Privacy policy

Last updated: November 8, 2026

This Privacy Policy explains how Tabs Labs LLC ("Tabs," "we," "us") collects, uses and shares personal information when you visit tabs.co (the "Site"), buy from us, or hear from us. Tabs Labs LLC also operates TabsRx (tabsrx.co), a separate prescription service with its own privacy policy. Where this policy says "our brands," it means Tabs and TabsRx.

The short version

We collect what you give us, what your device sends us, and, for marketing, some information we get from data partners.
We use it to sell and ship chocolate, run the Site, and personalize offers and messages across our brands, including TabsRx.
We share it with service providers who work for us, and with advertising partners for measurement and advertising. Under California and some other state laws that counts as a "sale" or "sharing" and you can opt out.
We do not sell or buy sensitive information, and we use information from the TabsRx prescription service to personalize Tabs only for people who opted in, never their health details.
You can access, correct, delete and opt out. Details and links are below.

1. What we collect and where it comes from

Information you give us. Your name, email address, phone number, billing and shipping addresses, payment details (handled by our payment processors; we do not store full card numbers), what you order, your account details, your subscription settings, your reviews, and anything you send to customer support or in response to a survey or quiz.

Information from your device. Browser type, IP address, approximate location from your IP address, time zone, device identifiers, the pages and products you view, what you search for, how you got to the Site, and how you interact with the Site and our emails, texts and browser notifications. Collected through cookies, pixels, tags and similar technologies (see section 7).

Information from other sources. We receive information from:

Our sales channels and marketplaces, such as Amazon, when you buy Tabs products from us there.
Social media and advertising platforms, such as Meta, Google, TikTok and Pinterest, about how our ads performed and how you interacted with them.
Our affiliate and referral partners, when you arrive through or use their link or code.
Data partners, meaning data brokers and other commercial and public sources, from which we may obtain demographic, household and interest information to add to the profile we already hold about you. See section 2.

Recognizing returning browsers. When you come back to the Site, we and our email provider, Klaviyo, may recognize your browser as belonging to someone already in our records. We do this with first-party cookies that Tabs and Klaviyo set on the Site, with tracking codes in the links in our emails and texts, and through a Klaviyo feature that uses other cookies already in your browser on the Site (such as those from our advertising and analytics tools) to recognize you again when an earlier Klaviyo cookie has expired. We may also work with identity partners that match a browser visiting the Site to an email address or other contact details using their own networks. If an identity partner may keep or use that information for its own purposes, that is a "sale" or "sharing" under some state laws, and your opt-out and Global Privacy Control signal apply to it (section 6); an identity partner that is bound by contract to use the information only to provide its service to us is a service provider. Recognition never uses health details, including any information from TabsRx, and follows the limits in sections 4 and 8, including those for Washington and Nevada.

We receive information from our other brand, TabsRx, only if you opt in, and never your health details (section 4).

Inferences. We may draw inferences from the information above, such as which products you are likely to want, what offers may interest you, or how likely you are to order again.

Categories we obtain from data partners. Age range, gender, household composition (for example whether a household includes children), marital status, homeowner or renter status, length of residence, estimated household income or home value, education level, occupation category, and general interests and lifestyle categories (such as fitness or outdoor activities). We do not obtain racial or ethnic origin, religion, political views, citizenship or immigration status, health conditions, sexual orientation, precise geolocation, or any other sensitive category from data partners, and we instruct our data partners not to supply them.

2. How we use personal information

To take, process, fulfill and deliver your orders, run subscriptions, process payments, handle returns and refunds, and provide customer support.
To run and improve the Site, including analytics, testing and fixing problems.
To send you order and account messages.
To send you marketing by email, text, browser notification or mail where you have opted in or where the law allows, and to let you opt out.
To personalize what you see and what we offer you: product recommendations, the content and timing of emails and texts, the offers and discounts you receive, and the pages you land on. When we recognize a returning browser (section 1), we may use what we already know about you to personalize the Site and our messages. We do this across our brands, so information about your Tabs purchases, your engagement and the categories we obtain from data partners may be used to decide which Tabs or TabsRx offers and messages to send you, and when. Automated systems, including machine learning models, make some of these decisions. They do not make decisions that have legal or similarly significant effects on you.
To run our affiliate and referral programs.
To advertise our brands on other websites and apps, and to measure whether our advertising works.
To detect and prevent fraud, abuse and security problems.
To comply with the law, enforce our terms and protect our rights.

