Privacy Policy
Effective Date: 11/23/2025
1. Scope and Relationship to Other Notices
This Privacy Policy governs personal information collected through our website, forms, and communications at olyaloha.com, including interactions submitted through web forms, email, SMS, or phone. It applies to visitors, customers, prospective customers, and individuals enrolling as distributors or requesting information about our wellness products or services.
2. Definitions
Personal Information means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to an identifiable person or household. Sensitive Personal Information includes government identifiers, precise location, financial account information, payment credentials, contents of communications, wellness-related information submitted voluntarily, and information concerning children. Sell, Share, Targeted Advertising, and Profiling have the meanings assigned under applicable state privacy laws.
3. Notice at Collection and Sources of Personal Information
We collect personal information directly from you when you submit forms, complete a distributor enrollment, make a product or enrollment-related payment, or communicate with us. Information may also be collected automatically through cookies and tracking technologies, and from service providers supporting website, messaging, and payment functions. Categories collected may include identifiers, contact details, wellness or enrollment information you voluntarily submit, usage data, device information, communications content, and transaction or payment information. For verification and processing purposes, personal information—including payment information you provide—may be transmitted to you or your sponsor through email or SMS messaging, secured through reasonable safeguards.
4. Purposes and Legal Bases for Processing
We use personal information to deliver services, process distributor inquiries or enrollments, support product or enrollment-related payments, provide customer service, ensure security, personalize experiences, and comply with legal obligations. This may include sending confirmations, payment details, and verification messages through email or SMS when necessary to complete your request. For individuals in the European Economic Area or the United Kingdom, we rely on consent, contract necessity, legitimate interests, legal obligation, or vital interests as applicable.
5. Sensitive Personal Information
We do not intentionally collect sensitive personal information unless you provide it voluntarily or it is necessary for a clearly disclosed purpose such as verifying identity, facilitating transactions, or processing wellness-related information you choose to share. Any wellness or health-related details submitted by you are treated as sensitive and used only for the purpose for which they were provided.
6. Automated Decision Making and Profiling
We may use limited automated processes to route communications, respond to common questions, or support appointment or consultation scheduling. We do not make decisions that produce legal or similarly significant effects without meaningful human involvement. You may request information about automated processes and may opt out of profiling used for targeted advertising where permitted by law.
7. Cookies, Analytics, and Advertising Technologies
We use necessary, functional, and analytics cookies as well as similar technologies to improve website performance and understand engagement. You may manage cookies through your browser settings. Where required, we recognize certain browser-based preference signals for opt-out choices as described in the Opt Out section.
8. Do Not Sell or Share, Targeted Advertising, and Opt Out Signals
We do not sell personal information for monetary consideration. To the extent certain analytics or advertising technologies may be characterized as selling or sharing under state law, you may opt out through available site controls or by enabling a recognized browser-based preference signal.
9. Data Security
We maintain administrative, technical, and physical safeguards designed to protect personal information, including secure transmission methods, access controls, and monitoring of our website and communication systems. No method of storage or transmission is completely secure, and we cannot guarantee absolute protection.
10. Data Retention
We retain personal information only as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, or enforce agreements. Once no longer required, we delete or de-identify information in accordance with documented retention practices.
11. Opt-In and Consent
When you submit your contact information through our website, forms, or communication tools, you may choose to opt in to receive communications from OlyAloha. These communications may include enrollment confirmations, wellness or product information, service updates, appointment reminders, and promotional messages. By opting in, you consent to receive email, SMS messages, and phone communications related to your inquiries, distributor enrollment, or interactions with OlyAloha. Message and data rates may apply, and message frequency may vary. You may withdraw consent at any time by replying STOP to SMS messages or using the unsubscribe link in emails. Your consent is voluntary and not required as a condition to purchase or enroll.
12. Your Privacy Rights and How to Exercise Them
Depending on your location, you may have rights to access, correct, delete, or request portability of your personal information, and to opt out of sale, sharing, targeted advertising, or certain types of profiling. You may also have the right to appeal a decision regarding a privacy request. Requests may be submitted using the contact information provided at the end of this Policy. We will verify your identity as required before responding, and authorized agents may submit requests with appropriate documentation.
