Gluco Mild Privacy Policy

Seven rows, and only three of them are a yes. A static website is a poor collector of data by construction rather than by policy.

The third row is the one most privacy policies bury, so it is worth being plain. Any web server writes a log line for every file it serves, and that line contains an IP address. The host keeps those for security and capacity purposes and this desk does not mine them, cross-reference them or attach a name to one.

The sixth row is the only route by which this desk learns anything identifying about a reader, and it is a route you choose to use. An email about a typo is held while the typo is being fixed and is not added to any list.

Every ordering button on this website is a link off it. Press one and you arrive at the seller's checkout, which is a different company on a different domain running its own systems.

That is where a name, a delivery address, an email address and card details are entered, and that company is the one holding them. It is also the party that sends the confirmation email, generates the tracking number and issues any refund. This desk does not receive your card number at any point in that sequence, and nobody here will ever ask you for one.

What this desk does hold, once an order has shipped from its stock, is the ordinary fulfilment record: which pack went out, to which address, against which lot number. Lot GLU-26/GO-6518 is a production reference rather than personal data, but the shipping record beside it is.

• The hosting provider. Serves the files and keeps the request logs described above.
• Google Fonts. Two type families are loaded from Google's font service, so a request for them carries your IP address to that service in the ordinary way a request for any remote file does.
• The seller's checkout. A separate company, reached only when you press an ordering button, operating under its own privacy policy.
• The order desk's telephone provider. Carries calls to the order line in the way any telephone network carries a call.

That is the whole list. There is no analytics suite on these pages, no heat-mapping script, no session recorder, no chat widget and no remarketing tag. A visitor is not followed off this website and is not assembled into an audience.

The absence is not a virtue this desk invented. It is what a static website looks like when nobody adds the usual layer on top of it, and it is stated here so a reader can check it with the view-source command rather than take it on trust.

This website links out a great deal, by design. Every ingredient claim points at a published paper, most often on PubMed, and the health agency pages are linked rather than paraphrased.

Those links are ordinary outbound links. Following one takes you to the National Library of Medicine or to a government health service, which then applies its own privacy policy to the visit. This desk learns nothing about which ones you followed, because there is no click tracker on them.

Outbound links carry rel="nofollow noopener" and open in a new tab. The noopener half is a security measure rather than a privacy one: it stops the page you land on from reaching back into the tab you left.

Where an obligation sets the period, the obligation sets it. Nothing here is kept because it might be useful later.

Two habits do more for a reader's privacy than any policy paragraph. The first is to keep the order email rather than the card statement as your record of a purchase, because the order email carries the ID every desk searches on. The second is to send an editorial question without an order number attached to it, so the two records never have to meet.

• Ask what is held about you, and receive an answer describing it.
• Ask for a correction where something held is wrong.
• Ask for deletion of correspondence, subject to any record an open matter needs.
• Ask for a copy of what is held in a portable form.
• Object to a use you did not expect, and be told what it was.
• Complain to your state or national data protection authority.

Write to [email protected] and say which of the six you are asking for. The desk reads that address Mon–Fri 9:00am–5:00pm ET and will say what it holds, which in most cases is one email thread and nothing else.

A request about an ORDER has to go to the seller, because the seller holds the order. The order desk on +1 (302) 200-3480 can route that, and the contact page sets out which route can act on what.

This website is written for adults and the product is for adults. It is not directed at children, carries nothing aimed at them, and does not knowingly hold data about anyone under 18.

For healthy adults 18 and over. Not for anyone under 18, pregnant or nursing. Speak to a clinician first if you take an anticoagulant, a heart medicine or a blood pressure medicine.

If you believe a child has sent something to [email protected], say so in a reply and the correspondence will be deleted.

The pages are served over HTTPS, so what travels between your browser and the host is encrypted in transit. The files themselves are static and there is no database behind them to breach, which removes the most common failure in this category by removing the component.

Email is the weak link and it is worth naming rather than glossing. A message sent to an inbox is not end-to-end encrypted, so do not put a card number, a full date of birth or a government identifier in one. No desk here needs any of the three.

No arrangement is perfect and a policy that claimed otherwise would be worth less than this sentence. What can honestly be said is that a website holding almost nothing is a poor target, and that is the position this one is in.

When this policy changes, the revision date at the foot of the page moves and the changed sentences are rewritten in place. There is no archived version log, because a log of a document this short would be longer than the document.

Last reviewed September 2026. Questions and corrections go to [email protected].