Privacy Policy

Last updated: October 13, 2026

This Privacy Policy explains how GS Holistic LLC (“G Pen”, “we”, “us”) collects, uses and shares personal information when you visit gpen.com, buy from us, contact us, register a product, join our rewards program or sign up for our emails and texts. It also explains the choices and rights you have, including under California and other U.S. state privacy laws.

Our store is only for adults 21 and over and only ships within the United States.

1. Who we are

GS Holistic LLC, 1123 Locust St Ste 166, St Louis, MO 63101, United States. Email help@gpen.com, phone +1 833-691-3224 (toll-free).

2. Personal information we collect

Information you give us

• Contact and order information: name, email address, phone number, shipping and billing address, the products you order and your messages to us.
• Account information, if you create an account: login email, password (stored encrypted), saved addresses, order history and rewards points.
• Age verification information: name, date of birth and address and, if needed, a photo of a government-issued ID, which goes directly to our age verification provider.
• Payment information: entered directly with our payment processors (Authorize.Net or Sezzle). We receive only the result, the payment method and the last digits of your card; we never store full card numbers.
• Product registration, warranty and support information: the product, where and when you bought it, photos or videos of a fault and your conversations with us.
• Reviews and photos you post about our products.
• Marketing preferences: your email address or mobile number if you sign up for emails or texts, and when and how you signed up.
• Business enquiries: details you send us about your store if you apply to become a retailer.

Information we collect automatically

• Device and usage information: IP address, browser and device type, pages viewed, products added to the cart, the site that sent you to us, and date and time.
• Cookies, pixels and similar technologies, set by us and by our analytics and advertising partners. See our Cookie Policy.
• Approximate location derived from your IP address.

Information from others

• Payment processors and our age verification provider tell us whether a payment or an age check succeeded.
• Our warehouse systems and carriers tell us the shipping and delivery status of your package.
• Advertising and social media platforms may tell us, in aggregate, how our ads performed.

3. How we use personal information

• To take, process and deliver your order, take payment and calculate sales tax, and send order and shipping messages.
• To verify that you are 21 or older and that we are allowed to ship to your address.
• To create and run your account and our Loyal G rewards program.
• To handle returns, exchanges, warranty claims and product registrations, and to answer your questions.
• To send you marketing emails and text messages when you have signed up, and to show you relevant offers on our site.
• To show you ads for G Pen on other websites and apps and measure how our ads perform (see section 6).
• To understand how our website is used and improve it.
• To prevent fraud, keep our website secure, enforce our terms, and meet our legal, tax and accounting obligations.
• To run contests, promotions and surveys you choose to enter.

We do not use your personal information to make decisions about you based solely on automated processing that have legal or similarly significant effects. Our payment processors use automated fraud checks; if a payment is refused and you think this is wrong, contact us.

4. Sensitive personal information

A government ID image or number, if our age verification provider asks for it, and your account login and password are “sensitive personal information” under some state laws. We use them only to verify your age, to protect your account and to prevent fraud, and not to infer anything about you. We do not sell or share them. We do not use or disclose sensitive personal information for any purpose that would give you the right to limit its use under California law.

5. Who we share personal information with

We share personal information only as described here.

• Service providers that work for us under contract and may use the information only to provide their service: website hosting (Cloudways and DigitalOcean), payment processing (Authorize.Net, Sezzle), age verification (AgeChecker.Net), sales tax calculation (Avalara), order and inventory management (ShipStation, Cin7), our email and text message platforms (Klaviyo for email; Voyage and vyg.ai for texts), reviews and rewards (Yotpo), our store locator (Stockist), and IT, security and professional advisers.
• Carriers (UPS and USPS) to deliver your package.
• Advertising and analytics partners, such as Google (Google Analytics, Google Ads), Meta (Facebook and Instagram) and Triple Whale, through cookies and pixels on our website and, for Meta and Google, by sending order events from our server. These partners may use the information for their own purposes as well. See section 6.
• Authorities, courts or others when the law requires it, to protect our rights or the safety of others, or in connection with a merger, sale or reorganization of our business.
• Other companies or people when you ask us to or give us permission.

GS Holistic LLC also runs other brands. If you agree to receive marketing emails from us, those emails may include offers from the other brands run by GS Holistic LLC.

6. Targeted advertising, “sale” and “sharing”

We do not sell your personal information for money. Like most online stores, we let advertising partners collect information through cookies and pixels on our website (for example, which pages and products you looked at and whether you bought something), so that they can show you G Pen ads on other websites and apps and measure them. Under California law this is called “sharing” personal information for cross-context behavioral advertising, and under the laws of some other states it may be called a “sale” or “targeted advertising”.

In the last 12 months we have shared identifiers (such as cookie IDs, IP address and, in hashed form, email address), commercial information (products viewed and purchased) and internet activity with advertising and analytics partners in this way. We do not knowingly sell or share the personal information of anyone under 16 (and our store is only for adults 21 and over).

Your choice: you can opt out at any time on our Your Privacy Choices page, or by turning on Global Privacy Control (GPC) in your browser. We treat a GPC signal as a request to opt out for that browser, and our Your Privacy Choices page confirms that your opt-out has been honored. Our website does not respond to “Do Not Track” signals, which are different from GPC.

7. Notice at collection: categories, purposes and retention

This table summarizes the personal information we collect, why, who receives it and how long we keep it.

Category	Examples	Why we use it	Disclosed to	Sold or shared for ads?	How long we keep it
Identifiers and contact details	Name, email, phone, address, account login, IP address, cookie IDs	Orders, account, support, marketing you agreed to, security, ads	Service providers, carriers, advertising and analytics partners	Yes (IP address, cookie IDs, hashed email), unless you opt out	Order-related: 7 years after the order. Account: until you delete it. Marketing lists: until you unsubscribe
Commercial information	Products bought or viewed, order history, returns, rewards points	Orders, rewards, support, warranty, ads	Service providers, advertising and analytics partners	Yes (products viewed and bought), unless you opt out	7 years after the order
Age and ID information	Date of birth, ID image (only if requested)	Age verification, fraud prevention	Age verification provider	No	We keep only the result with your order; the provider deletes ID images after the check
Payment information	Card type and last digits, payment result	Payment, refunds, fraud prevention	Payment processors	No	7 years after the order
Internet and device activity	Pages viewed, clicks, browser, device, referring site	Website operation, statistics, security, ads	Hosting and analytics providers, advertising partners	Yes, unless you opt out	Statistics: up to 14 months. Server logs: up to 30 days
Approximate location	City or state from your IP address	Shipping eligibility, tax, statistics, fraud prevention	Service providers, analytics partners	Yes (as part of device activity), unless you opt out	As internet activity
Audio, photos and videos	Photos or videos of a faulty device, review photos	Warranty claims, reviews	Support and reviews providers	No	3 years after the claim closes; reviews while published
Inferences	Product interests based on browsing and purchases	Personalized offers and ads	Email and advertising partners	Yes, unless you opt out	Until you unsubscribe or opt out
Sensitive personal information	ID details, account password	Age verification, account security	Age verification provider	No	See above

8. Your privacy rights

Depending on the state you live in (including California, Colorado, Connecticut, Virginia, Texas, Oregon and the other states with comprehensive privacy laws), you may have the right to:

• Know and access the personal information we hold about you, and get a copy in a portable format.
• Correct inaccurate personal information.
• Delete personal information, unless we must keep it (for example order and tax records).
• Opt out of the sale or sharing of your personal information and of targeted advertising (see section 6).
• Opt out of profiling that produces legal or similarly significant effects. We do not do this kind of profiling.
• Get a list of the specific third parties we have disclosed your personal information to, where your state’s law gives this right (for example Minnesota and Oregon).
• Not be discriminated against for using any of these rights.

How to make a request: email help@gpen.com with the subject “Privacy request”, call +1 833-691-3224 (toll-free), or use the Your Privacy Choices page. We will ask for information to confirm your identity, such as your email address and a recent order number, and we only use it for that purpose. You can use an authorized agent; we may ask for proof that you gave the agent permission and ask you to confirm your identity with us directly. We respond within 45 days, and if we need more time (up to another 45 days) we will tell you why.

