Privacy Policy
Last updated: 14 September 2026
This Privacy Policy describes the data protection practices of Krilos Inc. and its affiliates ("Krilos", "we", "our" or "us") when you visit any Krilos website that links to this policy, use a store powered by Krilos, or otherwise provide data to us (together, the "Services"). Please read it carefully. If you do not agree with it, please do not use the Services. This policy is incorporated into our Terms & Conditions.
The information we collect and where it comes from
We need certain information to provide the Services. If you do not provide it, or ask us to delete it, some or all of the Services may no longer be available to you.
1. Information you provide to us
We collect information you give us directly, for example when you:
- Register for an account or a store, and administer that account
- Process a subscription, order, or request
- Send us questions, communications, or feedback through forms or email
- Take part in research or surveys
- Ask for customer support or technical assistance
- Apply for a job with us
The information we collect depends on the Services you use and what you choose to share. It includes your name, business address, telephone number and email address; log-in credentials; billing information such as billing address and payment card details, which are collected by our payment processor on our behalf; information about purchases and other transactions; information about your customer service interactions; and business and demographic information you choose to provide.
Patients of Krilos-powered stores: health information you enter in a medical assessment, your prescriptions, your provider's notes and your care messages are protected health information. It is stored only in Krilos Inc.'s access-controlled clinical systems, is used only to deliver your care and fulfil your order, and is never used for advertising or sold.
2. Information we collect automatically
When you use the Services we collect information about your use and the devices you use to access them, such as your IP address, browser type and language, operating system, the state or country you accessed the Services from, device identifiers, referring and exit pages, the pages you viewed and the order and time spent on them, error logs and similar information.
Location information: we and our service providers may collect general location information, such as the city, state or postal code associated with an IP address.
Cookies and similar tools: we and our service providers use web server logs, cookies, tags, SDKs, tracking pixels and similar technologies to collect the information in this section.
3. Information from social media and other platforms
When you follow or interact with us on social media, we may collect the information you make available there, such as your name, email address and any comments you post about us.
4. Information we receive from other sources
We work with third parties such as technical and advertising service providers, analytics providers and search providers. They may sometimes provide us with additional information about you.
How we use your information
In connection with providing the Services, we may use your information to:
- Carry out, improve and manage the Services
- Understand how the Services are used and improve them
- Communicate with you about the Services, your use of them and your enquiries
- Contact you by email, post or phone about surveys, promotions, events or our products and Services
- Provide technical support and customer service
- Verify your identity and administer your account, including processing payments and fulfilling orders
- Present content in the most effective way for you and your device
- Measure the effectiveness of advertising and content, and deliver relevant advertising and content
- Understand your interests and needs through analysis and research
- Comply in good faith with laws and regulations that apply to us
- Establish, exercise or defend our legal rights
Combined information
We may combine information collected through the Services with information from other sources, online and offline, and use and share that combined information in accordance with this policy.
Aggregate and de-identified data
We may aggregate or de-identify information collected through the Services so it can no longer be linked to you or your device, and use or share it for any purpose. This does not apply to mobile phone numbers or SMS consent data, which are handled as described below.
SMS communications
Krilos Inc. sends SMS messages only to people who have opted in through a Krilos website form, or during patient intake or checkout on a Krilos-powered store. Messages fall into two categories: (1) account and care messages, such as order and shipment status, check-in reminders, payment notices and replies to your questions; and (2) marketing messages, only if you separately opted in to them.
How we obtain SMS consent
We collect SMS consent through clearly labelled, separate opt-in checkboxes, one for account and service messages and one for marketing. Each checkbox is unchecked by default, and marketing consent is never required to use the Services. The disclosure at the point of consent identifies the sender, the types of messages, message frequency, that message and data rates may apply, and how to opt out.
Message frequency
Message frequency varies based on your account, support and, if you opted in, promotional activity.
Message and data rates
Message and data rates may apply depending on your mobile carrier plan.
How to opt out
Reply STOP to any message at any time. You will receive a single confirmation and no further SMS messages. To re-enable SMS, contact us at the address below.
