Privacy Policy

Appendix C: Privacy Policy

Privacy Policy

Last Updated: September 23, 2026

Introduction

Atlas Brands LLC, doing business as Often (“Often,” “we,” “us,” or “our”), explains in this Privacy Policy how we collect, use, and disclose personal information when you visit takeoften.com, buy an Often product, contact our team, or otherwise use our services. This policy applies to customers, visitors, and other individuals whose information we process in connection with the store.

Please read this policy to understand our practices and the choices available to you. The details that apply to any interaction depend on the information you provide, the features you use, your location, and your privacy settings.

This policy covers the website, checkout, customer accounts, communications, and other online interactions that link to it. It does not govern a third party's independent practices, even when that party can be reached from our store. Where a specific program presents an additional notice, that notice also applies to the program.

Changes to This Privacy Policy

We may revise this policy when our products, services, technology, or legal obligations change. We will update the date above and provide additional notice when required by law. The current version will be available on this page.

Changes take effect when the revised policy is posted, unless the notice says otherwise. We encourage you to review this page from time to time. If a change requires your consent, we will ask for it before applying that change to the relevant information.

Personal Information Collected

“Personal information” means information that identifies you or can reasonably be linked to you or your household. The types we collect depend on how you interact with Often. They can include:

• Contact and order details: your name, email address, phone number, delivery and billing addresses, products ordered, transaction dates, and order status.
• Account details: login or account identifiers, saved preferences, and information you choose to add to a customer account.
• Support and submissions: messages you send us, information you provide about a question or return, and reviews or other content you decide to submit.
• Marketing choices: whether you subscribed to email or text messages and records of your preferences or interactions with those messages.
• Device and usage details: IP address, browser and device characteristics, approximate location inferred from an IP address, pages viewed, referring links, and interactions with the store.

Because Often sells a sleep supplement, you may choose to tell us about sleep concerns or menopause-related experiences in a support message or review. We do not need a diagnosis to process an order. Please avoid sending medical records or other sensitive details unless necessary for your request.

Information may be associated with your account or order when you sign in, use the same contact details, or ask us to locate a purchase. We may also maintain records of whether an order was refunded, whether a subscription was changed, and whether a customer-service issue was resolved. Public submissions are different from private support requests: a review you choose to publish may be visible to other visitors.

Personal Information Categories Chart

The table summarizes information relevant to the store. What we collect depends on how you interact with Often.

Personal Information Category	Examples of Information Category	Is Category Collected?	Business Purpose Disclosures	Category of Third-Party Recipients
CategoryA: Identifiers	ExamplesName, email, address, IP	Collected?Yes	PurposeOrders and support	RecipientsService providers
CategoryB: Customer records	ExamplesBilling and delivery details	Collected?Yes	PurposeTransactions	RecipientsPayment; fulfillment providers
CategoryC: Protected characteristics	ExamplesDetails shared with support	Collected?If provided	PurposeSupport	RecipientsSupport providers
CategoryD: Commercial information	ExamplesPurchases, returns, subscriptions	Collected?Yes	PurposeFulfillment	RecipientsService providers
CategoryE: Biometric information	ExamplesFace or voice identifiers	Collected?No	Purpose—	Recipients—
CategoryF: Online activity	ExamplesPage views and device details	Collected?Yes	PurposeSite operation	RecipientsService providers
CategoryG: Geolocation	ExamplesApproximate area; shipping address	Collected?Yes	PurposeDelivery and security	RecipientsService providers
CategoryH: Sensory information	ExamplesOptional photos or recordings	Collected?If provided	PurposeSupport or reviews	RecipientsSupport; review providers
CategoryI: Employment information	ExamplesJob history	Collected?Not for shopping	Purpose—	Recipients—
CategoryJ: Education information	ExamplesSchool records	Collected?Not for shopping	Purpose—	Recipients—
CategoryK: Inferences	ExamplesLikely product interests	Collected?May be inferred	PurposeRelevant content	RecipientsAnalytics; advertising partners
CategorySensitive information	ExamplesSleep concerns shared with support	Collected?If provided	PurposeSupport and safety	RecipientsRelevant support providers

Categories and legal definitions differ by jurisdiction. We do not require government ID numbers, biometric data, precise location, employment history, or school records for a standard order. A third-party payment provider may collect payment-card data directly under its own privacy notice.

Sensitive Personal Information

Some details you voluntarily share with us, including health-related concerns, may be considered sensitive under applicable law. We use such information to respond to your request, address product or safety questions, comply with law, or for another purpose you specifically authorize. We do not use the substance of a private support message to target advertising to you.

