Politique de confidentialité

PRIVACY STATEMENT

Last Updated September 2, 2026

Mito Red Light, LLC ("Company," "we," "us," or "our") respects your privacy and is committed to protecting it through our compliance with this policy. This policy describes the types of information we may collect from you, or that you may provide, when you visit https://mitoredlight.com/ (our "Website"), and our practices for collecting, using, maintaining, protecting, and disclosing that information.

SECTION 1 — WHAT WE DO WITH YOUR INFORMATION

When you purchase something from our store, as part of the buying and selling process, we collect the personal information you give us, such as your name, billing and shipping address, email address, and phone number.

When you browse our store, we also automatically receive information about your device and your visit, including your internet protocol (IP) address, device and browser type, operating system, the pages you view, and how you interact with those pages. As explained in Section 4, we treat this information as personal information.

Email and SMS marketing. With your permission, we may send you messages about our store, new products, and other updates. Every marketing email includes an unsubscribe link, and you may opt out at any time as described in Section 10.

SECTION 2 — CONSENT

Please read this policy carefully to understand our practices regarding your information. If you do not agree with them, your choice is not to use our Website. By accessing or using this Website, you agree to this privacy policy. This policy may change from time to time — see Section 16.

When you provide us with personal information to complete a transaction, verify your payment method, place an order, arrange for a delivery, or return a purchase, we imply that you consent to our collecting it and using it for that specific reason.

If we ask for your personal information for a secondary reason, such as marketing, we will either ask you directly for your express consent or provide you with an opportunity to decline. The same applies when you provide information for email sign-ups, promotions, or sweepstakes entries.

If you change your mind after opting in, you may withdraw your consent for us to contact you, or for the continued collection, use, or disclosure of your information, at any time by contacting us at info@mitoredlight.com or by mail at:

Mito Red Light LLC 9319 N 94th Way, Ste 400 Scottsdale, AZ 85258

SECTION 3 — RETENTION OF INFORMATION

We retain personal information for as long as necessary to fulfill the purposes described in this policy, including to complete transactions, provide customer support, comply with legal, accounting, and tax obligations, resolve disputes, and enforce our agreements.

Because the appropriate period differs by type of information, we determine retention using the following criteria:

• Order and transaction records — retained for the period required by applicable tax, accounting, consumer protection, and product warranty law.
• Customer account information — retained for as long as your account remains open, and for a reasonable period afterward to handle returns, warranty claims, and disputes.
• Marketing contact information — retained until you unsubscribe. If you unsubscribe, we keep a minimal suppression record indefinitely so that we can continue to honor your choice.
• Website and app analytics information — retained for the period set in the relevant analytics service, after which it is deleted or aggregated so that it no longer identifies you.
• Customer support and chat records — retained for as long as needed to resolve your inquiry and for a reasonable period afterward for quality and training purposes.
• Advertising and cookie identifiers — retained until the relevant cookie expires or until you opt out, whichever is sooner.

We may use aggregated or de-identified data derived from your personal information after you update or delete it, provided it can no longer reasonably be used to identify you. Once a retention period expires, the personal information is deleted or de-identified.

SECTION 4 — INFORMATION WE COLLECT THROUGH AUTOMATIC DATA COLLECTION TECHNOLOGIES

As you navigate through and interact with our Website, we use automatic data collection technologies to collect information about your device, your browsing actions, and your patterns of use, including:

• Details of your visits, including traffic data, approximate location derived from your IP address, logs, and the resources you access and use.
• Information about your device and internet connection, including your IP address, operating system, and browser type.
• Information about your interactions with pages, such as pages viewed, products viewed, items added to a cart, links clicked, and time spent on a page.
• Information collected over time and across third-party websites and services, for advertising measurement and attribution purposes.

This information is personal information. Under the California Consumer Privacy Act and comparable state laws, identifiers such as IP addresses, cookie identifiers, and device identifiers, together with records of your online activity, are personal information — including when they are not linked to your name. We may also associate this information with personal information you provide to us directly.

We use this information to estimate audience size and understand usage patterns, remember your preferences and customize the Website accordingly, improve site speed and search, recognize you when you return, and measure the performance of our advertising.

