This Privacy Policy explains how Nutrition Reviews ("Nutrition Reviews," "we," "us" or "our") collects, uses and protects information when you visit nutritionreviews.org (the "Site"), subscribe to our newsletter or contact us. It also explains the choices and rights you have. We've designed the Site to collect as little personal information as possible.
The short version
- We don't sell your personal information or share it for targeted advertising.
- We don't run ads, and the Site doesn't use advertising or analytics cookies.
- Our analytics are cookieless and can't identify you. We never store your raw IP address for analytics.
- Apart from the technical data every website needs to run securely, we collect only the personal information you choose to give us: your email address if you subscribe to our newsletter, and your name, email address and message if you contact us.
- Embedded YouTube and TikTok videos don't load anything from those platforms until you press play.
- When you click through to a retailer such as Amazon or TikTok Shop, that retailer's own privacy policy applies.
Information we collect and how we use it
Cookieless analytics
We use our own privacy-friendly, first-party analytics to count page views and understand which content is useful. It doesn't use cookies, local storage or any other identifier stored on your device, and it doesn't track you across other websites.
To count unique visitors without identifying anyone, we combine your IP address and browser user agent with a secret value (a "salt") and run them through a one-way hash. The salt is replaced every day, so the resulting code can't be used to identify you or to recognize you from one day to the next. Your IP address is used only momentarily to create this hash and is never stored.
Analytics records may include the page you viewed, the referring website, the date and time, the daily hash, and general details such as device type, browser, operating system and approximate country. We use this information only in aggregate, to understand how the Site is used and to improve it.
Affiliate link clicks
When you click a link to a retailer, we log the click anonymously so we can measure which products, pages and links are useful to readers. Each click record includes the product, the retailer, the page you clicked from, your general device type (such as mobile or desktop) and the time of the click. It doesn't include your IP address, your name or anything else that identifies you.
Newsletter
If you subscribe to our newsletter, we store your email address, the date you signed up and where on the Site you signed up (for example, the footer or an article page). We use this information to send you the newsletter you asked for and to understand which sign-up forms work.
You can unsubscribe at any time using the link included in every newsletter, or by contacting us. We never sell or rent your email address. After you unsubscribe, we may keep your email address on a suppression list solely to make sure we don't email you again.
Contact form
When you contact us, we collect your name, email address and message, along with anything else you choose to include. We use this information to reply and to handle your request, such as a correction, a product submission or a privacy request.
Please don't include sensitive information, such as details about your health, unless it's needed for your message. If you tell us about a health experience, such as a side effect you had with a product, we'll use it only to respond to you and to check our content, and we won't publish it without your permission.
Server logs
Like nearly all websites, the Site is delivered by a hosting provider that automatically processes standard server logs. These logs include IP addresses, browser user agents, the pages requested, and dates and times. They're used to deliver the Site, keep it secure (for example, by detecting and blocking attacks and abuse) and fix technical problems. We don't use server logs for analytics or advertising.
Site editors
If you're a Nutrition Reviews editor with access to our private admin panel, we process your name, email address, login credentials and a record of the changes you make, so we can give you access, keep the admin panel secure and maintain an accurate history of our content.
Cookies and similar technologies
We don't use advertising or analytics cookies, and we don't place third-party ad trackers or tracking pixels on the Site. We use only what's strictly necessary to run the Site or to remember a choice you've made:
- Theme preference. If you choose light or dark mode, we remember your choice in your browser's local storage. It stays on your device and isn't sent to us.
- Editor sessions. Logged-in editors receive session cookies on our admin subdomain so they stay signed in securely. Regular visitors never receive these cookies.
- Security. Our hosting and security providers may use a strictly necessary cookie or similar technology to protect the Site from bots and abuse.
You can clear cookies and local storage at any time in your browser settings.
Do Not Track. Because we don't track visitors across websites, the Site works the same way whether or not your browser sends a Do Not Track signal.
Embedded video reviews
Product pages include video reviews hosted on YouTube and TikTok. To protect your privacy, we use a click-to-load player: until you press play, you see only a placeholder served from our own Site, and no content, scripts or cookies from YouTube or TikTok are loaded.