Other details may qualify as sensitive only in particular jurisdictions, such as an account password, precise location, or a government identifier. An ordinary Often order does not require you to provide a medical history, a government identifier, or precise device location. Please do not include those details in a review or general message. If you send sensitive information to customer support, we may need to share the relevant portion with a provider helping us answer you or address a safety issue.

Sources of Personal Information

We receive information directly from you when you place an order, create an account, subscribe, submit a review, or contact us. We receive device and activity information when you use our website. We may also receive information from Shopify and the service providers that help us process payments, deliver orders, support customers, measure site performance, and run marketing programs.

• You: checkout and account forms, purchases, subscription selections, customer-service messages, product reviews, survey responses, and marketing sign-ups.
• Your browser or device: log and usage data collected as you navigate the store, subject to available cookie and privacy controls.
• Commerce providers: Shopify, payment providers, delivery services, and other vendors may return a transaction result, delivery update, fraud signal, or support record.
• Marketing and analytics partners: where those services are active and permitted, we may receive campaign performance or information about how visitors reached the site.

If someone sends a gift to you or contacts us on your behalf, we may receive the contact and delivery information needed to respond or deliver the order.

Payment Information

When you check out, Shopify and the payment method you choose process payment details under their own security and privacy practices. Often receives information needed to confirm and manage the transaction, such as payment status and limited payment-method details. We do not need your full card number to provide customer support.

Payment providers may use transaction information to authorize a charge, detect fraud, process a refund, and satisfy financial recordkeeping requirements. If a payment fails, we may receive the failure status and ask you to update your method through the secure checkout or account flow. Please do not send payment-card numbers in an email or support message.

Information We Automatically Collect

Our store and its service providers may use cookies, local storage, log files, pixels, and similar technologies to keep the site working, remember preferences, understand visits and purchases, prevent fraud, and measure or deliver advertising. These technologies may record device identifiers, IP address, browser type, pages and products viewed, links clicked, referral source, and timing of activity.

Necessary technologies support checkout, security, and basic site operation. Functional technologies remember settings and account choices. Analytics technologies help us understand performance. Advertising technologies may measure campaigns or show relevant ads, subject to applicable consent and opt-out requirements. You can manage cookies through your browser and any privacy controls presented on our website; blocking essential cookies may affect checkout or account features.

Cookies are small files a website can ask your browser to store. Similar technologies include local storage, tags, and pixels. A first-party technology is set by the site you visit; a third-party technology is supplied by another service. Some expire when you close a browser, while others last longer so a preference can be remembered. The providers used and the exact lifespan may change as we update the store.

Most browsers let you delete or block cookies. You may also be able to restrict tracking in your device settings or submit a Global Privacy Control signal. Your choices may need to be set separately on each browser or device. Rejecting an optional technology does not necessarily remove information already collected, but an applicable deletion or access request can be made as described below.

How We Use Personal Information

• To accept payment, fulfill and deliver orders, manage subscriptions or returns, and provide the products and services you request.
• To create and maintain accounts, answer questions, provide customer support, and communicate about transactions or service issues.
• To operate, analyze, improve, and secure our store, products, customer experience, and business systems.
• To send promotional messages when you have chosen to receive them and to measure advertising, subject to your choices and applicable law.
• To detect fraud or misuse, comply with legal obligations, and protect the rights and safety of customers, Often, and others.
• To remember a cart or a preference, show information relevant to the products you view, and understand whether store features work as intended.
• To administer a promotion or survey you enter, including checking eligibility and delivering a benefit according to its stated terms.
• To investigate a product-quality or safety concern, respond to a complaint, and maintain records of how it was handled.
• To establish, exercise, or defend legal claims and manage a corporate transaction if one occurs.

We use information only for purposes reasonably related to the context in which it was collected, or for another purpose disclosed to you with any consent required by law.

Sensitive Personal Information Use and Disclosure Purposes

When you choose to share sensitive details, we limit their use to what is reasonably needed to handle your request, protect the security and quality of our services, meet a legal duty, or carry out another use you authorize. Access is restricted to people and providers who need the information for that purpose.

Examples include confirming a customer-service issue, investigating an adverse product experience, guarding against unauthorized account access, and retaining information needed to comply with a valid legal request. We do not require sensitive health information to recommend a product or complete checkout. Where a law offers a right to limit additional sensitive-information uses, you may contact us using the method below.

Additional Categories or Other Purposes

If we intend to collect a new type of personal information or use information for a materially different purpose, we will provide notice and obtain consent when the law requires it. We may use deidentified or aggregated information for business analysis, provided we handle it in accordance with applicable law.

We may combine information from different interactions with Often, such as a support request and its related order, to resolve the issue accurately. We will not treat deidentified information as personally identifiable unless necessary to test the deidentification process or permitted by law.

