PRIVACY POLICY

Effective Date: September 15, 2026
Last Updated: September 15, 2026

Controlled Chaos LLC (“Controlled Chaos,” “we,” “us,” or “our”) respects your privacy.

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit controlledchaospreworkout.com, use our formula-generation tools, create or use an account, purchase products, communicate with us, participate in promotions, or otherwise interact with our websites, products, and services (collectively, the “Services”).

This Privacy Policy applies to users in the United States.

Certain information used to personalize products may also qualify as “consumer health data” under laws in certain states. Where applicable, additional disclosures and rights are provided through our Consumer Health Data Privacy Policy.

1. INFORMATION WE COLLECT

The information we collect depends on how you interact with Controlled Chaos.

A. Identification and Contact Information

We may collect:

• name;

• email address;

• telephone number;

• billing address;

• shipping address;

• account identifiers;

• member or customer identifiers; and

• other contact information you voluntarily provide.

B. Athlete, Training, and Formula Information

When you use our product-personalization tools, we may collect information such as:

• athlete or profile name;

• training goals;

• training style;

• workout frequency;

• training experience;

• recovery information;

• workout duration;

• performance priorities;

• caffeine or stimulant preferences and tolerance selections;

• focus or cognition preferences;

• pump, endurance, strength, or similar training preferences;

• beta-alanine or “tingle” preferences;

• product selections;

• serving selections;

• flavor selections;

• answers submitted through our formula-generation process; and

• formulas, summaries, recommendations, or other outputs generated from those selections.

We use this information to generate, save, retrieve, manufacture, and fulfill personalized products and to provide the Services you request.

Controlled Chaos's personalization system is not a medical intake system.

We do not ask customers to provide medical records, diagnoses, prescriptions, insurance information, or physician records through the normal formula-generation process.

Please do not submit unnecessary medical or highly sensitive information through optional website fields or customer communications.

C. Account and Formula History

If you create or use an account, we may maintain information associated with your account, including:

• saved athlete profiles;

• prior formula history;

• current formulas;

• member identifiers;

• formula identifiers;

• product selections;

• order history; and

• information needed to allow you to retrieve or reuse applicable profiles or formulas.

D. Order and Transaction Information

When you make a purchase, we may collect information concerning:

• products purchased;

• personalized formula associated with an order;

• flavor;

• serving quantity;

• price;

• discounts or promotional codes;

• referral, affiliate, influencer, or partner codes;

• order number;

• order status;

• payment status;

• shipping information;

• fulfillment status;

• refunds or replacements; and

• transaction history.

Payment transactions are processed through Wix and/or authorized payment providers.

Controlled Chaos generally does not receive or store your full payment-card number or card security code.

E. Communications

We may collect information contained in communications with us, including:

• customer-support requests;

• cancellation requests;

• privacy requests;

• emails;

• reviews;

• testimonials;

• surveys;

• feedback;

• social-media communications directed to us; and

• other information you voluntarily provide.

F. Marketing and Promotional Information

If you subscribe to or interact with marketing communications, promotions, referral programs, affiliate programs, or similar programs, we may collect:

• email address;

• telephone number where applicable;

• marketing preferences;

• subscription or consent status;

• unsubscribe status;

• promotional-code use; and

• information reasonably necessary to administer the applicable program.

G. Device, Website, and Usage Information

When you use the Services, we and our service providers may automatically collect information such as:

• IP address;

• browser type;

• device type;

• operating system;

• approximate location derived from IP address;

• pages viewed;

• referring URLs;

• dates and times of visits;

• website interactions;

• cart activity;

• session information;

• cookie or browser identifiers; and

• technical and security information.

2. SOURCES OF INFORMATION

We may obtain personal information:

• directly from you;

• automatically when you interact with the Services;

• from Wix and other providers that support our website and e-commerce operations;

• from payment providers;

• from shipping or fulfillment providers;

• from marketing or communication providers where used;

• from referral, influencer, affiliate, or promotional programs; and

• from other sources where permitted by law.

