Privacy policy
Effective date and last updated: October 29, 2026
This policy explains what personal information NEWGEN27 LLC, doing business as Doctor's Biome ("Doctor's Biome", "we", "us"), collects when you visit www.doctorsbiome.com, buy from us, subscribe, sign up for emails, contact us, or apply as a practitioner; why; who we share it with; how long we keep it; and your choices and rights. It is also our notice at collection under California law.
1. The short version
- We collect what we need to sell and ship you a refrigerated food, run subscriptions, answer you, and send emails you asked for.
- We do not ask for health information. Doctor's Biome is a food.
- Our site uses advertising cookies and pixels from Meta, Google, TikTok and Microsoft, and an affiliate network. Under California and other state laws this counts as "selling" or "sharing" personal information. You can opt out with the "Your privacy choices" link at the bottom of every page, the cookie banner, or Global Privacy Control in your browser.
- We never sell or rent our customer list.
- You can ask to see, correct or delete your information. We answer within 45 days.
2. Who we are and how to reach us
NEWGEN27 LLC DBA DOCTOR'S BIOME
Email: support@doctorsbiome.com (put "Privacy request" in the subject) · Phone: (631) 240-3066 Opt out of sale and sharing: Your privacy choices
3. What we collect and why
| What | Examples | Where it comes from | Why |
|---|---|---|---|
| Identifiers and contact details | Name, email, postal address, phone, account login, IP address, cookie and device IDs, order number | You (checkout, account, forms, chat); your device | Take, ship and support orders; run your account and subscription; send order and shipping messages; prevent fraud; advertising (if you allow it) |
| Payment details | Card or PayPal details | You, at checkout | Take payment and refunds. Card details go straight to our payment processors (Shopify Payments, PayPal); we never see or store your full card number. |
| Purchases | What you bought, when, price, discount codes, subscription plan, cart contents, refunds | You, as you shop | Fulfil orders and subscriptions, customer service, accounting and tax, product decisions, measuring ads |
| Online activity | Pages and products viewed, clicks, scrolls, add to cart, referring site or ad, browser and device; recordings of how pages are used (clicks, scrolling, mouse movement); emails opened or clicked | Your device, through the tools in section 5 | Keep the site working, fix problems, improve pages, tailor our emails, measure and run ads (if you allow it) |
| Approximate location | City or region from your IP address. No precise location. | Your device | Currency and shipping options, fraud checks, which privacy rules apply, analytics |
| Messages and reviews | Chat, email and contact-form messages; phone calls; reviews and photos you post | You | Answer you; publish reviews you choose to post |
| Practitioner details | Practice name and location, profession, confirmation that you are a practising healthcare professional, practice order history | You, on the practitioner form or by phone or email | Verify you, open your practitioner account and pricing, serve your practice |
| Groupings | For example "subscriber" or "opened the last email"; ad platforms may draw their own inferences | Made by us in Shopify and Klaviyo, or by ad platforms | Send relevant emails; advertising (if you allow it) |
| Sensitive information | Account login; card number with security code (held by our payment processors) | You | Only to log you in and take payment. We do not use it to infer anything about you. |
We do not collect health information, precise location, government ID numbers, biometric data or information about race, religion or similar characteristics. If you send an order to someone else, we collect their name, address and phone to deliver it. We also receive order and payment status from Shopify, Recharge and PayPal, delivery updates from UPS, and referral details from our affiliate network when you arrive through a partner's link.
4. Who we share it with
Companies that work for us (service providers). They handle information only to provide their service to us, under contract: Shopify (store, checkout, accounts, Shop Pay), Shopify Payments and PayPal (payments), Recharge (subscriptions), Klaviyo (our emails), Gorgias (support chat and email), Judge.me (reviews), Microsoft Clarity (site analytics), Unific (connects our store data to our business tools), Sentry (error reports), UPS (delivery), and our accountants and advisers.
Advertising and affiliate partners (the "sale" or "sharing" you can opt out of). Meta (Facebook and Instagram), Google (Google Ads, Google Analytics, Google Merchant Center), TikTok, Microsoft Advertising (Bing), and the Shoutout affiliate network. Through their pixels and cookies on our site they receive cookie and device IDs, IP address, the pages and products you view, and what you add to cart or buy. They use it to measure our ads, show you our ads on other sites and apps, and for their own purposes under their own privacy policies.
Others. Reviews you post are public with the name you choose. We disclose information when the law requires it, to protect rights or safety, or to prevent fraud; to a buyer if the business is sold (the buyer must honour this policy); and when you ask us to (for example a gift order).
We do not share your information with other companies for their own direct marketing.
