Privacy Policy

We collect information that you provide directly to us, as well as information automatically collected when you use our website, products, or services.

Personal Information You Provide:

• Account Information: Name, email address, phone number, shipping address, and billing information when you create an account or make a purchase.
• Health Data: Glucose readings, health metrics, and other data generated by your use of the EVELOP CGM system (only if you choose to sync with our mobile app).
• Communication Data: Information you provide when contacting customer support, submitting feedback, or participating in surveys.
• Payment Information: Credit card details and billing address (processed securely through our payment partners; we do not store full card numbers).

Information Collected Automatically:

• Device Information: IP address, browser type, operating system, device identifiers, and mobile network information.
• Usage Data: Pages visited, time spent on pages, links clicked, and other analytics data collected via cookies and similar technologies.
• Location Data: Approximate location based on IP address (we do not collect precise GPS location unless you explicitly grant permission).

We use the information we collect for the following purposes:

• Order Fulfillment: Process and deliver your orders, manage subscriptions, and send order confirmations and shipping updates.
• Customer Support: Respond to your inquiries, troubleshoot issues, and provide technical assistance.
• Product Improvement: Analyze usage patterns to improve our products, services, and user experience.
• Personalization: Customize your experience, provide relevant product recommendations, and display personalized content.
• Marketing Communications: Send promotional emails, newsletters, and special offers (you can opt out at any time).
• Legal Compliance: Comply with applicable laws, regulations, and legal processes; enforce our terms and policies; and protect our rights and safety.
• Research & Development: Conduct anonymized research to develop new features and improve diabetes care technology.

We use cookies, web beacons, and similar technologies to enhance your browsing experience, analyze site traffic, and understand user behavior.

Types of Cookies We Use:

• Essential Cookies: Required for the website to function properly (e.g., shopping cart, login sessions).
• Analytics Cookies: Help us understand how visitors interact with our site (e.g., Google Analytics).
• Marketing Cookies: Used to deliver relevant advertisements and track campaign effectiveness.
• Preference Cookies: Remember your settings and preferences for a better user experience.

You can control cookies through your browser settings. Note that disabling certain cookies may affect website functionality.

We do not sell your personal information. We may share your information with trusted third parties in the following circumstances:

• Service Providers: Third-party vendors who assist with payment processing, shipping, email delivery, analytics, and customer support (e.g., Shopify, Stripe, PayPal).
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
• Legal Requirements: When required by law, court order, or government request; or to protect our rights, property, or safety.
• With Your Consent: When you explicitly authorize us to share your information with third parties.

All third-party service providers are contractually obligated to protect your data and use it only for the purposes we specify.

Depending on your location, you may have the following rights regarding your personal information:

GDPR Rights (European Union):

• Access: Request a copy of the personal data we hold about you.
• Rectification: Correct inaccurate or incomplete information.
• Erasure: Request deletion of your personal data (subject to legal obligations).
• Restriction: Limit how we process your data in certain circumstances.
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests or for direct marketing.

CCPA Rights (California, USA):

• Know: Request disclosure of the categories and specific pieces of personal information we collect.
• Delete: Request deletion of your personal information (subject to exceptions).
• Opt-Out: Opt out of the sale of personal information (note: we do not sell personal data).
• Non-Discrimination: Exercise your rights without facing discriminatory treatment.

To exercise any of these rights, please contact us at privacy@evelop.com. We will respond within 30 days.

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law.

• Account Data: Retained while your account is active and for up to 3 years after account closure (for legal and warranty purposes).
• Transaction Records: Retained for 7 years to comply with tax and financial regulations.
• Health Data: Retained as long as you use our mobile app; deleted within 90 days of account deletion (unless required for legal compliance).
• Marketing Data: Retained until you unsubscribe or request deletion.

After the retention period, we securely delete or anonymize your data so it can no longer be associated with you.

We implement industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction.

• Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS.
• Access Controls: Only authorized personnel have access to personal data, and access is logged and monitored.
• Regular Audits: We conduct regular security audits and vulnerability assessments.
• Secure Storage: Data is stored on secure servers with firewalls, intrusion detection, and backup systems.

While we strive to protect your information, no method of transmission over the internet is 100% secure. Please use strong passwords and keep your account credentials confidential.

Our website and services are not intended for children under the age of 13. We do not knowingly collect personal information from children under 13 without parental consent.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@evelop.com, and we will promptly delete such information.

EVELOP operates globally, and your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws.

When we transfer your data internationally, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions recognizing equivalent data protection standards
• Binding Corporate Rules for intra-group transfers

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

When we make material changes, we will notify you by:

• Posting the updated policy on this page with a new "Last Updated" date
• Sending an email notification to your registered email address
• Displaying a prominent notice on our website

Your continued use of our website and services after the changes take effect constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: