Privacy Policy

Bulletproof 360, Inc. Privacy Policy

Last updated: April 21st, 2025

It is our aim through this Bulletproof Privacy Policy (“Policy”) to explain what information we collect about you and why we collect that information. We also want to make sure you understand how we use and share your information and the choices available to you. Our goal is to earn and keep your trust as you visit websites and applications about our products.

This Policy describes how we treat personal information on websites (“sites”), mobile or social media applications (“apps”), and any other services where we include an authorized link or reference to this Policy (together, the “Services”). This Policy does not describe our practices on sites or apps where it is not referenced.

Your use of our apps and sites indicates you agree to our collection, use, and sharing of your information as set forth in this Policy. Any dispute over privacy, is subject to this Policy and our Terms of Service, including its applicable limitations on damages and the resolution of disputes. Our Terms of Service, are incorporated by reference into this Policy.

GDPR Privacy Notice: We have issued our new GDPR Privacy Notice relating to personal data that is subject to the European Union’s General Data Protection Regulation. You can read it here.

What Information Do We Collect?

We collect identifiers and contact information. For example, we may collect your name and street address if you register on our site or apps. We may also collect your phone number or email address. We also collect online identifiers. For example, if you engage with us through a social media site, we may collect your social media user identifier.

We collect payment information. If you make purchases with us, we (or our business partners who process credit cards for us) may collect your billing information. This includes your credit card number.

We collect information you submit or otherwise provide or authorize us to collect. We collect the information you post in a public space on our site. This includes comments and videos or photos. We also collect any other information you may provide to us or authorize us to collect. This may include information about your physical activities or your nutrition preferences. To the extent you voluntarily opt to have SMS notifications sent directly to your mobile phone, we may collect the information you provide, including your telephone number or when you read a text message.

We collect demographic information and information about your interests. We may collect information such as your gender and age, household or lifestyle information, and your ZIP Code.

We collect device and usage information. We may collect information about your operating system, Internet Service Provider (ISP) information, MAC address, IP addresses, cookie IDs, mobile ad identifiers, social media information, and other unique identifiers.

We collect internet and electronic network activity information. We collect information about your browsing or search activity as well as your interactions with our sites, applications, emails, or advertisements. For example, we may collect timing of site visits, pages visited, what site you came from, what site you visit when you leave us, and information about traffic patterns and site usage, such as clickstream data comprised of mouse movements, clicks, page scrolls and keystrokes . For additional information, please visit our “How Do We Use Cookies and Other Tracking Technologies?” section here.

We collect geolocation information. Using technologies such as GPS or Wi-Fi, we may collect information about your location. For example, if you use our mobile apps, we may access your device’s location information to provide you location-enabled features.

We collect job application information, such as professional or employment-related information and education information. We collect information if you apply for a job with us. This information may include your education and work history, your skills, and qualifications for the position. We may ask about how you learned about the position. If applicable, we may ask about your driving record and your ability to perform the position. We may also collect the last four digits of your social security number and your nationality.

We collect information about third parties. From time to time, we may allow you to send an email or message to a friend through one of our sites or apps. If you choose to do this, we will need that person’s name and email address.

How Do We Collect Information?

We collect information directly from you. We collect information from you when you:

• make a purchase with us;
• register on one of our sites or apps;
• apply for a job;
• sign up for our email newsletters, marketing text messages and other notifications;
• participate in promotions such as sweepstakes or contests;
• fill out a survey;
• contact us, such as through our sites and apps or otherwise communicating with our Consumer Relations team; and
• otherwise provide it to us or authorize us to collect it.

We collect information from you through tracking technologies and other automatic automated methods. We use technology such as pixels, web beacons, software development kits, third-party libraries, cookies, tags, mobile device IDs, and other similar online tracking technologies to automatically collect certain information when you visit our sites or Services, open or click emails we send you, or interact with our advertisements. You may learn more about the choices that may be available to you by visiting our “ How Do We Use Cookies and Other Tracking Technologies?” section here.

Third parties may also share information about you with us. For example, our business partners may give us information about you. We may receive information from commercial sources such as companies who compile information about shoppers and their preferences. Social media platforms may also give us information about you, and we may get information about your interactions with our ads on third-party sites.

Some information provided by third parties may be aggregated or otherwise deidentified so that it does not identify you. Aggregated and deidentified data are not subject to this Privacy Policy.

We combine information from different sources. For example, we may combine information we have collected offline with information we collect online. We combine information we have collected across third-party sites, including social media sites. We combine information across devices such as computers and mobile devices. We may also combine information from third parties with information we already have. We may use this information to generate inferences about you and for the other purposes described in this Privacy Policy.