The technologies we use include:

• Cookies. A small file placed on your device. You may refuse browser cookies through your browser settings, though some parts of our Website may then not function properly.
• Web beacons and pixels. Small electronic files in pages and emails that let us count visitors, record which content is popular, and confirm whether an email was opened.
• Local storage. Data stored by your browser on your device to support site functionality and measurement.
• Software development kits and server-side event sharing. Some of our providers receive information about your interactions directly from our systems rather than from your browser.

SECTION 5 — HOW WE DISCLOSE YOUR INFORMATION

We disclose personal information in the following circumstances.

To service providers acting on our behalf. We rely on companies that perform services for us — hosting our store, processing payments, shipping orders, calculating duties and taxes, sending email and SMS, providing customer support, hosting reviews, and preventing fraud. These companies are contractually restricted from using your information for their own purposes and may use it only to perform the services we have engaged them for.

To advertising, analytics, and marketing partners. We work with advertising platforms, social media platforms, analytics providers, and affiliate and referral networks. Depending on the technology involved and on the privacy choices you have made, these partners may receive identifiers such as cookie IDs, device identifiers, or a hashed email address, along with information about your activity on our Website. Some of these partners use that information for their own purposes, including to improve their own advertising products.

Under U.S. state privacy laws, some of this activity may be considered a "sale" or "sharing" of personal information, or "targeted advertising." You have the right to opt out. See Section 8, or go directly to our Your Privacy Choices page at https://mitoredlight.com/pages/data-sharing-opt-out.

In connection with a business transaction. If we are acquired, merged, or reorganized, your information may be transferred as part of that transaction.

Where required or permitted by law. Including to comply with a subpoena or similar legal process, and where we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a lawful government request.

Categories of personal information collected and disclosed in the preceding 12 months

Sources of this information: directly from you, automatically from your device as you use our Website and app, and from our service providers and advertising partners.

Business purposes for collecting it: to fulfill orders and provide customer support; to operate, secure, and improve our Website and app; to prevent fraud; to comply with legal obligations; and to market our products and measure the performance of that marketing.

Categories we sell or share, as those terms are defined by U.S. state privacy laws: identifiers, commercial information, internet or network activity, and inferences — disclosed to advertising and social media platforms, analytics providers, and affiliate and referral networks.

We do not knowingly sell or share the personal information of consumers under 16 years of age.

SECTION 6 — SHOPIFY

Our store is hosted on Shopify Inc., which provides the ecommerce platform that allows us to sell our products and services to you. Your data is stored through Shopify's data storage, databases, and applications, on secure servers behind a firewall.

Payment. If you choose a direct payment gateway to complete your purchase, Shopify stores your payment card data, encrypted in accordance with the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as necessary to complete the transaction, after which it is deleted. All direct payment gateways adhere to PCI-DSS as managed by the PCI Security Standards Council.

You may also wish to read Shopify's Terms of Service at https://www.shopify.com/legal/terms and Privacy Policy at https://www.shopify.com/legal/privacy.

SECTION 7 — THIRD-PARTY SERVICES

In general, the third-party providers we use collect, use, and disclose your information only to the extent necessary to perform the services they provide to us. Certain providers, such as payment gateways and payment processors, have their own privacy policies governing the information we are required to provide for purchase-related transactions. We recommend reading their policies.

Some providers are located in, or have facilities in, jurisdictions different from yours or ours. If you proceed with a transaction involving such a provider, your information may become subject to the laws of those jurisdictions.

Once you leave our store's website or are redirected to a third-party website or application, you are no longer governed by this policy or our Terms of Service. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.

Data sharing with Zonos. By placing an international order, you consent to the transmission of necessary order and shipping information to Zonos for duty and tax calculation, address validation, compliance verification, and facilitating international shipping. Zonos processes this data in accordance with its own privacy policy.

