Privacy Policy

WhyNot Labs LLC
Effective Date: March 1, 2026
Last Updated: March 1, 2026

1. Introduction

At WhyNot Labs, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our website (thewhynotlabs.com) or purchase our products.

We’re a small, founder-led company. We’re not harvesting your data to sell to advertisers. We collect what we need to ship your orders, improve your experience, and stay in touch (only if you want us to). That’s it.

By using our website or placing an order, you agree to the practices described in this policy.

2. Information We Collect

2.1 Information You Provide Directly

  • Account Information: Name, email address, phone number, and account credentials when you create an account.
  • Order Information: Shipping address, billing address, and order details when you place an order.
  • Payment Information: Payment card details or cryptocurrency wallet information. Note: Card details are processed and stored by our third-party payment processors — we do not store your full credit card number on our servers.
  • Communication Data: Messages, emails, or other communications you send to us, including customer support inquiries.
  • Age Verification: Confirmation that you are at least 21 years of age.

2.2 Information Collected Automatically

When you visit our website, we may automatically collect:

  • Device Information: Browser type, operating system, device type, screen resolution.
  • Usage Data: Pages visited, time spent on pages, click patterns, referring URL.
  • IP Address: Used for fraud prevention, analytics, and approximate geographic location.
  • Cookies and Similar Technologies: See Section 6 below and our separate Cookie Policy for details.

2.3 Information From Third Parties

We may receive limited information from:

  • Payment Processors: Transaction confirmation and fraud screening results.
  • Shipping Carriers: Delivery status and tracking updates.
  • Analytics Providers: Aggregated website usage data.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Order Fulfillment: Processing, shipping, and delivering your orders.
  • Account Management: Creating and maintaining your account.
  • Customer Support: Responding to your inquiries and resolving issues.
  • Payment Processing: Charging for products and processing refunds.
  • Fraud Prevention: Detecting and preventing fraudulent transactions or unauthorized account access.
  • Communications: Sending order confirmations, shipping notifications, and (with your consent) marketing emails.
  • Website Improvement: Analyzing usage patterns to improve site functionality and user experience.
  • Legal Compliance: Meeting legal obligations, enforcing our Terms of Service, and protecting our rights.

We do not use your personal information to make decisions about your health or to share your purchase history with healthcare providers, insurance companies, or government agencies (unless legally compelled by valid court order or subpoena).

4. How We Share Your Information

We do not sell your personal information. Period.

We share your information only with the following categories of service providers, and only to the extent necessary:

  • Payment Processors: To process your payment transactions securely.
  • Shipping Carriers (UPS, FedEx): Name and shipping address for delivery. Packages are shipped in discreet packaging with no product names on the exterior.
  • Website Hosting & Infrastructure: Our hosting provider stores website data on secure servers.
  • Analytics Services: Google Analytics and similar tools receive anonymized/aggregated usage data to help us understand how visitors use our site.
  • Email Service Provider: Your email address (if you opt in) for transactional and marketing communications.
  • Customer Service Tools: Data necessary to manage support tickets and live chat.

We may also disclose your information if required to do so by law, regulation, legal process, or enforceable government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

5. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information, including:

  • SSL/TLS encryption on all website pages.
  • Encrypted storage of sensitive account data.
  • Restricted access to personal information on a need-to-know basis.
  • Regular security assessments of our systems and practices.

No method of transmission or storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security. You are responsible for maintaining the security of your account credentials.

6. Cookies and Tracking Technologies

We use cookies and similar technologies on our website. For complete details, please see our Cookie Policy.

In summary, we use:

  • Necessary Cookies: Required for core website functionality (shopping cart, checkout, login).
  • Analytics Cookies: Help us understand how visitors use our site (Google Analytics).
  • Functional Cookies: Remember your preferences and settings.

We do not use advertising/targeting cookies or sell data collected via cookies.

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect website functionality.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, including:

  • Account Data: Retained for the duration of your account and for up to 3 years after account closure or last activity.
  • Order Records: Retained for at least 5 years for tax, legal, and compliance purposes.
  • Communication Records: Retained for up to 2 years after the last communication.
  • Analytics Data: Retained in aggregated, anonymized form indefinitely.

You may request deletion of your personal information at any time (see Section 8).

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

  • Access: Request a copy of the personal information we hold about you.
  • Correction: Request correction of inaccurate or incomplete personal information.
  • Deletion: Request deletion of your personal information, subject to legal retention requirements.
  • Opt-Out of Marketing: Unsubscribe from marketing emails at any time using the link in any marketing email or by contacting us.
  • Data Portability: Request a copy of your data in a commonly used, machine-readable format.

To exercise any of these rights, contact us at [email protected]. We will respond to verified requests within 30 days.

9. Children’s Privacy

Our website and products are not intended for anyone under the age of 21. We do not knowingly collect personal information from anyone under 21 years of age. If we discover that we have collected information from a person under 21, we will delete that information promptly.

If you believe a person under 21 has provided us with personal information, please contact us at [email protected].

10. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

10.1 Right to Know. You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share your information.

10.2 Right to Delete. You have the right to request deletion of your personal information, subject to certain exceptions.

10.3 Right to Opt-Out of Sale/Sharing. We do not sell your personal information and do not share it for cross-context behavioral advertising purposes.

10.4 Right to Non-Discrimination. We will not discriminate against you for exercising your CCPA rights.

10.5 Exercising Your Rights. To submit a request, email us at [email protected] with the subject line “California Privacy Request.” We will verify your identity before processing your request and will respond within 45 days.

10.6 Authorized Agent. You may designate an authorized agent to make requests on your behalf. Agents must provide written authorization and we may still verify your identity directly.

Categories of Information Collected in the Past 12 Months:

Category Collected Sold Shared for Advertising
Identifiers (name, email, address) Yes No No
Payment information Yes No No
Commercial information (order history) Yes No No
Internet/network activity (browsing) Yes No No
Geolocation data (approximate, from IP) Yes No No

11. Other State Privacy Rights

If you reside in a state with comprehensive consumer privacy legislation, you may have similar rights to those described for California residents above. Contact us at [email protected] to exercise your rights, and we will process your request in accordance with applicable law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes become effective when posted to this page with a revised “Last Updated” date. We will make reasonable efforts to notify you of material changes via email or prominent website notice.

We encourage you to review this policy periodically.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us:

WhyNot Labs LLC
Email: [email protected]
Address: 4601 E Douglas Ave, Ste 150, Wichita, KS 67218

This Privacy Policy was last updated on March 1, 2026.