NULO PRIVACY POLICY

Last Updated: June 17, 2025

This Privacy Policy sets out how Nulo uses and protects your personal data and your choices regarding the use of your personal data. This Privacy Policy is provided in a layered format so you can click through to the specific areas set out below.

This Privacy Policy gives you information about how Nulo Inc. ("Nulo", "we", "us" or "our" in this Privacy Policy), collects, uses, and shares your personal data through your use of our website (https://nulo.com/) and other services, including any personal data you may provide when you submit an inquiry, leave a review or when you sign up to our newsletter.

Nulo is based in the United States, with servers located in the United States. By using our Services, you consent to the collection, transfer, storage, processing, disclosure, and other uses of your personal data in the United States as described in this Privacy Policy and to the extent permitted by applicable law.

The Nulo website is not intended for children under the age of 16 and we do not knowingly collect data relating to such children. If you have reason to believe that we may have accidentally received personal data from a child, please immediately email us at privacy@nulo.com.

Nulo Inc. is the controller and responsible for your personal data If you have any questions about how we process your personal data or this policy, please contact us at privacy@nulo.com.

BY USING OUR WEBSITE OR OTHER SERVICES OR ADVERTISEMENTS (COLLECTIVELY, OUR "SERVICES") OR CHOOSING TO SUBMIT PERSONAL DATA TO US THROUGH OUR SERVICES OR CLICKING A BUTTON OR CHECKING A BOX MARKED "I AGREE", "SIGN UP", "JOIN NOW" (OR SOMETHING SIMILAR), YOU SIGNIFY THAT YOU HAVE READ, UNDERSTOOD, AND AGREE TO THE TERMS OF THIS PRIVACY POLICY.

  • 1. TYPES OF PERSONAL DATA WE COLLECT ABOUT YOU
  • 2. HOW IS YOUR PERSONAL DATA COLLECTED?
  • 3. HOW WE USE YOUR PERSONAL DATA
  • 4. DATA RETENTION
  • 5. DISCLOSURES OF YOUR PERSONAL DATA
  • 6. NOTICE OF RIGHT TO OPT OUT OF SALE/SHARING
  • 7. PUBLICLY POSTED CONTENT
  • 8. OPTING OUT OF MARKETING
  • 9. COOKIES
  • 10. OPT OUT PREFERENCE SIGNALS
  • 11. THIRD PARTY LINKS
  • 12. DATA SECURITY
  • 13. YOUR PRIVACY CHOICES AND LEGAL RIGHTS
  • 14. CONTACT DETAILS
  • 15. CHANGES TO THE PRIVACY POLICY
  • 16. CONFLICTS
  • 17. CALIFORNIA REQUIRED DISCLOSURES

    • NOTICE AT COLLECTION

    1. Types of personal data we collect about you


    "Personal data" means any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. It does not include anonymized data (information that doesn't, and can't reasonably be used to, identify a specific individual) or public information lawfully available from governmental records. When anonymized data is directly or indirectly associated with personal data, we treat it as personal data.

    We may collect, use, store and transfer different kinds of personal data about you:

    • Identity / Profile Data includes your name, any alias used by you, any personal data included in reviews you leave about our products on our website (including any images of you that you choose to upload with your review) or any questions or answers you provide about our products on our Services or to us.
    • Contact Data includes your email address and telephone number(s).
    • Internet or other electronic network activity information ("Technical Data") includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, mobile network information, device type and ID and other technical information about the devices you use to access our Services.
    • Usage Data includes information about how you interact with and use our Services.
    • Marketing and Communications Data includes information about your marketing preferences and information about your engagement with our marketing and other communications (for example, whether you open emails that we send you).
    • Inferences drawn from any of the personal data described above.

    We also collect, use and share "a"ggregated data" such as statistical or demographic data. This is not personal data as it does not directly (or indirectly) reveal your identity. For example, we may aggregate individuals' Usage Data to calculate the percentage of users accessing a specific website feature in order to analyze general trends in how users are interacting with our website to help improve the website and our service offering.

    2. How is your personal data collected?


    We use different methods to collect data from and about you including through:

    • Your interactions with us. You may give us your personal data by filling in online forms, participating in activities on our Services, or corresponding with us by phone, email or otherwise.
    • Automated technologies or interactions. As you interact with our Services, any of our advertisements or any communications (such as emails) we send you, we will automatically collect Technical Data about your equipment, browsing actions, usage and patterns. We collect this personal data by using cookies, pixels, server logs and other similar technologies ("Cookies"). We may also receive Technical Data about you if you visit other websites employing our Cookies. Please see Cookies and Opt Out Preference Signals for more information on how to make choices with respect to this kind of data collection.
    • Third parties. We also collect Technical Data from certain third parties, including analytics and other service providers and advertising networks (such as social media platforms). We protect this information according to this Privacy Policy and any additional restrictions required by the party who has provided us with that data.

