Privacy policy
Privacy Policy
Last Updated: April 25, 2026
This Privacy Policy describes how MARLENE CASTILLO LTD (operating as Synshe, the "Site" or "we") collects, uses, and discloses your Personal Information when you visit our website synshe.com or make a purchase from us.
We are committed to protecting your privacy and handling your personal information responsibly in accordance with applicable laws, including the California Consumer Privacy Act (CCPA), General Data Protection Regulation (GDPR), UK GDPR, New York SHIELD Act, and the PRC Personal Information Protection Law (PIPL). This policy applies to all users of the Site, including browsers, customers, and anyone who contacts us for support. By using our Site, you consent to the practices described in this Privacy Policy.
Collecting Personal Information
When you visit the Site, we collect certain information about your device, your interaction with the Site, and information necessary to process your purchases. We may also collect additional information if you contact us for customer support or subscribe to our marketing communications. In this Privacy Policy, "Personal Information" refers to any information that can uniquely identify an individual.
• Examples collected: Web browser version, IP address, time zone, cookie information, pages or products you view, search terms, how you interact with the Site, device type, operating system, and referring website addresses.
• Purpose: To load the Site accurately for you, perform analytics on Site usage to optimize our services, detect and prevent fraud, and improve your browsing experience.
• Source: Collected automatically when you access our Site using cookies, log files, web beacons, tags, and pixels.
• Disclosure: Shared with our processor Shopify and analytics providers (including Google Analytics).
• Examples collected: Full name, billing address, shipping address, payment information (credit card numbers are processed directly by our payment providers and not stored on our servers), email address, phone number, and order details.
• Purpose: To fulfill your order, process payments, arrange shipping, provide invoices and order confirmations, communicate with you about your order, screen for potential risk or fraud, and send you important product updates.
• Source: Collected directly from you when you place an order.
• Disclosure: Shared with Shopify (our e-commerce platform), payment processors (Stripe, PayPal), shipping carriers (USPS, UPS, FedEx), and fulfillment partners.
• Examples collected: Any information you provide when contacting us via email, including your name, email address, order number, and details about your inquiry. This may include health-related information you voluntarily disclose when asking about product suitability.
• Purpose: To provide effective customer support and resolve your issues.
• Source: Collected directly from you.
• Disclosure: Shared with our customer support team and Shopify as needed to assist with your request.
Sensitive Personal Information (Health Data)
We may collect sensitive personal information, including health-related information you voluntarily provide when contacting us about product suitability. We only use this information to respond to your specific inquiry and do not use it for marketing purposes without your explicit written consent. We do not sell sensitive personal information to any third parties. By providing such information, you acknowledge that you have read this clause and consent to our limited use of this data for support purposes.
• Examples collected: Email address when you subscribe to our newsletter.
• Purpose: To send you information about our products, promotions, and updates.
• Source: Collected directly from you when you opt in to marketing communications.
• Disclosure: Shared with our email service provider (Klaviyo).
The Site is intended for individuals who are at least 18 years of age. Our dietary supplement products are not intended for use by individuals under 18 years of age. We do not intentionally collect Personal Information from children under the age of 18. If you are a parent or guardian and believe your child has provided us with Personal Information, please contact us at service@synshe.com to request immediate deletion.
Your Personal Information may be transferred to and processed in countries other than the country in which you reside, including the United States, where our headquarters and most of our service providers are located.
• For residents of the European Economic Area (EEA) and United Kingdom: We ensure that any transfer of your Personal Information to countries outside the EEA/UK is protected by appropriate safeguards, including the use of Standard Contractual Clauses (SCCs) approved by the European Commission and the UK Information Commissioner's Office. You may request a copy of these clauses by contacting us.
• For users located in China: If you are accessing the Site from within the People's Republic of China, please note that your Personal Information will be transferred to servers located in the United States. We will ensure that such cross-border transfers are conducted in compliance with the requirements of the PRC Personal Information Protection Law (PIPL), including obtaining your separate consent where required.
We share your Personal Information only with trusted third parties who help us operate our business and provide services to you, as described below:
• Service Providers: We share your information with companies that help us run our business, including:
￮ Shopify (our e-commerce platform)
￮ Payment processors: Stripe and PayPal
￮ Shipping and fulfillment partners: USPS, UPS, FedEx
￮ Email service provider: Klaviyo
￮ Analytics and marketing partners: Google Analytics, Meta, and Microsoft Advertising
• Legal Requirements: We may disclose your Personal Information if required to do so by law, or in response to a valid subpoena, search warrant, or other lawful request from government authorities.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of our business, your Personal Information may be transferred as part of the transaction.
We use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. You can opt out of targeted advertising through the links provided in the full policy.
We use your Personal Information for the following purposes:
• To process and fulfill your orders.
• To communicate with you about your orders and account.
• To send you marketing communications (with your consent, where required by law).
• To improve our website, products, and services.
• To detect and prevent fraud.
• To comply with our legal obligations.
Lawful Basis (For EEA/UK Residents)
If you are a resident of the European Economic Area ("EEA") or the United Kingdom ("UK"), we process your personal information under the following lawful bases:
• Performance of a contract: To fulfill your order.
• Consent: To send you marketing communications and to process sensitive health data.
• Legitimate interests: To improve our website and services, and detect fraud.
• Compliance with legal obligations.
We retain your Personal Information only for as long as necessary to fulfill the purposes for which it was collected:
• Order information: Retained for 7 years or as long as required by applicable tax and accounting laws.
• Marketing information: Retained until you unsubscribe.
• Customer support information: Retained for 1 year after resolution.
• Device and analytics information: Retained for 2 years.
We implement appropriate technical and organizational measures to protect your Personal Information from unauthorized access, in accordance with the New York SHIELD Act and other applicable data protection laws.
Depending on your location, you may have the following rights regarding your Personal Information:
• California (CCPA/CPRA): Right to Know, Delete, Correct, and Non-Discrimination.
• EEA/UK (GDPR/UK GDPR): Right of Access, Rectification, Erasure, Data Portability, Restriction, and Objection.
• New York (SHIELD): Right to Deletion.
To exercise these rights, please contact us at service@synshe.com. We will respond to your request within 30 days.
A cookie is a small amount of information that is downloaded to your computer or device when you visit our Site. We use cookies to make your browsing experience better. You can control and manage cookies through our cookie consent banner or your browser settings.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a new effective date.
For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us:
By email: service@synshe.com
By mail:
MARLENE CASTILLO LTD
5822 4TH AVE FL 2
BROOKLYN, NY 11220
United States of America
Data Protection Contact: Privacy Officer