Legal

Privacy Policy

What we collect, why we collect it, and what you can ask us to do with it.

Last updated

Who we are

Scoops Monster (“Scoops Monster”, “we”, “us”) is the controller of the personal data described in this policy. 4254 W Orchid Lane, Chandler, AZ 85226, Maricopa County, USA support@scoopsmonster.com

What we collect

When you place an order: your name, email address, shipping address, phone number if you provide one, and the contents of your order.

Payment information: handled entirely by Stripe. Card numbers are entered on Stripe's own hosted checkout and never reach our servers. We receive only a payment reference, the amount charged, and the result.

When you verify a pack: the code checked, the time, your IP address, an approximate country and city derived from it, and your browser's user-agent string. The QR flow additionally asks for a name and email; typing a serial number in manually does not.

When you contact us or join the launch list: the details you submit in the form, plus the IP address the submission came from.

Why we collect it

  • To fulfil your order — taking payment, shipping goods, and handling returns. This is necessary to perform our contract with you.
  • To detect counterfeits — verification data is analysed to spot codes being checked in patterns that indicate a copied label. This is our legitimate interest in protecting customers from counterfeit supplements, and it is the core purpose of the verification system.
  • To answer you — responding to a message you sent us.
  • To send launch alerts — only after you confirm your address by clicking the link in a confirmation email. This is consent, and you can withdraw it at any time.
  • To meet legal obligations — retaining transaction records for tax and accounting purposes.

Who we share it with

We do not sell personal data, and we do not share it for advertising. We use a small number of processors who handle data on our instructions:

  • Stripe — payment processing and fraud prevention.
  • Resend — sending transactional and marketing email.
  • Shipping carriers — the delivery address needed to get the parcel to you.
  • Our hosting provider — which stores the database this site runs on.

We may also disclose data where legally required, or to establish or defend a legal claim — including action against counterfeiters.

How long we keep it

  • Order records: seven years, to meet tax and accounting requirements.
  • Verification and scan records: three years. This window is what makes long-running counterfeit operations detectable.
  • Contact messages: two years after the conversation ends.
  • Launch-list subscriptions: until you unsubscribe. We keep a suppression record afterwards so you are not re-added by a later import.
  • Shopping carts: thirty days from the last change, then deleted automatically.

Cookies

This site sets only cookies it needs to work: a cart identifier, a sign-in session cookie if you have an account, and an administrator session cookie for staff. There are no advertising cookies, no analytics cookies, and no third-party trackers — which is why you are not being asked to accept anything.

Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or object to processing we base on legitimate interests. If you are in the EEA or UK you also have the right to complain to your local data-protection authority. If you are a California resident you may request disclosure or deletion of your personal information, and we will not discriminate against you for asking.

Email support@scoopsmonster.com and we will respond within 30 days. Note that we cannot delete order records we are legally required to retain, and deleting verification records tied to a suspected counterfeit may be refused where we need them to defend a legal claim.

International transfers

We are based in the United States and our processors operate internationally, so your data may be transferred outside your country of residence. Where required, those transfers rely on standard contractual clauses or an equivalent safeguard.

Children

This site is not directed at children under 16, and we do not knowingly collect their data. Dietary supplements are not intended for children except on the advice of a physician.

Changes

If this policy changes materially we will update the date at the top of this page and, where the change affects how we use data you have already given us, notify subscribers by email.

See also our Terms of Sale and Returns Policy.