    3. How we use your personal data


    Subject to applicable law and the choices and controls on the use of your personal data that may be available to you, we may use the personal data that we collect from and about you or the devices associated with you for any of the following purposes:

    Purpose/Use

    Type of data

    To provide the Services to you; to improve, troubleshoot, debug, and repair the Services. We may also share information with third parties when it is required to do any of the foregoing.

    Identity

    Contact

    Technical

    Usage

    Marketing and Communications

    To communicate with you, which will include:

    (a) Notifying you about changes to our Terms or Privacy Policy

    (b) Dealing with your requests, complaints and queries.

    Identity

    Contact

    Marketing and Communications

    To enable you to leave reviews about our products on our Services, to ask or answer questions about our products on our Services.

    Identity

    Contact

    Usage

    Marketing and Communications

    For our business purposes, such as to meet our contractual and legal obligations, operate and improve on our lawful business activities, and detect and prevent misuse of our products and services and activities that may violate our policies, pose safety issues, or be fraudulent or illegal.

    Identity

    Contact

    Technical

    Usage

    For legal and safety purposes, including to defend or protect us, you, or others from harm or in legal proceedings, protect our rights, protect our security and the security of our systems and customers, respond to court orders, lawsuits, subpoenas, and government requests, address legal and regulatory compliance, comply with our license obligations, enforce our Terms of Use, or notify you of product recalls or safety issues.

    Identity

    Contact

    Technical

    Usage

    To personalize and enrich your experience on our Services, deliver relevant content and product recommendations, to track and categorize your activity and interests on the Services, deliver online advertisements and marketing communications to you, and to measure or understand the effectiveness of the advertising and marketing we serve to you.

    Identity

    Contact

    Usage

    Marketing and Communications

    Technical

    Inferences

    To analyze and improve our website, products, and services, customer relationships and experiences and to measure the effectiveness of our communications and marketing.

    Technical

    Usage

    To collect, process, and create anonymized or aggregated data, whether ourselves or through a service provider or other third party; to use and allow any party to use for any purpose that anonymized or aggregated data. Once data is anonymized, we will not re-identify it with an identifiable individual.

    Usage

    Marketing and Communications

    Technical

    For any purpose for which you provide your consent to us or request that we process your information.

    Identity

    Contact

    Usage

    Marketing and Communications

    Technical

    Profile

    We do not use or share your personal data with third parties for the purposes of profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. We do not use or disclose sensitive personal information for purposes other than those specified in Section 7027(m) of the California Consumer Privacy Act's regulations.

    4. Data retention


    We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect of our relationship with you.

    To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

    If you have elected to receive email communications and/or texts from us, we retain information about your email preferences and/or text preferences until you opt out of receiving those communications from us and in accordance with our policies.

    5. Disclosures of your personal data


    We may disclose your personal data as permitted or required by this Privacy Policy or applicable law to the parties set out below for the purposes described in this Privacy Policy. These companies must comply with our data privacy and security requirements and may not use the personal data we disclose to them for purposes other than those we request or as required or permitted by law.

    • Companies that provide services to us in respect of our Services, such as, website developers, IT support and companies that review and approve any reviews you post about our products.
    • Companies that assist in our marketing, advertising and promotional activities or analytics and search engine providers that assist us in the improvement and optimisation of our website, advertising and marketing campaigns, such as Google, Facebook, Microsoft, Pricespider, Shopify, TikTok, The Trade Desk, and Vimeo.
    • Third parties to whom we may choose to sell, transfer or merge parts of our business or our assets or to government and regulatory authorities where we are required to do so.

    We may disclose anonymized data and aggregate data to any party for any purpose. Our agreements with third parties require that they not attempt to reidentify anonymized data with an identifiable individual.

    6. NOTICE OF RIGHT TO OPT OUT OF SALE/SHARING


    6.1 What is a sale or sharing of personal data?

    Your personal data is "sold" when we provide it to a third party for monetary consideration. We do not "sell" your personal data when we disclose it at your direction, to our service providers, or as otherwise permitted under applicable law.