3. HOW WE USE PERSONAL INFORMATION

We may use personal information to:

• operate the Services;

• create and maintain customer accounts;

• create and maintain athlete profiles;

• generate personalized formulas;

• display, save, retrieve, modify, or regenerate formulas;

• associate the correct formula with the correct customer or session;

• process orders;

• manufacture personalized products;

• verify product and flavor selections;

• process payments;

• ship and fulfill orders;

• provide order and shipping communications;

• process cancellations, replacements, and refunds;

• provide customer support;

• administer discount, referral, affiliate, influencer, and partner programs;

• calculate or attribute commissions without unnecessarily disclosing customer information to partners;

• send marketing communications where permitted;

• understand use of the Services;

• maintain website functionality;

• improve our products and Services;

• troubleshoot technical issues;

• prevent fraud and abuse;

• protect accounts and systems;

• maintain accounting, tax, and transaction records;

• comply with legal requirements;

• enforce our Terms of Service;

• protect Controlled Chaos, our customers, and others; and

• establish, exercise, or defend legal claims.

We may use aggregated or deidentified information for legitimate business purposes where that information cannot reasonably be linked to an identifiable person.

4. AUTOMATED PRODUCT PERSONALIZATION

Controlled Chaos uses automated and software-assisted systems to process the training and product-preference information you submit and generate a personalized pre-workout formula.

The system may process information such as training preferences, stimulant preferences, workout characteristics, and desired product characteristics.

Formula-generation information may be transmitted between our website, Wix infrastructure, and cloud-hosted infrastructure used to operate our generation system.

Generated information may be stored with a session, account, formula record, or order to:

• provide the formula you requested;

• allow formula retrieval;

• support manufacturing;

• bind the correct formula to the correct purchase;

• fulfill orders;

• provide customer support; and

• maintain the integrity of our order and fulfillment process.

Automated product personalization is not intended to make medical diagnoses or medical-treatment decisions.

5. HOW WE DISCLOSE PERSONAL INFORMATION

We may disclose personal information to service providers and other recipients described below.

A. Wix and E-Commerce Infrastructure

We use Wix to operate portions of our:

• website;

• customer accounts;

• databases;

• cart;

• checkout;

• store;

• orders; and

• e-commerce infrastructure.

Information necessary to operate those functions may be processed through Wix.

B. Payment Providers

Payment processors, financial institutions, and fraud-prevention providers may receive information necessary to:

• authorize transactions;

• process payments;

• issue refunds;

• prevent fraud; and

• comply with financial laws.

C. Shipping and Fulfillment Providers

Shipping carriers and fulfillment-related providers may receive information such as:

• name;

• shipping address;

• contact information where necessary;

• order information; and

• information needed to complete delivery.

We do not intentionally provide detailed formula-questionnaire responses to shipping carriers merely because they are delivering an order.

D. Cloud and Technology Providers

We may use cloud hosting, computing, security, software, database, infrastructure, and technical-service providers to operate the Services and our formula-generation system.

This may include cloud computing infrastructure used to process formula-generation requests.

E. Communication and Marketing Providers

If enabled, we may use providers to send:

• order communications;

• customer-support communications;

• marketing emails;

• SMS communications; or

• other messages.

Such providers receive the information reasonably necessary to provide those services.

F. Analytics and Website Providers

We and our service providers may use website measurement, security, performance, or analytics tools to understand and operate the Services.

If we materially change our practices to use personal information for targeted advertising or other purposes requiring additional notice or opt-out rights, we will update our disclosures and provide legally required choices.

G. Referral, Affiliate, Influencer, and Partner Programs

Where a customer uses a partner or promotional code, we may attribute the resulting sale or commission to the applicable partner.

Partners generally receive only the information reasonably necessary to administer their relationship with Controlled Chaos, such as:

• qualifying sale information;

• commission calculations;

• aggregate performance information; and

• payment-related information concerning their own compensation.

We do not provide partners with customer formula responses, shipping addresses, medical information, or other unnecessary customer personal information merely because a partner code was used.

H. Professional Advisors

We may disclose information where reasonably necessary to:

• attorneys;

• accountants;

• insurers;

• consultants; and

• other professional advisors.

