Privacy Policy
Effective August 1, 2026.
This policy explains what information we collect when you visit worksprobiotics.com or buy from us, what we do with it, who else sees it, and what you can do about it. We have written it in plain language. Where the law requires a specific term, we use it and then explain it.
Who we are
Works is operated by MetaBiotics LLC, doing business as Works Probiotics.
- Mail: MetaBiotics LLC, PO Box 17263, Fountain Hills, AZ 85269
- Email: support@worksprobiotics.com
Use that email for any privacy question or request, including the rights described below. Write "Privacy request" in the subject line so it reaches the right place.
What this policy covers
This policy covers worksprobiotics.com and the orders, subscriptions, and support conversations that run through it.
It does not cover the clinical study. Works sponsors a human study conducted by Arizona State University. That study is run by ASU under its own Institutional Review Board approval, and anything you provide as a participant, including any sample or health information, is handled by ASU under the consent form you sign with them, not under this policy. If you have a question about study data, contact the ASU study team listed on that consent form.
What we collect
| What | Examples | Where it comes from | Why we have it |
|---|---|---|---|
| Contact and account information | Name, email address, shipping and billing address, account login | You give it to us at checkout, at signup, or when you email us | To take, ship, and support your order |
| Order and subscription information | What you bought, order history, delivery schedule, skips, pauses, cancellations, returns | Created when you order and manage your subscription | To fulfill orders, run the subscription, and handle returns |
| Payment information | Payment method type, last four digits, billing address, transaction result | Your payment provider passes it to us through Shopify | To take payment and prevent fraud |
| Support correspondence | Emails you send us and our replies | You | To answer you and improve how we answer |
| Marketing preferences | Whether you subscribed to email, what you opened or clicked, when you unsubscribed | Created as you interact with our email | To send email you asked for, and to stop when you say stop |
| Device and usage information | IP address, general location derived from it, browser and device type, pages viewed, referring site, cookie and advertising identifiers | Collected automatically as you browse | To run and secure the site, measure how it performs, and measure advertising |
We do not ask you for your date of birth, government ID, or any medical history, and we do not want you to send them. Please do not include health details in emails to support. If you do, we will use them only to answer you.
Payment
Payments are processed by Shopify Payments and the payment methods you choose, such as Shop Pay. We do not receive or store your full card number. Those providers handle your card details under their own terms and security standards.
Cookies and similar technologies
We use cookies and similar technologies for three different things, and you can treat them differently.
- Necessary. Keeping you logged in, remembering your cart, securing checkout, and preventing fraud. The site does not work without these.
- Analytics. Understanding which pages people read and where they leave, through Google Analytics 4.
- Advertising. Measuring and targeting our ads, through Meta Pixel and the Meta Conversions API, and the TikTok Pixel.
You control the second and third categories through the cookie banner when you first visit, and through the Your Privacy Choices link in our footer at any time afterward. Your browser also lets you block or delete cookies, though blocking necessary cookies will break checkout.
Analytics and advertising, stated plainly
We advertise on Meta and TikTok, and we measure that advertising. To do it, we send those platforms information about what happens on our site, including page views, items added to cart, and completed purchases. The Meta Conversions API also sends a scrambled, non-readable version of your email address and other contact details so Meta can match the purchase to an account it already has.
Under California law, this counts as "sharing" personal information for cross-context behavioral advertising, and it may also count as a "sale." We treat it as both, so that the choice we offer you is the broader one. We do not accept money for your information, and we do not provide customer lists to data brokers.
Two limits apply to this.
- We do not send purchase or product-page events to Meta or TikTok from visitors in Washington, Nevada, Connecticut, or Maryland. Those states give special protection to information that can reveal something about your health, and the name of our product can support that kind of inference. Analytics still runs in those states. Advertising trackers do not.
- Everywhere else, you can turn it off. Use the Your Privacy Choices link in the footer, or decline advertising cookies in the banner.
You can also control advertising at the source. Meta's settings are at facebook.com/adpreferences/ad_settings, TikTok's are in the app under Privacy, and you can opt out of Google Analytics with Google's browser add-on at tools.google.com/dlpage/gaoptout.
We send two kinds of email.
Transactional email confirms your order, tells you when it ships, and warns you before a subscription renews. You cannot unsubscribe from these while you have an active subscription, because they carry information you need.
Marketing email goes only to people who asked for it. Every message has an unsubscribe link at the bottom, and it works immediately. We use Klaviyo to send both kinds. When you unsubscribe, we keep your address on a suppression list so that we do not accidentally email you again. That is the only reason we keep it.
We do not send marketing text messages.
