Privacy Policy

Discovery Sales LLC, doing business as The Longevity Edge (“The Longevity Edge,” “we,” “us,” or “our”), respects your privacy. This Privacy Policy explains what information we collect when you visit thelongevityedge.com (the “Site”), purchase our products, or otherwise interact with us, how we use that information, who we share it with, and the rights you have over it.

By using the Site, you agree to the practices described in this Policy. If you do not agree, please do not use the Site.

1. Who we are

The Longevity Edge is a direct-to-consumer dietary supplement brand founded by Dr. David Woynarowski (“Dr. Dave”) and operated by Discovery Sales LLC, a Pennsylvania limited liability company. Our mailing address is:

You can reach us at doc@thelongevityedge.com for any privacy-related question.

2. Information we collect

We collect information in three ways: information you give us, information we collect automatically when you use the Site, and information we receive from our service providers.

2.1 Information you give us

• Account information. When you create a customer account, we collect your name, email address, password (stored hashed, never in plain text), and optional profile details.
• Order information. When you place an order, we collect your billing and shipping addresses, telephone number (if provided), the products you ordered, the price you paid, and order history.
• Payment information. Credit card details (card number, expiration, CVV) are entered directly into a form hosted by our payment processor, Authorize.net (a Visa company). We never receive or store your full card number on our servers. Authorize.net returns a token to us that represents your card, and that token is what is stored against your account. See Section 5 for details on our card-saving model.
• Communications. If you contact us through our contact form, by email, or by reply to one of our emails, we keep a record of that correspondence.
• Reviews and testimonials. If you submit a product review or send us a testimonial, we collect what you submit (including any name, photo, and product feedback) per our Terms of Service.
• Subscription preferences. If you subscribe to our newsletter or to a Subscribe & Save product subscription, we record those preferences and your subscription history.

2.2 Information we collect automatically

When you visit the Site, our servers and our third-party analytics providers automatically log:

• Your IP address and approximate location derived from it
• Browser type and version, operating system, device type, and screen size
• Pages you visit on the Site, the order you visit them in, how long you spend on each, and what links you click
• The referring URL (the page that linked you to us)
• For some pages, recordings of mouse movement, scroll behavior, and form interaction (see Section 4 for the specific tools)
• Cookies and similar identifiers (see Section 6)

2.3 Information from third parties

• Mailchimp provides us with engagement data about our newsletter and transactional emails (delivered, opened, clicked, bounced, unsubscribed).
• Authorize.net provides us with transaction status, fraud-screening flags, and the tokenized representation of saved cards.
• Shipping carriers (USPS, and any others we add) provide tracking events.
• Google, Meta (Facebook), and Microsoft provide aggregated audience, conversion, and behavior data via the analytics products listed in Section 4.

3. How we use your information

We use the information we collect to:

• Process and fulfill your orders, including subscriptions, and send you order confirmations, shipping notifications, and receipts
• Provide customer service and respond to your questions
• Operate and maintain your customer account, including saved payment methods, saved addresses, and order history
• Send you marketing emails about our products, articles, and offers (you can unsubscribe at any time using the link in any marketing email)
• Send you transactional emails that are part of services you've requested (order receipts, subscription notices, password resets) — these are not marketing and you cannot opt out of them while you have an active account or subscription
• Personalize your experience on the Site (e.g., showing your order history, surfacing one-click reorder)
• Measure and improve the Site's performance, fix bugs, and prevent abuse
• Detect and prevent fraud, including chargeback fraud and account takeover
• Comply with our legal obligations, enforce our Terms of Service, and protect our rights

We rely on the following legal bases for processing where required: (a) performance of a contract (to fulfill your order), (b) your consent (for marketing emails and non-essential cookies), (c) our legitimate interests (operating the business, securing the Site, improving the product), and (d) compliance with law (tax records, fraud prevention).

4. Analytics and tracking tools we use

We currently use the following third-party tools. Each has its own privacy policy that we encourage you to review.

We may add or remove tools from this list over time. The list above is current as of the “Last Updated” date at the top of this Policy.

5. Payment cards and our auto-save card model

When you complete a purchase as a logged-in customer, your card is automatically saved to your account at Authorize.net so you can use one-click reordering on a later visit. This is similar to the model used by Amazon and other large retailers.

Important details:

• Your card data is stored at Authorize.net, not on our servers. We only hold a token that points to your card. We could not give your card number to anyone — even ourselves — if we wanted to.
• You can remove any saved card at any time from your account at /my-account/payment-methods/. Removal is immediate and permanent.
• Saved cards are tied to your customer account. If you check out as a guest, no card is saved.
• Removing a card does not cancel an active subscription. If you have a Subscribe & Save subscription that uses that card, you'll need to either add a replacement card or cancel the subscription separately.

If you do not want your card saved, the simplest option is to check out as a guest. If you have already saved cards and want them all removed, you can either delete each from your account page or email us at doc@thelongevityedge.com and we'll remove them for you.

6. Cookies and similar technologies

A cookie is a small text file that a website stores on your browser. We use cookies for three purposes:

1. Strictly necessary cookies — required for the Site to work (shopping cart, login, checkout). These cannot be turned off.
2. Analytics cookies — used by the tools listed in Section 4 to measure Site usage.
3. Marketing cookies — used by Facebook Pixel and similar tools to measure ad performance and show ads to people who visited the Site.

We use CookieYes as our cookie consent platform. The first time you visit the Site you will see a consent banner where you can accept all cookies, reject non-essential cookies, or customize your preferences. You can revisit your choices at any time by clicking the “Cookie Preferences” link in the Site footer.