Appeals: if we decline your request, you can appeal by replying to our answer or emailing help@gpen.com with the subject “Privacy appeal”. We will answer within the time your state’s law requires. If you are not satisfied, you can contact your state attorney general.

9. Notice of financial incentive

We offer programs that give you something of value in exchange for personal information, such as points in our Loyal G rewards program, a welcome discount when you sign up for emails or texts, and referral rewards when a friend you refer places a first order. To join, you give us your name, email address and, for texts, your mobile number, and we keep track of your purchases and activity in the program. The terms of each offer are shown where you sign up and on our Rewards page.

Joining is optional and you can leave at any time by unsubscribing or by asking us to close your rewards account. We estimate the value of your personal information to us as roughly equal to the value of the reward or discount we offer, based on our costs of running the program and the additional purchases we expect members to make.

10. Text marketing and notifications

We send text messages through our SMS providers, Voyage and vyg.ai.

• At checkout: by entering your phone number at checkout and starting a purchase, you agree that we may send you text notifications about your order, including reminders about a cart or checkout you did not finish, and text marketing offers. Some of these texts start a conversation with a G Pen team member or an automated assistant, who can answer your questions and may ask for your date of birth to confirm you are 21 or older.
• Sign-up forms and keywords: you can also subscribe through one of our sign-up forms, the SMS box at checkout or a keyword. Subscribing this way means you agree to receive recurring automated marketing texts at the number you gave us.
• How many: text marketing messages will not exceed 20 a month. Message frequency varies.
• Consent is not a condition of any purchase. Message and data rates may apply.
• Stopping texts: reply STOP to any message, or use the unsubscribe link in our messages, to stop receiving text marketing messages and notifications. We will also honor any other request that clearly asks us to stop. After you opt out you will get one message confirming it.
• Help: text HELP to the number you received the messages from, or contact us at help@gpen.com or +1 833-691-3224.

We use your mobile number and your replies only to send these messages, answer you and see which messages lead to orders. Your mobile number and your SMS opt-in and consent are never sold or shared with third parties or affiliates for their own marketing. We share them only with the text messaging providers that send our messages (Voyage and vyg.ai) and the carriers that deliver them. The full SMS Terms are in our Terms and Conditions.

11. Emails

We send marketing emails only if you sign up. Every marketing email has an unsubscribe link. We may measure whether our emails are opened and which links are clicked, to improve them. Order and account emails are sent even if you unsubscribe from marketing.

12. How we protect personal information

Our whole website uses encrypted connections (HTTPS), card details are entered directly with our payment processors, only people who need customer information can access it, and we keep our systems up to date. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

13. Children and minors

Our website, products and services are only for adults 21 and over. We do not knowingly collect personal information from anyone under 21, and we do not knowingly collect any information from children under 13. If we learn that we have, we delete it. If you believe a minor has given us personal information, contact us at help@gpen.com.

14. California “Shine the Light” and Nevada

We do not share personal information with third parties for their own direct marketing purposes as described in California Civil Code Section 1798.83. Nevada residents can ask us not to sell their personal information by emailing help@gpen.com; we do not sell personal information as defined by Nevada law.

15. Third-party links

Our website links to other websites, such as help.gpen.com, social media and our sister brands. Those sites have their own privacy policies, and we are not responsible for their content or practices.

16. Where your information is stored

We are based in the United States, and our website and service providers store and process personal information in the United States.

17. Changes to this policy

We update this policy when our practices or the law change. The date at the top shows the current version. If a change is important, we will tell you on our website or by email.

18. Contact us

If you have any questions about this Privacy Policy or our privacy practices, contact us:

GS Holistic LLC
Attn: Privacy
1123 Locust St Ste 166
St Louis, MO 63101
United States
Email: help@gpen.com
Phone: +1 833-691-3224 (toll-free), Monday to Friday, 10 AM to 6 PM ET