Information from data partners is used only to decide which offers and messages you receive and in what order. It is not shown to you, not used to write the content of a message to you, and not combined with any information from the TabsRx prescription service.

3. How we share personal information

Service providers. Companies that work for us under contract and may use your information only to provide their service: store hosting and checkout (Shopify); payment processors; shipping, fulfillment and international shipping providers; email, text, browser notification and direct mail providers (Klaviyo, OneText, PushOwl, PostPilot); subscription management (Stay Ai); on-site recommendations, reviews, quizzes and video (Rebuy, Loox, Octane AI, Tolstoy); analytics, testing and attribution (Shopify analytics, Google Analytics, Hotjar, Microsoft Clarity, Convert, Triple Whale, WorkMagic); site translation (Weglot); customer support tools (Commslayer); affiliate and referral programs (Social Snowball, Simple Affiliate); and data partners who match our records against theirs and return the categories in section 1 without keeping our data.

Advertising partners. We share information about your use of the Site, your purchases and your interactions with our ads with advertising and measurement partners, including Meta, Google, TikTok, Pinterest, X and AppLovin, directly and through cookies and pixels, so they can show you our ads and measure them. Shopify may also use information from our store, together with its own data, to improve its products, ad targeting and personalization, as described in Shopify's Additional Services Terms. This is a "sale" or "sharing" under some state laws. You can opt out (section 6).

Our brands. Tabs and TabsRx are the same company. Tabs may use your Tabs information to invite you to TabsRx and to personalize TabsRx offers. TabsRx never sends information about prescriptions, visits or patient status back into Tabs' chocolate systems (section 4).

Data partners. To obtain the categories in section 1 we send a data partner the contact details and postal address we already hold so it can match them. We require data partners not to keep our data or use it for anyone else. If a data partner does not agree to that, we treat the match as a sale under state law and apply your opt-out first.

Legal and safety. To comply with the law, respond to subpoenas or lawful requests, enforce our terms, or protect the rights, property and safety of Tabs, our customers or others.

Business transfers. If Tabs or substantially all of its assets are sold, merged or reorganized, your information may be transferred to the new owner, who will be bound by this policy for the information collected under it.

Text messaging. Your text-message opt-in and consent records are never shared with third parties for their own marketing.

We do not sell your personal information for money. We do not sell or share sensitive personal information.

4. Tabs and TabsRx: what crosses and what does not

TabsRx is a prescription telehealth service operated by Tabs Labs LLC under its own privacy policy at https://tabsrx.co/legal/privacy.html and its own consumer health data notice.

Tabs may use the information it holds about you as a Tabs customer, including the categories in section 1, to invite you to TabsRx and to personalize TabsRx offers you receive from Tabs.
Information that you create inside TabsRx (a visit, a prescription, an order, your clinical answers, the fact that you are a patient) stays in TabsRx systems unless you opt in. If you opt in, Tabs may use your TabsRx information to personalize the offers it shows and sends you, on tabs.co and by email or text, but never your health details (your conditions, clinical answers or prescriptions).
Tabs does not create or store a record labeling you with a health condition, from your purchases or from data partners. When we select you for a TabsRx invitation or offer, we log that decision, and if you open or click a TabsRx invitation, that engagement is recorded in TabsRx systems under the TabsRx Privacy Policy and Consumer Health Data Privacy Notice, not in Tabs' chocolate systems.
If you live in Washington or Nevada, Tabs does not use information from data partners to select you for prescription-product offers unless you have given consent on a TabsRx page. See our Consumer Health Data Privacy Notice (section 8).

