Privacy Policy

SistaShop.com is operated by Sistapedia LLC, a Delaware limited liability company, file number 7265569.

In this Privacy Policy, “SistaShop”, “we”, “us” and “our” refer to Sistapedia LLC.

This policy applies only to the temporary SistaShop.com website available before SistaShop Activation opens in October 2026.

SistaShop Activation will introduce verified onboarding, subscriptions, live public profiles, Video Bios, sharing, invitations, SistaFam® subscriber relationships and activation progress across web, iOS and Android. This policy will be replaced before those services become available to reflect the information, providers and functionality actually deployed. It will be reviewed again before full commerce launches in March 2027.

This policy does not apply to Sistapedia.com, Sistapedia Pty Ltd, SistaShop.com.au or any other website or service operated by a different legal entity unless that website or service expressly links to this policy.

Information you provide

If you contact us, submit an enquiry or use a form made available on the temporary website, we may collect:

• your name;
• your email address or other contact details;
• your organisation and role, if provided;
• the subject and content of your enquiry;
• your stated interest in SistaShop; and
• any other information you choose to provide.

Please do not send identification documents, financial information, medical records, health information or other sensitive information through the temporary website or an ordinary email.

Technical information

When you access SistaShop.com, the website and its service providers may automatically process limited technical information needed to deliver, operate, secure and troubleshoot the website. This may include:

• IP address;
• approximate location derived from an IP address;
• browser and device type;
• operating system;
• referring and requested pages;
• date and time of access;
• session, security and diagnostic information; and
• website performance and error logs.

We do not use this technical information to make decisions about your health, eligibility, professional status or access to future SistaShop services.

The temporary website is hosted and delivered using Lovable. Lovable and its infrastructure providers may use cookies, local storage and similar technologies that are necessary to deliver the website, maintain security, route sessions, remember technical preferences and diagnose errors.

Some necessary technologies expire when you close your browser. Others may remain for the period required to preserve a preference, protect the website or investigate a technical or security incident.

SistaShop does not currently use the temporary website to conduct cross-site behavioural advertising. We do not intentionally place third-party advertising pixels on the temporary website.

You can control or delete cookies and local storage through your browser settings. Blocking necessary technologies may prevent parts of the website from functioning correctly.

If optional analytics, session recording, advertising technology or additional tracking is introduced, this policy and the website’s consent controls will be updated before that processing begins where required by law.

We use personal information collected through the temporary website to:

• operate, secure and maintain SistaShop.com;
• respond to enquiries and requested communications;
• record and administer expressions of interest;
• provide information requested by you;
• diagnose errors and protect against misuse, fraud or security threats;
• maintain appropriate business and compliance records;
• establish, exercise or defend legal rights; and
• comply with applicable legal obligations.

We will not treat acceptance of this Privacy Policy as consent to identity verification, biometric processing, health-data processing, marketing or any future SistaShop service. Separate information and consent will be provided where required before those activities begin.

Where applicable law requires a legal basis for processing, we rely on the basis appropriate to the activity, including your request or consent, steps taken at your request, our legitimate interests in operating and securing the website, and compliance with legal obligations.

SistaShop concerns women’s reproductive health, but the temporary website is not a medical-record, clinical-consultation or identity-verification service.

We do not ask visitors to submit diagnoses, treatment information, prescriptions, medical records, identification documents, biometric information or other sensitive information through the temporary website.

Please do not include sensitive information in a general enquiry. If you provide such information without being asked, we will limit its use to appropriately handling the communication and will delete or de-identify it when it is no longer required, subject to applicable legal obligations.

Visiting pages about particular reproductive-health subjects may reveal or permit inferences about a person’s interests. We therefore treat website activity associated with identifiable visitors as personal information where applicable law requires.

Personal information may be disclosed to:

• Lovable and its infrastructure providers, which host, deliver, secure and support the temporary website;
• communications and email providers, where needed to deliver an enquiry or our response;
• authorised SistaShop personnel and contractors, where access is required to operate the website or respond to your request;
• professional advisers, including legal, accounting, security and compliance advisers, where reasonably necessary; and
• courts, regulators, law-enforcement bodies or other authorised recipients, where disclosure is required or permitted by law.

Recipients must only receive information relevant to their function. We do not disclose temporary-site enquiries to future SistaShop participants for their independent marketing.

Sumsub identity and business verification and Stripe payment processing are not active functions of the temporary website. Their processing will be addressed in an updated policy and collection-specific notices before those services become available through SistaShop.

SistaShop does not sell personal information collected through the temporary website.