      • Under California law, your personal data is "sold" when we provide it to a third party for monetary or other consideration for a purpose that is not a "business purpose" as set forth in the California Consumer Privacy Act and its regulations.

    Your information is "shared" if we disclose it to a third party for the purpose of displaying an ad to you where the ad is selected based on a profile that has been built of you using personal data collected from your activities online over time across non-affiliated websites and applications ("Targeted Advertising" or "Cross Context Behavioral Advertising").


    6.2 Categories of personal data we sell/share

    We work with third parties, including Klaviyo, Google, Facebook, Microsoft, Pricespider, Shopify, TikTok, The Trade Desk, and Vimeo, to deliver advertisements to you and we share the following categories of personal data with them for the purpose of Targeted Advertising:

      • Identity/Profile Data: name, alias
      • Contact Data: telephone number(s), email address
      • Technical Data: Internet Protocol address, operating system, browser type, mobile network information, platform type, device type, software and hardware attributes, domain name of internet service provider
      • Usage Data: information about how you interact with and use our Services and advertisements, including content viewed or downloaded, landing pages, dates and times of access, pages viewed, forms

    For more information about such parties' collection and use of personal data, visit the following websites:

    For more information about the use of cookies and other tracking technologies, see Cookies and Opt Out Preference Signals.


    6.3 How to opt out of our sale/sharing of your personal data

    If you wish to opt-out of our sharing of personal data for targeted advertising/cross-context behavioral advertising, click here to exercise those rights.

    7. Publicly posted content

    You may choose to upload or publish content, such as product reviews and comments, to a public area of our Services. Personal data you choose to make public may be viewed by other users of our Services. If you choose to include personal data in content you publicly post, you consent to the public disclosure of the personal data you include in that post.

    8. Opting out of marketing

    You can ask us to stop sending you marketing communications at any time by updating your email marketing preferences or clicking here.

    If you opt out of receiving marketing communications, you will still receive service-related communications that are essential for administrative or customer service purposes, for example, relating to updates to our Terms or checking that your contact details are correct.

    9. Cookies

    For more information about the Cookies we use and how to change your Cookie preferences, please see Cookie policy here or contact us for further information at privacy@nulo.com.

    10. Opt out preference signals

    An opt-out preference signal is sent by a platform, technology, or mechanism that automatically communicates to businesses that recognize the signal the individual's choice to opt out of the sale and sharing of personal data for targeted advertising. The signal can be set on certain browsers or through opt-out plug-in tools.

    We recognize the Global Privacy Control signal in states where we are legally obligated to do so. If you are logged into your account when you visit our Services with the Global Privacy Control signal enabled, we will process the signal as a request to opt-out with respect to all personal data we collect about you. If you are not logged in when you use our Services, we will only recognize your opt-out preference on the browser and device that transmits the signal. See the Global Privacy Control website for more information (https://globalprivacycontrol.org/).

    11. Third-party Links

    When you provide information to us on a third-party site or platform ("Third Party Site"), such as through an advertisement about us that appears there, the information you provide may be separately collected by that Third Party Site. Our Services may also contain links to Third Party Sites not owned or controlled by us and we are not responsible for the privacy practices of those Third Party Sites. The information we collect is covered by this Privacy Policy and the information the Third Party Site collects is covered by that Third Party Site's privacy policy. Privacy choices you make on a Third Party Site will not apply to our use of information we have collected directly from you through Our Services. Be aware when you leave our Services and be sure to read the privacy policies of other sites or platforms that may collect your information.

    12. Data security

    When you provide your personal data to us, your personal data may be transferred over the internet. Although we make every effort to protect the personal data which you provide to us, the transmission of information over the internet is not completely secure. As such, you acknowledge and accept that we cannot guarantee the security of your personal data transmitted to our Services and that any such transmission is at your own risk.

    We have put in place appropriate physical, technological, and organizational security measures to prevent your personal data from being accidentally lost or destroyed, used or accessed in an unauthorised way, altered, or disclosed while in our possession or control. In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know.

    Some or all of the personal data we collect may be stored or processed on servers located outside of your country, including in the United States, whose data protection laws may differ from those where you live. As a result, this information may be subject to access requests from governments, courts, or law enforcement in those jurisdictions according to the laws in those jurisdictions. Subject to applicable laws in such other jurisdictions, we will use reasonable efforts to ensure that appropriate security processes are in place to maintain protection over the personal data we collect.