How Do We Use the Information We Collect?

We use information to help us effectively provide you products and services. We use your information to enable you to participate in our programs. This may include sweepstakes or contests. We also may use your information to process your registration with sites and apps. We may use your friends’ email addresses to send them information that you requested we send them. We also use your information to process orders for you. We may also contact you about products and services you have requested, or if you have won a prize or promotion.

We use information to improve our products and services. One of our goals is that you have a positive experience with our sites, apps, and products. Therefore, we may use your information to improve your experience with our sites, apps, and products. We may use information you provide or that third-party partners give us to personalize your experience.

We use information to provide customer service. We may use your information to respond to your questions through various communication channels (including chat and phone). Use recorded customer service phone conversations and stored chat transcripts for quality assurance, training, trouble shooting and other business purposes. Evaluate our customer service and customer service channels to improve their quality and functionality.

We use information for security purposes. We may use your information to help protect you, our sites and apps, our company, our customers, and our consumers.

We use information for marketing purposes. For example, we might send you information about products, offers, features, or updates. We might also use your information to serve you ads about products and offers. Those ads may appear on third-party platforms which may include social media. These might be our own offers or products, or third-party offers or products we think you might find interesting. We may provide you with information through email or push notification. If you have elected to receive text messages from us, then we may send you information about promotional offers and more. These messages may use information automatically collected based on your actions while on our sites and may prompt messaging such as cart abandon messages.

We use information to get feedback from you about how we’re doing and for other transactional purposes. We may contact you about this Policy or the Terms of Service posted to the sites or apps you are using. We may also communicate with you about a job application or your questions about our products or promotions.

We combine information from different sources. For example, we may combine information we have collected offline with information we collect online. We combine information we have collected across third-party sites, including social media sites. We combine information across devices such as computers and mobile devices. We may also combine information from third parties with information we already have. We may use this information to create a profile about you and to infer your interests, preferences, shopping habits. We may also use your information to create a profile for fraud-prevention and investigation purposes and for the other purposes described in this Privacy Policy.

We use information to comply with legal and safety obligation. We may access and use your information, including the content of your communications, in order to: comply with the law or respond to lawful requests or legal process; protect the rights or property of Bulletproof or our customers, including the enforcement of our agreements or policies governing your use of our sites, apps and the Services; or to protect the personal safety of Bulletproof employees, customers or the public. We may need to keep some personal information as evidence in case of a dispute, complaint or audit.

How Do We Share Your Information?

We share information with our third-party vendors and service providers. We may also share information with companies who serve as our vendors or third parties who perform services on our behalf, such as email providers, web hosting providers, call center/chat providers, sweepstakes vendors, payment processors, coupon delivery vendors, data enhancement services, fraud prevention providers or shipping services providers; or that help us market our products and services, such as ad network providers, mobile marketing services, analytics providers, sponsors, and traffic measurement services. They may help us deliver products or services to you. We may share information with companies who operate our sites and apps or who run our promotions.

We will share information if we think we must in order to comply with the law or to protect our company. For example, we will share information to respond to a court order or subpoena. We may share information if a government agency or investigatory body requests it. This includes United States and non-United States law enforcement or regulatory authorities. We may also share information to help protect you, our sites and apps, our company, our customers, and our consumers. We may also share information if we are investigating potential fraud.

Third parties may collect information when you use the Services. Third parties that provide advertising, content, and/or functionality to our Services may collect information from these Services through tracking technology such as pixels, web beacons, software development kits, third-party libraries, cookies, tags, mobile device IDs, and other similar online tracking technologies. For example, third-party advertisers may have a presence on some of our Services, and this information may be collected over time and combined with information collected across different websites and online services. The above excludes text messaging originator opt-in data and consent; this information will not be shared with any third parties. You may learn more and see information about choices available to you by visiting our “How Do We Use Cookies and Other Tracking Technologies?” section here.

We may share information with any successor to all or part of our business. For example, if part of our business is sold, or is involved in a merger, consolidation, asset sale, or in the unlikely event of bankruptcy, we may include your information as part of that transaction.

If there are additional reasons we may share information, we will describe those to you.

You Have Certain Choices About How We Use Your Information

You can opt out of email marketing. To stop receiving promotional emails from us, follow the instructions in any promotional email message you get from us. If you opt out of getting marketing email messages, you may continue to receive non-marketing email messages from us where permitted by law.

You can opt out of SMS marketing text messages. To stop receiving any marketing text messages that you have elected to receive, you can opt out by replying “STOP” to the text message. For help, reply “HELP” to any text message you receive from us.

