
We use cookies and similar technologies to enable website functionality, understand website usage, improve services, and measure marketing performance. These technologies may allow third parties to collect information about your online activities over time and across different websites. Where required, we provide mechanisms to manage non-essential cookie preferences. For details and choices, see our Cookie Policy.
7. Marketing Communications
You may control marketing communications at any time by using the unsubscribe link in any marketing email or by contacting support@hexabiome.com. Transactional and service communications (such as order and subscription messages) may continue when necessary and cannot be opted out of while you have an active account.
SMS: Hexabiome does not currently operate an SMS or MMS marketing program. If Hexabiome introduces SMS or MMS communications, we will provide applicable disclosures, consent mechanisms, and SMS terms before sending such communications.
8. Data Retention
We retain personal information only as long as reasonably necessary to:
• Complete and support your transactions;
• Maintain your account and transaction records;
• Meet our legal, contractual, or regulatory obligations; and
• Resolve disputes and enforce our agreements.
Subscription records, transaction records, and customer support records may be retained for longer periods where necessary for accounting, tax, legal compliance, fraud prevention, or dispute resolution purposes.
When personal information is no longer needed, we take reasonable steps to delete or anonymize it. Where immediate deletion is technically infeasible, we restrict further processing of the data until deletion is possible.
9. Security
We maintain reasonable administrative, technical, and organizational safeguards designed to protect personal information against accidental or unauthorized access, use, alteration, or disclosure. We require service providers that process personal information on our behalf to implement reasonable safeguards appropriate to the nature of the information processed.
However, no online transmission or storage system can be guaranteed completely secure. Please avoid including sensitive personal information in email communications to us.
10. International Processing
Because Hexabiome operates from Canada and uses service providers located in different jurisdictions, your information may be processed outside your country, including in the United States. Service providers may process information in Canada, the United States, and other jurisdictions where they operate. These countries may have different data protection laws than your jurisdiction. Where required, we use appropriate safeguards for cross-border processing of personal information.
11. Your Privacy Rights
Depending on where you live, you may have rights regarding your personal information, including:
12. The right to know what personal information we have collected about you and why;
13. The right to request a copy of the specific personal information collected about you;
14. The right to request deletion of your personal information, subject to certain exceptions;
15. The right to request correction of inaccurate personal information;
16. The right to opt out of the sale or sharing of personal information for targeted advertising; and
17. The right not to be discriminated against for exercising your privacy rights.
The availability of these rights depends on your location and applicable privacy laws. Residents of states with applicable privacy laws may have certain rights depending on their jurisdiction and applicable legal requirements.
Nevada residents: Hexabiome does not sell personal information as defined under Nevada law.
Washington State residents: please see Section 13 (Consumer Health Data Privacy Notice) for rights regarding "consumer health data" under Washington's My Health My Data Act.
To submit a request, email support@hexabiome.com with "Privacy Request" in the subject line. We will verify your identity before processing your request and respond within the time period required by applicable law. In some cases, we may not be able to fulfill your request in whole or in part, and we will notify you of the reason.
Right to appeal. Certain jurisdictions provide a right to appeal our decision regarding a privacy request. Where required by applicable law, instructions for submitting an appeal will be provided with our response.
Subscription customers should also review our Subscription Policy for information regarding recurring billing, subscription management, and cancellation procedures.
13. California Privacy Rights (CCPA/CPRA)
Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (the "CCPA"), California residents have the following rights:
14. Right to know: disclosure of the categories and specific pieces of personal information we have collected, the purposes for collection, and the categories of third parties with whom it has been shared.
15. Right to access: receive a portable copy of your personal information.
16. Right to delete: request deletion of your personal information, subject to certain exceptions (e.g., completing your transaction, legal obligations).
17. Right to correct: request correction of inaccurate personal information.
18. Right to opt out of sharing: opt out of sharing your personal information for targeted advertising, as defined by the CCPA.
19. Right to non-discrimination: we will not discriminate against you for exercising your CCPA rights.
Personal information collected in the last 12 months:
• Identifiers — Examples: name, email, IP address, device ID, online identifier. Shared for targeted advertising: Yes — analytics and advertising partners.
• Commercial information — Examples: order history, subscription details, purchase records. Shared for targeted advertising: Yes — analytics and advertising partners.
• Internet / network activity — Examples: browsing history, Site interaction, ad engagement. Shared for targeted advertising: Yes — analytics and advertising partners.
• Communication information — Examples: customer support inquiries. Shared for targeted advertising: No.
• Financial information — Examples: payment card data (processed by payment provider only). Shared for targeted advertising: No.
• Sensitive personal information (where applicable under California law) — Examples: information voluntarily provided by you that may fall within legally defined sensitive personal information categories. Shared for targeted advertising: No.
Hexabiome does not sell personal information. However, we share certain identifiers, commercial information, and internet activity data with advertising and analytics partners (Google Analytics 4, Meta Pixel, Shopify Analytics), which may constitute "sharing" for purposes of targeted advertising under the CCPA — even where no money changes hands.
Sensitive personal information. We use sensitive personal information only for purposes permitted under applicable law, and not for purposes that would give rise to a right to limit the use of sensitive personal information under the CCPA.
To exercise your California privacy rights: email support@hexabiome.com. You may also designate an authorized agent to submit requests on your behalf; to do so, provide written authorization and both you and your agent's identity verification. We will confirm receipt of your request and respond within 45 days, extendable by an additional 45 days with written notice.
To opt out of sharing for targeted advertising: use the "Do Not Sell or Share My Personal Information" link on our Site, or email support@hexabiome.com.
California residents may also request information about whether we have disclosed personal information to third parties for their direct marketing purposes under California's "Shine the Light" law by contacting support@hexabiome.com.
15. Consumer Health Data Privacy Notice
Certain information you voluntarily provide — such as responses about your wellness goals or product experience — may constitute consumer health data under applicable laws, including Washington's My Health My Data Act. Please review our separate Consumer Health Data Privacy Notice for details regarding information categories, uses, sharing, and your rights.
The Consumer Health Data Privacy Notice applies only to information that falls within applicable consumer health data definitions. It does not expand the categories of information considered health data under all laws.
16. Children's Privacy
Our Services are intended for users 18 years of age or older, as stated in our Terms of Service. Our Site is not directed to children, and we do not knowingly collect personal information from children under 16. If you believe we have inadvertently collected information from a child under 16, please contact us at support@hexabiome.com and we will promptly delete it.
17. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will post any changes on this page and, for material changes, provide more prominent notice (which may include an email notification). The updated version will include a revised "Last Updated" date. We encourage you to review the updated Privacy Policy. Your continued use of the Site after an updated Privacy Policy is posted does not affect any rights you may have under applicable law.
18. Contact Us
For all privacy-related inquiries and data rights requests, please visit our Contact Us page (https://hexabiome.com/pages/contact), or email us at support@hexabiome.com. For privacy rights requests, please include "Privacy Request" in the subject line.
Cookie Policy
Please see our separate Cookie Policy for full information on how Hexabiome uses cookies and similar technologies, your choices, and how to opt out.