Last updated: October 2, 2026.
Taweret LLC controls the personal information described in this policy when you visit top-offers-online.com, place an order, contact us or interact with our marketing. Our registered office is 8 The Green, Suite B, Dover, DE 19901, United States. Contact us at 
Information that reveals health interests, symptoms or use of health products receives additional protection under our Consumer Health Data Privacy Policy. That policy takes priority for consumer health data if the policies differ.
Your privacy choices
You can ask us to confirm whether we process your information, provide access and a portable copy, correct inaccuracies, delete information, identify recipients, withdraw consent, or stop sale, targeted advertising or profiling that produces legal or similarly significant effects. We offer these requests to all US customers as a store policy, in addition to the statutory rights explained below. Legal exceptions, such as keeping necessary tax records, can limit a request; we will explain any refusal. We do not penalize you for exercising a privacy right.
Email with your request. You do not need to create an account. We may verify an access, correction or deletion request using information already associated with you, and ask only for information reasonably needed for verification. An authorized agent may contact us; we may request evidence of authority and verification appropriate to the request. Please do not email full payment details or medical records.
We respond without undue delay and within 45 calendar days after receiving a request. Where the applicable law permits an extension, we may take up to 45 additional days and will explain the reason within the initial period. Verification does not restart our promised receipt-based deadline. Requests are normally free. We will explain any legally permitted exception for excessive or repetitive requests before charging a fee.
If we refuse your request, reply to our decision or email us with “Privacy appeal.” We accept appeals without a fixed filing cutoff and provide a written decision within 45 calendar days of receipt. This is also our service commitment where no statutory appeal applies. For Connecticut, the statutory appeal response limit is 60 days; our 45-day commitment is shorter. A denial will explain how to complain to the relevant state attorney general.
Connecticut residents have statutory rights to confirmation, access, correction, deletion, portability, information about third-party recipients, and opt-outs from sale, targeted advertising and qualifying profiling. These include applicable rights concerning inferences and decisions based on profiling, including review and correction of the underlying information. You can complain to the Connecticut Attorney General.
Nevada residents can also submit a verified request that we not sell covered information under Nevada’s online privacy law by emailing us. That law allows 60 days to respond, with a reasonably necessary 30-day extension and notice. We use the shorter 45-day service period above for this request. Health data requests have the additional deadlines and rights in our Consumer Health Data Privacy Policy.
Information we collect and its sources
You provide contact and account details, including your name, email, delivery and billing addresses, telephone number where supplied, login details, preferences and communications. Orders provide product selections, quantities, purchase history, delivery details, returns and refund information. We receive limited payment information such as the payment method, last four digits where supplied, transaction identifier, authorization result and payment or refund status. We do not store full payment-card numbers or card security codes.
Support requests and reviews include the text, images and other information you choose to submit. A product choice or message about sleep, pain, mobility or another health concern can reveal consumer health data. Please share only what is necessary for your request. Reviews you choose to publish can be visible to other visitors.
We collect technical and usage information through our store and permitted tracking tools, including IP address, browser and device information, approximate location inferred from IP address, cookie identifiers, referral source, pages and general products viewed, interaction times, and advertising interactions. We record consent choices and security events. We do not collect precise location to identify visits to healthcare facilities.
We also receive information from payment services, suppliers and fulfilment partners, carriers, fraud-prevention services, advertising and analytics partners, and people acting for you. Examples include payment confirmation, tracking and delivery status, fraud indicators and campaign attribution.
How and why we use information
We use necessary information to take payment, process and deliver orders, provide support, administer returns, manage accounts and communicate about transactions. We also use information to prevent fraud, secure the store, resolve disputes, maintain required records, handle product safety concerns and comply with legal obligations.
We use permitted usage information to understand general store performance and improve the shopping experience. With your choices respected, we measure advertisements and show relevant advertising for general products. We send email marketing to subscribers and administer any offer on the terms shown when you join. Unsubscribing does not prevent essential order or safety messages. We do not send SMS marketing.
Our reasons for processing are fulfilling your requests and purchases, operating and protecting the business, complying with law, and consent for activities that require it. We obtain required consent before processing sensitive information, and separate consent for collection and sharing where health privacy law requires it. Acceptance of our terms is not consent to unrelated marketing or health-data sharing.
Services and recipients
Shopify hosts our store and supports checkout and order management. We use payment services to process payments; suppliers, fulfilment partners and carriers to deliver orders; and providers of email marketing, review functionality, customer-support software, fraud prevention, hosting and security. These recipients receive information relevant to their services. Professional advisers and public authorities receive information when needed for lawful advice, reporting, legal process or protection of rights.