5. Your rights

You have the right to:

Know what personal information we have about you and get a copy.
Correct it.
Delete it.
Opt out of the sale or sharing of your personal information, targeted advertising, and profiling that produces legal or similarly significant effects (we do not do the last one).
Limit our use of sensitive personal information (we do not collect it beyond what is needed to process your order).
Not be treated differently for exercising these rights.
Appeal if we deny a request.

These rights come from California's privacy law and similar laws in other states. We give them to every US resident, wherever you live.

To exercise a right, email help@tabs.co or write to us at the address in section 11. We will verify your request by matching the details you give us with the information we hold, and may ask for more. You can use an authorized agent; we will ask the agent for proof of your permission. We respond within 45 days and tell you if we need more time. If we deny your request you can appeal by replying to our response; we answer appeals within 45 days.

California residents. In the past 12 months we have collected the categories listed in section 1 (identifiers, customer records, commercial information, internet activity, geolocation from IP address, inferences, and characteristics of protected classifications only as age and gender), from the sources in section 1, for the purposes in section 2, and have disclosed them to the service providers and partners in section 3. We have "sold" or "shared" identifiers, internet activity and commercial information with advertising partners. We do not knowingly sell or share the personal information of anyone under 16. How long we keep information is in section 9.

6. Opting out of sale, sharing and targeted advertising

Click "Do Not Sell or Share My Personal Information" in the footer of the Site and follow the steps.
Turn on Global Privacy Control in your browser or extension. We treat a GPC signal as a request to opt out of sale, sharing and targeted advertising for the browser that sends it.
Email help@tabs.co with "opt out" and the email address you use with us. This covers data-partner matching as well as advertising partners.
You can also opt out directly with advertising platforms: Meta https://www.facebook.com/settings/?tab=ads ; Google https://adssettings.google.com ; and the Digital Advertising Alliance https://optout.aboutads.info/.

Opting out does not stop order emails, and it does not unsubscribe you from marketing emails; use the unsubscribe link for that.

7. Cookies and similar technologies

We use cookies, pixels and tags that are necessary to run the store (cart, checkout, login, fraud prevention), that measure how the Site is used and test changes to it (Shopify analytics, Google Analytics, Hotjar, Microsoft Clarity, Convert), that recognize returning browsers (Klaviyo, and any identity partners described in section 1), and that support advertising and measurement (Meta, Google, TikTok, Pinterest, X, AppLovin and similar partners). The names of the Shopify cookies and how long they last are listed in Shopify's cookie notice at https://www.shopify.com/legal/cookies. You can control cookies in your browser; blocking them may break parts of the Site. Blocking cookies does not by itself opt you out of sale or sharing; use section 6 for that.

8. Consumer health data (Washington, Nevada and similar laws)

Tabs sells chocolate supplements. We do not collect health information about you, and we do not use your Tabs information to infer health conditions. Because the same company operates TabsRx, which does collect consumer health data, we publish one Consumer Health Data Privacy Notice for both brands at https://tabsrx.co/legal/consumer-health-data.html that explains what health data TabsRx collects, how it is used and shared, and your rights.

9. How long we keep information

When you place an order or create an account, we keep your personal information for our records unless and until you ask us to erase it. Opt-out and consent records are kept for as long as needed to honor them.

10. Children

The Site and our products are for adults 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us information, contact us and we will delete it.

11. Contact and changes

Tabs Labs LLC, 18117 Biscayne Blvd #3022, Miami, FL 33160, United States. Email: help@tabs.co. If you are not satisfied with our response you may contact your state attorney general or privacy regulator.

We may update this policy. When we do, we will post the updated policy here and change the date at the top, and where the law requires it we will ask for your consent.

Other information. We do not respond to browser "Do Not Track" signals, which have no agreed meaning; we do honor Global Privacy Control (section 6). Our payment processor Shopify uses limited automated fraud screening (temporary denylists of IP addresses and cards) that has no legal or similarly significant effect on you. If you are in the European Economic Area or the United Kingdom, you have the right to access, correct and delete your personal information, to restrict or object to our processing of it, including processing based solely on automated decision-making, and to complain to your data protection authority.