I. Legal, Security, and Compliance Disclosures

We may disclose information where reasonably necessary to:

• comply with applicable law;

• respond to lawful legal process;

• cooperate with governmental or regulatory requests;

• investigate fraud;

• protect the security of the Services;

• protect the rights, property, or safety of Controlled Chaos or others; or

• establish, exercise, or defend legal claims.

J. Business Transactions

If Controlled Chaos is involved in a merger, acquisition, financing, restructuring, bankruptcy, sale of assets, or similar transaction, information may be transferred as part of that transaction subject to applicable law.

K. At Your Direction

We may disclose information when you request, direct, or consent to the disclosure.

6. SALE AND SHARING OF PERSONAL INFORMATION

Controlled Chaos does not knowingly sell personal information for monetary consideration.

Controlled Chaos does not knowingly sell consumer health data.

Controlled Chaos does not provide personalized formula-questionnaire information to influencers or partners for their independent advertising purposes merely because a customer used that person's code.

Some state privacy laws define the terms “sale,” “sharing,” or “targeted advertising” broadly enough to include certain advertising or analytics technology arrangements even where no money is exchanged.

If Controlled Chaos engages in activity that qualifies as a sale, sharing, or targeted advertising under an applicable law, we will provide the disclosures and opt-out mechanisms required by that law.

7. CONSUMER HEALTH DATA

Certain training, recovery, stimulant-preference, performance, or formula-generation information may qualify as “consumer health data” under laws in certain states even though Controlled Chaos is not a healthcare provider.

Where applicable, our Consumer Health Data Privacy Policy provides additional information regarding:

• categories of consumer health data collected;

• purposes for which it is collected;

• sources;

• categories of information shared;

• recipients;

• applicable consumer rights; and

• methods for exercising those rights.

Controlled Chaos does not sell consumer health data.

8. COOKIES AND SIMILAR TECHNOLOGIES

Our website and service providers may use:

• cookies;

• local storage;

• session storage;

• pixels;

• device identifiers; and

• similar technologies.

These technologies may be used to:

• operate the website;

• maintain sessions;

• authenticate accounts;

• operate the cart and checkout;

• remember preferences;

• provide security;

• prevent fraud;

• measure website functionality;

• understand website usage; and

• support marketing or analytics if such functionality is enabled.

You can control many cookies through your browser settings.

Blocking necessary cookies may prevent portions of the Services from working correctly.

If we provide a site-based cookie preference tool in the future, you may also be able to manage certain preferences through that tool.

9. ONLINE TRACKING AND DO NOT TRACK DISCLOSURE

Some web browsers offer a “Do Not Track” or similar setting.

Because there is not a single universally adopted technical standard governing all Do Not Track signals, the Services do not currently promise to respond to every browser-level Do Not Track signal in a particular manner.

Controlled Chaos does not currently intentionally operate custom advertising pixels through the Services for the purpose of independently tracking identified customers across unrelated third-party websites.

Third-party platforms or service providers may nevertheless collect information through their own technologies as described in their own privacy policies.

Where applicable law requires recognition of a legally recognized universal opt-out mechanism, we will process qualifying signals as required by applicable law.

10. MARKETING EMAIL

If you choose to receive marketing email from Controlled Chaos, we may send information concerning:

• products;

• promotions;

• discounts;

• company news;

• partnerships; or

• other Controlled Chaos marketing.

You may unsubscribe using the unsubscribe method contained in the communication or by contacting us.

We may continue to send non-promotional communications reasonably necessary to:

• complete a transaction;

• provide order or shipping updates;

• respond to customer-support requests;

• communicate important account information; or

• provide legally required notices.

11. SMS AND TEXT MESSAGES

If Controlled Chaos introduces promotional SMS or text-message marketing, promotional texts will be subject to a separate consent process where required by law.

Consent to receive marketing text messages will not be a condition of purchasing a product unless legally permitted and expressly disclosed.

Instructions for stopping promotional text messages will be provided as required by applicable law.

