Privacy Policy
Last updated 30 August 2026.
This policy explains what personal information EXO Labs collects when you visit or buy from officialexo.com, why we collect it, and what rights you have over it.
1. What we collect
Information you give us. Name, email address, shipping and billing address, phone number if you provide it, and order history. Payment card details are entered directly into our payment processor and are never stored by us.
Information collected automatically. Device and browser type, IP address, approximate location derived from it, pages viewed, referring site, and similar analytics data collected through cookies and comparable technologies.
Information you volunteer. Anything you send us through a contact form, a survey, a product quiz, or a reply to a marketing message.
2. Why we use it
- To process, fulfil and deliver your orders, and to manage subscriptions
- To communicate with you about an order, a return, or a support question
- To send marketing messages where you have consented, which you can withdraw at any time
- To detect and prevent fraud and abuse
- To understand how the site is used so we can improve it
- To meet our legal, tax and accounting obligations
3. Who we share it with
We do not sell your personal information. We share it only with service providers who need it to operate our business, and only for that purpose. These include our ecommerce platform, payment processors, shipping carriers, email and messaging providers, and analytics providers. Where we sell through a marketplace such as TikTok Shop, that platform processes order data under its own privacy policy.
We may also disclose information where required by law, or in connection with a merger, acquisition or sale of assets.
4. How long we keep it
We keep order records for as long as needed to fulfil the order and for the period required by tax and accounting law. Marketing contact data is kept until you unsubscribe or ask us to delete it.
If you ask us to delete your personal information, we will erase it within 30 days, except where we are required to retain specific records by law.
5. Your rights
Depending on where you live, you may have the right to access the personal information we hold about you, to correct it, to delete it, to object to or restrict how we use it, to receive a portable copy, and to withdraw consent to marketing at any time.
If you are in the European Economic Area or the United Kingdom, these rights arise under the GDPR. If you are a California resident, you have rights under the CCPA and CPRA, including the right to know what we collect, the right to delete, and the right to opt out of sale or sharing. We do not sell personal information as that term is defined under California law.
To exercise any of these rights, email us at the address below. We will respond within the period required by the applicable law.
6. Cookies
We use cookies to keep your cart working, to remember preferences, and to measure site performance and advertising. You can block or delete cookies in your browser settings, though parts of the site may stop working correctly if you do.
7. Children
This site is not directed at children under 13 and we do not knowingly collect their personal information. If you believe a child has provided us with information, contact us and we will delete it.
8. Security
We take reasonable technical and organisational measures to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
9. International transfers
We are based in the United States and your information may be processed there and in other countries where our service providers operate. Those countries may have different data protection laws than your own.
10. Changes
We may update this policy. The version posted here is the current one, and the date at the top shows when it last changed.
11. Contact
For any privacy question or to exercise your rights, email hello@officialexo.com.