We do not use or disclose personal information collected through the temporary website for cross-context behavioural advertising or targeted advertising based on activity across unrelated websites or services.

We may respond to an enquiry or send information that you expressly request. If we later offer optional marketing communications, those communications will provide an unsubscribe method, and any consent required by law will be obtained before they are sent.

The temporary SistaShop website is hosted and delivered using Lovable. Lovable is established in Sweden and states that it and its service providers process personal information in several countries, including the United States.

Technical information generated when you visit SistaShop.com may therefore be stored in, accessed from or otherwise processed outside your country of residence, including in Sweden and the United States. Lovable may use additional infrastructure, security and technical service providers in other countries.

We do not represent that the temporary website is hosted exclusively in Australia, the United States or any other single country.

Where personal information is processed internationally, we take reasonable steps appropriate to the circumstances to use reputable providers and appropriate contractual, privacy, confidentiality and security protections. Lovable states that it uses recognised transfer mechanisms where applicable, including the European Commission’s Standard Contractual Clauses and relevant UK and Swiss safeguards.

Privacy laws and access rights may differ between countries. Overseas authorities may be able to access information where permitted by their local laws.

The international-processing section will be updated before Deliverable B to identify the production infrastructure, service providers, access locations and safeguards applicable to the deployed SistaShop services.

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including responding to an enquiry, maintaining appropriate business records, protecting the website, resolving a dispute or complying with legal obligations.

Enquiry records are reviewed and deleted or de-identified when they are no longer required for the enquiry, an ongoing business relationship or an applicable legal obligation.

Technical, security and diagnostic records are retained according to the operational and security requirements of SistaShop and the relevant service provider.

Deletion may not immediately remove information from secured backups. Backup information will remain protected and will be deleted or overwritten according to the applicable backup cycle unless longer retention is legally required.

We use reasonable administrative, technical and organisational safeguards appropriate to the temporary website and the information it handles. These include controlled access, secure website connections, service-provider access controls and measures intended to prevent unauthorised access, disclosure, alteration or loss.

No internet transmission, website or storage system can be guaranteed to be completely secure. Please do not submit confidential, identification, financial, medical or other sensitive information through a general website enquiry.

If you believe information submitted to SistaShop has been compromised, contact us promptly at hello@sistashop.com.

Depending on the law applicable to you and our processing, you may have the right to:

• request access to personal information we hold about you;
• request correction of inaccurate or incomplete information;
• request deletion of information;
• object to or restrict certain processing;
• withdraw consent for future processing;
• receive certain information in a portable form;
• opt out of applicable sale, sharing or targeted advertising; and
• complain about how we have handled your information.

To make a request, email hello@sistashop.com with the subject line Privacy Request. Describe the information or interaction concerned and the action requested.

Do not attach identification documents to an ordinary email. If identity verification is reasonably necessary, we will explain an appropriate method.

We may need to verify your identity and the authority of anyone acting for you. We will respond within the period required by applicable law and explain any lawful limitation or refusal.

Australian users may raise an applicable privacy complaint with the Office of the Australian Information Commissioner after first giving us a reasonable opportunity to respond. United States residents may also have rights under applicable state privacy laws and may contact the relevant state regulator or Attorney General.

SistaShop is not directed to children under 16.

You must be at least 16 years old to submit personal information, join a waitlist, create an account or use an interactive SistaShop service.

Visitors under 16 must not provide personal information through the temporary website, including through contact forms or email. SistaShop does not knowingly request identification documents, verification information, health information or payment information from children under 16.

The website and its providers may process limited technical information automatically when any person accesses a public webpage. If we become aware that other personal information has been submitted by a child under 16, we will investigate and delete or de-identify it where required, unless retention is legally necessary.

People aged 16 or 17 may use SistaShop only where permitted by applicable law and, where required, with the consent of a parent or legal guardian. Particular products, professional services, appointments, transactions or content may be restricted to people aged 18 or older or subject to higher age limits, prescriptions, professional assessment or jurisdiction-specific eligibility rules. Meeting SistaShop’s general minimum age does not override those restrictions.

A parent or legal guardian who believes that a child under 16 has provided personal information to SistaShop may contact hello@sistashop.com.

We may update this policy when the website, our providers, applicable laws or our information-handling practices change.

The effective date at the beginning of the policy identifies the current version. Where a change materially affects how personal information is handled, we will provide additional notice or obtain consent where required.

This temporary policy must be reviewed and replaced before Deliverable B processing begins. It must also be updated before full commerce launches in March 2027 to reflect the final production services and data flows.

Questions, privacy requests and complaints may be sent to: