Privacy policy

Last updated: November 20th, 2025

This website and all related services are operated by ORION COMMERCE GROUP LLC.,  a corporation incorporated in USA, doing business as Zeleva Health (“we,” “our,” or “us”).

This Privacy Policy explains how Zeleva Health (“Zeleva”, “we”, “us”) collects, uses, shares, and protects your personal information when you visit our website, make a purchase, contact support, or interact with our marketing channels (collectively, the “Services”). Our store is hosted on Shopify.

Quick summary:
We collect only what we need, use it to operate our store and support you, give you clear choices, and keep it safe. We never sell your personal information for money. Some advertising and analytics activities may be considered a “sale” or “sharing” under certain U.S. state laws—see Your Rights & Choices below for easy opt-outs.


1. Who We Are & How to Contact Us

Controller: Zeleva Health, 3545 Odyssey Drive
Privacy Officer (Canada / Québec Law 25): info@zelevahealth.com
EU/UK Representative (if applicable): Available upon request
Privacy Requests: info@zelevahealth.com or [ /privacy-request ]


2. Information We Collect

Depending on how you interact with us, we may collect:

Contact & Account Info: name, email, phone number, billing/shipping address, password.

Order & Payment Info: items purchased, totals, refunds, payment method (processed via secure partners—we never store full card numbers).

Device & Usage Data: IP address, browser/device type, pages viewed, cookies/pixels, approximate location.

Support & Reviews: messages, feedback, or survey responses you send us.

Business Verification (for restricted or B2B products): institutional email, company name/number, website, intended use.


3. How We Collect Information

Directly from you: at checkout, via forms, email/chat, or account registration.

Automatically: through cookies, pixels, SDKs, or server logs

From service providers: payments, shipping, fraud tools, analytics.

From advertising partners: where permitted and with required consent.


4. How We Use Your Information

We use personal information to:

Process and fulfill orders, payments, returns, and support inquiries.

Manage your account and communicate about your purchases.

Improve and secure our website and Services (analytics, diagnostics, fraud prevention).

Comply with legal and accounting obligations.

Send marketing communications (email/SMS) with your consent where required.

Verify eligibility for business or restricted products.

Legal Bases:

EU/UK: contract performance; legitimate interests (security, improvement); consent (non-essential cookies/ads, marketing); legal obligation.

Canada: meaningful consent and appropriate purposes under PIPEDA and Québec Law 25.

US: as disclosed in this Policy and subject to your state rights below.

Australia: collected for our business functions; consent where required.


5. Cookies, Pixels & Analytics

We use necessary cookies for cart and checkout functionality.
With consent where required, we also use analytics and advertising tools (Shopify, Google, Meta, etc.) to understand performance and deliver relevant ads.

In the EU/UK, non-essential cookies load only after consent.

In Canada, we seek meaningful consent for interest-based ads.

We honor Global Privacy Control (GPC) signals as an opt-out of sale/share where applicable.
You can adjust preferences anytime via the Cookie Settings link in our footer.


6. Sharing Your Information

We share personal information only as necessary:

Service Providers: Shopify (hosting), payments, shipping, fulfillment, fraud prevention, analytics, email/SMS, and IT support.

Advertising/Analytics Partners: only with consent where required.

Affiliates & Advisors: for legitimate business or legal purposes.

Authorities: when required by law or to protect rights and safety.

Business Transfers: such as a merger or reorganization, with safeguards and notice where required.

We do not sell personal information for money. Certain ad/analytics disclosures may qualify as “sale” or “sharing” under U.S. state laws—see Your Rights & Choices for opt-out instructions.


7. Relationship with Shopify

Our store is powered by Shopify, which also collects data about your interactions for fraud prevention and analytics.
In some cases, Shopify acts as an independent controller and may respond directly to privacy requests via its Shopify Privacy Portal.


8. Your Rights & Choices

Your privacy rights depend on your location but generally include:
Access, correction, deletion, portability, and opt-outs for ads or cookies.

United States (CA/CO/CT/VA/UT and similar):
Opt out of sale/share/targeted advertising via our Do Not Sell or Share link or by enabling Global Privacy Control (GPC). You can also request access, deletion, or correction; appeals instructions will be provided if needed.

Canada (PIPEDA / Québec Law 25):
Access, correction, withdrawal of consent, and breach notifications where required. Contact our Privacy Officer for any request or complaint.

EU/UK (GDPR / UK GDPR):
Access, rectification, erasure, restriction, portability, and objection rights, plus withdrawal of consent. You can complain to your local authority (e.g., the ICO in the UK).

Australia (APPs):
Access and correction rights, with complaint options via the OAIC.

To exercise your rights:
Visit [ /privacy-request ] or email info@zelevahealth.com. We may verify your identity and accept authorized-agent requests where permitted.

Marketing:
You may unsubscribe from promotional emails anytime via the link in the message (we’ll still send essential order/account emails). For SMS, reply STOP.


9. Security

We use administrative, technical, and physical safeguards—including encryption in transit, access controls, vendor due diligence, and incident response.
No system is 100% secure, so please use strong, unique passwords and enable multi-factor authentication where available.


10. Retention

We retain personal information only as long as necessary to fulfill the purposes outlined above and meet legal or accounting obligations, after which data is deleted or de-identified on a fixed schedule.


11. Children’s Privacy

Our Services are not directed to children under 13 (US/CAN) or under 16 (UK/EU).
We do not knowingly collect personal data from minors. If you believe a child has provided us with personal information, please contact us for removal.


12. International Transfers

We may transfer data to other countries (e.g., the US or EU).
Where required, we use Standard Contractual Clauses (SCCs) or the UK IDTA and implement additional safeguards.
For more information, contact info@zelevahealth.com.


13. FDA Disclaimer

Statements made, or products sold through this website, have not been evaluated
by the United States Food and Drug Administration. They are not intended to
diagnose, treat, cure or prevent any disease


14. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date will always reflect the latest version.
If changes are material, we’ll provide prominent notice and seek renewed consent if required.


15. Contact Us

Zeleva Health
3545 Odyssey Drive
Email: info@zelevahealth.com