    13. Your privacy choices and legal rights


    When you are asked to provide personal data to us, you can say "no". However, some of the features of our Services require certain personal data from you in order to operate. If you choose not to provide that information, you will be unable to use those features or they may not be personalized to you.


    13.1 U.S. State Data Privacy Rights

    Several states have enacted data privacy laws that give state residents certain rights with respect to their personal data. These rights are listed below; however, not all states provide their residents with all of these rights and the scope of these rights may vary from state to state. You may exercise these rights at least once (or if you are a resident of certain states, twice) in any twelve month period free of charge:

      • Right to know. You have a right to know whether we are processing your personal data.
        • If you are a California resident, you also have the right to know the categories of personal data we have collected about you, the categories of sources of such information, the purposes for the collection, selling or sharing of such personal data, and the categories of third parties with whom such personal data is shared.

      • Right of access. You have a right of access to any personal data we hold about you.
        • If you are a California resident, you also have the right to access the specific pieces of personal data we have collected about you.

      • Right of portability. You have the right to obtain, to the extent technically feasible, a copy of the personal data you have provided to us in a structured, commonly used, machine-readable format that allows you to transmit the data to another entity without hindrance.
        • If you are a California resident, you can make this request up to twice a year, free of charge.
      • Right to correct. You have a right to request an update to any of your personal data which is out of date or incorrect, taking into account the nature of the personal data and the purposes of the processing.
      • Right to delete your information. You have a right to ask us to delete any personal data which we are holding about you, subject to certain exceptions. We will pass your request on to parties who have received your personal data from us unless that is impossible or involves disproportionate effort, in which case, we shall explain to you why we cannot forward your request.

      • Right to opt-out: You have a right to ask us to stop using your personal data for:
        • targeted advertising ("cross context behaviorial advertising" under California law).
        • sale.
        • automated profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. We do not process your personal data for such automated profiling.

      • Right of no retaliation. If you exercise your privacy rights, we will not provide you with different features, quality of services, or pricing, except as reasonably related to the scope of information you have provided us or as otherwise permitted by applicable law. For example, if you opt out of providing information required to customize your experience with certain features of our Services, those features will not be customized to you.

    13.2 Additional data privacy rights of California residents

    If you are a California resident, you also have the right to:

      • Limit use or disclosure of sensitive personal information if we use or disclose sensitive personal information for reasons other than those set forth in section 7027(m) of the California Consumer Privacy Act and its regulations' regulations or we disclose it for the purpose of inferring characteristics about you. We do not use or disclose sensitive personal information for reasons other than those set forth in section 7027(m) of the CPRA Regulations and do not disclose it for the purpose of inferring characteristics about you.
      • Receive disclosures regarding third party direct marketing. You have the right under California Civil Code Section 1798.83 (the Shine the Light Law) to request certain information regarding the disclosure of your personal data to third parties for such third parties' direct marketing purposes. We do not share your personal information with third parties for such purposes unless you request that we do so.

    13.3 Canadian residents' data privacy rights

    Canada provides its residents with the following data privacy rights. Exercise of some of these rights may involve a minimal charge:

      • right to know whether we are processing your personal data, where we obtained it, and how we are using it.
      • right to access that personal data, subject to certain exceptions.
      • right to correct inaccurate personal data that we have maintained about you, taking into account the nature of the personal data and the purposes of the processing.
      • right to delete personal data that we have collected about you, subject to certain exceptions.
      • right to data portability. You have the right to ask that we transfer the personal data you gave us from one organization to another, or give it to you.
      • right to withdraw consent to our use of your personal data.

    Personal data that you provide while in Canada will be transferred to the United States and may be transferred to other countries. The laws in these other jurisdictions may not be as protective of your privacy as those in Canada and your personal data may be accessible to law enforcement and national security authorities of those jurisdictions. If we transfer personal data from Canada, we will comply with PIPEDA's Fair Information Principles with respect to personal data transferred.


    13.4 European residents' data privacy rights

    If you are located in the European Union, a European Economic Area member state, or the United Kingdom, or the processing of your personal data may have actual or potential effects in Switzerland, this link provides information regarding your data privacy rights under the laws of those jurisdictions.


    13.5 How to Submit a Request

    We will consider all requests to exercise your data privacy rights based on the data privacy laws of your state or jurisdiction (if any) that apply to us as of the effective date of those laws and will provide our response within 45 days and as required by applicable law. Please note, however, that these rights are not always absolute; some of them only apply in certain circumstances and even where a right applies, there may be some personal data that is exempt from such requests. For example, if we need to keep using personal data to comply with our own legal obligations or to establish, exercise or defend legal claims. If we do not act on your request, we will explain our reasons why.