We use Google Analytics, Google Ads tracking, Google Tag Manager, Meta Pixel and Meta Ads, TikTok Ads and tracking, Microsoft Advertising/Bing, and Cookiebot. Google Tag Manager manages tags; Cookiebot records and manages cookie choices. Analytics and advertising providers receive permitted technical identifiers, general browsing and advertising events, and attribution information. They can combine permitted information with information from their own services and other websites, subject to your choices and their policies.
Our advertising disclosures to Google, Meta, TikTok and Microsoft can constitute a sale for valuable consideration or targeted advertising under state privacy laws, even when no money is paid for the data. We provide the opt-out routes below. We do not sell consumer health data or send it to these advertising services, including through product names, page addresses, search terms, purchase events or customer lists that reveal health interests. Nonessential tracking is blocked on health-related journeys.
We do not share consumer health data with affiliated companies. If ownership of the business changes, information may be transferred as part of that transaction with the protections and notices required by law; this does not authorize a new use inconsistent with your choices.
Provider information: Shopify Privacy Policy; Google Privacy Policy; Meta Privacy Policy; TikTok US Privacy Policy; and Microsoft Privacy Statement.
Cookies, advertising and opt-outs
Our Cookie Policy explains the cookies and similar technologies used on the store. Use the Cookie settings control to accept or reject nonessential categories or change an earlier choice. We require consent before nonessential analytics or advertising tracking starts. Necessary technologies remain available for functions such as checkout, security and remembering your choices.
Use the “Your privacy choices” control to opt out of sale and targeted advertising in this browser. We honor Global Privacy Control as an opt-out signal. Browser choices apply to the browser or device sending them; when we can reliably connect a choice to your account, we apply it there too. Email for account-based, customer-list, server-side or other disclosures that a browser control alone cannot stop. You do not need an account to opt out.
We do not treat the older Do Not Track browser setting as a separate consent instruction. This is different from Global Privacy Control, which we honor. Permitted advertising partners can collect general browsing information over time and across different websites; the health-data restrictions described above still apply.
Additional provider controls are available through Google Analytics opt-out, Google My Ad Center, Meta advertising preferences, Microsoft advertising preferences, and the privacy and advertising settings in TikTok. These do not replace a request to us.
To stop marketing email, use the unsubscribe link in a message or email us. We honor requests within 10 business days and do not charge a fee. Withdrawing consent for other processing is available through the relevant control or by email. For Connecticut sensitive-data consent, we stop the consent-based processing as soon as practicable and within 15 days after withdrawal.
How long we keep information
Our standard retention periods are:
- Order, invoice, payment and tax records: seven years after the later of the end of the relevant tax year or filing of the relevant return. We minimize or separate health details that are not necessary for those records.
- Ordinary support and return correspondence: 24 months after the case closes.
- Customer account information: while active, then up to 24 months after the last account activity.
- Marketing subscription information: until you unsubscribe or after 24 months without engagement. Minimal suppression information is retained while we continue email marketing, then for six years after that activity ends, so we can honor opt-outs.
- Consent and preference evidence: six years after the last processing relying on that choice.
- User-level analytics: up to 14 months after the event. Advertising audience and event records under our control: up to 90 days after the event.
- Routine server and security logs: 90 days. Records of a specific fraud or security investigation: 24 months after it closes.
- Privacy requests and appeals: three years after closure, with unnecessary identity and health details removed.
- Published reviews: while the relevant product is offered, then up to 24 months, unless removed earlier.
The shorter health-data periods and deletion rules in our Consumer Health Data Privacy Policy override ordinary schedules for health details. If a specific law or legal hold requires a record longer, we restrict its use to that purpose and delete it when that requirement ends. We review such holds at least annually. When information is no longer needed, we delete it or irreversibly deidentify it. Providers acting independently apply their own disclosed retention schedules.
Security, processing locations and automated screening
We use access restrictions and technical and organizational safeguards appropriate to the information involved. No system is completely secure. We assess incidents and give legally required notices.
Our providers process information in the United States and other countries. Orders fulfilled from China involve sending the necessary order and delivery information to fulfilment partners there. Other countries may have different privacy protections. We use contractual restrictions, limited access and other safeguards required for the relevant information; overseas processing does not remove your rights.
Fraud tools evaluate order, payment, device and transaction signals and can flag an order for review or prevent payment completion. Advertising tools can create general shopping-interest segments, subject to your choices. Contact us to question an adverse order decision and request human review or correction of the information used. We do not use personal information to train large language models.
Children and teenagers
The store is intended for adults and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has supplied information, contact us so we can investigate and delete it where required. We do not sell personal information or use targeted advertising or qualifying significant-effect profiling for people we know are under 18.
Changes and contact
We update the date above when this policy changes. For material changes, we provide a prominent notice and any direct notice or fresh consent required before the changed processing begins.
Email or write to Taweret LLC at the registered office above. Customer service is available Monday to Friday, 9:00 AM to 5:00 PM, Eastern Time. We strive to respond within 24 hours on weekdays. This service target does not replace the privacy deadlines above.