PRIVACY POLICY

What we collect

• Newsletter and quiz: your name and email address, if you subscribe or leave them on the product quiz. We use them to send what you asked for (the newsletter, your quiz recommendation, launch updates) and store them in our email tool (Resend) and our customer relationship tools (GoHighLevel, and a Google Sheets log). Every email includes a way to unsubscribe.
• Orders: if you buy from us, checkout is processed by Stripe. Stripe receives your name, email, phone number, shipping address, and payment details. We never see or store your card number. We keep an order record (what was ordered, amount, your email) to fulfil it and handle returns.
• Accounts and community: if you create an account, we store your email, the profile details you choose, your order history, and anything you post in the community. Account data lives in our database provider, Supabase. To remove a post or delete the whole account, email us and we do it.
• Bot protection: our forms and checkout use Cloudflare Turnstile to block automated abuse. Turnstile evaluates browser signals; we only receive a pass or fail token.
• Analytics: we use Google Analytics 4 to understand which pages are read and which outbound links are clicked. GA4 sets cookies and collects usage data such as pages viewed, approximate location, and device type.
• Hosting logs: our hosting provider keeps standard server logs (IP address, request time, user agent) for security and reliability.

Affiliate links and Amazon

OnWhey is a participant in the Amazon Services LLC Associates Program. Articles on this site contain affiliate links; if you click one and make a purchase, Amazon sets cookies on its own site to attribute the sale and we may earn a commission at no extra cost to you. Amazon's use of your data is governed by Amazon's own privacy policy.

How we use data

• To deliver orders and send order confirmations.
• To send the newsletter you asked for.
• To understand what content is useful and improve the site.

We do not sell your personal data.

Who we share data with

Only the processors needed to run the site: Stripe (payments), Resend (email), GoHighLevel (customer relationship management), Google (analytics, and a Sheets log of signups), Supabase (accounts database), Cloudflare (bot protection), and Vercel (hosting). Each processes data under its own privacy terms. Several of these providers are located in the United States, so your data may be transferred and stored outside your country; we only use providers that publish their own data protection commitments, and we remain responsible for your data under the PDPA while it is with them. We never sell personal data or share it for advertising.

Cookies

We use cookies for analytics (Google Analytics) and for basic site function (for example, remembering your cart, which is stored in your own browser). You can block or delete cookies in your browser settings; the site keeps working.

Retention and your rights

We keep personal data only as long as needed for the purposes above: mailing list entries until you unsubscribe, accounts until you delete them, and order records for as long as tax and consumer law require. You may request access to, correction of, or deletion of your personal data, or withdraw consent at any time, by emailing our data protection officer at hello@onwhey.com. We respond within 30 days.

These rights are written to Singapore's PDPA, and we extend the same access, correction, deletion, and objection rights to everyone regardless of where you live - including the rights granted by the EU and UK GDPR (access, rectification, erasure, restriction, portability, objection, and complaint to your local supervisory authority) and by US state privacy laws such as the California CCPA (to know, delete, correct, and opt out of sale or sharing - we do not sell or share personal data as those laws define it, and we do not discriminate against you for exercising any right).

Children

This site sells and discusses sports supplements and is not directed at persons under 18.

Changes

We will update this page when our practices change and revise the effective date above.