SECTION 8 — YOUR U.S. STATE PRIVACY RIGHTS

Depending on where you live, you may have rights under state privacy laws — including in California, Colorado, Connecticut, Utah, Virginia, Texas, Oregon, Montana, and other states as new laws take effect. These rights may include:

• Right to know or access — to request details about the personal information we collect, use, and disclose about you.
• Right to delete — to request deletion of personal information we hold about you, subject to exceptions such as completing a transaction you requested, detecting fraud, or complying with legal obligations.
• Right to correct — to request correction of inaccurate personal information.
• Right to opt out of sale, sharing, or targeted advertising — as described below.
• Right to limit the use of sensitive personal information — where we collect it.
• Right to non-discrimination — we will not deny you goods or services, charge you a different price, or provide a different level of quality because you exercised a privacy right.
• Right to appeal — in states that provide it, if we decline your request you may appeal by replying to our response or contacting us at info@mitoredlight.com.

How to opt out of the sale or sharing of your personal information

You can use any of the following methods.

• Our Your Privacy Choices page, at https://mitoredlight.com/pages/data-sharing-opt-out, linked in the footer of our Website. Where the opt-out right applies to you, this page presents a one-click control that requires no account and no email address and applies immediately to the browser and device you are using.
• An opt-out preference signal. If you visit our Website with Global Privacy Control (GPC) enabled in your browser, and you are in a location where the opt-out right applies, we treat that signal as a request to opt out of the sale and sharing of your personal information. We do not require you to take any further step.
• The "Do Not Share" banner displayed on our Website, which records an opt-out for the browser and device you are using.
• Your browser settings, to block or delete cookies. See Section 12 for what browser controls do and do not cover.
• Contact us at info@mitoredlight.com, or by mail at Mito Red Light LLC, [Re: Privacy], 9319 N 94th Way, Ste 400, Scottsdale, AZ 85258. Please tell us which right you wish to exercise and the state in which you reside. This method is available to you wherever you live.

You may designate an authorized agent to submit a request on your behalf. We may need to verify your identity before processing certain requests, and we will respond within the time frames required by applicable law.

Sensitive personal information

Some information you choose to give us — for example, the optional profile information in our mobile app described in Section 18 — may be treated as sensitive personal information under state privacy law. We use it only for the purposes described in this policy. You may ask us to limit its use by contacting us at info@mitoredlight.com.

CALIFORNIA PRIVACY RIGHTS

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). This section describes those rights and how to exercise them.

Personal information we collect, disclose, sell, and share

Section 5 of this policy sets out, for the preceding 12 months: the categories of personal information we have collected, the sources we collected it from, our business purposes for collecting it, the categories of third parties to whom we disclose it, and the categories we sell or share as those terms are defined by California law.

We do not knowingly sell or share the personal information of consumers under 16 years of age.

Your rights as a California resident

• Right to know. You may request the specific pieces of personal information we hold about you, and the categories we have collected, used, disclosed, sold, or shared in the preceding 12 months.
• Right to delete. You may request that we delete personal information we have collected from you, subject to the exceptions California law allows — for example, completing a transaction you requested, detecting security incidents, or complying with a legal obligation.
• Right to correct. You may request that we correct inaccurate personal information we hold about you.
• Right to opt out of sale or sharing. You may direct us to stop selling or sharing your personal information, including for cross-context behavioral advertising. See below.
• Right to limit the use of sensitive personal information. Where we collect sensitive personal information, you may direct us to limit its use to what California law permits.
• Right to non-discrimination. We will not deny you goods or services, charge you a different price, impose a penalty, or provide you a different level or quality of goods or services because you exercised any of these rights.

Do Not Sell or Share My Personal Information

To exercise your right to opt out of the sale or sharing of your personal information, you may use any of the following designated methods:

• Our Your Privacy Choices page, at https://mitoredlight.com/pages/data-sharing-opt-out, which is linked in the footer of our Website. It takes a single click, requires no account and no email address, and applies immediately to the browser and device you are using.
• Global Privacy Control. If you visit our Website with the GPC opt-out preference signal enabled in your browser, we treat it as a request to opt out of the sale and sharing of your personal information. No further step is required of you.
• Email us at info@mitoredlight.com, or write to us at Mito Red Light LLC, [Re: Privacy], 9319 N 94th Way, Ste 400, Scottsdale, AZ 85258. Please include "Do Not Sell or Share" or "Privacy Request" in the subject line, tell us which right you wish to exercise, and confirm that you are a California resident.

You do not need to create an account with us to submit any request.

How we handle your request

We will acknowledge receipt of your request and respond within the time frames California law requires. We may need to verify your identity before disclosing or deleting personal information, and we will only use the information you provide for that purpose to verify your identity.

You may use an authorized agent to submit a request on your behalf. If you do, we may ask the agent for proof that you gave them written permission to act for you, and we may ask you to verify your own identity directly with us.

If we decline your request, we will explain why, and you may contact us at info@mitoredlight.com to ask us to reconsider.

SECTION 9 — COOKIES AND SIMILAR TECHNOLOGIES

We use cookies and similar technologies to operate our store, understand how it is used, and deliver advertising. We group them as:

• Strictly necessary — required for basic operation, such as keeping items in your cart, securing your session, and remembering your privacy choices.
• Analytics — help us understand how visitors use our site so we can improve it.
• Marketing — used to deliver and measure advertising relevant to your interests.
• Preferences — remember choices such as your region and display settings.

Your controls over cookies. We display a "Do Not Share" banner on our Website, provided through a consent management platform working together with Shopify's customer privacy framework. It allows you to record an opt-out from the sale or sharing of your personal information for advertising purposes, and that choice is recorded for the browser and device you are using. Our Your Privacy Choices page at https://mitoredlight.com/pages/data-sharing-opt-out provides the same control and is described in Section 8. We also honor the Global Privacy Control signal, as described in Sections 8 and 12.

You can also control cookies through your browser settings, as described in Section 12.

Availability. The banner and the opt-out control on the Your Privacy Choices page are displayed to visitors in the locations where an opt-out right applies. If you are outside those locations and wish to opt out, email us at info@mitoredlight.com and we will honor your request.

SECTION 10 — YOUR CHOICES ABOUT HOW WE USE AND DISCLOSE YOUR INFORMATION

Cookies and tracking technologies. You can set your browser to refuse some or all cookies, or to alert you when cookies are being sent. You can also record an opt-out using the "Do Not Share" banner on our Website or our Your Privacy Choices page at https://mitoredlight.com/pages/data-sharing-opt-out. If you disable cookies, some parts of the site may not function properly.

Advertising and the sale or sharing of your information. Use our Your Privacy Choices page at https://mitoredlight.com/pages/data-sharing-opt-out to opt out of the sale or sharing of your personal information for targeted advertising. See Section 8 for the full range of options, including Global Privacy Control and contacting us directly.

Promotional email and SMS from us. If you do not wish to receive marketing messages, use the unsubscribe link in any marketing email, reply STOP to any marketing text, or email info@mitoredlight.com. This does not apply to transactional messages relating to a purchase, warranty registration, product service, or a similar transaction.

SECTION 11 — SECURITY

To protect your personal information we take reasonable precautions and follow industry practices designed to prevent it from being lost, misused, accessed without authorization, disclosed, altered, or destroyed.

If you provide payment card information, it is encrypted in transit and handled in accordance with PCI-DSS requirements. As described in Section 6, payment card data is held by our payment gateway rather than by us.

We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure.

Unfortunately, no method of transmission over the internet or method of electronic storage is completely secure. Although we do our best to protect your personal information, we cannot guarantee its security, and any transmission is at your own risk.

SECTION 12 — COOKIE DETAILS AND BROWSER SIGNALS

For information about the cookies used to power our store through Shopify, see Shopify's cookie policy at https://www.shopify.com/legal/cookies.

Most browsers accept cookies by default, but you can set your browser to remove or reject them. Removing or blocking cookies may cause parts of our Website to work incorrectly. Note also that blocking cookies does not by itself stop every form of information sharing with our advertising partners — some sharing happens through our servers rather than through your browser, which is why the Your Privacy Choices page at https://mitoredlight.com/pages/data-sharing-opt-out is the more complete control.

Global Privacy Control. We recognize and honor the Global Privacy Control (GPC) opt-out preference signal. If you visit our Website with GPC enabled in your browser, and you are in a location where the opt-out right applies, we treat it as a request to opt out of the sale and sharing of your personal information, without requiring any further action from you.

