Privacy Policy
Privacy Policy for CitrusBurn
Last Updated: February 17, 2026
🛡️ GDPR Compliant
⚖️ CCPA/CPRA
🍪 Cookie Policy Included
🔒 SSL Encrypted
Welcome to CitrusBurn. Your privacy is important to us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or make a purchase of CitrusBurn products. Please read this policy carefully. If you do not agree with these terms, please do not access the site.
We are committed to protecting your personal information in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and other relevant privacy laws.
Throughout this policy, "we," "us," and "our" refer to CitrusBurn Health LLC.
📥
3. Information We Collect
We collect several types of information from and about users of our website, including:
3.1 Personal Information You Provide to Us
When you visit our website, purchase products, or interact with us, we may ask you to provide:
- Identity Information: Name, username or similar identifier
- Contact Information: Email address, billing/shipping address, phone number
- Payment Information: Credit card details or PayPal email (processed securely through third-party payment processors — we do not store full payment details on our servers)
- Account Information: Username, password, and purchase history
- Communications: Any information you provide when contacting customer support
3.2 Information Automatically Collected
When you visit our website, we automatically collect certain information using cookies and similar tracking technologies:
- Device Information: IP address, browser type, operating system, device identifiers
- Usage Data: Pages visited, time spent, clickstream data, referring websites
- Location Information: General geographic location based on IP (not precise GPS)
3.3 Information from Third Parties
- Payment processors (to confirm payment status)
- Shipping carriers (for order tracking)
- Marketing partners and advertising networks (for campaign performance analysis)
⚙️
4. How We Use Your Information
4.1 To Process and Fulfill Orders
- Process your payments and prevent fraudulent transactions
- Ship your orders and provide order confirmation
- Communicate with you about your order status
4.2 To Improve Our Website and Services
- Analyze how users interact with our site to improve user experience
- Troubleshoot technical issues and ensure site functionality
- Develop new products and features
4.3 To Market to You (With Your Consent Where Required)
- Send promotional emails about new products or special offers (only if you have opted in)
- Display relevant advertisements to you on third-party platforms
- Measure the effectiveness of our advertising campaigns
4.4 To Comply with Legal Obligations
- Maintain records as required by law
- Respond to lawful requests from public authorities
- Enforce our terms and conditions
4.5 For Remarketing and Personalization
If you have consented, we use Microsoft Advertising's UET tag and similar tools to:
- Create remarketing lists based on your activity on our site
- Show you personalized advertisements on the Microsoft Audience Network and other platforms
- Analyze conversion data to optimize our campaigns
🍪
5. Cookies and Tracking Technologies
5.1 What Are Cookies?
Cookies are small text files placed on your device when you visit a website. They help websites work more efficiently and provide information to site owners.
5.2 Types of Cookies We Use
| Cookie Type |
Purpose |
Duration |
Consent? |
| Essential |
Required for site functionality, shopping cart, and security |
Session / persistent |
No (legitimate interest) |
| Analytics |
Track how visitors use the site and which pages are most popular |
Persistent |
Yes (some jurisdictions) |
| Advertising |
Track browsing habits to deliver relevant ads, limit ad frequency |
Persistent |
Yes |
| Functional |
Remember your preferences and settings |
Persistent |
Yes (some jurisdictions) |
5.3 Third-Party Tracking Tools
5.4 How to Control Cookies
You have the right to accept or reject cookies:
- Browser Controls: Set your browser to refuse all or some cookies. Note: disabling cookies may affect site functionality.
- Cookie Consent Banner: When you first visit, you can accept all cookies, reject non-essential cookies, or customize preferences.
Opt out of interest-based advertising through:
🇪🇺 For EU/EEA Users: By default, our UET tag sets ad_storage to "denied" until you provide consent. Only after you explicitly accept advertising cookies will full tracking be enabled.
