Privacy Policy
Last updated June 1, 2026
This Privacy Policy (the "Policy") defines the practices of "Testlibrary" (the "Platform Operator," "We," "Our" or "Us") regarding the collection, use, disclosure, and protection of your personal information as a customer ("You") on this website www.testlibrary.com (the "Website"). It applies whenever You visit the Website, make a purchase, or otherwise interact with any of Our services (collectively, the "Services"). The Platform Operator provides a platform for You to purchase products from Aura Health LLC, private limited liability company incorporated under laws of the United States of America, company address: 30 N Gould ST STE R, Sheridan, Wyoming 82801, United States of America (the "Seller"). When You complete a transaction on the Website, you enter into a binding agreement with the Platform Operator for the provision of the Services. Your use of the Services is also governed by Our Terms and Conditions (the "Terms"), and by using the Services, You confirm Your agreement to both the Policy and the Terms.
We are committed to protecting Your privacy and handling Your personal data in a transparent and secure manner, in full compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable national data protection laws. In addition, where applicable, We process personal information of users located in the United States in accordance with applicable U.S. federal and state privacy laws, including, where applicable, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).
Please review the Terms and the Policy carefully before You proceed to use the Website or make a purchase.
1. Personal Information We Collect
1.1 In the Policy, "personal information" refers to any data that identifies or can be reasonably linked to You. To provide the Services and fulfill Our contractual obligations, We collect and process the following categories of personal information:
1.1.1 Your full name, shipping and billing addresses, telephone number, and email address. You are responsible for ensuring that the personal information You provide to Us is accurate, complete, and kept up to date. We are not responsible for delays, failed deliveries, or other issues resulting from inaccurate, incomplete, or outdated information provided by You. YOU ARE SOLELY RESPONSIBLE for maintaining the security of Your device, network connection, and any account credentials. We shall not be liable for any personal data breach, unauthorized access, or loss of data resulting from Your failure to secure Your device, use of unsecured or public Wi-Fi networks, malware infections, or sharing of login details with third parties.
1.1.2 Information required to process Your payments, such as credit or debit card details, transaction records, and other billing information.
1.1.3 A history of Your transactions, including products You have viewed, purchased, returned, or exchanged.
1.1.4 Records of Your correspondence with Us, including customer support inquiries and feedback You provide.
1.1.5 Information about the device, browser, and network connection You use to access the Services, including Your IP address and other unique identifiers.
1.1.6 Information about how You navigate and engage with the Services, such as the pages You visit and the features You use.
1.2 We may obtain personal information from various sources, including directly from You, automatically via cookies and similar tracking technologies during Your navigation of the Website, and from third-party service providers or partners integral to the operation of Our business.
1.3 For users located in the United States, the categories of personal information We collect depend on how You interact with the Website and the Services. In general, and within the last 12 months, We may have collected the following categories of personal information, as defined under applicable the United States privacy laws, including the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):
1.3.1 Identifiers, such as Your name, postal address, email address, telephone number, IP address, and other similar identifiers;
1.3.2 Commercial information, including records of Products viewed, purchased, returned, or exchanged;
1.3.3 Internet or other electronic network activity information, such as information regarding Your interaction with the Website, browsing history on the Website, and device-related data;
1.3.4 Geolocation data, such as general location information derived from Your IP address;
1.3.5 Customer service and communications information, including records of correspondence, inquiries, and feedback You submit to Us;
1.3.6 Payment and transaction information, processed through secure payment service providers.
1.4 We collect these categories of personal information for the business and commercial purposes described in the "How We Use Your Personal Information" section of the Policy, including to operate the Website, provide the Services, process transactions, communicate with You, ensure security and prevent fraud, and comply with legal obligations.
1.5 We do not knowingly collect or process sensitive personal information for the purpose of inferring characteristics about You, as defined under applicable the United States privacy laws.
2. How We Use Your Personal Information
We process Your personal information for several key purposes, depending on how You interact with the Services:
2.1 To provide, customize, and improve the Services, We use Your information to fulfill Our contract with You. This includes processing Your payments, completing Your orders by sharing details with the Seller for shipping, and handling any returns, for which We use Your identity and contact data, financial and payment data, and commercial and activity data. This processing is based on contractual necessity (Art. 6(1)(b) GDPR), and data related to transactions is retained for 10 years. We also use Your data, including technical data and interaction data, to personalize Your experience, save Your preferences, and suggest products based on Your activity. This is based on Our legitimate interests (Art. 6(1)(f) GDPR) to improve and personalize the Services, and this data is retained for up to 24 months after Your last interaction with the Website, unless a shorter retention period is required by applicable law or You withdraw Your consent earlier.