Marketing Messages

If you sign up for Often emails, you can unsubscribe through the link in any promotional email. If you opt in to text messages, you can use the opt-out instructions in a message or contact us. Marketing choices do not stop necessary order, account, safety, or customer-service messages. Contact help@takeoften.com if you need help changing your preferences.

We may measure whether a marketing message was delivered, opened, or used to visit the store so we can understand a campaign's performance. If you unsubscribe, we may retain a limited suppression record to respect your choice. A text-message program, if offered, will present its sign-up terms before you opt in.

How We Disclose Personal Information

We disclose information as needed to operate the store and provide services: to Shopify; payment processors; shipping, fulfillment, and subscription providers; customer support and review tools; analytics and advertising partners where used; and professional advisers. We may also disclose information when you ask us to, when required by law, to protect against fraud or harm, or in connection with a business transaction such as a merger or sale. These recipients may process information under their own notices or under agreements with Often, depending on their role.

• Commerce and operations: providers that host the storefront, process payments, manage subscriptions, send service messages, fulfill orders, and handle returns.
• Support and content: vendors that operate customer-service, review, or communication tools, to the extent needed to provide those services.
• Measurement and advertising: partners that help us understand site traffic, attribute campaigns, or deliver ads where permitted by your settings and applicable law.
• Professional and legal recipients: advisers, regulators, courts, or law enforcement when a legitimate legal basis or obligation applies.
• At your direction or during a transaction: a recipient you ask us to involve, or a prospective buyer or successor in a reorganization, acquisition, financing, or sale subject to appropriate safeguards.

We may disclose aggregated or deidentified information that cannot reasonably be linked back to an individual. A vendor's access to information does not authorize it to use that information for every purpose; its role and applicable agreement or law govern what it may do.

Shopify

Shopify hosts our online store and processes information that you provide or generate while using it. Shopify may also use information to support store features, security, analytics, and its own services, depending on our settings and your choices. Learn more in the Shopify Consumer Privacy Policy and through Shopify’s privacy portal.

Because the store runs on Shopify, Shopify and its connected services may receive information when you browse, use checkout, or sign in. Some Shopify features can use data across participating stores according to Shopify's own notices and controls. For privacy choices that concern Shopify's independent processing, use Shopify's privacy resources in addition to contacting Often about the information we control.

Third Party Websites and Links

Our website may link to social platforms or other websites that Often does not operate. Their privacy practices are governed by their own notices. Review those notices before sharing information with them. If you post a public review or comment, other visitors may be able to see the information you choose to publish.

We are not responsible for the security, accuracy, or content of another site merely because we link to it. A third-party checkout, social, or embedded feature may collect information directly from you and may have different choices from those described here.

Notice of Financial Incentive

From time to time we may offer a discount or other benefit in connection with signing up for a program. Any material terms, eligibility rules, and choices will be shown with the specific offer. Joining is voluntary. You may leave a marketing program using its unsubscribe instructions, subject to the terms of an offer already redeemed.

If an offer is treated as a financial incentive under a state privacy law, the offer notice will explain what information is involved, how to join and withdraw, and how the benefit reasonably relates to the value of that information to us. We do not require you to join an incentive program to buy an Often product.

Children’s Data

Often’s store and supplements are intended for adults. We do not knowingly seek personal information from children. If you believe a child has given us information, email help@takeoften.com so we can review and address the request.

We do not knowingly sell or share personal information of anyone under 16. If we learn that information from a child was collected without the consent required by law, we will take appropriate steps to delete it or otherwise address it.

Data Security

We use reasonable administrative, technical, and organizational measures appropriate to the information we handle. Shopify and other providers also maintain safeguards for the services they supply. No website or transmission method can be guaranteed completely secure. Please keep account credentials private and contact us if you suspect unauthorized use of your account.

Safeguards may include limiting access to people who need information for their work, using supported checkout and account systems, and reviewing service-provider access. Please use a strong, unique password for any account and avoid emailing sensitive payment or medical records to us. If an incident affects your information, we will provide notices required by law.

Data Retention

We keep personal information for as long as reasonably needed for the purposes described here, including order fulfillment, customer support, accounting, fraud prevention, legal obligations, and dispute resolution. The period depends on the kind of information and the reason it was collected. When information is no longer needed, we delete or deidentify it where practicable, subject to legal and technical limits.

In deciding how long to retain a record, we consider its nature and sensitivity, the risk of harm from unauthorized use, whether we can meet the purpose with less information, the existence of an account or ongoing order, and applicable tax, consumer-protection, safety, or other recordkeeping duties. A purchase record may therefore remain after a marketing subscription ends. A backup may persist for a limited time after active records are removed.