🤝
6. How We Share Your Information
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
6.1 Service Providers
- Payment processors — Stripe, PayPal, ClickBank
- Shipping carriers — USPS, FedEx, UPS
- Email marketing platforms — only with your consent
- Analytics providers — Google, Microsoft
- Customer support tools
6.2 Advertising Partners
We share hashed or anonymized data with advertising platforms such as Microsoft Advertising for the purpose of measuring ad performance, building remarketing audiences, and optimizing campaign delivery.
6.3 Business Transfers
If we are involved in a merger, acquisition, or asset sale, your information may be transferred as part of that business transaction.
6.4 Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities.
⚖️
7. Your Rights and Choices
7.1 For All Users
- Opt-Out of Marketing: Unsubscribe from promotional emails at any time by clicking the "unsubscribe" link in any email we send.
- Browser Cookie Controls: Block cookies through your browser settings.
7.2 For California Residents (CCPA/CPRA)
If you are a California resident, you have the right to:
- Know what personal information we collect, use, and share
- Request deletion of your personal information
- Opt-out of the "sale" of your personal information (Note: we do not sell your information; however, sharing for cross-context behavioral advertising may be considered a "sale" under California law)
- Non-discrimination for exercising your privacy rights
To exercise your California rights, contact us at privacy@[citrusrev].online.
7.3 For EU/EEA/UK Residents (GDPR)
If you are in the European Economic Area, Switzerland, or the United Kingdom, you have the right to:
- Access your personal data
- Rectify inaccurate or incomplete data
- Erasure (right to be forgotten)
- Restrict processing
- Data portability
- Object to processing (including direct marketing)
- Withdraw consent at any time where processing is based on consent
7.4 Opt-Out of Interest-Based Advertising
When you opt out, you will still see ads, but they will not be personalized based on your browsing behavior.
We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction.
8.1 Security Measures Include
- SSL/TLS encryption for all data transmitted between your browser and our servers
- Secure payment processing through PCI-DSS compliant payment gateways
- Regular security assessments and monitoring
- Access controls limiting employee access to personal data
- Secure data storage with industry-standard protections
8.2 Sensitive Information
Any collection of sensitive information (such as payment details) is performed on secure servers using HTTPS encryption and only when strictly necessary for processing your order.
8.3 Data Breach Procedures
In the unlikely event of a data breach that affects your personal information, we will notify you and any applicable regulator as required by law.
Our website is not intended for children, and we do not knowingly collect personal information from anyone under the age of 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
We comply with:
- COPPA — Children's Online Privacy Protection Act (US)
- GDPR age of consent requirements in Europe (typically 16, varies by country)
If we become aware that we have collected personal information from a child without verification of parental consent, we will take steps to delete that information.
🌍
10. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from the laws of your country.
10.1 Legal Basis for Transfers
When we transfer personal data from the EEA to countries not deemed adequate by the European Commission (such as the United States), we rely on:
- Standard Contractual Clauses approved by the European Commission
- Your explicit consent (where applicable)
- Contract performance (e.g., shipping your order)
10.2 Where We Store Data
Our servers and those of our service providers are located primarily in the United States.
🔄
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors.
- Material changes will be notified via email (if we have it) and/or a prominent notice on our website at least 15 calendar days before the changes take effect.
- Non-material changes become effective immediately upon posting.
We encourage you to review this Privacy Policy periodically. The "Last Updated" date at the top indicates when it was last revised.
✅
Bing Ads Compliance Checklist
Based on Microsoft Advertising requirements, ensure you complete these steps:
Privacy policy link prominently visible on all pages (header, footer, and cookie banner)
Company name clearly stated — "CitrusBurn Health LLC" (or your actual entity)
Purpose of data collection clearly explained (covered in Section 4)
Opt-out instructions provided (covered in Section 7)
Contact information included — email, phone, address required
Cookie consent banner implemented (required for EU/UK visitors)
Microsoft UET Consent Mode configured — set ad_storage to "denied" by default for EU
Link to Microsoft Privacy Statement included (privacy.microsoft.com)
SSL certificate installed (HTTPS) — required for collecting personal data
Trust Score checked on ScamAdviser — should show "Green"
No 404 pages on site — test all links before going live