Privacy policy

Appendix C: Privacy Policy

 

Privacy Policy

Last Updated: March 23, 2026

Introduction

This Privacy Policy describes how Mars Health, Inc. (“we”, “us”, or “our”) collects, uses, and discloses your Personal Information (as defined below) when you visit or make a purchase from mengotomars.com (the “Site”) or otherwise communicate with us (collectively, the “Services”). For purposes of this Privacy Policy, “you” and “your” means you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected pursuant to this Privacy Policy.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you agree to the collection, use, and disclosure of your Personal Information as described in this Privacy Policy. If you do not agree to this Privacy Policy, please do not use or access any of the Services.

Changes to This Privacy Policy

We may update this policy from time to time, and we will provide notice of any such changes to the policy as required by law. The date the privacy policy was last updated is identified at the top of the page. We will notify you of changes to this policy by updating the “last updated” date and posting the updated policy on the Site. We may email or otherwise communicate reminders about this policy, but you should check our Site periodically to see the current policy and any changes we have made to it.

Personal Information Collected

We collect and use information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household (“Personal Information”). Personal Information does not include: (a) publicly available information, including from government records, through widely distributed media, or that the consumer made publicly available without restricting it to a specific audience; (b) lawfully obtained, truthful information that is a matter of public concern; or (c) deidentified or aggregated consumer information. The information that we collect and use varies depending on how you interact with us.  You may provide us with the following Personal Information:

·        Basic contact details including your name, address, phone number, email.

·        Order information including your name, billing address, shipping address, payment confirmation, email address, phone number.

·        Account information including your username, password, security questions.

·        Customer support information including the information you choose to include in communications with us, for example, when sending a message through the Services.

Personal Information Categories Chart

The chart below identifies the categories of Personal Information we collected from our consumers within the last 12 months.

Personal Information Category	Examples of Information Category	Is Category Collected?	Business Purpose Disclosures	Category of Third-Party Recipients
A: Identifiers	A real name, alias, postal address, unique personal identifier, online identifier, IP address, email address, account name, or other similar identifiers	Yes	Account processing; invoice and payment processing; product and services recommendations	Data Analytics Providers; advertising networks; Operating Systems & Platforms; Social Networks; Billing and Payment Processors
B: California Customer Records personal information categories	A name, signature, Social Security number, physical characteristics or description, address, telephone number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number. Some personal information included in this category may overlap with other categories	Yes	Account processing; invoice and payment processing; product and services recommendations	Data Analytics Providers; advertising networks; Operating Systems & Platforms; Social Networks; Billing and Payment Processors
C: Protected classification characteristics under California or federal law	Information such as age (for those 40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, and sex	Yes	N/A (internal use-only)	N/A
D: Commercial information	Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies	Yes	Product and services recommendations	Data Analytics Providers; advertising networks
E: Biometric Information	Behavioral characteristics, including imagery of the face and voice recordings.	No	N/A	N/A
F: Internet or other similar network activity	Browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement	Yes	Product and services recommendations	Advertising Networks; Data Analytics Providers; Operating Systems & Platforms
G: Geolocation data	IP address-based location information and GPS data	Yes	Product and services recommendations	Service providers; advertising partners; analytics partners and other parties you may authorize
H: Sensory data.	Audio, Electronic, visual, thermal, olfactory, or similar information	No	N/A	N/A
I: Professional or employment-related information	Current or past job history or performance evaluations.	Yes	Job application processing and background checks	Service providers and job application processors
J: Non-public education information	Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial Information, or student disciplinary records	Yes	Job application processing and background checks	Service providers and job application processors
K: Inferences drawn from other personal information	Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.	Yes	Product and services recommendations	Advertising Networks, Data Analytics Providers; Operating Systems & Platforms
Sensitive Personal Information	California: SSN, driver’s license, State ID, precise geolocation, racial or ethnic origin or genetic data Texas: data revealing mental or physical health diagnosis	Yes	N/A	N/A

Sensitive Personal Information

Sensitive personal information is a subtype of Personal Information consisting of the specific information categories listed in the chart above.

Sources of Personal Information

We obtain the categories of Personal Information listed above from the following categories of sources:

Directly from you, such as from the forms or other information you provide to the Company, including when you create an account, place an order, or contact customer support.

Indirectly from you, such as from your interactions with the Site, including browsing activity, cookies, and other automatic data collection technologies.

From our service providers, such as payment processors (Shop Pay, Paypal, Google Pay), hosting providers (Shopify), data analytics providers, customer service support providers, cloud storage providers, and fulfillment and shipping providers.

Payment Information

You may provide your credit card number and billing information when you make a purchase on our Site. When you place an order on our Site we will share your payment information with payment processors such as Shop Pay, Paypal, and Google Pay. These payment processors will use and process your payment information according to their own privacy policies.

Information We Automatically Collect

When you use our Services, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the website, and information about how you interact with the website. We refer to this automatically collected information as “Device Information”.

We collect Device Information using the following technologies:

·        “Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org. The information generated by the cookie about your use of the Site (including your IP address) will be transmitted to and stored by Google. To learn more about Google Analytics and how you can opt out, visit https://tools.google.com/dlpage/gaoptout. By using the website, you consent to the processing of data about you by Google.

·        “Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.

·        “Web beacons”, “tags”, and “pixels” are electronic files used to record information about how you browse the website.

We use both session Cookies (which expire once you close your web browser) and persistent Cookies (which stay on your device until you delete them). To make it easier for you to understand why we need them, the Cookies we use on our Site can be grouped into the following categories:

·        Strictly Necessary: These Cookies are necessary for the Site to work properly. They include any essential authentication and authorization Cookies for our Site.

·        Functional: These Cookies enable technical performance and allow us to remember the choices you make while browsing our Site, including any preferences you set. They also include sign-in and authentication Cookies and IDs that enable you to return without additional sign-in.

·        Performance/Analytics: These Cookies allow us to collect certain information about how you navigate the Site and Services running on your device. They help us understand which areas you use and what we can do to improve them.

·        Targeting: These Cookies are used to deliver relevant information related to our Site to an identified machine or other device (not a named or otherwise identifiable person) which has previously been used to visit our Site. Some of these types of Cookies on our Site are operated by third parties with our permission and are used to identify advertising sources that are effectively driving customers to our Site.

We use the Device Information that we collect to help us to improve and optimize our Site (for example, by generating analytics about how individuals browse and interact with the website, and to assess the success of our marketing and advertising campaigns).

Cookies can be controlled, blocked, or restricted through your web browser settings. Information on how to do this can be found within the Help section of your browser. All Cookies are browser specific. Therefore, if you use multiple browsers or devices to access websites, you will need to manage your Cookie preferences across these environments.

Find out how to manage Cookies on popular browsers:

·        Google Chrome, available at https://support.google.com/accounts/answer/61416?co=GENIE.Platform%3DDesktop&hl=en

·        Microsoft Edge, available at https://privacy.microsoft.com/en-us/windows-10-microsoft-edge-and-privacy

·        Mozilla Firefox, available at https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences

·        Microsoft Internet Explorer, available at https://support.microsoft.com/en-gb/windows/manage-cookies-in-microsoft-edge-view-allow-block-delete-and-use-168dab11-0753-043d-7c16-ede5947fc64d

·        Opera, available at https://www.opera.com/help/tutorials/security/privacy/

·        Apple Safari, available at https://support.apple.com/guide/safari/manage-cookies-sfri11471/mac

How We Use Personal Information

We may use and disclose the Personal Information we collect to advance the Company's business and commercial purposes, including to:

·        Providing Products and Services. We use your Personal Information to provide you with the Services in order to perform our contract with you, including to process your payments, fulfill your orders, to send notifications to you related to your account, purchases, returns, exchanges or other transactions, to create, maintain and otherwise manage your account, to arrange for shipping, facilitate any returns and exchanges and to enable you to post reviews.

·        Marketing and Advertising. We use your Personal Information for marketing and promotional purposes, such as to send marketing, advertising and promotional communications by email, text message or postal mail, and to show you advertisements for products or services. This may include using your Personal Information to better tailor the Services and advertising on our Site and other websites.

·        Security and Fraud Prevention. We use your Personal Information to detect, investigate or take action regarding possible fraudulent, illegal or malicious activity. If you choose to use the Services and register an account, you are responsible for keeping your account credentials safe. We highly recommend that you do not share your username, password, or other access details with anyone else. If you believe your account has been compromised, please contact us immediately.

·        Communicating with you. We use your Personal Information to provide you with customer support and improve our Services. This is in our legitimate interests in order to be responsive to you, to provide effective services to you, and to maintain our business relationship with you.

·        Meet our obligations and enforce our rights arising from any contracts with you, including for billing or collections, or to comply with legal requirements.

·        Fulfill the purposes for which you provided your Personal Information or that were described to you at collection, and as the California Consumer Privacy Act (CCPA) and Texas Data Privacy and Security Act (TDPSA) otherwise permit.

·        Improve our products or services, marketing, or customer relationships and experiences.

·        Administer our systems and conduct internal operations, including for troubleshooting, data analysis, testing, research, statistical, and survey purposes.

·        Engage in corporate transactions requiring review of consumer records, such as for evaluating potential mergers and acquisitions.

·        Comply with all applicable laws and regulations, exercise or defend the legal rights of the Company and its employees, affiliates, and customers, and respond to law enforcement requests and as required by applicable law or court order.

Sensitive Personal Information Use and Disclosure Purposes

We do not actively request or collect sensitive personal information (as defined in the chart above) to provide you with our services. However, you may, from time to time, choose to provide us with Personal Information that may be considered ‘sensitive personal information.’ When you provide us with sensitive personal information we will only use such data for the following statutorily approved reasons (Permitted SPI Purposes):

·        Performing actions that are necessary for our consumer relationship and that an average consumer in a relationship with us would reasonably expect;

·        Preventing, detecting, and investigating security incidents that compromise the availability, authenticity, integrity, or confidentiality of stored or transmitted Personal Information;

·        Defending against and prosecuting those responsible for malicious, deceptive, fraudulent, or illegal actions directed at the Company;

·        Short-term, transient use, such as non-personalized advertising shown as part of your current interactions with us; and

·        Activities required to verify or maintain the quality or safety of a product, service, or device that we own or control, or to improve, upgrade, or enhance such service or device.

Additional Categories or Other Purposes

We will not collect additional categories of Personal Information or use the Personal Information we collected for materially different, unrelated, or incompatible purposes without providing you notice. If required by law, we will also seek your consent before using your Personal Information for a new or unrelated purpose. We may collect, process, and disclose aggregated or deidentified consumer information for any purpose, without restriction. When we collect, process, or disclose aggregated or deidentified consumer information, we will maintain and use it in deidentified form and will not attempt to reidentify the information, except to determine whether our deidentification processes satisfy any applicable legal requirements.

Marketing Messages

You may sign up to receive email marketing messages from us. You may opt out at any time by clicking the ‘unsubscribe’ button in the emails you receive. Please note that even if you opt out of receiving the foregoing emails, we may still send you a response to any “Contact Us” request as well as administrative emails (for example, in connection with an account update request) that are necessary to facilitate your use of the Site.

How We Disclose Personal Information

We may disclose the Personal Information we collect to third parties for the business purposes described in this Privacy Policy. We only make these business purpose disclosures under written contracts that describe the purposes, require the recipient to keep the Personal Information confidential, prohibit using the disclosed information for any purpose except performing the contract, and meet the CCPA's other contract requirements for engaging service providers or contractors. In certain circumstances, we may disclose your Personal Information to third parties for legitimate purposes subject to this Privacy Policy. Such circumstances may include:

·        With vendors or other third parties who perform services on our behalf (e.g., IT management, payment processing, data analytics, customer support, cloud storage, fulfillment and shipping).

·        With business and marketing partners, including Shopify, to provide services and advertise to you. Our business and marketing partners will use your information in accordance with their own privacy notices.

·        When you direct, request us or otherwise consent to our disclosure of certain information to third parties, such as to ship you products or through your use of social media widgets or login integrations, with your consent.

·        With our affiliates or otherwise within our corporate group, in our legitimate interests to run a successful business.

·        In connection with a business transaction such as a merger or bankruptcy, to comply with any applicable legal obligations (including to respond to subpoenas, search warrants and similar requests), to enforce any applicable terms of service, and to protect or defend the Services, our rights, and the rights of our users or others.

Shopify

Our Site is hosted on Shopify, which collects and processes your Personal Information to provide and improve the Site. Information you submit on the Site may be transmitted to and shared with Shopify. To learn more about how Shopify uses your Personal Information and any rights you may have, you can visit the Shopify Consumer Privacy Policy. Depending on where you live, you may exercise certain rights with respect to your Personal Information here: https://privacy.shopify.com/en.

Third Party Websites and Links

Our Site may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites. Information you provide on public or semi-public venues, including information you share on third-party social networking platforms may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use by us or by a third party. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Services.

Notice of Financial Incentive

We may offer discounts, rewards, or other benefits in exchange for your enrollment in marketing programs or provision of personal information. Participation is voluntary, and you may withdraw at any time. The value of your personal information is reasonably related to the value of the offer provided. For details about specific programs, please refer to the terms presented at the time of enrollment.

Children’s Data

The Services are not intended to be used by children, and we do not knowingly collect any Personal Information about children. If you are the parent or guardian of a child who has provided us with their Personal Information, you may contact us using the contact details set out below to request that it be deleted.

As of the Effective Date of this Privacy Policy, we do not have actual knowledge that we “share” or “sell” (as those terms are defined in applicable law) Personal Information of individuals under 16 years of age.

Data Security

We have implemented measures designed to secure your Personal Information from accidental loss and from unauthorized access, use, alteration, and disclosure. All information you provide to us is stored on our secure servers behind firewalls.

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Site, you are responsible for keeping this password confidential. We ask you not to share your password with anyone and urge you to be careful about giving out information in public areas of the Site like in customer reviews. The information you share in public areas may be viewed by any user of the Site.

Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your Personal Information, we cannot guarantee the security of your Personal Information transmitted to our Site. Any transmission of Personal Information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Site.

Data Retention

Except as otherwise permitted or required by applicable law or regulation, we will only retain your personal information for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To decide how long to keep personal information, we consider things like:

·        The amount, nature, and sensitivity of the data.

·        The potential risk of harm from unauthorized use or disclosure of the data.

·        The purposes for which we obtained the data.

·        Whether we can achieve those purposes through other means.

·        Applicable legal, accounting, or reporting requirements.

Under some circumstances we may anonymize your personal information so that it can no longer be associated with you. We reserve the right to use such anonymous and de-identified data for any legitimate business purpose without further notice to you or your consent.

Account Information

If you would like to review or change the information in your account or terminate your account you may log into your account settings and update your user account. Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal terms and/or comply with applicable legal requirements.

International Users

Please note that we may transfer, store and process your Personal Information outside the country you live in, including the United States. Your Personal Information is also processed by staff and third party service providers and partners in these countries.

If we transfer your Personal Information out of Europe, we will rely on recognized transfer mechanisms like the European Commission's Standard Contractual Clauses, or any equivalent contracts issued by the relevant competent authority of the UK, as relevant, unless the data transfer is to a country that has been determined to provide an adequate level of protection.

Notice to California and Texas Residents

You may have certain rights and choices regarding our processing of your personal information. Residents in California and Texas are entitled to the following consumer rights:

·        The right to know and the right to access – You have the right to request for copies of your personal information, including the categories of personal information collected and categories of third parties with whom the information is shared. We have included this information in this privacy policy.

·        The right to rectification – Taking into account the nature of the personal information and the purposes of the processing, you have the right to request that we correct inaccurate personal information.

·        The right to erasure – You have the right to request that we erase your personal information, under certain conditions.

·        The right to opt out of processing for targeted advertising, sale or profiling – We do not sell personal information and we do not use personal information for profiling purposes. For more information on opt-out rights, see the “Exercising Your Rights” section below.

·        The right to data portability – You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

·        The right to opt-out of a “sale” – You have the right to opt-out of certain data sharing practices. This right is limited to information we “sell” to third parties as described below.

·        The right to limit the use and disclosure of their sensitive personal information – You have the right to limit the use and disclosure of sensitive personal information to only those purposes necessary to provide requested services or as otherwise permitted by law. Please note we only use Sensitive Personal Information as discussed in the ‘Sensitive Personal Information Use and Disclosure Purposes’ section above.

We will not restrict or deny you access to our products and services because of choices and requests you make in connection with your personal information. Please note, certain choices may affect our ability to deliver our services or products.

Exercising Your Rights

To access, delete, or correct specific pieces of Personal Information we will need to verify your identity to the degree of certainty required by law. As permitted by applicable law, any request you submit to us is subject to an identification and residency verification process (“Data Subject Request”). We will not fulfill your request unless you have provided sufficient information for us to reasonably verify you are the consumer about whom we collected personal information. To submit a Data Subject Request, please email us at liftoff@mengotomars.com

Only you, or someone legally authorized to act on your behalf (an “Authorized Agent”), may make a request to know or delete related to your personal information. We require Authorized Agents to provide written authorization confirming they may submit a request on your behalf. You may only submit a request to know twice within a 12-month period. We endeavor to substantively respond to a Data Subject Request within forty-five (45) days of its receipt unless we require an extension. If we reasonably require an extension, we will inform you of the reason and extension period.

Once we receive your request and confirm your identity, we will review your request. We may deny your deletion request if retaining the information is proper and necessary or if an exception allowing us to retain the information applies.

We do not charge a fee to process or respond to your Data Subject Request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request. If we cannot provide you with access to your personal information, we will inform you of the reasons why, subject to any legal or regulatory restrictions.

Note to Texas Residents: In the event we deny your data rights request, Texas residents may appeal our decision by emailing us or calling us at the information provided above. You will receive confirmation of the action being taken regarding your appeal within 60 days of receipt of your appeal.

Selling or Sharing Personal Information

We do not sell your Personal Information in exchange for money. We may disclose or “share” your personal information to third parties. Under the CCPA, “sharing” your Personal Information refers to disclosing your Personal Information to a third party for cross-context behavioral advertising. You may submit a request to opt-out of this type of sharing of your Personal Information by clicking here: Do Not Sell or Share My Personal Information[KLG1] .

Global Privacy Control

The Global Privacy Control (GPC) lets you set a ‘Do Not Sell or Share’ preference at the browser level of your device. If you have enabled the GPC on your browser we will automatically receive a signal of your intent to opt-out of the sharing of your Personal Information.

California’s Shine the Light Law

California Civil Code Section 1798.83 permits users of our Site that are California residents to request certain information regarding our disclosure of the information you provide through the Site to third parties for their direct marketing purposes. To make such a request, please contact us at the information provided below.

Contact

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, email us at liftoff@mengotomars.com or contact us at 1401 Lavaca St, Austin, TX 78701, United States.