12. DATA RETENTION

We retain personal information for as long as reasonably necessary for the purposes for which it was collected, including to:

• provide the Services;

• maintain accounts;

• maintain formula and order records;

• manufacture and fulfill products;

• provide customer support;

• maintain accounting and tax records;

• administer partner commissions;

• prevent fraud;

• resolve disputes;

• enforce agreements;

• respond to legal claims; and

• comply with applicable law.

Different categories of information may be retained for different periods.

Information may be retained longer where reasonably necessary for legal obligations, litigation holds, fraud prevention, product-safety matters, or secure backup systems, subject to applicable law.

13. DATA SECURITY

Controlled Chaos uses reasonable administrative, technical, and organizational safeguards designed to protect personal information.

No website, database, network, or electronic transmission system can be guaranteed to be completely secure.

Accordingly, we cannot guarantee absolute security.

14. YOUR PRIVACY RIGHTS

Depending on where you reside and whether the applicable law applies to Controlled Chaos, you may have rights concerning your personal information.

These may include rights to:

• confirm whether we process personal information about you;

• access personal information;

• correct inaccurate information;

• request deletion;

• obtain a portable copy of certain information;

• opt out of certain sales or sharing;

• opt out of certain targeted advertising;

• withdraw consent where processing is based on consent; and

• appeal certain privacy-request decisions.

These rights may be subject to exceptions and applicability thresholds.

To submit a privacy request, email:

Controlledchaospreworkout@gmail.com

and state that you are submitting a privacy request.

We may take reasonable steps to verify your identity before completing a request.

We will not unlawfully discriminate against you for exercising an applicable privacy right.

Where an applicable law permits an authorized agent to submit a request, we may require reasonable proof of the agent's authority.

15. CALIFORNIA PRIVACY AND TRACKING DISCLOSURES

California residents may have additional privacy rights where applicable law applies to Controlled Chaos.

This Privacy Policy describes:

• categories of personal information we collect;

• purposes for collection;

• categories of recipients;

• our online-tracking practices;

• how we handle privacy requests; and

• how this policy may be changed.

As described above, the Services do not currently promise to respond to every browser Do Not Track signal because there is no single universally adopted DNT standard.

If California law or another applicable law requires us to recognize a legally defined opt-out mechanism, we will honor it as required.

16. OTHER STATE PRIVACY RIGHTS

Residents of Colorado, Connecticut, Virginia, Texas, Oregon, Montana, Delaware, New Jersey, and other states may have additional privacy rights where the applicable privacy law applies to Controlled Chaos.

Many comprehensive state privacy statutes contain revenue, data-volume, business-size, or other applicability thresholds.

Accordingly, not every statutory right necessarily applies to Controlled Chaos at every stage of its business.

Where a law applies, Controlled Chaos will provide the rights and procedures required by that law.

17. CHILDREN AND MINORS

Controlled Chaos's Services are not directed to children under 13.

We do not knowingly collect personal information online from children under 13 in violation of the Children's Online Privacy Protection Act or other applicable law.

Certain products may also be subject to age restrictions imposed by state or local law.

Where applicable law prohibits sale or delivery of a product to a person under a specified age, Controlled Chaos may restrict purchases or delivery accordingly.

If you believe a child has provided personal information to us in violation of applicable law, contact:

Controlledchaospreworkout@gmail.com

18. UNITED STATES OPERATIONS

Controlled Chaos currently provides its direct-to-consumer shipping services within the United States where shipment is permitted.

Our Services are operated from the United States.

If you access the Services from another country, you understand that information may be processed in the United States.

19. THIRD-PARTY LINKS AND SERVICES

The Services may link to or interact with third-party websites, payment providers, social-media platforms, carriers, or other services.

Controlled Chaos is not responsible for the privacy practices of independent third parties.

We encourage you to review their privacy policies when interacting with them.

20. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time.

When we do, we will update the “Last Updated” date.

Where required by law, we will provide additional notice or obtain consent before making a material change to how previously collected information is used.

21. CONTACT US

Questions or requests concerning this Privacy Policy may be directed to:

Controlled Chaos LLC
Colorado, United States
Email: Controlledchaospreworkout@gmail.com
Website: controlledchaospreworkout.com