Privacy Policy
Effective date: July 23, 2026
This Privacy Policy explains how PlasticTox (“PlasticTox,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects personal information when you visit plastictox.fluid.app, purchase or use a PlasticTox test, submit a saliva sample, receive results, use the PlasticTox customer portal, or otherwise interact with us (collectively, the “Services”).
PlasticTox provides personal exposure-awareness and educational services. PlasticTox is not a healthcare provider, and the Services are not intended to diagnose, treat, cure, prevent, or predict disease. Depending on the parties involved and applicable law, information handled by PlasticTox may not be protected by the Health Insurance Portability and Accountability Act (“HIPAA”). This Policy applies to PlasticTox’s handling of information regardless of whether HIPAA applies to a particular laboratory or service provider.
1. Information We Collect
Contact and account information. We may collect your name, email address, account credentials, shipping and billing addresses, order history, and communications with us.
Transaction information. We collect information about products purchased, order status, shipping, returns, refunds, and payment status. Payment card information is processed by our payment providers; PlasticTox does not need to receive or store your full payment card number.
Consumer health and sensitive information. To provide a test, we and our laboratory and technology providers may process a saliva sample, sample identifier, collection and receipt information, laboratory observations, candidate microplastic particle counts, exposure scores or categories, reports, dashboard information, and information you voluntarily provide in connection with your results or support requests. PlasticTox does not use the sample to provide ancestry, paternity, or genetic-sequencing services.
Device and usage information. We may collect IP address, browser type, device identifiers, pages viewed, referring pages, approximate location derived from IP address, interactions with the Services, and cookie or similar technology data.
Communications. We collect information you provide when requesting help, exercising a privacy right, reporting a problem, or otherwise communicating with us.
2. Sources of Information
We collect information directly from you; automatically from your browser or device; from our commerce, payment, shipping, customer-portal, hosting, analytics, and security providers; and from the laboratory and other providers that help collect, transport, analyze, or report your sample.
3. How We Use Information
We use information to:
- process payments, fulfill orders, ship kits, and provide prepaid sample-return workflows;
- register, identify, receive, analyze, and report samples and results;
- provide your dashboard, baseline, exposure context, and educational reduction guidance;
- authenticate accounts and provide customer support;
- maintain, secure, troubleshoot, and improve the Services;
- prevent fraud, misuse, security incidents, and unlawful activity;
- comply with legal, regulatory, tax, accounting, and recordkeeping obligations;
- enforce our agreements and protect the rights and safety of users, PlasticTox, and others; and
- send service-related communications and, only where permitted and consented to, marketing communications.
We will not collect, use, or disclose consumer health data for a materially different purpose without providing any notice or obtaining any consent required by applicable law.
4. How We Disclose Information
We may disclose information to the following categories of recipients only as reasonably necessary for the purposes described above:
- Laboratory and sample-service providers that receive, handle, analyze, quality-check, or report samples and results;
- Fluid and related commerce providers that support the storefront, checkout, customer portal, accounts, orders, and digital delivery;
- Payment processors that authorize and settle transactions;
- Shipping and logistics providers that deliver kits and return samples;
- Technology, hosting, security, analytics, and customer-support providers that operate and protect the Services;
- Professional advisers, including legal, accounting, insurance, and compliance advisers;
- Government agencies, regulators, courts, or other parties when disclosure is required by law or reasonably necessary to protect rights, safety, and security; and
- Parties to a corporate transaction, subject to appropriate confidentiality and legal protections.
We do not sell personal information or consumer health data for money. We do not use or disclose consumer health data for cross-context behavioral advertising. We do not permit service providers to use consumer health data for their own unrelated purposes.
5. Consumer Health Data
Consumer health data may include sample identifiers, saliva-sample information, laboratory observations, candidate particle counts, exposure scores, reports, and information that identifies or can reasonably be linked to you and your test. We collect this information from you, your submitted sample, and providers involved in the sample and reporting workflow. We use and disclose it to provide the test and results, maintain and secure the Services, comply with law, and as otherwise described in this Policy.
Where required by law, we obtain affirmative consent before collecting or sharing consumer health data. If we seek to use identifiable samples or results for a materially different purpose, including identifiable research beyond providing the Services, we will provide additional notice and obtain any consent required by law. Aggregated or deidentified information may be used for quality, validation, analytics, and service improvement where permitted by law, provided it is maintained in deidentified form and not reasonably used to identify you.
6. Cookies and Similar Technologies
We and our service providers may use necessary cookies for checkout, account access, security, preferences, and site operation, as well as limited analytics technologies to understand performance and improve the Services. You can control cookies through browser settings, but disabling necessary cookies may prevent checkout or account features from working.
7. Data Retention and Samples
We retain personal information only for as long as reasonably necessary to provide the Services, maintain records, comply with law, resolve disputes, enforce agreements, and protect security. Retention periods vary based on the type of information, the purpose for processing it, laboratory procedures, legal requirements, and operational needs.
Samples may be retained, consumed, or destroyed by the laboratory in accordance with its validated procedures, quality requirements, contractual obligations, and applicable law. A request to delete account information may not allow retrieval or destruction of a sample that has already been deidentified, consumed, analyzed, or destroyed, or information that must be retained by law.
8. Security and Breach Notification
We use reasonable administrative, technical, and physical safeguards designed to protect information. No system, transmission, or storage method is completely secure, and we cannot guarantee absolute security. If a breach or unauthorized disclosure occurs, we will investigate and provide notices to affected individuals, regulators, or others as required by applicable law, which may include the Federal Trade Commission’s Health Breach Notification Rule.
9. Your Privacy Rights
Depending on where you live and subject to legal exceptions, you may have the right to confirm whether we process your information; access, correct, delete, or obtain a portable copy of information; withdraw consent; restrict or object to certain processing; opt out of sale, targeted advertising, or certain profiling; and appeal a denial of a request.
You may submit a request through the PlasticTox customer portal. We may need to verify your identity and authority before completing a request. Authorized agents may submit requests where permitted by law, subject to verification. We will not discriminate against you for exercising a privacy right.
If we deny a request, you may appeal by submitting a new portal request labeled “Privacy Appeal.” If an appeal is denied, you may contact the attorney general or privacy regulator in your state. Because PlasticTox does not sell personal information or use consumer health data for targeted advertising, there is no sale or targeted-advertising opt-out required for those practices at this time.
10. Children
The Services are intended for adults age 18 or older. We do not knowingly offer tests to or collect personal information directly from children. If you believe a child has provided information, submit a request through the customer portal.
11. Third-Party Services
The Services may link to third-party websites or services. Their privacy practices are governed by their own policies. We encourage you to review those policies.
12. Changes to This Policy
We may update this Policy to reflect changes in the Services, our practices, or law. The updated version will identify its effective date. Where required, we will provide additional notice or obtain consent before applying material changes to previously collected consumer health data.
13. Contact Us
For privacy questions or requests, use the PlasticTox customer portal. Please do not send saliva samples, payment card numbers, or other highly sensitive information through an unsecured message.