13. Children’s Privacy
We do not knowingly collect personal information from children under the age of 13 and do not knowingly allow individuals under 18 to enroll as distributors or submit information. If we learn that a child has provided personal information, we will delete it and terminate the interaction.
14. International Data Transfers
If we transfer personal information internationally, we use appropriate safeguards such as contractual protections and supplementary measures where required by law.
15. Sharing and Disclosures
We disclose personal information to service providers under written agreements that restrict their use of the information to providing services to us. We may disclose information to comply with law, legal process, regulatory requirements, or governmental requests, or to protect the rights, property, or safety of users or the public. If OlyAloha participates in organizational transitions in the future, disclosures will be subject to appropriate protections.
16. Communications, SMS, and Call Recording Disclosures
By providing a phone number, you consent to receive SMS, automated messages, and voice communications related to inquiries, service updates, distributor enrollment, and information you request. You may opt out of promotional SMS by replying STOP and may request help by replying HELP. Standard message and data rates may apply. We may record or transcribe calls for quality assurance or training where legally permitted and will provide notice where required by law.
17. De-identified and Aggregated Data
We may create de-identified or aggregated data for analytics, research, or service improvement. We maintain such data in a de-identified form and do not attempt to re-identify it except to test or validate de-identification processes.
18. Third Party Links and Services
Our website may include links to third-party websites or services. We are not responsible for the privacy practices or content of those third parties. We encourage you to review the privacy notices of any external site you visit.
19. Financial Incentives
If we offer programs involving discounts, rewards, or benefits in exchange for personal information, we will present a separate notice describing the material terms, how to opt in or withdraw, and how the value of the personal information relates to the offered benefits.
20. Appeals Process
Residents of certain states may appeal a refusal to act on a privacy request by contacting us using the details below and including a copy of the original request. We will respond within the timeframe required by law.
21. Global Privacy Control and Do Not Track
Where required, we recognize certain browser or device signals, including Global Privacy Control, that communicate a choice to opt out of sale, sharing, or targeted advertising. Our services do not currently respond to non-binding Do Not Track signals.
22. AI Specific Disclosures
If you interact with OlyAloha through digital tools that analyze, record, or log communications, we may collect the content of those communications and related metadata such as time, channel, and general location derived from IP address. We use this information to respond to inquiries, maintain security, and improve communication processes. Transcripts or recordings may be retained for a limited period under restricted access. We do not use identifiable transcripts or audio to train external AI models. Authorized personnel or vetted service providers may review a sample of interactions to resolve issues or improve quality. You may request deletion of specific transcripts where feasible.
23. Changes to This Policy
We will update this Policy as needed and post the revised effective date. Continued use of our website after changes constitutes acceptance of the updated Privacy Policy.
Contact Information
For questions, concerns, or requests related to this Privacy Policy, please contact us at:
OlyAloha Email: [email protected]
Website: https://olyaloha.com
United States State Privacy Supplements
These supplements apply to residents of the states identified below and govern in the event of a conflict with the general Privacy Policy. They cover interactions across web, chat, voice, text, and our Ai assistant Lani.
Submission and Verification, All States
Submit requests to know, access, correct, delete, or opt out of targeted advertising, sale, or sharing through our web form or privacy email in the Contact Us section. We verify identity using reasonable methods, including matching data points and requesting a declaration where appropriate. Authorized agents may submit requests with proof of authority. We respond within the time required by law and provide an appeal process where required.
Universal Opt-Out Mechanisms
Where a state requires recognition of a universal opt out mechanism, including Global Privacy Control, we honor a valid signal for browser based opt outs of sale, sharing, and targeted advertising.
California Supplements
California residents have rights to know, access, correct, and delete personal information, to receive a list of categories of personal information sold or shared, to opt out of sale or sharing for cross context behavioral advertising, to limit use of sensitive personal information to permitted purposes, to non discrimination, and to designate an authorized agent. We do not sell personal information for money. Certain analytics and advertising uses may be deemed sale or sharing. You may opt out through our site controls or by sending a valid browser based preference signal. We provide notice at collection, retention, and purpose disclosures. We honor verifiable requests within statutory periods and provide an appeal process. We do not knowingly sell or share personal information of consumers under 16.