5. Tools on our site
"Sale/sharing" means the tool can use what it collects for advertising across other companies' sites and apps. Opting out turns these off. Cookie lifetimes are what we saw in October 2026; the companies can change them.
| Tool | What it does | Sale/sharing? | Main cookies (longest life) |
|---|---|---|---|
| Shopify | Store, cart, checkout, accounts, Shop Pay | No |
_shopify_essential, _shopify_analytics, _shopify_marketing, shopify_client_id, localization, cart_currency, cart, p, _shop_app_essential (1 year). The essential ones are always set: they hold your cart, currency and privacy choice. |
| Recharge | Subscriptions | No | None for advertising |
| Klaviyo | Our own emails and the sign-up offer | No |
__kla_id (about 13 months) |
| Gorgias | Support chat (may include automated replies) | No | Chat loads only if you allow preferences |
| Judge.me | Product reviews | No | Analytics only |
| Microsoft Clarity | How pages are used, with session recordings | No (analytics); runs without cookies if you decline |
_clck (1 year), _clsk (1 day) and Microsoft's CLID, MUID, MR, SM, ANONCHK (up to 13 months) |
| Microsoft Advertising (Bing) | Measure and run Bing ads | Yes |
_uetsid (1 day), _uetvid, MUID, SRM_B (about 13 months) |
| Google Analytics 4 | Site analytics; treated as sharing because Google can link it to advertising | Yes |
_ga, _ga_* (13 months) |
| Google Ads and Merchant Center (Google & YouTube app) | Measure and run Google, YouTube and Shopping ads | Yes |
_gcl_au (90 days) |
| Meta pixel | Measure and run Facebook and Instagram ads | Yes |
_fbp (90 days) |
| TikTok pixel | Measure and run TikTok ads | Yes |
_ttp, ttcsid, _tt_enable_cookie (about 13 months) |
| Shoutout | Pay affiliate partners for sales they refer | Yes | Script on site pages |
| Unific | Connects store data to our business tools | No | Script on site pages |
| Sentry | Technical error reports | No | None |
| Bunny Fonts, Google Hosted Libraries | Load the site's font and a code library (they see your IP address) | No | None |
| Google Pay, Apple Pay, PayPal | Express checkout, only if you choose them | No | Set by those companies |
6. Your choices
Cookie banner. Depending on where you are, a banner lets you accept or decline cookies for analytics, marketing and preferences. If you decline, the advertising and affiliate tools in section 5 do not run, Klaviyo sets no cookie (its sign-up offer may still appear, and joining is always your choice), the support chat does not load, and Microsoft Clarity runs without cookies. Shopify's essential cookies stay, because the store cannot work without them and they remember your choice.
"Your privacy choices" page (the link at the bottom of every page). Opt out there and the browser you are using is opted out of sale and sharing. Add your email and we also opt out the customer account linked to it, so the choice follows you when you sign in elsewhere.
Global Privacy Control (GPC). If your browser sends the GPC signal, we treat it as a request to opt out of sale and sharing for that browser, wherever you live, with no further step. The advertising and affiliate tools do not run. If you are signed in, we apply it to your account too. Tools that work only for us (Shopify, Recharge, Klaviyo for our emails, chat) keep working. For now, Google Ads may still record visits from a browser that sends GPC or has opted out; we are working to stop this, and you can also limit Google ads at adssettings.google.com.
Do Not Track. The older "Do Not Track" browser setting has no agreed meaning, so we do not act on it. We do honour GPC.
You can change your mind at any time from "Your privacy choices". You can also block or delete cookies in your browser, but the cart and checkout need Shopify's essential cookies.
7. How long we keep it
| Information | How long |
|---|---|
| Orders, payments, refunds | 7 years after the order (tax and accounting) |
| Account and subscription details | While active, then 3 years after your last order or sign-in, unless you ask us to delete them sooner |
| Email list profile | Until you unsubscribe or ask us to delete it. We keep your email on a "do not email" list so we can honour your unsubscribe. |
| Messages (chat, email, contact form) | 3 years after the conversation ends |
| Practitioner applications | Approved: while the account is active plus 3 years. Not approved: 1 year. |
| Reviews | While published; removed on request |
| Analytics and advertising data | Up to 14 months in our analytics tools |
| Records of privacy requests | 24 months |
8. Emails and texts
Email. We send marketing emails only if you sign up: in the sign-up offer on our site, the newsletter box at the bottom of the page, or the "Email me with news and offers" box at checkout. Every marketing email has an unsubscribe link and our postal address; unsubscribing takes effect right away and always within 10 business days. You will still get messages about your orders, subscription and account.
Texts. We do not send marketing texts. We may use your phone number to contact you about delivery of a perishable order. If we ever offer marketing texts, we will ask for your separate written consent first, it will never be a condition of buying, and you can reply STOP at any time. We do not share your mobile number for others' marketing.
9. Notice of financial incentive: the sign-up discount
We offer 15% off your first order (code SIGNUP15, one use per customer) when you join our email list.
- What you give us: your email address, and the browsing and purchase activity Klaviyo links to it.
- Joining is optional. Enter your email in the sign-up offer. You can leave at any time by unsubscribing; you keep any discount already used.
- Value: we estimate the value of a subscriber's information to us at about $27, the amount of the 15% discount on one 30-day supply. Method: we treat the value as equal to what we give, because the list's purpose is to win a first order.
10. Subscriptions
Subscriptions are run by Recharge on Shopify. Your card is stored by our payment processor so that renewals can be charged; we never see your full card number. The price, how often you are charged, and how to cancel are shown before you buy and in your confirmation email. You can cancel online at any time from your account (Manage Subscriptions). See our Refund Policy, section 3.
11. Health information
We do not ask for, and do not want, information about your health, symptoms, diagnoses or medications, and we do not use your purchases to guess at your health. The blend names ("Gut Health", "Women's Health") describe the product; we record nothing about you from which one you buy. Please do not put health details in chat, emails or reviews; if you do, we use them only to answer you and will delete them on request. We do not run quizzes or surveys that collect answers; if we add one, we will update this policy and ask for your consent first.
Washington and Nevada. We do not intend to collect "consumer health data" under Washington's My Health My Data Act or Nevada's law, and we do not sell it. If you live there and think we hold any, you can ask us to confirm, see, delete or stop sharing it, and withdraw consent, using section 13.
12. Children
Our site is for adults; you must be 18 or older to buy or open an account. We do not knowingly collect information from children under 13, and we do not sell or share the information of anyone we know to be under 16. If you think a child has given us information, email us and we will delete it.
13. Your privacy rights (every US customer)
Wherever you live in the United States, you can ask us to:
- Know and get a copy of the personal information we hold about you, where it came from, why we use it and who we shared it with.
- Correct information that is wrong.
- Delete your information, except what we must keep (for example tax records, or a record that you unsubscribed).
- Opt out of sale, sharing and targeted advertising (section 6). We do not use your information for decisions with legal or similarly significant effects.
- Withdraw consent you gave us.
- Appeal if we turn down a request.
How to ask: email support@doctorsbiome.com with "Privacy request" in the subject, or call (631) 240-3066. To opt out of sale and sharing, use "Your privacy choices" or GPC; no email needed.
Checking it is you. We match details you give (for example name, email and a recent order number or delivery ZIP code) to what we hold, and use them only to verify you. Someone you authorize can ask for you with your signed permission; we may still ask you to confirm with us.
Timing. We confirm your request within 10 business days and answer within 45 days (if we need up to 45 more, we tell you why). Opt-outs take effect as soon as we get them, and always within 15 business days.
Appeals. Reply to our answer with "Appeal" in the subject. A different person reviews it and answers within 45 days. If you still disagree, you can contact your state's Attorney General (in California, also the California Privacy Protection Agency, cppa.ca.gov).
No penalty. We will not deny you goods, charge a different price or give a worse service because you used these rights. The sign-up discount (section 9) is the only offer tied to personal information.
14. California residents
This section adds to section 13 under the California Consumer Privacy Act as amended by the California Privacy Rights Act, and the California Online Privacy Protection Act. You have the rights to know, delete, correct, opt out of sale and sharing, limit use of sensitive personal information, and not be discriminated against. We use sensitive personal information only to log you in and take payment, so we do not offer a separate "limit" choice.
In the last 12 months, we sold or shared, for advertising, these categories: identifiers (cookie and device IDs, IP address), commercial information (products viewed, added to cart, bought), internet activity and approximate location, with advertising networks (Meta, Google, TikTok, Microsoft) and our affiliate network (Shoutout). We disclosed every category in section 3 to the service providers in section 4 for business purposes. We did not sell or share payment details, messages, practitioner details or sensitive information.
Shine the Light. We do not share personal information with other companies for their own direct marketing.
15. Security and where data is stored
We use reputable providers (Shopify's checkout meets the payment card industry standard, PCI DSS Level 1), encryption in transit, and access limited to people who need it. No system is perfectly secure; if a breach affects you, we will tell you as the law requires. We are based in New York and our providers store information mainly in the United States. If you are outside the US, including Canada, your information is processed in the US.
16. Other sites
Our site links to Facebook, Instagram, YouTube and other sites, and the tools in section 5 have their own privacy policies on their websites. Those policies apply there.
17. Changes to this policy
We review this policy at least once a year. When we change it, the date at the top changes. If we make a material change, such as a new kind of information or a new use for it, we will show a notice on the site and email customers and subscribers before it takes effect. We will not use information collected under an earlier version in a materially different way without your consent.
18. Contact
NEWGEN27 LLC DBA DOCTOR'S BIOME
support@doctorsbiome.com · (631) 240-3066