Privacy Policy

Effective July 31, 2026

This Privacy Policy describes how Lifetime Well, LLC, doing business as X-All (“X-All,” “we,” “us,” or “our”), collects, uses, and discloses personal information when you visit, use, or make a purchase from x-all.com or an X-All-controlled subdomain, communicate with us, or otherwise use our products and services (collectively, the “Services”).

By using the Services, you acknowledge the practices described in this Privacy Policy. If you do not agree, please do not use the Services.

Personal information we collect

The personal information we collect depends on how you interact with us and may include:

• Contact details, such as your name, billing and shipping addresses, email address, and phone number.
• Order, account, and subscription information, such as products purchased, order history, delivery cadence, account credentials, returns, exchanges, and customer-service communications.
• Transaction information. Payment information is processed by Shopify and other payment providers; we do not intentionally store complete payment-card numbers.
• Communications and content you provide, such as support requests, survey responses, reviews, photos, or other submissions.
• Marketing preferences, including email subscription and unsubscribe choices. The main store does not currently enroll customers in a marketing-SMS program. Providing a phone number for an order or delivery does not by itself constitute marketing-SMS consent.
• Device and usage information collected automatically, such as IP address, browser and device type, operating system, cookie and pixel identifiers, pages and products viewed, referring URLs, searches, interactions, approximate location, and dates and times of visits.
• Information from service providers and partners, such as Shopify, payment processors, subscription providers, fulfillment and shipping providers, fraud-prevention providers, analytics and advertising partners, social platforms, and other vendors supporting the Services.

How we use personal information

We may use personal information to:

• Provide and operate the Services, process payments, fulfill and deliver orders, manage subscriptions, accounts, returns, refunds, and exchanges, and provide customer support.
• Communicate with you about orders, subscriptions, account or policy changes, and support requests.
• Personalize and improve the Services, understand use, measure performance, and develop products and features.
• Detect, investigate, and prevent fraud, abuse, security incidents, and other harmful or illegal activity.
• Send marketing email when permitted and measure advertising or marketing effectiveness. You may unsubscribe from marketing email using the link in a message.
• Comply with legal obligations, enforce our terms and policies, protect rights and safety, and establish, exercise, or defend legal claims.
• Support a merger, financing, acquisition, reorganization, sale of assets, or similar business transaction, subject to applicable law.

For people in the European Economic Area, United Kingdom, or Switzerland, our legal bases may include performing a contract, complying with law, protecting our legitimate interests or those of others, and consent where applicable. You may withdraw consent at any time without affecting processing that occurred before withdrawal.

How we disclose personal information

We may disclose personal information:

• To Shopify, payment processors, subscription platforms, fulfillment partners, shipping carriers, customer-support services, fraud-prevention providers, hosting and security vendors, analytics providers, advertising partners, and other vendors that process information for us or help operate the Services.
• To business and marketing partners, including advertising or social-media partners, to provide or measure services and advertising, subject to your available privacy choices.
• When you direct us to disclose information or use a feature that requires disclosure.
• To comply with law or a lawful request; protect the rights, property, or safety of X-All, customers, or others; investigate suspected violations; or enforce agreements.
• In connection with an actual or proposed business transaction such as a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets.

We do not disclose personal information to third parties for their own direct marketing by SMS from the main store. We do not use or disclose sensitive personal information to infer characteristics about you.

Depending on the definitions in applicable privacy law, disclosures of identifiers and online activity to advertising, analytics, or Shopify enhanced-service partners may be considered a “sale,” “sharing,” or processing for targeted advertising even when no money changes hands. Where required, you may opt out through our Your privacy choices page.

Cookies, advertising, and privacy signals

We and our providers use cookies, pixels, tags, local storage, and similar technologies to operate the Services, remember preferences, measure performance, prevent fraud, and support analytics and advertising. Where required, Shopify's cookie banner lets you accept, reject, or manage non-essential cookies. You can also adjust browser settings, although blocking some technologies may affect functionality.

In regions where our data-sharing opt-out page applies, Shopify processes a recognized Global Privacy Control signal as an opt-out of sale, sharing, or targeted advertising for Shopify and properly integrated third parties. Other browser “Do Not Track” signals may not be recognized because there is no consistent industry standard for them.

Shopify

Our store is hosted by Shopify, which collects and processes personal information to provide and improve the Services and may process information in countries other than the one where you live. For information about Shopify's practices and choices, visit Shopify's Consumer Privacy Policy.

Data retention

We retain personal information for as long as reasonably necessary for the purposes described in this policy, including providing the Services, maintaining business and transaction records, meeting tax, accounting, legal, and contractual obligations, resolving disputes, preventing fraud, and enforcing agreements. Retention periods vary based on the information, the reason it was collected, and applicable law. We may delete or de-identify information when it is no longer required.

Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. No security method or transmission over the internet is completely secure, and we cannot guarantee absolute security. Do not send sensitive information through an unsecured channel.

International transfers

We and our providers may process personal information in the United States, Canada, and other countries that may have different data-protection laws than your country. Where required, we use recognized transfer mechanisms or other safeguards.

Your privacy rights

Depending on where you live, you may have rights to request access, correction, deletion, or a portable copy of personal information; restrict or object to certain processing; withdraw consent; opt out of sale, sharing, or targeted advertising; or appeal our response. You may also have the right to complain to a data-protection authority.

To submit a request, email support@x-all.com or write to the address below. To opt out of sale, sharing, or targeted advertising where available, use our Your privacy choices page. We may need to verify your identity before completing a request. An authorized agent may submit a request where allowed, but we may require proof of authorization and direct identity verification. We will not discriminate against you for exercising an applicable privacy right.

If we deny a request and your local law provides a right to appeal, reply to our decision or email support@x-all.com with “Privacy Appeal” in the subject line.

Children

The Services are not intended for children under 18, and we do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us so we can review and delete it as appropriate.

Third-party links

The Services may link to websites or services controlled by others. We are not responsible for their privacy or security practices. Review their policies before providing information.

Changes to this policy

We may update this Privacy Policy to reflect changes in our practices, Services, or legal requirements. We will post the revised policy and update the effective date. Where required, we will provide additional notice.

Contact us

For privacy questions, requests, complaints, or appeals, contact:

Lifetime Well, LLC
Attn: Privacy Compliance
2400 Kettner Boulevard, #238
San Diego, CA 92101
United States
support@x-all.com