You can control cookies and tracking tools. To learn how to manage how we and our vendors use cookies and other tracking tools, and to read our “How Do We Use Cookies and Other Tracking Technologies?” section, please click here.

Do-Not-Track Signals and Similar Mechanisms. Some web browsers transmit "do-not-track" signals to websites. Because the standards for these signals are still under development, we currently do not take action in response to these signals.

You can control tools on your mobile devices. For example, you can turn off the GPS locator or push notifications on your phone. To modify the push notifications you get from our app, you can alter your preferences in your profile.

Requests should be submitted as set out in the “Feel Free to Contact Us If You Have More Questions” section of this Privacy Policy. These rights are not absolute, and we will respond to all requests we receive in accordance with applicable laws. The Your California Rights section below provides additional information for California residents.

Children’s Privacy

Bulletproof Services are not directed to children under 16. We do not knowingly collect, use or disclose personally identifiable information from anyone under 16 years of age. If you are a parent or legal guardian and think that your child under 16 has given us information, you can contact us at https://shop.bulletproof.com/pages/customer-care and we will take appropriate steps. You can also write to us at the address listed below. Please mark your inquiries “COPPA Information Request.”

Security Measures

We use various technical and organizational mechanisms to secure our websites and apps. You should understand that no data storage system or transmission of data over the Internet or any other public network can be guaranteed to be perfectly secure.

Our Services Are Intended for a United States Audience

The Sites are governed by and operated in, and in accordance with the laws of, the United States, and are intended for the enjoyment of residents of the United States. Bulletproof makes no representation that the Sites are governed by or operated in accordance with the laws of any other nation. Given that we are an international business, our use of your information necessarily involves the transmission of data on an international basis. If you are located in the European Union, Canada or elsewhere outside of the United States, please be aware that information we collect may be transferred to and processed in the United States. By using the Sites, or providing us with any information, you (a) acknowledge that the Sites are subject to the laws of the United States, (b) consent to the collection, processing, maintenance and transfer of such information in and to the United States and other applicable territories in which the privacy laws may not be as comprehensive as or equivalent to those in the country where you reside and/or are a citizen, and (c) waive any claims that may arise under those laws.

We May Link to Other Sites or Apps or Have Third Party Services and Tools on Our Platform We Don't Control

We may link to or allow you to access the Services from third-party websites or platforms. Our sites and apps may also include third-party content that collects information. Third party content may include tracking tools like cookies and other online tracking technologies. These third parties may use your information for their own purposes. This may include behavioral advertising and analytic purposes. We do not control these third parties or their use of these technologies, so please read their privacy policies carefully.

Feel free to contact us if you have more questions

If you have questions about this Policy or our data practices, or if you would like to submit a request, please contact us via our Customer Care portal. You can also write to us at:

Bulletproof 360, Inc.
Attn: Consumer Relations – Privacy
2400 NW 80th Street
PMB 113
Seattle, WA 98117

For California residents only: If you would like to exercise your rights under the California Consumer Privacy Act (CCPA), you have the following options for doing so:

• For SMS assistance, reply “HELP” to 1 206-203-4576
• Submit your data privacy request via our Privacy Web Form.

We May Update This Policy

From time to time, we may change this Policy. When we do, we will notify you of any material changes as required by law. This will include posting an updated copy here and updating the “Last Updated” date. Please check periodically for updates.

Depending on your residence, you may have certain rights pursuant to your state’s laws. The below is a list of relevant state laws. If you are making a request pursuant to a specific state law, you must identify the specific state law under which you are making a request. We reserve the right to update this list as needed.

California Residents

California “Shine the Light” Law

If you reside in California, you have the right to ask us one time per year for information about our disclosure, if any, of personal information to third parties for their direct marketing purposes in the preceding calendar year. To make a request, please contact us via our Customer Care Portal or write to us at the address listed above. Indicate in your letter that you are a California resident making a “Shine the Light” inquiry. We reserve our right not to respond to requests submitted other than by the means specified in this section, if the request is not labeled or sent properly, or if the request does not have complete information.

California Consumer Privacy Act (CCPA)

We have explained our privacy practices in full in the other sections of this Privacy Policy. In this section, we provide a list of categories of personal information as set forth in the CCPA that have been collected, disclosed for business purposes, or “sold” for commercial purposes (as may be defined by the CCPA) during the preceding 12 months, as well as certain other information. Please see the other sections of the Privacy Policy for additional information and context.

As discussed in the other sections of our Privacy Policy, we collect this type of information from you, through our interactions with you and others, and from third parties, and we disclose these categories of personal information within Bulletproof, to business partners and third-party vendors and service providers that provide us hosting, advertising, analytics and other services, and as needed to comply with legal process. Your personal information may also be shared with third parties with whom you interact and third parties that you direct us to share your information with through our Services.

We share personal information with third parties in various ways as described elsewhere in this Policy. You may learn about ways in which you can control the collection of information about you through cookies, mobile ad IDs, and other tracking tools by third parties by visiting our “How Do We Use Cookies and Other Tracking Technologies?” section here.

Information about how you may exercise your rights as a California resident can be found in the “Feel Free to Contact Us If You Have More Questions” section of our Privacy Policy.

We may verify your request by asking you to provide information to confirm your identity. This information may vary depending on your relationship with us. If you would like to use an agent registered with the California Secretary of State to exercise your rights, we may request evidence that you have provided such agent with power of attorney or that the agent otherwise has valid written authority to submit requests to exercise rights on your behalf. Subject to applicable law, you may have a right not to be discriminated against for exercising your rights over your personal information.

Colorado Residents

The Colorado Privacy Act grants consumers the right to: (1) opt out of their personal data being processed for targeted advertising, the sale of personal data, or any profiling that significantly impacts them; (2) access data relating to the consumer; (3) correct inaccuracies in their personal data, considering the nature of the data and the purposes for processing; (4) request the deletion of their personal data; (5) obtain their personal data in a portable and readily usable format. This allows them to transmit the data to another entity without hindrance. Controllers must respond to consumer requests within 45 days of receipt.

Connecticut Residents

The Connecticut Data Privacy Act grants consumers the right to (1) confirm whether a controller is processing their personal data and access such personal data, unless such actions would reveal a trade secret; (2) correct inaccuracies in their personal data (with certain limitations); (3) delete personal data provided by or about the consumer; (4) obtain a portable copy of their personal data to the extent technically feasible and provided the controller will not be required to reveal any trade secret; and (5) opt out of the processing of personal data for purposes of (i) targeted advertising, (ii) the sale of personal data or (iii) profiling in connection with automated decisions that produce legal or similarly significant effects concerning the consumer. Controllers must respond to consumer requests within 45 days of receipt.

Nevada Residents

Nevada law allows customers to “opt out” of the sale of certain personal information, called “covered information.” Although we do not “sell” “covered information” of Nevada “consumers” as those terms are defined by Chapter 603A of the Nevada Revised Statutes, you may contact us by email at care@bulletproof.com and provide your name, Nevada resident address, and email address to be verified and exercise your opt-out rights in the event we do sell covered information under that law in the future. If your contact information changes at any point, contact us in the same manner to update your contact information. For more information about our data collection and sharing practices, please review this Privacy Policy. We may share your data as explained in this Privacy Policy for different purposes, such as to make your experience and our services better, and those activities are separate from the opt out request.

Utah Residents

The Utah Consumer Privacy Act grants consumers the right to (1) access and confirm whether a controller is processing their personal data; (2) delete personal data that they provided to the controller; (3) obtain a copy of their personal data provided to the controller to the extent it is feasible, portable, practical and usable while allowing the consumer to transmit the data to another controller; and (4) opt out of processing for the purposes of targeted advertising or the sale of personal data. Controllers must respond to consumer requests within 45 days of receipt.

Virginia Residents

The Virginia Consumer Data Protection Act (VCDPA) provides Commonwealth of Virginia residents with specific rights concerning privacy. These include the following:

• The right to confirm a consumer's personal data is being processed by a controller
• The right to access personal data possessed by a controller
• The right to have personal data deleted
• The right to opt-out of the processing of personal information that is intended to be used for the sale of such data, targeted advertising, or profiling the consumer, and
• The right to acquire a copy of the consumer's personal information in a portable and usable format (provided it's technically practical) which allows the consumer to transmit the data to another controller without obstruction

If you are a resident of Virginia and have any questions or requests under the VCDPA, please contact us at the contact information provided in our Privacy Policy, clearly identifying that your communication is pursuant to the VCDPA.

Texas Residents

The Texas Data Privacy and Security Act grants consumers the right to (1) access and confirm whether a controller is processing their personal data; (2) delete or correct personal data that they provided to the controller; (3) obtain a copy of their personal data provided to the controller; (4) opt out of the processing of the consumer's personal data for purposes of targeted advertising, the sale of personal data, or profiling; and (5) appeal a controller’s refusal to take action on a consumer request to exercise their rights. Controllers must respond to consumer requests within 45 days of receipt.

