Privacy policy
Last updated: 10 October 2026
This Privacy Policy explains how The Supplement Lab ("we", "us", "our") collects, uses and shares your personal information when you visit thesupplementlablb.com (the "Site"), place an order with us online, on WhatsApp, on Instagram or by phone, visit our shop, or otherwise contact us (together, the "Services"). Please read it carefully. If you have any questions, you can reach us using the details in section 16.
In short:
- We only collect what we need to take, prepare and deliver your orders and to look after you as a customer.
- We do not sell your personal information for money.
- You can ask us at any time to see, correct or delete your information, or to stop marketing messages.
1. Who we are
The Supplement Lab is responsible for the personal information described in this policy.
The Supplement Lab
Zouk El Kharab, Dbayeh (facing Le Noble Hotel), Metn, Lebanon
Email: contact@thesupplementlablb.com
Phone / WhatsApp: +961 70 431 214
2. Information we collect
2.1 Information you give us
- Contact and order details: your name, phone number, delivery address and directions, email address (if you provide one), the products you buy and any notes you add to your order.
- Account information: if you create an account, the email address or phone number you sign in with and your order history.
- Messages: what you send us by WhatsApp, Instagram, phone, email or the chat on our Site.
- Reviews: if you post a product review, the name you choose to display and the content of your review, which will be public.
- Marketing preferences: whether you have agreed to receive offers from us.
2.2 Information collected automatically
When you use the Site, we and our service providers automatically collect device and usage information, such as your IP address, browser and device type, language, the pages you view, the links you click and how you reached the Site (for example, from an ad). We use cookies, pixels and similar technologies to do this (see section 8).
2.3 Information from other sources
We may receive information from Shopify (our e-commerce platform), from our delivery partners (for example, delivery status) and from advertising partners such as Meta and Google (for example, which of our ads you clicked).
2.4 Payments
Orders are currently paid in cash on delivery. If we offer online payment in the future, payments will be processed by the payment provider shown at checkout, and we will not receive or store your full card number.
3. Health-related information
We do not ask for your medical information. If you choose to tell us about a health condition, medication, pregnancy or goal when you ask us for advice, we use it only to answer you. We do not use it for advertising and we do not share it with third parties. Our advice is general and does not replace advice from a doctor or pharmacist.
4. How we use your information
| What we use it for | Why we are allowed to |
|---|---|
| Taking, preparing, confirming and delivering your orders, and contacting you about them | To perform our contract with you |
| Answering questions, customer support, returns and refunds | To perform our contract with you, and our legitimate interest in good service |
| Running, securing and improving the Site, for example remembering your cart and language, fixing problems and preventing fraud | Our legitimate interest in a safe, working store |
| Sending offers and news by email, SMS or WhatsApp | Your consent, which you can withdraw at any time |
| Showing and measuring our ads on Meta (Facebook, Instagram) and Google | Your consent where the law requires it, otherwise our legitimate interest in promoting our store |
| Keeping accounting and tax records | To meet our legal obligations in Lebanon |
5. Our relationship with Shopify
Our Site is hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve them for you. Information you submit through the Site is shared with Shopify and with third parties that may be located outside Lebanon.
To help protect, grow and improve our business, we use certain Shopify features that use information about your interactions with our store, with other merchants and with Shopify. For these features, Shopify is responsible for processing your personal information, including responding to requests to exercise your rights. To learn more, see the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.
6. Who we share your information with
We do not sell your personal information for money. We share it only where needed:
- Delivery partners: your name, phone number, address and order details, so they can deliver your order and collect payment.
- Shopify and the apps that help run our store: for example hosting, order management, customer chat, product reviews, translation and search tools. They may only use your information to provide their service to us.
- Advertising and analytics partners: Meta and Google receive device and usage information through cookies and pixels. With your consent where the law requires it, we may also share email addresses or phone numbers in hashed (encrypted) form so these platforms can show relevant ads to our customers or to people with similar interests. You can ask us to stop this at any time.
- Authorities and professional advisers: where the law requires it, to respond to valid legal requests, or to protect our rights, our customers or the public.
- Business transfers: if our business is sold or merged, your information may pass to the new owner, who will remain bound by this policy.
7. Marketing messages
We only send you marketing messages if you have agreed to receive them. You can stop them at any time by using the unsubscribe link in our emails, by replying STOP to our WhatsApp or SMS messages, or by contacting us. We will still send you messages about your orders.
8. Cookies and similar technologies
Cookies are small files stored by your browser. We use:
- Essential cookies that make the store work, such as your cart, checkout and language choice.
- Analytics cookies that help us understand how visitors use the Site.
- Marketing cookies and pixels from Meta and Google that help us show and measure our ads.
Where the law requires it, we ask for your consent through the cookie banner on our Site, and you can change your choice at any time. You can also block or delete cookies in your browser settings, although blocking essential cookies may stop parts of the store from working. You can learn more about the cookies Shopify uses at shopify.com/legal/cookies.
9. International transfers
Shopify, Meta, Google and our other service providers may store and process your information outside Lebanon, for example in Canada, the United States or the European Union. We use reputable providers that protect personal information with appropriate safeguards.
10. How long we keep your information
- Orders and invoices: for as long as Lebanese accounting and tax rules require.
- Messages: for as long as we need them to help you and follow up on your orders.
- Marketing contacts: until you unsubscribe or ask us to delete them.
- Accounts: until you ask us to close your account.
After that, we delete or anonymise the information.
11. How we protect your information
Our Site is encrypted with HTTPS, our checkout is provided by Shopify, which meets the international payment security standard PCI DSS, and only team members who need your information can access it. No system is completely secure, so please contact us straight away if you think your account or information has been misused.
12. Your rights
Under Lebanon's Law No. 81 of 2018 on Electronic Transactions and Personal Data, and other laws that may apply to you (for example, data protection laws in the European Union or the United Kingdom if you live there), you may have the right to:
- access the personal information we hold about you;
- correct information that is wrong or incomplete;
- delete your information, except what we must keep by law (for example, invoices);
- object to or restrict certain uses of your information, including direct marketing;
- withdraw any consent you have given us;
- receive a copy of your information in a portable format, where this applies.
To make a request, contact us by email or WhatsApp. We may ask you to confirm your identity first, and we will reply within 30 days. Making a request is free. If you are not satisfied with our answer, you can also contact the data protection authority where you live.
13. Children
Our Services are intended for adults. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us their information, please contact us and we will delete it.
14. Links to other websites and apps
Our Site links to WhatsApp, Instagram, Google Maps and other services. When you use them, their own privacy policies apply, and we are not responsible for how they handle your information.
15. Changes to this policy
We may update this policy when our Services or the law change. We will post the new version on this page and update the date at the top. If we make important changes, we will also let you know on our Site.
16. Contact us
Questions about this policy or your information? Contact us at contact@thesupplementlablb.com, message us on WhatsApp +961 70 431 214, or visit us in Zouk El Kharab, Dbayeh, facing Le Noble Hotel.