Privacy policy

Nutrition Lab Sciences Pty Ltd
Last updated: 13 August 2026

1. Introduction

Nutrition Lab Sciences Pty Ltd (ABN 83 681 805 569, ACN 681 805 569) (“Nutrition Lab Sciences”, “we”, “us”, or “our”) operates nutritionlab.com and related information, content, tools, assessments, products, subscriptions, campaigns, and services (the “Services”).

Our ecommerce store is powered by Shopify. We also use third-party providers to support payments, subscriptions, fulfilment, communications, analytics, customer support, security, marketing, and other business functions.

This Privacy Policy explains how we collect, use, hold, disclose, and protect personal information when you visit or use the Services, make a purchase, subscribe, complete an assessment, participate in the Global Nutrition Initiative, communicate with us, or otherwise interact with Nutrition Lab Sciences.

For the purposes of applicable privacy laws, Nutrition Lab Sciences is generally the organisation or controller responsible for determining why and how personal information is processed, except where another party acts as an independent controller under its own privacy policy.

2. Personal information we collect

Depending on how you interact with us, we may collect or process the following categories of personal information:

Contact information: name, email address, telephone number, billing address, shipping address, and similar contact details.
Account information: account credentials, preferences, subscription settings, purchase preferences, and account activity.
Transaction information: products viewed, added to cart, purchased, subscribed to, renewed, cancelled, refunded, returned, or exchanged, together with order and transaction history.
Payment information: payment method information, payment status, transaction identifiers, and related information. Full payment card details are generally processed by our payment providers and are not stored directly by Nutrition Lab Sciences.
Subscription information: subscription frequency, renewal dates, status, payment status, pauses, rescheduling, cancellations, and recurring-order information.
Communications: information you provide when contacting customer support, submitting an enquiry or feedback, or otherwise communicating with us.
Marketing and preference information: communication preferences, marketing consent, campaign responses, referral information, and interactions with marketing communications.
Global Nutrition Initiative and partnership information: name, organisation, role, country, contact details, participation pathway, indicative partnership information, enquiry content, campaign source, referral source, and related attribution information where collected.
Device and usage information: IP address, device type, browser information, device identifiers, pages viewed, interactions, referral URLs, timestamps, cookie identifiers, and similar technical or analytics information.

3. Health, assessment, and sensitive information

Some tools provided by Nutrition Lab Sciences, including Baseline or similar health and wellbeing assessments, may invite you to voluntarily provide information concerning symptoms, health, wellbeing, lifestyle, health goals, or related matters.

Some of this information may constitute health information, sensitive information, or special-category personal data under applicable privacy laws.

Where required by law, we will obtain separate, specific, informed, and appropriate consent before collecting or processing health or other sensitive information.

We use identifiable health and assessment information only for purposes reasonably connected with the assessment, experience, support, analysis, or other purpose clearly disclosed when the information is collected, unless you provide further consent or another lawful basis applies.

We do not disclose identifiable Baseline health or symptom information to advertising partners for their own targeted advertising, cross-context behavioural advertising, or unrelated direct marketing.

We may use aggregated or appropriately de-identified information that no longer reasonably identifies an individual for research, statistical analysis, service improvement, product development, or reporting.

4. Sources of personal information

We may collect personal information:

Directly from you: when you create an account, place an order, subscribe, complete an assessment, submit an enquiry, participate in a campaign, provide consent, or contact us.
Automatically: when you use our website or Services through cookies, pixels, analytics technologies, server logs, and similar technologies, subject to applicable consent requirements.
From service providers: including ecommerce, payment, subscription, fulfilment, carrier, analytics, communications, technology, and customer support providers.
From marketing and referral sources: where permitted, including campaign platforms, referral partners, advertising platforms, and publicly available business information.

5. How we use personal information

We may use personal information to:

Process purchases, subscriptions, payments, renewals, refunds, and account activity;
Fulfil and deliver orders and manage shipping and customs requirements;
Provide customer service and respond to enquiries;
Operate Baseline and other assessment or educational experiences;
Personalise appropriate content, services, communications, and customer experiences;
Operate and report on the Global Nutrition Initiative and respond to impact, corporate, implementation, investment, and partnership enquiries;
Send transactional communications and service notices;
Send marketing communications where permitted by law and in accordance with your preferences;
Analyse website and service usage;
Measure campaign effectiveness and attribution;
Improve our products, Services, systems, and customer experience;
Detect, investigate, and prevent fraud, misuse, security incidents, and unlawful activity;
Maintain records and comply with tax, accounting, customs, regulatory, legal, and other obligations;
Establish, exercise, or defend legal claims; and
Carry out other purposes disclosed to you at the time information is collected.

6. Legal bases for EEA and UK customers

Where European Union, European Economic Area, or United Kingdom data protection law applies, we process personal data under one or more applicable legal bases, including:

Performance of a contract: where processing is necessary to process an order, payment, subscription, delivery, return, or other service you request.
Legal obligation: where processing is necessary to comply with tax, customs, accounting, regulatory, consumer protection, or other legal requirements.
Legitimate interests: where processing is necessary for legitimate interests such as security, fraud prevention, customer support, service administration, reasonable business analytics, or improving our Services, provided those interests are not overridden by applicable individual rights and interests.
Consent: where you have consented to processing, including certain marketing or non-essential tracking activities.
Explicit consent or another permitted legal basis: where required for the processing of health or other special-category personal data.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

7. Disclosure of personal information

We may disclose personal information to service providers and other recipients where reasonably necessary for the purposes described in this Privacy Policy, including:

Shopify and other ecommerce technology providers;
Recharge or other subscription management providers;
Payment processors and financial service providers;
Warehousing, manufacturing, fulfilment, logistics, postal, courier, and customs service providers;
Customer support, email, communications, CRM, and business-system providers;
Website hosting, cloud computing, security, and IT providers;
Analytics, measurement, advertising, and marketing service providers, subject to applicable privacy and consent requirements;
Professional advisers, including lawyers, accountants, auditors, insurers, and consultants;
Government agencies, regulators, customs authorities, law enforcement, courts, or other parties where required or permitted by law; and
Parties involved in a merger, acquisition, financing, restructuring, sale of assets, or similar corporate transaction.

We do not sell personal information for monetary consideration.

Under some privacy laws, certain disclosures involving advertising, analytics, targeted advertising, or cross-context behavioural advertising may be legally defined as “sale”, “sharing”, or similar activity even where no money changes hands. Where those laws apply, we provide the rights and opt-out mechanisms required by applicable law.

8. International data transfers

Nutrition Lab Sciences is established in Australia and operates internationally. Personal information may therefore be processed or stored in Australia and in other countries where our service providers, technology providers, fulfilment partners, or other recipients operate.

Depending on the services used, these jurisdictions may include Australia, the United States, Canada, the United Kingdom, countries within the European Economic Area, Singapore, and other locations associated with our service providers or customer delivery destinations.

Where applicable law requires safeguards for international transfers, we use appropriate contractual, organisational, technical, or other lawful transfer mechanisms.

We take reasonable steps required under applicable Australian privacy law in relation to overseas disclosures and the handling of personal information by overseas recipients.

9. Data security

We maintain reasonable technical and organisational safeguards designed to protect personal information against unauthorised access, loss, misuse, interference, alteration, destruction, or disclosure.

These measures may include access controls, authentication measures, appropriate encryption, secure service providers, system monitoring, and other safeguards appropriate to the nature of the information.

No method of transmission or electronic storage is completely secure, and we cannot guarantee absolute security.

10. Data retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to provide the Services, maintain appropriate business and transaction records, comply with legal obligations, resolve disputes, and protect our legal rights.