When you press play, the video loads directly from the platform, which may set cookies and collect information such as your IP address, device details and viewing activity under its own terms and privacy policy:
- YouTube videos are embedded in privacy-enhanced mode using youtube-nocookie.com. According to YouTube, views in this mode aren't used to personalize your YouTube browsing experience or the ads you see outside our Site. Once a video loads, Google's Privacy Policy applies.
- TikTok videos load TikTok's embedded player, and TikTok's Privacy Policy applies.
Affiliate links and retailer cookies
Many of our links to retailers are affiliate links, as explained in our Affiliate Disclosure. When you click one and visit a retailer such as Amazon, TikTok Shop or a brand's online store, that retailer, and any affiliate network involved, may set cookies or use similar technologies to credit the sale to us and for its own purposes. Those cookies are governed by the retailer's privacy policy, not ours. See, for example, the Amazon.com Privacy Notice and TikTok's Privacy Policy.
Retailers and affiliate networks send us commission reports showing things like which products were ordered through our links and the commissions earned. These reports don't include your name, contact details or payment information.
How we share information
We don't sell, rent or trade your personal information. We share it only in these limited situations:
- Service providers. Companies that host the Site, store our data, protect the Site from abuse or deliver our newsletter process information on our behalf, under contracts that limit their use of it to providing those services.
- Legal reasons. We may disclose information if we believe in good faith that the law requires it, or to protect the rights, property or safety of Nutrition Reviews, our readers or others.
- Business transfers. If Nutrition Reviews is involved in a merger, acquisition or sale of assets, information may be transferred as part of that transaction, and it will remain subject to this policy unless you're notified otherwise.
- With your consent. In any other situation, we'll share your personal information only with your permission.
How long we keep information
- Analytics and click data: kept only in anonymous or aggregate form, for as long as it helps us understand how the Site is used. Each day's salt is discarded when it's replaced.
- Newsletter data: until you unsubscribe, after which we may keep your email address on a suppression list as described above.
- Contact messages: for as long as we need to handle your message and then for up to 24 months, so we can refer back to past conversations, unless the law requires us to keep them longer or you ask us to delete them sooner.
- Server logs: for a limited period under our hosting provider's standard retention practices.
- Editor account data: while the account is active and for a reasonable period afterward for security and record-keeping.
- Records of privacy requests: for at least 24 months, as some privacy laws require.
How we protect information
We use reasonable technical and organizational safeguards suited to the small amount of personal information we hold. These include encryption in transit (HTTPS), restricting access to the admin panel and our data to authorized editors, and keeping the software we rely on up to date. Collecting as little as possible is our most important safeguard. No website can guarantee perfect security, but if a breach affects your personal information, we'll notify you and the relevant authorities as required by law.
Your privacy rights
Wherever you live, you can ask us to:
- access the personal information we hold about you and give you a copy
- correct information that's inaccurate
- delete your personal information
- stop sending you our newsletter, at any time
We'll honor these requests, subject to limited exceptions allowed by law. Much of what we collect, such as our analytics and click data, is anonymous, so we can't link it to you or include it in a response.
U.S. state privacy rights
Residents of California, Colorado, Connecticut, Virginia and a growing number of other states have rights under state privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA). Depending on where you live, you may have the right to:
- know what personal information we collect and how we use and disclose it, and get a copy in a portable format
- correct inaccurate personal information
- delete your personal information
- opt out of the sale or sharing of personal information, targeted advertising and certain kinds of profiling
- limit the use of sensitive personal information
We won't discriminate against you for exercising any of these rights.
Notice for California residents. In the past 12 months, we have collected these categories of personal information:
- Identifiers: your name and email address, when you contact us or subscribe, and IP addresses in server logs processed by our hosting provider.
- Internet or other electronic network activity: the pages requested, as recorded in server logs. Our analytics and click data are de-identified.