How to get help
Reply HELP to any message, or contact us at sales@krilos.com.
No sale or sharing of SMS data
Krilos Inc. does not sell, rent or share your mobile phone number or SMS consent data with third parties or affiliates for marketing or promotional purposes under any circumstances. Opt-in data and consent records are kept confidential and are not transferred outside Krilos Inc. and the service providers strictly necessary to deliver these messages on our behalf.
Online analytics and advertising
We may use third-party analytics services on our Services to collect and analyse usage information through cookies and similar tools, to help with auditing, research, reporting and fraud prevention, and to provide features to you.
The Services may integrate third-party advertising technologies that use cookies and similar technologies to deliver relevant content and advertising for Krilos on the Services and on other websites and applications. This advertising activity never uses your mobile phone number, SMS consent data or health information.
How we share and disclose your information
We may share your information for our business purposes in the following ways. Your mobile phone number and SMS consent data are always excluded from sharing for marketing or promotional purposes, and health information is shared only as described in the patient paragraph above.
Affiliates and subsidiaries
We may share information within the Krilos Inc. group to deliver products and services to you, ensure a consistent level of service and improve your experience.
Service providers
We share information with selected third parties who perform services on our behalf, including billing, sales, advertising, analytics, research, customer service, data storage, IT and security, fraud prevention, payment processing, auditing and legal services.
Clinicians and pharmacies
For patients of a Krilos-powered store, the information needed to review your assessment, write your prescription and dispense and ship your medication is shared with the licensed clinicians and pharmacies involved in your care, and with the store you are a patient of.
Protection of Krilos Inc. and others
We may access, retain and disclose the information we hold about you if required by law, or in a good faith belief that doing so is reasonably necessary to comply with legal process, enforce our Terms, respond to claims, or protect the rights, property or safety of Krilos Inc., its users or the public.
Business transfers
If we buy, merge with or partner with other companies, user information may be among the transferred assets.
Your rights
Depending on where you live and the law that applies, you may have the following rights over your personal information:
- Access: request a copy of the personal information we hold about you
- Correction: ask us to correct inaccurate or incomplete information
- Deletion: ask us to delete your personal information, subject to legal obligations
- Opt out of SMS: reply STOP to any message or contact us
- Opt out of marketing: follow the unsubscribe instructions in any email or contact us
- Data portability: where applicable, receive your personal information in a structured, machine-readable format
- Restriction: ask us to restrict processing in certain circumstances
To exercise any of these rights, contact us at privacy@krilos.com. We will respond within a reasonable time and in accordance with applicable law, and we may need to verify your identity first.
Mobile information sharing
Krilos Inc. will not share your mobile phone number or SMS opt-in data with third parties or affiliates for marketing or promotional purposes under any circumstances. This applies to every SMS programme we operate.
Your marketing choices
You may tell us not to use your contact information to contact you by email, post or phone about products, services, promotions and events by contacting us using the details below. In commercial emails you can also opt out by following the instructions at the bottom of the email.
How we protect your information
Krilos Inc. uses technical and organisational security measures to protect your information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access, including encryption in transit and at rest, role-based access controls and audit logging. No method of transmission over the internet or of electronic storage is completely secure, so we cannot guarantee absolute security.
Where you have a password or a sign-in link for the Services, you are responsible for keeping it confidential. Please do not share it with anyone.
Retention of your information
We keep your information no longer than necessary for the purposes for which it is processed, or as required by applicable law, including record-keeping requirements that apply to medical and prescription records.
Children
The Services are not directed to anyone under 18, and we do not knowingly collect personal information from children.
Revisions to this policy
We may change this Privacy Policy to reflect changes in the law, our practices, the Services or technology. The revised policy will be posted on this page with a new 'last updated' date, and we will give you appropriate notice of any material change.
Contacting us
Questions about this Privacy Policy or our data practices: privacy@krilos.com or sales@krilos.com.
See also: Privacy Policy · Terms & Conditions