Do Not Track. There is no common industry standard for how websites should respond to browser "Do Not Track" signals, and our Website does not currently respond to them. Do Not Track is a separate and older mechanism from the opt-out preference signals described above.

SECTION 13 — AGE REQUIREMENTS AND PRIVACY OF CHILDREN

Our Website and products are intended for adults. By using this site, you represent that you are at least 18 years old.

We do not knowingly collect personal information from anyone under 18. If you are under 18, please do not submit personal information through the Website or Services. If you believe a person under 18 has provided personal information to us, please contact us at info@mitoredlight.com and we will delete it.

We encourage parents and legal guardians to monitor their children's internet use and to instruct their children never to provide personal information online without permission.

SECTION 14 — ADVERTISING

We permit certain third-party companies to help us deliver advertising we believe may be of interest to you and to measure how that advertising performs. These companies may set cookies and collect information about your activity on our Website and on other sites over time. Section 5 describes the categories of information involved, and Section 8 describes how to opt out.

Some content and advertisements on our Website are served by third parties, including advertising networks and social media platforms. We do not control these third parties' tracking technologies or how they use the information they collect. If you have a question about a specific advertisement, contact the responsible provider directly.

SECTION 15 — SOCIAL MEDIA FEATURES

Our Website may include social media features, such as share buttons. These may collect your IP address and the page you are visiting, and may set a cookie to function. Social media features are hosted either by their providers or directly on our Website. Your interactions with them are governed by the privacy policy of the relevant provider.

SECTION 16 — CHANGES TO THIS PRIVACY POLICY

We may modify this privacy policy at any time. Changes take effect upon posting, and we will update the "last updated" date above. If we make material changes we will note them here so that you are aware of what information we collect, how we use it, and the circumstances in which we disclose it.

If our business is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to provide products and services to you.

SECTION 17 — ACCEPTANCE OF THIS POLICY

You acknowledge that you have read this policy and agree to its terms. By accessing and using the Website and Services and submitting your information, you agree to be bound by this policy. If you do not agree, you are not authorized to access or use the Website and Services.

SECTION 18 — MITO RED LIGHT APP

The Mito Red Light App does not use your data for cross-app or cross-site tracking, and we do not use email addresses, including hashed email addresses, for tracking purposes.

We use your email address, including in hashed form, and an internal user ID to enable the app to function — to authenticate you, enable features, prevent fraud, implement security measures, maintain uptime, minimize crashes, and improve performance and scalability.

Analytics. We collect analytics data to evaluate how the app is used, understand the effectiveness of existing features, plan new ones, identify and minimize crashes, and measure audience size and characteristics.

Optional profile information. The app asks for certain optional profile and demographic information, which you may leave blank or skip. We use it in aggregate to help us understand our audience and plan features. You may ask us to limit its use by contacting us at info@mitoredlight.com.

Product interaction. We record app sessions and session settings in order to understand how features are used and to plan improvements.

Crash data. We collect crash logs to maintain uptime, minimize crashes, and improve performance.

Deleting your app account. If you created a login, you may delete it in the app: go to Settings and select Delete account. You may be logged out first to re-authenticate; if so, sign back in and return to Settings. Deleting an account deletes the login and all associated data. If you cannot delete the account in the app, contact info@mitoredlight.com or 1-866-861-6486 with the email address used for the account. You should then delete the app from your device. You can reinstall and choose to opt out of data collection.

Google Play: https://play.google.com/store/apps/details?id=com.mitoredlight Apple App Store: https://apps.apple.com/us/app/mitoredlight/id1639752291

SECTION 19 — QUESTIONS AND CONTACT INFORMATION

To access, correct, amend, or delete personal information we hold about you, to register a complaint, or for more information, contact our Privacy Compliance Officer:

Email: info@mitoredlight.com Phone: 1-866-861-6486 Mail: Mito Red Light LLC, [Re: Privacy Compliance Officer], 9319 N 94th Way, Ste 400, Scottsdale, AZ 85258

To exercise any right under applicable data protection law, you may submit a request by email or mail at the addresses above, or use our Your Privacy Choices page at https://mitoredlight.com/pages/data-sharing-opt-out to opt out of the sale or sharing of your personal information.