      • Requests to Opt-Out of Sale/Sharing of Personal Data. You may exercise this right by going here or emailing us at privacy@nulo.com.
      • Other Requests to Opt-Out. You may exercise this right by going here or emailing us at privacy@nulo.com.
      • Requests to Know, Access, Port, Correct, or Delete. You may exercise this right by emailing us at privacy@nulo.com, or calling us at 512-476-6856.
      • Requests to Receive Disclosures Regarding Third Party Direct Marketing. You may exercise this right by emailing us at privacy@nulo.com or writing to us at 2530 Walsh Tarlton Ln #140, Austin, TX 78746.

    To respond to a request, we are required to verify your identity. You will be required to provide the primary email address listed on your account. A verification email will then be sent to that email address in order to verify your identity. We may need to contact you to confirm your request.

    Certain states allow residents to use an authorized agent to make opt-out requests; California allows residents to use authorized agents to submit any data rights request. If you are an authorized agent and a consumer has given you written, signed permission to submit a request on their behalf, you must submit a copy of that permission to us in order to submit the consumer's request. We will require the consumer to verify their identity and directly confirm with us that they have provided you with permission to submit the request. You may submit such requests by emailing us at privacy@nulo.com.


    13.6 How to appeal our decision on your request

    You may appeal our decision on your request by emailing us at privacy@nulo.com.

    14. Contact details

    If you have any questions about this privacy policy or about the use of your personal data, please contact us at:

    Email address: privacy@nulo.com

    Postal address: 2530 Walsh Tarlton Ln #140, Austin, TX 78746

    Telephone number: 512-476-6856

    15. Changes to the Privacy Policy

    We keep our Privacy Policy under regular review. Older versions can be obtained by contacting us. If our Privacy Policy changes, we will post these changes to our website with the date of revision. Unless otherwise stated, any modifications to this Privacy Policy will go into immediate effect after they have been posted. We encourage you to review our Privacy Policy periodically. Your continued access to and/or use of the Services after any such changes constitutes your acceptance of, and agreement to be legally bound by, this Privacy Policy, as revised. If our privacy practices, including the ways we use your personal data, materially change from the time you created an online profile, we will notify you about such changes before they take effect and allow you to delete your information as described above, should you disagree with such changes.

    16. Conflicts

    If any of the terms of this Privacy Policy conflict with any of the terms of our Terms of Use, the terms of this Privacy Policy shall control with respect to the subject matter of this Privacy Policy.

    17. California required disclosures

    In the last 12 months, we collected, used, and disclosed the following categories of personal data for the following business purposes:

    • Identifiers, such as real name, user name, contact info, IP address, or other similar identifiers.
      • Sources: the individual user, our service providers
      • Purposes of Processing: provide our Services, communications, offers, marketing, and promotion; respond to user requests; detect and prevent fraud and abuse; as directed by our users (such as in connection with providing product reviews)
      • Recipients: our service providers; our advertising partners
    • Credentials.
      • Sources: the individual user
      • Purposes of Processing: provide our Services; authentication and account access; user support; account security; detect and prevent fraud and abuse
      • Recipients: service providers
    • Interactions with our Services.
      • Sources: the individual user's interactions with our Services
      • Purposes of Processing: provide and personalize our Services, offers, marketing, and promotion; product development, improvement, and maintenance; user support
      • Recipients: our service providers; our advertising partners
    • Internet or other electronic network activity information, including browsing history, search history, and information regarding a consumer's interaction with an internet website application, or advertisement.
      • Sources: the individual user
      • Purposes of Processing: provide our Services; product development, improvement, and maintenance; user support; marketing and promotion
      • Recipients: our service providers; our advertising partners
    • Inferences drawn from the above information to create a profile about you reflecting your preferences, characteristics, psychological trends, predispositions, behaviour, attitudes, intelligence, abilities, and aptitudes.
      • Purposes of Processing: provide and personalize our Services, offers, marketing, and promotion; product development, improvement, and maintenance; user support
      • Recipients: our service providers; our advertising partners

    We do not disclose sensitive personal information for purposes other than those specified in Section 7027(m) of the California Consumer Privacy Act Regulations. We do not use or share your personal data with third parties for the purposes of profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. We do not have actual knowledge that we have sold or shared the personal data of consumers under 16 years of age.