Virginia Supplement
Virginia residents have rights to access, correct, delete, portability, and to opt out of targeted advertising, sale, and certain profiling. We authenticate requests, respond within required periods, and offer an internal appeals process with written explanations. We do not perform profiling that produces legal or similarly significant effects without meaningful human involvement.
Colorado Supplement
Colorado residents have rights to access, correction, deletion, and portability, and to opt out of targeted advertising, sale, and certain profiling. We recognize a universal opt out mechanism and provide consent controls for processing sensitive data. We maintain data protection assessments for targeted advertising, sale, and high risk processing.
Connecticut Supplement
Connecticut residents have rights to access, correction, deletion, portability, and to opt out of targeted advertising, sale, and profiling. We recognize a universal opt out mechanism and provide consent controls for processing of sensitive data. We disclose material changes and obtain consent where required for new purposes.
Utah Supplement
Utah residents have rights to access and delete personal data and to opt out of targeted advertising and sale. We provide clear methods to submit requests and disclose categories of third parties with whom data is shared.
Texas Supplement
Texas residents have rights to know, access, correct, delete, and obtain a portable copy of personal data, and to opt out of targeted advertising, sale, and profiling. We recognize universal opt out signals. We publish the categories of personal data processed, purposes of processing, and methods to exercise rights.
Florida Supplement
Florida residents, where the law applies, may access, correct, delete, and opt out of targeted advertising and sale. We provide mechanisms to exercise these rights and do not discriminate for exercising them.
Delaware Supplement
Delaware residents have rights to confirm processing, access, correct, delete, and portability, and to opt out of targeted advertising, sale, and profiling. We recognize a universal opt out mechanism and provide an appeals process and disclosures of third party categories.
Oregon Supplement
Oregon residents have rights to access, correction, deletion, portability, and to opt out of targeted advertising, sale, and profiling. We recognize a universal opt out mechanism and obtain consent before processing sensitive data.
Tennessee Supplement
Tennessee residents have rights to access, correct, delete, and portability, and to opt out of targeted advertising, sale, and certain profiling. We maintain a written privacy program and conduct assessments for targeted advertising and sale.
Iowa Supplement
Iowa residents may confirm processing and access and delete personal data obtained from the consumer and may opt out of targeted advertising and sale. We disclose categories of third parties receiving personal data.
Indiana Supplement
Indiana residents have rights to confirm processing, access, correct, delete, portability, and to opt out of targeted advertising, sale, and certain profiling. We provide an appeals mechanism and timely responses.
Montana Supplement
Montana residents have rights to access, correction, deletion, portability, and to opt out of targeted advertising, sale, and profiling. We recognize a universal opt out mechanism and obtain consent for processing sensitive data.
Nebraska Supplement
Nebraska residents have rights to access, correction, deletion, portability, and to opt out of targeted advertising, sale, and certain profiling. We recognize a universal opt out mechanism where required and provide an appeals process.
New Hampshire Supplement
New Hampshire residents have rights to confirm processing, access, correct, delete, portability, and to opt out of targeted advertising, sale, and profiling. We recognize universal opt out mechanisms where required.
New Jersey Supplement
New Jersey residents have rights to access, correction, deletion, portability, and to opt out of targeted advertising, sale, and profiling. We recognize universal opt out mechanisms and obtain consent for processing sensitive data.
Minnesota Supplement
Minnesota residents have rights to access, correction, deletion, portability, and to opt out of targeted advertising, sale, and profiling. We will honor a valid universal opt out signal beginning on the applicable effective date.
Maryland Supplement
Maryland residents have rights to access, correction, deletion, portability, and to opt out of targeted advertising, sale, and profiling. We will honor a valid universal opt out signal as of the effective date.
Other States and Future Laws
If a state enacts a comprehensive privacy law after the effective date of this document, we will update this section to add a supplement and will apply any required rights on and after the law’s effective date.
Notes on Sensitive Data, Children, and Profiling
Sensitive data processing may require opt in consent in certain states. We do not knowingly collect personal information from children and do not process children’s data for targeted advertising. Where a state grants a right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects, you may exercise that right through our request channels. We do not perform such profiling without meaningful human involvement.