We collect this information directly from you and automatically from your device, and we use it for the purposes described in this policy: operating and securing the Site, responding to you, sending the newsletter and measuring how the Site performs. We disclose it only to service providers for those business purposes, and we keep it for the periods described above. We don't collect or use sensitive personal information to infer characteristics about you. We maintain our analytics and click data in de-identified form and won't attempt to re-identify it.
Do Not Sell or Share. We do not sell personal information or share it for cross-context behavioral advertising, and we haven't done so in the past 12 months. We don't use personal information for targeted advertising, and we don't sell or share the personal information of consumers under 16.
Global Privacy Control. We honor Global Privacy Control (GPC) signals. If your browser sends a GPC signal, we treat it as a valid request to opt out of the sale and sharing of your personal information and of targeted advertising. Because we don't do any of those things, you won't notice a difference today, and we'll keep honoring GPC if our practices ever change.
Authorized agents and appeals. You can use an authorized agent to make a request for you; we may ask for proof of the agent's authority and ask you to confirm your identity directly with us. If we decline your request, you can appeal by replying to our decision or by contacting us with "Appeal" in your message. We'll respond to your appeal within the time required by law. If you're not satisfied with the outcome, you can contact your state's attorney general.
Rights in the EEA, UK and Switzerland
If you're in the European Economic Area, the United Kingdom or Switzerland, data protection law gives you the right to:
- access, correct or delete your personal data
- restrict how we process it, or object to processing based on our legitimate interests
- receive your data in a portable format
- withdraw your consent at any time, without affecting processing that took place before you withdrew it
Nutrition Reviews is the controller of the personal data described in this policy.
We rely on these legal bases:
| Purpose | Legal basis |
|---|---|
| Sending the newsletter | Your consent |
| Responding to your messages and requests | Our legitimate interest in replying to you, or steps you've asked us to take |
| Cookieless analytics and anonymous click measurement, to the extent they involve personal data | Our legitimate interest in understanding and improving the Site |
| Server logs and security | Our legitimate interest in keeping the Site secure and available |
| Editor accounts | Our agreement with the editor, and our legitimate interest in securing the admin panel |
| Keeping records and meeting legal obligations | Compliance with our legal obligations |
We don't make decisions about you based solely on automated processing, and we don't build profiles of our visitors.
You also have the right to lodge a complaint with a data protection authority, such as the one where you live or work. You can find a list of EEA data protection authorities on the European Data Protection Board's website. In the UK, the authority is the Information Commissioner's Office, and in Switzerland, it's the Federal Data Protection and Information Commissioner. We'd appreciate the chance to address your concern first, so please consider contacting us.
How to make a request
Send your request through our contact page and mention "Privacy request" in your message. Tell us what you'd like us to do and include the email address you used with us, so we can find your information. To protect your information, we'll verify your request, usually by confirming that you control that email address, and we won't ask for more information than we need.
We'll respond within the time required by applicable law: generally within one month under the GDPR and UK GDPR, and within 45 days under U.S. state privacy laws. If we need more time, as the law allows, we'll tell you. Requests are free unless they're clearly unfounded or excessive.
Children's privacy
Nutrition Reviews is intended for adults. It isn't directed to children under 13, or under 16 where a higher age of digital consent applies, and we don't knowingly collect personal information from them. If you believe a child has given us personal information, please contact us and we'll delete it.
International data transfers
Nutrition Reviews is designed for shoppers in the United States, and we and our service providers may process information in the United States and other countries whose data protection laws may differ from those where you live. When we transfer personal data from the EEA, the UK or Switzerland, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses and their UK and Swiss equivalents, or a recipient's certification under the EU–U.S. Data Privacy Framework and its UK and Swiss extensions.
Links to other websites
The Site links to retailers, brands, research sources and other websites. We're not responsible for their privacy practices, and we encourage you to read their privacy policies.
Changes to this policy
We may update this policy from time to time. When we do, we'll change the date shown on this page. If we make material changes, such as collecting new kinds of information or using it in new ways, we'll give you more prominent notice before the change takes effect, for example on the Site or by email to newsletter subscribers. Where the law requires it, we'll ask for your consent.
Contact us
If you have questions about this policy or your personal information, please reach us through our contact page.