USA Store · #1 Nattokinase in the USA
Steporbit
🛒

Privacy policy

At Steporbit Supplements LLC , we are committed to maintaining the trust and confidence of you, our customers and visitors of our websites.

In particular, we want you to know that we are not in the business of selling, renting or trading email lists with other companies, businesses or other third parties for marketing purposes. It's something we really don't like and strongly disagree with. In this Privacy Policy, we explain what data we collect, why we collect it, how we use it, who we share it with, and the rights you have over it.

Website Cookies

Cookies allow web applications to respond to you as an individual. A cookie is a small text file stored on your device that helps the website improve your experience. Further explanation of the cookies on this website is provided below.

Order processing cookies

This site offers e-commerce facilities and some cookies are essential to ensure that your order is remembered between pages so that we can process it properly.

Disabling cookies

You can prevent cookies being used by adjusting the settings on your browser (see your browser help for how to do this). Disabling cookies will usually disable certain functionality and features of this website.

Order processing

When you place an order with us we collect the personal information needed to process your order: your name, email address and delivery address. We also use this information to notify you of any delays or problems with your order.

When placing an order through our website you will be transferred to a secure website at our payment service provider, PayPal, for the taking of your payment. Natural Foundation does not have access to any of your credit or debit card details. Our payment service provider handles all card transactions in a secure and encrypted environment.

When someone visits this website we use a third-party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We use this to find out things such as the number of visitors to the various parts of the site. This information is processed in a way that does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website.

Mailing lists

As part of the registration process for our e-newsletter, we collect personal information. We use that information to tell you about things you've asked us to tell you about; to contact you if we need to obtain or provide additional information; and to keep our records up to date. We don't rent or trade email lists with other organisations or businesses.

We use a third-party provider, MailChimp, to deliver our newsletter. We gather statistics around email openings and clicks using industry-standard technologies to help us monitor and improve our e-newsletter. For more information, please see MailChimp's privacy notice.

You can unsubscribe from general mailings at any time by clicking the unsubscribe link at the bottom of any of our emails or by emailing us at contact@steporbit.com.

Messenger and social media interactions

When you comment on one of our Facebook or Instagram ads or posts (for example our Booty Boost campaign), we may send you a private message via Facebook Messenger or Instagram Direct in response. This is operated by an automated assistant that we use to answer product questions, share product recommendations, and provide checkout links.

What we collect through Messenger and Instagram:

  • Your Facebook or Instagram user ID (a numeric identifier issued by Meta — not your real name or email unless you provide them)
  • Your public first name and profile picture as shown on your Facebook or Instagram profile
  • The text of the comment you posted on our ad or post
  • The content of any messages you exchange with the assistant
  • Timestamps and basic conversation metadata, such as which message was sent when and whether a link was clicked

How we use it: to reply to your messages, recommend products, send you a checkout link if you ask for one, and to review and improve the quality of the assistant's responses. Conversation transcripts may be used to train and evaluate the language models that power the assistant. Where transcripts are used for model training, we remove direct identifiers (user ID, name) before they are reviewed by staff or used in training datasets.

Who we share it with: the assistant is built on third-party large language model providers (currently xAI and OpenAI). When you message us, the content of your message is sent to these providers to generate a reply. They process the data on our behalf under contractual data-processing terms and do not use it to train their own foundation models. We also share data with Meta Platforms, Inc., who operate Facebook Messenger and Instagram Direct, in order to deliver our replies to you.

How long we keep it: conversation transcripts are retained for up to 24 months from the date of the last message, after which they are deleted or fully anonymised. Aggregate, anonymised statistics may be retained indefinitely.

How to stop or delete: you can stop the conversation at any time by replying "stop" or by blocking our Page in Messenger or Instagram. You can request a copy of your conversation history, or its deletion, by emailing contact@steporbit.com with the subject line "Messenger data request." We will respond within 45 days.

Third-party service providers

We share personal information with the following service providers, who process it on our behalf under contractual data-processing terms:

  • Shopify Inc. — operates the e-commerce platform this site runs on
  • PayPal — payment processing
  • Google Analytics — website analytics
  • MailChimp — email newsletter delivery
  • Meta Platforms, Inc. — operates Facebook Messenger and Instagram Direct, used to deliver replies from our automated assistant; also operates the Meta Pixel and Conversions API used for advertising measurement
  • xAI, Inc. — provides the language model that generates assistant replies
  • OpenAI, Inc. — provides supporting language-model and embedding services for the assistant

Data retention

We keep personal information only for as long as needed for the purpose for which it was collected:

  • Order and customer-account records: 7 years (US tax and accounting requirements)
  • Marketing email subscribers: until you unsubscribe, then up to 12 months in a suppression list
  • Messenger and Instagram conversation transcripts: up to 24 months from last message
  • Website analytics: up to 26 months (Google Analytics default)
  • Abandoned-cart data: up to 12 months

Your California privacy rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you the following rights:

  • Right to know what personal information we collect, use, disclose, and share about you
  • Right to delete the personal information we have collected from you, subject to certain exceptions
  • Right to correct inaccurate personal information
  • Right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising
  • Right to limit the use of sensitive personal information
  • Right to non-discrimination for exercising any of these rights

Categories of personal information we collect: identifiers (name, email, postal address, IP address, Facebook or Instagram user ID); commercial information (order history, abandoned-cart data); internet activity (browsing on our site, ad interactions); and electronic communications content (messages exchanged with our Messenger assistant). We collect this from you directly, from your interactions with our website and ads, and from Meta when you comment on or message our Pages.

Sale or sharing: we do not sell personal information for money. We do "share" personal information for cross-context behavioral advertising as defined under California law — specifically, we use Meta advertising tools (the Meta Pixel and Conversions API) to measure and target ads on Facebook and Instagram. To opt out, click "Do Not Sell or Share My Personal Information" in our website footer, or email us at contact@steporbit.com

How to exercise your rights: email contact@steporbit.com with the subject line "California privacy request." We may need to verify your identity before responding. We will respond within 45 days. You may also designate an authorised agent to make a request on your behalf.

Children's privacy

Our website and our Messenger assistant are not directed to children under 13, and we do not knowingly collect personal information from children under 13. The Messenger assistant is intended for users aged 18 or older. If you believe a child under 13 has provided us with personal information, please email contact@steporbit.com and we will delete it.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time so please do check back for any changes.

This page was last updated on 29 April 2026.