Account Information

If you have an account, you can review or change some details through your account settings. For help with an account, correction, or deletion request, email help@takeoften.com. We may retain limited records when required for an order, legal compliance, fraud prevention, or another permitted reason.

Please keep your account details accurate so we can deliver purchases and answer requests. Closing an account may remove access to saved preferences and order tools, but it does not automatically erase records we must retain. We may need to verify that an account-change request came from you before acting on it.

International Users

Our store and providers may process or store information in the United States or other countries. Where a law requires protections for an international transfer, we use the transfer safeguards applicable to that processing. Privacy rights and available choices can differ by location.

Service providers may operate systems in multiple locations, and support access can occur from outside your home jurisdiction. The laws in those locations may differ from the laws where you live. We select transfer mechanisms and contractual protections when applicable to a particular transfer.

Notice to California and Texas Residents

Depending on where you live and which privacy law applies, you may have rights to request access to, correction of, or deletion of your personal information; obtain a portable copy; opt out of certain sale, sharing, or targeted advertising uses; or limit certain uses of sensitive information. Some rights have exceptions. We do not deny a customer a product or service merely because they exercise a privacy right, although an information choice can affect a feature that depends on that information.

• Know and access: ask what categories and specific pieces of information we hold about you, the sources, purposes, and categories of recipients, subject to legal limits.
• Correct: ask us to fix information that is inaccurate, taking account of its nature and why we use it.
• Delete: ask us to remove eligible information, subject to exceptions such as completing a transaction, detecting fraud, and keeping required records.
• Portability: receive eligible information in a usable form where the law provides that right.
• Opt out or limit: request an opt-out of covered sale, sharing, or targeted advertising, and request limits on sensitive-information uses where applicable.
• Non-discrimination: receive the same lawful treatment for exercising a privacy right, except for a permitted difference tied to an optional program or the information needed to provide a feature.

These rights vary by state and do not apply identically to every type of information. We will assess a request under the law that applies to the individual and the information at issue.

Exercising Your Rights

Send a privacy request to help@takeoften.com and describe the right you want to exercise. We may ask for information reasonably necessary to verify your identity and authority before fulfilling a request. An authorized agent may submit a request on your behalf where the law permits. We will respond within the time required by applicable law and explain when an exception applies. If you have a right to appeal a decision, you can reply to our response or email us with “Privacy Appeal” in the subject line.

To help us find the right records, include the email address or order number associated with your interaction. Do not send a government ID or other sensitive record in the first message. We may compare details you provide with records already held or ask you to complete a reasonable verification step. If an agent acts for you, we may ask for proof of authorization and, where permitted, verification directly from you.

We generally do not charge for a privacy request. If a law allows a fee for a manifestly unfounded or excessive request, we will explain that before proceeding. If we cannot fulfill all or part of a request, our response will describe the reason, any available appeal path, and how to submit an appeal.

Selling or Sharing Personal Information

Some disclosures to advertising or analytics partners can be treated as a “sale,” “sharing,” or “targeted advertising” under privacy laws even when no money changes hands. You may request an opt-out by emailing help@takeoften.com with “Do Not Sell or Share” in the subject line. We will process applicable requests and privacy choices under the laws that apply to you.

An opt-out applies to the covered use; it does not stop disclosures necessary to run checkout, deliver an order, prevent fraud, or meet a legal requirement. If we know a person is under 16, we do not sell or share that person's information. Browser-based choices may need to be repeated in another browser or after clearing cookies unless we can associate the request with an account.

Global Privacy Control

Global Privacy Control is a browser setting that communicates an opt-out preference. Where applicable law requires us to honor a recognized signal, we will treat it as a request for the relevant browser or device. You can also email us to make a request tied to your customer account or contact details.

A signal is generally sent by a particular browser or device and may not identify you by name. If you use multiple browsers or devices, enable the signal on each one. Contact us if you need help with a request that cannot be resolved through the browser signal alone.

California’s Shine the Light Law

California residents may request information about certain disclosures of personal information to third parties for their own direct marketing. Send a request to help@takeoften.com and identify it as a “Shine the Light” request.

This right is distinct from an opt-out of sale or sharing for cross-context behavioral advertising. We will review and respond to an eligible request under the requirements of that law.

Contact

For questions about this policy, our privacy practices, or a privacy request, contact Atlas Brands LLC, doing business as Often, at help@takeoften.com.

Mobile phone numbers and text-message opt-in information are used to administer the messaging program you choose. We do not disclose text-message opt-in consent to third parties for their own marketing.

Please identify the topic of your message so it reaches the appropriate team. For a privacy-right request, include “Privacy Request” in the subject line; for an advertising opt-out, include “Do Not Sell or Share.” We will use the information in your request to verify and answer it.