Retention periods vary depending on the type of information:

Order, tax, accounting, and transaction records may be retained for periods required by applicable financial and legal recordkeeping obligations.
Account and subscription information may be retained while your account or subscription remains active and for an appropriate period afterward.
Marketing information may be retained until you unsubscribe, withdraw consent where applicable, or the information is no longer required. Limited suppression records may be retained to respect an opt-out request.
Customer service and enquiry records may be retained for a reasonable period to manage the relationship and resolve issues.
Health and assessment information will be retained only for as long as reasonably necessary for the disclosed assessment or related purpose, subject to applicable legal requirements and individual rights.
Security, analytics, and technical records may be retained according to reasonable operational, security, and legal requirements.

When personal information is no longer reasonably required, we take reasonable steps to delete, destroy, anonymise, or de-identify it where appropriate.

11. Your privacy rights

Your rights depend on your location and applicable law. Subject to applicable limitations and exceptions, you may have rights to:

Request access to personal information we hold about you;
Request correction of inaccurate or incomplete information;
Request deletion or erasure of personal information;
Request restriction of certain processing;
Object to certain processing, including certain direct marketing;
Receive certain personal data in a portable format;
Withdraw consent where processing is based on consent;
Opt out of certain sale, sharing, targeted advertising, or profiling activities where applicable;
Unsubscribe from marketing communications; and
Lodge a complaint with an applicable privacy or data protection regulator.

Australian individuals may have the right to make a complaint to the Office of the Australian Information Commissioner.

EEA residents may have the right to lodge a complaint with an applicable data protection supervisory authority.

UK residents may have the right to lodge a complaint with the UK Information Commissioner's Office.

Individuals in other jurisdictions may have additional rights under applicable local privacy laws.

To exercise a privacy right, contact privacy@nutritionlab.com. We may need to verify your identity before completing certain requests.

12. Cookies and tracking technologies

We use cookies and similar technologies to operate our website, remember preferences, maintain security, understand website use, measure performance, and, where permitted, support analytics and marketing.

Where required by applicable law, non-essential cookies and similar technologies are used only in accordance with your consent or another applicable lawful basis.

You may manage available cookie and privacy preferences through the consent or privacy controls provided through our website. You may also adjust your browser settings, although blocking essential technologies may affect website functionality.

Where applicable, we honour legally required opt-out mechanisms relating to targeted advertising, sale, sharing, or similar processing.

13. Marketing communications

We may send marketing communications where you have requested them, consented where required, or where another applicable lawful basis permits us to do so.

You may unsubscribe from marketing emails using the unsubscribe link contained in those communications or by contacting us.

Unsubscribing from marketing does not prevent us from sending necessary transactional, account, subscription, order, safety, legal, or service communications.

14. Children

Our ecommerce Services are intended for individuals legally able to enter into the relevant transaction or for purchases made by an authorised parent or guardian.

Health assessments such as Baseline are not intended for use by children unless we expressly state otherwise and implement the consent and safeguarding requirements applicable to that experience.

If you believe a child has provided personal information to us in circumstances where it should not have been collected, please contact privacy@nutritionlab.com.

15. EEA and UK privacy enquiries

Nutrition Lab Sciences Pty Ltd is established in Australia.

EEA and UK privacy enquiries and requests should currently be directed to Nutrition Lab Sciences at:

Email: privacy@nutritionlab.com

If separate representative contact details become applicable and are published by Nutrition Lab Sciences, this Privacy Policy will be updated accordingly.

16. Singapore privacy enquiries

For privacy and data protection enquiries from individuals in Singapore, please contact:

Email: privacy@nutritionlab.com

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our Services, technology, legal requirements, service providers, or privacy practices.

The current version will be published on our website together with its “Last updated” date. Where required by law, we will provide additional notice of material changes.

18. Contact us

Nutrition Lab Sciences Pty Ltd
ABN: 83 681 805 569
ACN: 681 805 569
Level 8, Tower 1, 1341 Dandenong Road
Chadstone, Victoria 3148, Australia
Privacy email: privacy@nutritionlab.com
General support: help@nutritionlab.com
Phone: +61 3 7037 0001