Oregon Residents

The Oregon Consumer Privacy Act grants consumers the right to (1) access and confirm whether a controller is processing their personal data; (2) delete or correct personal data that they provided to the controller; (3) obtain a copy of their personal data provided to the controller; (4) opt out of the processing of the consumer's personal data for purposes of targeted advertising, the sale of personal data (whether for monetary or other valuable consideration), or profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer; (5) disclose, at the controller's discretion, the list of third parties to whom the controller has disclosed the consumer's, or any consumer's personal data; and (6) revoke previously given consent to process the consumer's personal data, which must be honored within 15 days of receiving the request.. Controllers must respond to consumer requests within 45 days of receipt.

Montana Residents

The Montana Consumer Privacy Act grants consumers the right to (1) access and confirm whether a controller is processing their personal data; (2) delete or correct personal data that they provided to the controller; (3) obtain a copy of their personal data provided to the controller to the extent it is portable; and (4) opt out of the processing of the consumer's personal data for purposes of targeted advertising, the sale of personal data, or profiling in furtherance of solely automated decisions that produce legal or similarly significant effects concerning the consumer. Controllers must respond to consumer requests within 45 days of receipt.

How Do We Use Cookies and Other Tracking Technologies?

We use common tracking technologies.

We collect personal information about over time and across different websites. We also work with third parties that collect personal information this way. These third parties may have tracking tools they place on our sites. Our vendors may also use these tracking tools. In this policy "we" and "us" refers to both Bulletproof and our vendors.

We use tracking technologies for a variety of reasons.

We use several common tracking tools, such as pixels, web beacons, software developer kits, third–party libraries, cookies, and other similar online tracking technologies (collectively, “tracking tools”). Third parties also use these tracking tools on our sites and elsewhere on our behalf. Cookies are small files that download when you access certain websites to enable websites to remember you, your actions and preferences (such as login, language, font size and other display preferences) over a period of time. These pages also explain how you can manage and delete cookies. We use tracking tools:

• To recognize new or past customers.
• To track cart activity.
• To store your password if you are registered on our site.
• To improve our website.
• To serve you with interest-based or target advertising (see below for more on interest-based advertising).
• To observe your behaviors and browsing activities over time across multiple websites or other platforms.
• To better understand the interests of our customers and our website visitors.

We engage in interest-based advertising.

We and our partners display interest-based advertising using information gathered about you over time across multiple websites or other platforms. This might include on mobile applications ("apps").

Interest-based advertising (sometimes called "online behavioral advertising") includes ads served to you after you leave our website, encouraging you to return. They also include ads we think are relevant based upon your browsing habits or online activities. These ads might be served to you on our sites or other websites or on apps. They might also be served in emails. We might serve these ads, or third parties may serve ads on our behalf. They might be about our products and brands or about other companies' products and brands.

How do we gather relevant information about you for interest-based advertising?

To help us decide what is relevant to you, we use information you make available to us when you interact with us, our affiliates, and other third parties. We gather this information using the tracking tools described above. For example, we or our partners might look at your purchases or browsing behaviors. We or our partners might look at your location. We might look at these activities on our platforms or the platforms of others.

We work with third parties who help gather this information. These third parties might link your name or email address to other information they collect. That information might include past purchases made offline or online. Or it might include online usage information, such as time spent on our sites, pages visited, cart details, mouse clicks, keystrokes, purchases, and other interactions.

You can control certain tracking tools.

Your browser may give you the ability to control cookies. How you do so depends on the type of cookie. Certain browsers can be set to reject browser cookies.

Our Do Not Track Policy: Some browsers have "do not track" features that allow you to instruct a website not to track you. We do not currently take actions to respond to those signals because a uniform technological standard has not yet been developed. If you block cookies, certain features on our sites may not work. If you block or reject cookies, not all of the tracking described here will stop.

Options you select are browser and device specific.

You can opt out of some interest-based behavioral advertising.

The Self-Regulatory Program for Online Behavioral Advertising program provides consumers with the ability to opt-out of having their online behavior recorded and used for advertising purposes. To opt out of having your online behavior collected for advertising purposes, click here.

The Digital Advertising Alliance also offers a tool for opting out of the collection of cross-app data on a mobile device for interest-based advertising. To exercise choice for companies participating in this tool, download the AppChoices app here.

Choices you make are browser and device specific.

Based on your region and applicable governing laws, you may have additional consent choices available to you. Click below to manage the cookie consent preferences available to you in your region, state, province, and/or country.

You may also contact us directly to learn more about how we process personal data or change your consent preference. Please state your consent ID and date when you contact us regarding your consent.

Your consent applies to the following domains: www.bulletproof.com, shop.bulletproof.com

Messaging Privacy Policy

In addition, you agree to our Messaging Terms and Messaging Privacy Policy.