Who else sees your information
We share information with companies that do specific jobs for us, and only what each one needs.
| Who | What they do | What they get |
|---|---|---|
| Shopify | Runs the store, checkout, and customer accounts | Order, account, and browsing data |
| Shopify Payments and payment providers | Process payment | Payment and billing data |
| Shopify Subscriptions (Shopify Inc.) | Runs recurring billing and the subscriber portal | Contact, order, and billing schedule data |
| Klaviyo | Sends our email | Contact details and email engagement |
| ShipStation | Prepares shipping labels and tracking | Name, shipping address, order contents |
| All In Nutritionals | Packs and ships your order | Name, shipping address, order contents |
| Google, Meta, TikTok | Analytics and advertising | Device, usage, and the event data described above |
We also disclose information when the law requires it, when we need to respond to a valid legal request, when we must protect someone's safety or our rights, and, if the business is ever sold or merged, to the acquiring party as part of that transaction. If that last one happens, we will say so here first.
These companies are bound by contract to use your information only to do the job we hired them for. The advertising platforms are the exception worth naming: they use the data they receive for their own purposes as well, which is why we give you the controls above.
Information that can reveal something about your health
Buying a product called Works for Glucose Wellness can support an inference about your health, even though we never ask you a health question. Several states treat that inference as protected information in its own right.
We publish a separate Consumer Health Data Privacy Policy that explains exactly how we treat it, including a right to have it deleted from every system we hold it in. It is linked from our homepage and our footer as its own item, and you should read it if this matters to you.
Your choices
- Turn off advertising and analytics tracking. Use Your Privacy Choices in the footer, or the cookie banner.
- Global Privacy Control. If your browser or an extension sends a Global Privacy Control signal, we treat it as a valid opt-out of sale and sharing, automatically, for every visitor, in every state. You do not need to do anything else.
- Stop marketing email. Use the unsubscribe link in any marketing message.
- Change or delete your account. Log in, or email us.
- Cancel your subscription. Do it yourself from your account at any time. See the Terms of Service.
Your rights
If you live in a state with a comprehensive consumer privacy law, you have the rights below. As of the effective date of this policy that includes Arkansas, California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia, and it will include more states over time. Rather than track which right applies where, we extend all of them to everyone in the United States. It is simpler for you and simpler for us.
- Know. Ask what personal information we hold about you, where we got it, why we have it, and who we have disclosed it to.
- Get a copy. Receive it in a portable format.
- Correct. Fix anything inaccurate.
- Delete. Have it erased, subject to the narrow exceptions below.
- Opt out. Stop the sale or sharing of your information, stop targeted advertising, and limit the use of information that reveals something about your health.
- No retaliation. We will not raise your price, degrade your service, or refuse to sell to you because you exercised a right.
How to exercise them. Email support@worksprobiotics.com with "Privacy request" in the subject line. Tell us which right you want to use. We will ask you to confirm the request from the email address on your account, or to give us enough order detail to match you to a record. We do this so that we do not hand your information to somebody else. If we cannot verify you, we will tell you why.
An authorized agent may make a request for you if they provide written permission signed by you. We may still contact you directly to confirm.
How long we take. We respond within 45 days. If a request is complicated, we may take one further 45 days, and we will tell you before the first 45 days are up.
What we cannot delete. We must keep completed transaction records for tax and accounting law, records needed to detect fraud or security incidents, and information we need to defend a legal claim. We will delete everything else and tell you exactly what we kept and why.
If we say no. You can appeal. Reply to our decision with the word "Appeal." A different person reviews it and answers within 45 days in writing. If we deny the appeal, we will give you a link to submit a complaint to your state Attorney General.
How long we keep things
| What | How long |
|---|---|
| Order and payment records | 7 years after the order, for tax and accounting law |
| Account and subscription records | While your account is open, then 7 years for the transaction record |
| Support email | 3 years |
| Marketing contact and engagement | Until you unsubscribe or ask us to delete it. Your address then stays on a suppression list so we do not email you again |
| Website analytics | 14 months |
| Advertising identifiers held by ad platforms | Set by each platform, generally no longer than 2 years |
| Information that can reveal something about your health | See the Consumer Health Data Privacy Policy. Deleted within 30 days of a valid request, including from backups |
When a period ends we delete the information or strip it of anything that identifies you.
Security
Our store runs on Shopify, payments run through certified payment processors, and the site is served over an encrypted connection. Access to customer records is limited to the people who need it. That said, no method of storing or transmitting information is perfectly secure, and we will not claim otherwise. Please do not send us sensitive information by email.
If a breach affects your information, we will notify you as the law requires.
Children
Works is not sold to or directed at anyone under 18. We do not knowingly collect information from children. If you believe a child has given us information, email support@worksprobiotics.com and we will delete it.
Visitors outside the United States
We sell and ship only within the United States, and our site is intended for United States residents. You are welcome to read it from anywhere, but if you visit from outside the United States your information will be processed in the United States, where privacy law differs from your own. If you are in the European Economic Area or the United Kingdom and want to know what we hold about you, or want it deleted, email support@worksprobiotics.com and we will handle your request the same way we handle every other one described above.
Changes
We will update this policy when our practices change. The effective date at the top always tells you which version you are reading. If a change is significant, we will say so on this page and, where we have your consent to email you, by email.
Contact
MetaBiotics LLC, dba Works Probiotics
PO Box 17263, Fountain Hills, AZ 85269
support@worksprobiotics.com