7. Who we share your information with

We share your information only with vendors who help us run the business, and only to the extent necessary for them to do their job. We do not sell your personal information to third parties, and we do not share it with anyone for their own marketing purposes.

The categories of vendors we use are:

• Payment processing — Authorize.net
• Email delivery (marketing and transactional) — Mailchimp
• Shipping — USPS and any other carriers we add over time
• Analytics and advertising — Google (Analytics 4, Search Console), Meta (Facebook Pixel + Conversions API), Microsoft (Clarity session recordings and heatmaps)
• Website hosting — Kinsta
• Cookie consent management — CookieYes
• Professional advisors — lawyers, accountants, and auditors when needed
• Government and law enforcement — when we are legally required to disclose information, such as in response to a valid subpoena

If we are ever acquired by, merged with, or sell substantially all our assets to another company, your information may be transferred as part of that transaction. We will notify you (typically by email and a prominent notice on the Site) before any such transfer takes place.

8. Your privacy rights

You have rights over the information we hold about you. The specific rights depend on where you live, but the following are available to all customers:

• Access — request a copy of the personal information we hold about you
• Correct — ask us to fix information that is inaccurate or incomplete
• Delete — ask us to delete your information, subject to our need to keep certain records (e.g., tax records of orders)
• Opt out of marketing — unsubscribe from any marketing email using the link at the bottom of that email, or by emailing us
• Manage saved cards — add, remove, or replace saved payment methods from /my-account/payment-methods/
• Cancel a subscription — pause, skip, or cancel any Subscribe & Save subscription from /my-account/subscriptions/

To exercise any right that isn't already self-service through your account, email doc@thelongevityedge.com with the request. We will respond within 30 days. We may need to verify your identity before acting on certain requests.

8.1 California residents — Your CCPA / CPRA rights

If you are a California resident, the California Consumer Privacy Act (as amended by the California Privacy Rights Act) gives you additional rights:

• Right to know what personal information we have collected about you in the past 12 months, where we got it, why we collected it, and who we shared it with
• Right to delete the personal information we have collected from you, subject to the exceptions in the law
• Right to correct inaccurate personal information
• Right to opt out of “sale” or “sharing” of your personal information

We do not sell your personal information for money. However, our use of Google Analytics 4, the Facebook Pixel, and Microsoft Clarity may be considered “sharing” under the CCPA's broad definition (these tools transmit identifiers that those companies can use for cross-context behavioral advertising or to improve their own products).

To opt out of this sharing, click the “Do Not Sell or Share My Personal Information” link in the Site footer, or email doc@thelongevityedge.com. Honoring your opt-out will not prevent you from purchasing or using the Site.

We will not retaliate against you for exercising any CCPA right. You may also designate an authorized agent to make a request on your behalf.

8.2 Canadian residents — PIPEDA

If you are a Canadian resident, the Personal Information Protection and Electronic Documents Act (“PIPEDA”) applies. You may file a complaint with the Office of the Privacy Commissioner of Canada if you believe we have mishandled your personal information. We try to resolve concerns directly first, so please contact us at doc@thelongevityedge.com before escalating.

8.3 Residents of the European Union and United Kingdom

The Site is operated from the United States and is targeted at customers in the United States and Canada. We do not actively market to or solicit customers in the EU or UK. If you are in the EU or UK and choose to access the Site or place an order, you do so at your own initiative. We will not deliberately tailor any data processing to GDPR or UK GDPR standards, and you should consider this before submitting personal information.

9. Children's privacy

The Site and our products are not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has provided us with personal information, please email doc@thelongevityedge.com and we will delete it.

Our products are dietary supplements intended for adults and should not be taken by children except under the direction of a physician.

10. Data security

We take security seriously, but no system is perfectly secure. We use the following safeguards:

• All traffic to and from the Site is encrypted via TLS (HTTPS)
• Passwords are stored hashed, never in plain text
• Card data is held by Authorize.net, which is PCI-DSS Level 1 compliant — we never see your full card number
• Access to customer data on our systems is limited to staff who need it for their job
• We use Kinsta managed WordPress hosting, which provides server-level protections including firewalls, malware scanning, and daily backups

Despite our efforts, we cannot guarantee absolute security. If we ever experience a data breach that affects you, we will notify you as required by applicable law.

11. Data retention

We keep your information only as long as we need it for the purposes described in this Policy, or as long as we are required to by law (for example, tax records of orders for seven years). When we no longer need information, we delete it or anonymize it so it can no longer be tied to you.

If you ask us to delete your account, we will delete or anonymize all information that we are not legally required to retain, and we will tell you what categories we kept and why.

12. International data transfers

The Longevity Edge operates from the United States, and all of the vendors we use either operate from the United States or transfer data to the United States. If you are accessing the Site from outside the United States, your information will be transferred to and processed in the United States, which may have data protection laws different from those of your country.

13. Third-party links

The Site may contain links to third-party websites (research articles, vendor pages, social media). We are not responsible for the privacy practices of those sites. Once you click a link to a third party, this Policy no longer applies — please review the privacy policy of the site you visit.

14. Changes to this policy

We may update this Policy from time to time. When we do, we will update the “Last Updated” date at the top and, for material changes, notify you by email (if you are a customer) and post a notice on the Site for at least 30 days before the change takes effect.

Your continued use of the Site after the change takes effect means you accept the updated Policy.

15. Contact us

If you have any question, request, or complaint about this Policy or about how we handle your information, please contact us: