Privacy policy

Last updated: September 16, 2026

NutriMill is a brand of L'Chef LLC ("NutriMill," "we," "us," or "our"). We operate nutrimill.com, our checkout and customer-account pages, our email and text-message programs, our rewards and referral programs, and the in-person and wholesale sales channels described below (together, the "Services"). This Privacy Policy explains what personal information we collect, how we use and disclose it, the tracking technologies that run on our website, and the choices and rights you have. It also serves as our Notice at Collection for residents of California and other U.S. states with comprehensive privacy laws.

Our website is hosted on Shopify. Where this Policy refers to "Shopify," it means Shopify Inc. and its affiliates, which process personal information on our behalf and, for certain features described below, for their own purposes. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to personal information.

1. Summary of key points

• We collect information you give us (for example, when you order, create an account, join our rewards program, sign up for emails or texts, or contact us) and information collected automatically through cookies, pixels, and similar technologies when you use our website.
• We use advertising and analytics partners, including Meta (Facebook and Instagram), Google, Microsoft, Pinterest, PayPal, Paramount Advertising, and Attentive, whose technologies collect information about your activity on our website. Under some state laws this is considered "selling," "sharing," or "targeted advertising." You can opt out through Your Privacy Choices, and we honor the Global Privacy Control browser signal as described in Section 4.6.
• Our live chat and contact forms are operated through Gorgias. Chat conversations are recorded and stored so we can help you and improve our support. See Section 4.
• We do not knowingly collect personal information from children under 13, and we do not knowingly sell or share the personal information of anyone under 18 or use it for targeted advertising.
• We do not sell personal information to anyone for the purpose of training artificial-intelligence or large language models, and we do not train such models ourselves. We do review past support conversations to train our staff and to improve our workflows and automated support assistant. See Section 4.5.
• You may have the right to know, access, correct, delete, or obtain a copy of your personal information, to opt out of targeted advertising and the sale or sharing of your information, and to appeal our decisions. See Section 9.

2. Personal information we collect

"Personal information" means information that identifies, relates to, or could reasonably be linked to you or your household. The categories below are described using the categories in the California Consumer Privacy Act (CCPA). The specific information collected depends on how you interact with us.

Category	Examples of what we collect	Where it comes from	Disclosed to (business purpose) / sold or shared with
Identifiers	Name, postal and shipping address, email address, phone number, account username, IP address, device and browser identifiers, cookie and pixel identifiers, and, if you use them, identifiers from Shop Pay, PayPal, Apple Pay or Google Pay.	You; your device and browser; Shopify; our payment, marketing, and analytics providers.	Disclosed to Shopify, payment processors, shipping carriers, our ERP, tax, customer-support, reviews/loyalty, and email/text providers. Sold or shared with the advertising and analytics partners in Sections 4.3 and 4.4.
Customer records	Billing address, order history, payment card type and last four digits, and payment confirmation. Full payment card numbers are collected and processed directly by our payment processors (Shopify Payments, PayPal, and other providers you select) and are not stored by us.	You; payment processors.	Disclosed to Shopify, payment processors, shipping carriers, and our ERP and tax providers. Not sold or shared.
Commercial information	Products you view, add to your cart or wishlist, purchase, return, or exchange; back-in-stock requests; warranty and support requests; discount and coupon use; rewards points and referral activity; product reviews you submit.	You; Shopify; our reviews, loyalty, coupon-protection, and back-in-stock providers.	Disclosed to Shopify, our ERP, reviews/loyalty, coupon-protection, and back-in-stock providers. Sold or shared with advertising and analytics partners (products viewed, items carted, purchases and order values).
Internet or other electronic network activity	Pages viewed, time on page, clicks, scrolling, search terms, referring website, and interactions with our emails and texts.	Your device and browser, via cookies, pixels, SDKs and similar technologies operated by us and by the partners listed in Section 4.	Disclosed to Shopify and our analytics providers. Sold or shared with advertising and analytics partners.
Geolocation data	Approximate location (city, region, country) derived from your IP address. We do not collect precise GPS location.	Your device and browser; Shopify; our content-protection provider (StoreLock), which uses an IP-geolocation lookup service.	Disclosed to Shopify, our content-protection provider, and its IP-geolocation lookup service. Sold or shared (as approximate location derived from IP address) with advertising and analytics partners.
Audio, electronic, visual or similar information	Live-chat transcripts, email and text-message correspondence, phone-call notes and recordings, and photos or videos you choose to send us (for example, with a warranty claim or product review).	You; our customer-support and reviews providers.	Disclosed to our customer-support (Gorgias) and reviews (Yotpo) providers. Not sold or shared.
Inferences	Preferences and characteristics we or our partners infer from the information above, such as the products you may be interested in.	Derived from the categories above.	Disclosed to Shopify and our marketing providers. Shared with advertising partners for audience building.
Sensitive personal information	Account log-in credentials (used only to authenticate you). We do not collect government identifiers, precise geolocation, health, biometric, or other sensitive personal information through the Services, and we do not use or disclose sensitive personal information for purposes other than those permitted by law.	You.	Disclosed to Shopify for authentication only. Not sold or shared.

Information from other sources. We may also receive personal information from our service providers, from advertising and analytics partners (for example, aggregated campaign performance and, where you have consented on their platforms, matched audience information), from affiliates and influencers who refer customers to us through Shopify Collabs, from social media platforms when you interact with our accounts, from retailers and wholesale partners in connection with warranty or service requests, and from public sources.

3. How we use personal information

We use personal information for the following business and commercial purposes:

• Providing the Services and fulfilling orders: processing payments, shipping products, providing customer accounts, handling returns, exchanges, warranty claims and product registrations, sending order and shipping notifications, and providing customer support.
• Operating our rewards, referral, and review programs: matching purchases, referrals, and reviews to the right account so that points and rewards are applied correctly, and, if you have also subscribed to our emails, reminding you of points you have available. Participation is voluntary; see the Notice of Financial Incentive.
• Marketing and advertising: sending marketing emails and, where you have opted in, text messages; showing you our advertisements on other websites, apps, and platforms based on your activity on our website; measuring the performance of our advertising; and building audiences of people with similar interests.
• Analytics and improvement: understanding how visitors use our website, diagnosing usability problems, testing new features, and improving our products, content, and Services.
• Security, fraud prevention, and content protection: detecting and preventing fraudulent orders and coupon abuse, protecting our website and content from unauthorized copying, and securing accounts.
• Communicating with you and improving our support: responding to your questions, requests, and feedback, and reviewing past support conversations to train our staff, improve our workflows and products, and refine the instructions our automated support assistant follows.
• Legal compliance and protection: complying with applicable law, responding to lawful requests, enforcing our terms and policies, and protecting our rights and the rights of others.

We do not use personal information to make decisions that produce legal or similarly significant effects about you, and we do not sell personal information for money. We do not sell personal information to anyone for the purpose of training large language models, and we do not train large language models ourselves. We do use past support conversations as reference material to train our staff and to refine the instructions our automated support assistant follows, and our customer-support provider uses AI features to draft and answer routine support questions using your conversation and order information, as described in Section 4.5.

4. Cookies, pixels, and chat

We and our partners use cookies, pixels, tags, software development kits, local storage, and similar technologies ("tracking technologies") on our website, in our emails and texts, and in our checkout. Some are set by us or by Shopify ("first-party"); others are set by partners ("third-party"). We group them by purpose:

4.1 Strictly necessary

Required for the website, cart, checkout, and account features to work, and to detect fraud and abuse. These include Shopify's storefront and checkout cookies, our payment providers (Shopify Payments, Shop Pay, PayPal, and other providers you select), KeepCart (coupon-code protection), and StoreLock (content and copyright protection, which uses your IP address to determine your approximate location). These cannot be turned off.

4.2 Functionality and preferences

Remember your choices and enable features such as product reviews and ratings (Yotpo), rewards and referrals (Yotpo Loyalty), back-in-stock notifications (STOQ), recipes (Recipe Kit), store locator (Progus), pick-up point selection (HubBox), print-on-demand merchandise (Printful), sign-up forms (Shopify Forms), on-site promotions and countdown timers (Essential Apps, Gorgias Convert), and PayPal Pay Later messaging (PayPal).

4.3 Analytics

Help us understand how the website is used, which pages and products are popular, and where visitors run into problems. We use Shopify Analytics and Google Analytics. Google Analytics 4 does not log or store individual IP addresses; see how Google uses information from sites that use its services. Some functionality apps listed in Section 4.2 also collect limited usage analytics to operate their features (for example, whether a back-in-stock request was fulfilled or a coupon code was applied).

4.4 Advertising and marketing

Used by us and our advertising partners to show you our ads on other websites, apps, and platforms based on your activity on our website; to measure whether our ads led to a visit or purchase; to build audiences of similar shoppers; and to power our email and text-message programs. Our current advertising and marketing partners are:

• Meta Platforms (Meta Pixel and Conversions API, for Facebook and Instagram advertising)
• Google (Google Ads and the Google tag)
• Microsoft Advertising (Universal Event Tracking for Bing and Microsoft advertising)
• Pinterest (Pinterest tag)
• Paramount Advertising (measurement pixel that tells us whether visitors who saw our ads on Paramount+ and other Paramount streaming services later visited or purchased)
• PayPal (marketing and Pay Later messaging tag)
• Attentive (email and text-message marketing, including on-site sign-up forms and identity resolution)
• Shopify Audiences and Shopify Collabs (audience building across Shopify merchants and affiliate/influencer referral tracking)

These partners receive information such as the pages and products you view, items you add to your cart, purchases and order values, your IP address, browser and device information, cookie identifiers, and, where you have provided it to us, hashed contact information used to match you to your account on their platform. Each partner uses this information under its own privacy policy, and several of them combine it with information about your activity on other websites and apps. This disclosure may be considered a "sale" or "sharing" of personal information, or "targeted advertising," under the laws of California and other states. You can opt out at any time through Your Privacy Choices.

4.5 Live chat and contact forms

Our live chat, contact forms, and help center are operated through Gorgias. When you start a chat or submit a form, the content of your messages, your contact details, your order information, and technical information about your device are transmitted to and stored by Gorgias on our behalf so that our team (and, for some routine questions, an AI-powered automated assistant) can respond. Chat conversations are recorded and retained by us and by Gorgias as part of your customer-support history. We keep and review support conversations from every channel (chat, text message, email, and phone) to train our staff, improve our workflows and products, and refine the instructions our automated assistant follows; Gorgias processes these conversations to provide its support and AI features under its agreement with us. Please do not share payment card numbers or other sensitive information through chat.

4.6 Your choices about tracking technologies

• Your Privacy Choices. Use our Your Privacy Choices page to opt out of the sale or sharing of your personal information and of targeted advertising for the browser you are using and, optionally, for your customer account. When you opt out, our website stops sending your activity to Meta, Microsoft Advertising, Pinterest, and Paramount Advertising; switches Google to Google's restricted data processing mode, in which Google acts as our service provider and does not use the data for personalized advertising; and switches Google Analytics to non-personalized mode. The Attentive tag continues to load so that our sign-up forms and text-message program work, and PayPal's tag continues to load to display Pay Later messaging; opting out does not stop those two tags. To stop texts, reply STOP; your choices about PayPal's own use of information are described in PayPal's privacy statement. Your opt-out is stored in a cookie for the browser you used, so you will need to opt out again if you clear cookies or use a different browser or device.
• Global Privacy Control (GPC). If you are in a state whose privacy law provides an opt-out right, we treat a GPC signal from your browser as a request to opt out of the sale and sharing of personal information and of targeted advertising for that browser (and for your account, if you are logged in), with the same effect as using Your Privacy Choices. Learn more at globalprivacycontrol.org. We do not currently respond to other "Do Not Track" signals.
• Browser controls. Most browsers let you block or delete cookies. Blocking strictly necessary cookies may prevent you from completing a purchase.
• Partner controls. You can also adjust your ad preferences directly with Meta, Google, Microsoft, and Pinterest, and through industry tools such as optout.aboutads.info.

5. How we disclose personal information

We disclose personal information in the following circumstances:

• Service providers and contractors that process personal information on our behalf under contracts that limit their use of it, including: Shopify (hosting, checkout, payments, analytics, email); payment processors; shipping carriers and fulfillment partners; our ERP and order-management provider (Fulfil); tax calculation (Avalara); customer support and chat (Gorgias); reviews and loyalty (Yotpo); email and SMS delivery (Attentive, Shopify Email); video hosting for product and recipe videos; anti-fraud and content protection (KeepCart, StoreLock); and other providers of website, IT, and professional services.
• Advertising and analytics partners listed in Sections 4.3 and 4.4, which may use the information for their own purposes. This is the disclosure you can opt out of through Your Privacy Choices.
• Shopify, for its own purposes. Shopify collects information about your use of our website and checkout to provide, protect, and improve its platform and, if you use Shop Pay or the Shop app, to operate those services. We also use certain Shopify features (such as Shopify Audiences) that combine information about your interactions with our store with information from other Shopify merchants. For these purposes Shopify is responsible for the processing; see the Shopify Consumer Privacy Policy and exercise rights directly with Shopify at privacy.shopify.com.
• Affiliates and influencers who referred you to us receive aggregated or pseudonymous conversion information so they can be compensated.
• Retailers and wholesale partners when needed to honor a warranty or resolve a service request for a product purchased through them.
• Within our corporate group (L'Chef LLC and its brands).
• With your direction or consent, for example when you use a social-media sharing feature or ask us to send information to someone else.
• For legal, safety, and business reasons, including to comply with law or legal process, to enforce our terms, to protect the rights, property, or safety of NutriMill, our customers, or others, and in connection with a merger, financing, acquisition, bankruptcy, or sale of all or part of our business.

5.1 Disclosures in the preceding 12 months

In the 12 months before the "Last updated" date, we disclosed the following categories of personal information for a business purpose to the service providers and contractors described above: identifiers, customer records, commercial information, internet or other electronic network activity, approximate geolocation, audio/electronic/visual information, and inferences. We "sold" or "shared" (as those terms are defined under California law) the following categories with advertising and analytics partners: identifiers, commercial information, internet or other electronic network activity, approximate geolocation, and inferences. We did not sell or share sensitive personal information, and we have no actual knowledge of selling or sharing the personal information of consumers under 18. During the same 12-month period our website also used, and has since removed, the following third-party technologies: Microsoft Clarity (session replay and heat-mapping, which recorded page interactions such as mouse movement, scrolling, and clicks), and advertising pixels from Snapchat, TikTok, and Reddit. Cookies set by those tools may remain in your browser until they expire or you delete them; they no longer collect information on our website.

6. Email and text-message marketing

Email. If you sign up for our emails or make a purchase, we may send you marketing emails. You can unsubscribe at any time using the link in any marketing email; we will continue to send transactional emails about your orders and account.

Text messages. If you opt in to our text-message program (operated with Attentive), you agree to receive recurring automated marketing and cart-reminder texts at the number you provided. Consent is not a condition of purchase. Message frequency varies; message and data rates may apply. Reply STOP to cancel or HELP for help, or contact us using the details in Section 14. We honor opt-out requests made by any reasonable means within ten business days. Carriers are not liable for delayed or undelivered messages. Our SMS program terms are in our Terms of Service.

7. How long we keep personal information

We keep personal information for as long as needed for the purposes described above and to satisfy legal, accounting, tax, warranty, and reporting obligations. Our general retention criteria are:

• Order, payment, and customer-account records (identifiers, customer records, commercial information): for the life of your account plus the period required for tax, accounting, and warranty purposes, generally seven years after your last transaction.
• Marketing contact records: until you unsubscribe or ask us to delete them, plus a suppression record so we do not contact you again.
• Website analytics and advertising data (internet activity, device identifiers, inferences): Google Analytics retains user-level data for no more than 14 months; advertising partners retain data under their own policies.
• Customer-support and chat records: for as long as needed to support you and to handle any related warranty claim or dispute, generally no more than three years after the conversation closes.
• Product reviews: for as long as the product is offered, unless you ask us to remove your review.

When personal information is no longer needed, we delete or de-identify it.

8. Children

Our Services are intended for adults. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, contact us and we will delete it. We do not knowingly sell or share the personal information of consumers under 18, or use it for targeted advertising, and we do not process personal information of anyone we know to be under 18 for those purposes.

9. Your privacy rights

Depending on where you live, you may have the following rights, subject to legal exceptions:

• Know and access: confirm whether we process your personal information and receive a copy of the specific pieces and categories we hold, the sources, the purposes, and the categories of third parties to which we disclosed it.
• Correct: request that we correct inaccurate personal information.
• Delete: request that we delete personal information we collected from you.
• Portability: receive your personal information in a portable, readily usable format.
• Opt out of sale, sharing, and targeted advertising: direct us not to sell or share your personal information or process it for targeted advertising. Use Your Privacy Choices or enable Global Privacy Control. We do not require you to create an account or verify your identity to opt out.
• Opt out of profiling: we do not use personal information for profiling in furtherance of decisions that produce legal or similarly significant effects.
• Limit use of sensitive personal information: we use sensitive personal information only as permitted by law, so no separate "limit" right applies.
• Non-discrimination: we will not deny you goods or services, charge different prices, or provide a different level of service because you exercised your rights (differences that are reasonably related to the value of your data in our rewards program are explained in the Notice of Financial Incentive).
• Appeal: if we decline your request, you may appeal by replying to our response or contacting us using the details in Section 14 with the subject line "Privacy Appeal." We will respond to appeals within the time required by law. If your appeal is denied, you may contact your state attorney general.

9.1 How to submit a request

Submit access, correction, deletion, and portability requests by emailing hello@nutrimill.com with the subject line "Privacy Request," through the form on our Contact page (write "Privacy Request" in the subject), or by calling us toll-free at 1-800-692-6724 (or 801-383-1920). If you have a customer account, you can also review and update much of your information by logging in. We will confirm receipt within 10 business days and respond within 45 days (extendable once by a further 45 days where permitted, in which case we will tell you). To protect your information, we will verify your identity by matching information you provide with information in our records; we may ask for additional information if needed, and we will use it only for verification.

Authorized agents. You may designate an authorized agent to submit requests on your behalf. We will ask the agent for proof of your written authorization (or power of attorney) and may also ask you to confirm your identity directly with us.

9.2 California residents

California residents have the rights described above under the CCPA, as amended by the California Privacy Rights Act. In addition:

• Our Your Privacy Choices page is our "Do Not Sell or Share My Personal Information" mechanism. We honor Global Privacy Control as a valid opt-out preference signal and will display a confirmation on that page when your browser is opted out.
• We do not use or disclose sensitive personal information for purposes that require a "Limit the Use of My Sensitive Personal Information" link.
• Our rewards and referral programs are financial incentives under California law. See the Notice of Financial Incentive for the material terms, the categories of personal information involved, our good-faith estimate of the value of that information, and how to withdraw.
• Shine the Light. California Civil Code Section 1798.83 permits California residents to request certain information about our disclosure of personal information to third parties for their direct-marketing purposes. To make such a request, contact us using the details in Section 14.

9.3 Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia residents

Residents of these states have the rights to access, correct, delete, and obtain a copy of their personal data, to opt out of targeted advertising, the sale of personal data, and certain profiling, and to appeal our decision, as described above. Where required by your state's law, we treat the Global Privacy Control signal as a valid opt-out of targeted advertising and sale. Oregon residents may also request a list of the specific third parties to which we have disclosed their personal data. Connecticut residents may request a list of the third parties to which we have sold their personal data. Minnesota residents may request the specific third parties to which we have disclosed personal data and may question the result of profiling; we maintain a data inventory as required by Minnesota law.

9.4 Nevada residents

Nevada residents may direct us not to sell their covered information to third parties that will license or sell it to others by contacting us using the details in Section 14.

9.5 Canadian residents

If you are in Canada, we collect, use, and disclose your personal information with your consent (express or implied, as permitted by PIPEDA and applicable provincial law) or as otherwise permitted or required by law. You may withdraw consent at any time, subject to legal and contractual restrictions, and you may request access to or correction of your personal information by contacting us. Personal information may be stored and processed in the United States and be subject to U.S. law. Our commercial electronic messages comply with Canada's Anti-Spam Legislation; every message includes an unsubscribe mechanism. Quebec residents may contact our person in charge of the protection of personal information using the details in Section 14. Note: where technologies that identify, locate, or profile you are used for visitors in Quebec, they are activated only with your consent.

10. Security

We maintain administrative, technical, and physical safeguards designed to protect personal information, including encryption of data in transit, access controls, and reliance on payment processors that meet the Payment Card Industry Data Security Standard. No system is perfectly secure, and we cannot guarantee the security of information transmitted over the internet. Please protect your account credentials and do not send payment card numbers by email or chat.

11. Third-party websites and social media

Our website contains links to, and embedded content from, third-party websites and platforms (for example, YouTube and other hosted videos, social-media buttons, and PayPal). We do not control those third parties, and their collection of information is governed by their own privacy policies. Information you post publicly on our website (such as reviews) or on our social-media pages may be viewed by others.

12. Wholesale customers, affiliates, and job applicants

Wholesale and business customers. If you contact us about a wholesale, retailer, or business account, we collect your name, business contact details, and order and payment information to set up and manage the account, and we disclose it to the service providers described in Section 5 for those purposes.

Affiliates and influencers. If you apply to or join our affiliate program through Shopify Collabs, Shopify collects your application, contact, social-media, and payout information and shares your profile and referral performance with us so that we can manage the program and pay commissions. Shopify's handling of that information is described in the Shopify Consumer Privacy Policy.

Job applicants and employees receive a separate privacy notice at the time of application or hire.

13. International transfers and changes to this Policy

We are based in the United States and process personal information in the United States and in other countries where our service providers operate. Where required by law, we use recognized safeguards for international transfers.

We may update this Privacy Policy from time to time. We will post the revised Policy on this page with a new "Last updated" date and, where required by law or where changes are material, provide additional notice. We review this Policy at least once every 12 months.

14. Contact us

NutriMill (L'Chef LLC)
Attn: Privacy
4196 S 950 E
St. George, UT 84790, USA
Email: hello@nutrimill.com (subject line "Privacy Request")
Web form: nutrimill.com/pages/contact
Toll-free: 1-800-692-6724
Phone: 801-383-1920

For rights related to data processed by Shopify for its own purposes, visit privacy.shopify.com.