2.2 Data processed for direct marketing communications (such as email or SMS marketing) is retained until You withdraw Your consent or for 5 years from Your last interaction with Us, whichever occurs first. If You opt out of marketing, We may retain limited information necessary to record and honor Your opt-out preference so that We do not send You marketing communications in the future, in accordance with Our legal obligations and legitimate interests.
2.3 For risk management, and to protect the Website and Our customers, We use Your identity and contact data, financial and payment data, technical data, and interaction data to verify transactions, monitor potentially fraudulent or illegal activity, and ensure the security of Your payments. This processing is based on Our legitimate interests (Art. 6(1)(f) GDPR) to maintain a secure platform. Where permitted by law, We may delay, suspend, or refuse to process transactions where We reasonably suspect fraud, unauthorized activity, or violations of the Terms, and We may request additional information to verify Your identity or payment method. Data used for these purposes is retained for 1 month after Your last use of the Website, while data related to any specific security incidents may be retained for up to 10 years.
2.4 For customer service and relationship management, We process Your identity and contact data, communication data, and (where relevant) transaction data to provide customer support, respond to Your questions, and keep You informed about Your orders. Where the request relates to an order or the performance of the Services, the legal basis is contractual necessity (Art. 6(1)(b) GDPR). For general inquiries and support requests initiated by You, We rely on Our legitimate interests (Art. 6(1)(f) GDPR) to respond, maintain service quality, and manage customer relationships. Where required by law, We will obtain consent for specific activities (for example, direct marketing communications).
2.5 For legal compliance and rights protection, We may process Your information to comply with applicable laws, respond to lawful requests from government authorities, and to enforce the Terms or protect Our legal rights. This can involve any information relevant to the matter, which may include all categories of data We collect. Our legal basis is a legal obligation (Art. 6(1)(c) GDPR) when complying with the law and Our legitimate interests (Art. 6(1)(f) GDPR) when protecting Our rights. Data is retained for the duration required by law (such as 10 years for financial records) or for the duration of any legal proceedings and a subsequent period to account for statutes of limitation.
2.6 For users located in the United States, and where required under applicable the United States federal and state privacy laws (including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA)), We process personal information for the following "business purposes" and "commercial purposes" (as such terms may be defined by applicable law):
2.6.1 Providing and operating the Services, including processing orders and payments, fulfilling transactions, providing customer support, and communicating with You;
2.6.2 Security and fraud prevention, including monitoring for unauthorized activity, protecting the integrity of the Website and payment processes, and enforcing Our policies;
2.6.3 Debugging, quality assurance, and internal analytics, including maintaining and improving the Website, troubleshooting issues, and understanding how users interact with the Services;
2.6.4 Personalization and advertising, including presenting content and offers that may be relevant to Your interests and measuring the effectiveness of marketing campaigns;
2.6.5 Legal compliance, including responding to lawful requests and meeting legal and regulatory obligations.
2.7 Under certain the United States state privacy laws, disclosures of personal information to certain third parties for targeted advertising may be considered "sharing" (and, in some contexts, "selling") of personal information, even when no money is exchanged. We provide You with the ability to exercise any applicable right to opt out of the sale and/or sharing of personal information for targeted advertising purposes, as described in the "Your Rights and Choices" section of the Policy.
2.8 We do not sell personal information for monetary consideration. However, We may share personal information with advertising and analytics partners in a manner that may be considered "sharing" for targeted advertising under certain the United States state laws.
2.9 Where applicable the United States law defines certain data as "sensitive personal information," We do not use or disclose sensitive personal information for the purpose of inferring characteristics about You.
2.10 We may use limited automated processes (for example, to detect fraud or protect the security of transactions). We do not use automated decision-making that produces legal or similarly significant effects on You solely by automated means, unless permitted by law and with appropriate safeguards.
3. How We Share Your Personal Information
3.1 We share personal information only as necessary to operate the Website and provide the Services, and in accordance with applicable law and the principle of data minimization. Depending on Your place of residence and how You interact with the Services, disclosures may vary.
3.2 When You place an order through the Website, We share only the personal information necessary for order fulfillment (such as Your name, contact details, and shipping information) with the Seller. The Seller processes such personal information as an independent data controller, in accordance with its own privacy practices and applicable law. While We take reasonable steps to verify the Seller's compliance with applicable data protection laws, THE PLATFORM OPERATOR ASSUMES NO LIABILITY for any data breaches, misuse, or mishandling of personal data occurring within the Seller's systems or under the Seller's control after the data has been securely transmitted. By contrast, third-party service providers that process personal information on Our behalf (including hosting, payment, customer support, and analytics providers) act as data processors and are subject to contractual data protection obligations, including data processing agreements where required.
3.3 We share necessary payment and transaction information with payment service providers to authorize and process Your payments securely.
3.4 We use trusted vendors to perform services on Our behalf, such as hosting and IT services, analytics, customer support tools, marketing service providers, and fraud prevention. These providers are permitted to process personal information only as needed to perform their services for Us and are subject to contractual obligations to protect the confidentiality and security of personal information (including data processing agreements where required).
3.5 Where permitted by law, We may disclose information to analytics and advertising partners to support the Website's analytics, campaign measurement, and interest-based advertising. Under certain the United States state privacy laws, such disclosures may constitute "sharing" for targeted advertising purposes, even where no money is exchanged. We provide opt-out mechanisms as described in the "Your Rights and Choices" section of the Policy.
3.6 If We are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of Our assets, personal information may be disclosed or transferred as part of that transaction, subject to appropriate safeguards.
3.7 We may disclose personal information to comply with applicable law, respond to lawful requests, enforce the Terms, or protect the rights, property, or safety of the Platform Operator, Our users, or others.
3.8 Within the last 12 months, We may have disclosed personal information to the following categories of recipients: the Seller and fulfillment partners; payment processors and financial service providers; hosting, cloud infrastructure, and IT service providers; analytics and performance measurement providers; advertising and marketing partners; customer support and communication service providers; and legal, compliance, and fraud prevention partners.
3.9 For the avoidance of doubt, the Platform Operator and the Seller do not act as joint controllers within the meaning of Article 26 of the GDPR. Each party independently determines the purposes and means of processing personal data within the scope of its own activities. The Platform Operator processes personal data solely for the purposes of operating the Website, facilitating transactions, and providing the Services, while the Seller processes personal data it receives exclusively for product fulfillment, delivery, after-sales support, and compliance with its own legal obligations. Each party is independently responsible for complying with applicable data protection laws and for responding to data subject requests relating to the processing activities under its respective control.
4. Your Rights and Choices
4.1 Pursuant to applicable data protection laws, You, as the data subject, are entitled to exercise the following rights with respect to Your personal data:
4.1.1 You have the right to get a copy of the personal information We hold about You. This allows You to check what data We have and make sure We are processing it legally. You can request this information to understand exactly what We have collected, such as Your name, email, purchase history, or any other data You've provided.
4.1.2 If You notice that any of the personal data We hold about You is wrong or missing, You have the right to ask Us to correct it. For example, if Your address is spelled incorrectly or Your phone number has changed, You can request that We update Our records.
4.1.3 You are allowed to ask Us to delete Your personal data. This right applies in specific situations, such as when the data is no longer necessary for the purpose it was collected, or when You withdraw Your consent and there is no other legal basis for Us to process it.
4.1.4 You have the right to limit how We use Your data without necessarily deleting it. This right can be exercised when the data's accuracy is contested, or when the processing is unlawful, but You do not want the data to be deleted. We can still store Your data but cannot use it for other purposes.
4.1.5 You can request to receive Your personal data in a structured, commonly used, and machine-readable format, making it simple to move Your data from one service to another.
4.1.6 You have the right to object to Our processing of Your personal data, especially when We are processing it based on Our legitimate interests. If You object, We must stop processing Your data unless We can demonstrate compelling legitimate grounds that override Your rights, or for the establishment, exercise, or defense of legal claims. This right also allows You to object to Your data being used for direct marketing.
4.2 To submit a request to exercise any of these rights, please contact Us using the details provided in the "Contact Information" section of the Policy. We may request additional information to verify Your identity before processing the request in order to protect the security of Your personal information. We may decline or limit requests where permitted by law, including where a request is manifestly unfounded, excessive, repetitive, or would adversely affect the rights and freedoms of others. Where applicable, We may charge a reasonable fee or refuse to act on a request in accordance with applicable law.
4.3 You may manage Your preferences for marketing communications at any time. All promotional emails sent by Us include an unsubscribe mechanism by which You may opt out of future correspondence. Please note that opting out of marketing communications does not affect service-related or transactional communications, such as order confirmations, shipping updates, security notifications, or other messages necessary to provide the Services.
4.4 If You are a resident of the United States, and where applicable under the United States federal and state privacy laws (including the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA)), You may have the following rights with respect to Your personal information, subject to certain limitations and exceptions:
4.4.1 Right to Know and Access – You have the right to request information about the categories and specific pieces of personal information We have collected about You, the sources of that information, the purposes for which it is used, and the categories of third parties with whom it has been disclosed.
4.4.2 Right to Delete – You have the right to request the deletion of personal information We have collected from You, subject to certain legal exceptions.
4.4.3 Right to Correct – You have the right to request the correction of inaccurate personal information maintained about You.
4.4.4 Right to Opt-Out of Sale or Sharing – You have the right to opt out of the sale and/or sharing of Your personal information for targeted advertising purposes, where such activities are considered a "sale" or "sharing" under applicable U.S. state privacy laws. You may exercise Your right to opt out of the sale or sharing of personal information by submitting a request using the contact details provided in the "Contact Information" section of the Policy, or through any other opt-out mechanisms made available on the Website in accordance with applicable law. Where required by applicable the United States state privacy laws, We also recognize opt-out preference signals sent through browser-based mechanisms, such as the Global Privacy Control (GPC), where technically feasible. Your opt-out preferences will be applied in accordance with applicable law.
4.4.5 Right to Limit Use of Sensitive Personal Information – Where applicable, You may have the right to limit the use and disclosure of sensitive personal information, as defined by law.
4.4.6 Right to Non-Discrimination – You have the right not to receive discriminatory treatment for exercising any of Your privacy rights.
4.5 To exercise any applicable the United States privacy rights, You (or Your authorized agent) may submit a verifiable consumer request by contacting Us using the contact details provided in the "Contact Information" section of the Policy. We may request additional information to verify Your identity and the validity of Your request before responding, in order to protect the security of Your personal information.
4.6 We will respond to verifiable consumer requests within the timeframes required by applicable law. If additional time is required, We will inform You of the reason and extension period as permitted by law.
4.7 Where permitted by applicable law, You may designate an authorized agent to make a request on Your behalf. We may require proof that the agent has been authorized to act on Your behalf and may still require You to verify Your identity directly with Us.
4.8 If We decline to take action on Your privacy request, You may have the right to appeal Our decision. Instructions for submitting an appeal will be provided in Our response, where required by applicable law.
5. Complaints
5.1 If You have a complaint regarding how We handle Your personal information, We encourage You to first contact Us directly using the contact details provided in the "Contact Information" section of the Policy to allow for a timely resolution. You always have the right to lodge a complaint with Your local data protection authority. Additionally, depending on Your jurisdiction, You may have the right to appeal Our decision regarding Your complaint by contacting Us.
5.2 If You are located in the United States and have a concern or complaint regarding Our handling of Your personal information, We encourage You to first contact Us using the contact details provided in the "Contact Information" section of the Policy so that We may attempt to resolve the matter promptly.
5.3 Where required by applicable the United States state privacy laws, You may have the right to appeal a decision We have made in response to Your privacy request. Information on how to submit such an appeal will be provided in Our response to You.
5.4 Nothing in the Policy is intended to limit or replace any dispute resolution mechanisms set forth in the Terms. For users located in the United States, disputes relating to the use of the Website or the Services, including disputes relating to privacy matters, may be subject to binding arbitration or other dispute resolution procedures as described in the Terms, to the extent permitted by applicable law.
6. Use of Cookies and Other Tracking Technologies
6.1 The Website utilizes cookies and similar tracking technologies to enhance and personalize Your experience, analyze site performance, and for marketing purposes. A cookie is a small data file placed on Your device that allows Our servers to identify Your browser and device upon subsequent visits.
6.2 Types of Cookies We Use:
6.2.1 Strictly Necessary Cookies – these cookies are indispensable for the operation of the Website and the provision of the Services. They facilitate core functionalities such as Your authentication, session management, and secure transactions. Pursuant to applicable law, these cookies do not require Your prior consent.
6.2.2 Performance and Analytics Cookies – These cookies gather aggregated data regarding Your interaction with the Website, such as page visits and traffic sources, for the sole purpose of improving the Website's functionality. The legal basis for the deployment of these cookies is Your explicit consent.
6.2.3 Targeting and Advertising Cookies – These cookies are designed to track Your browsing activity across websites to build a profile of Your interests and display targeted advertising. Their use is subject to Your explicit prior consent.
6.3 You can manage cookie settings through Your browser settings. For further instructions, please refer to the help pages of browsers such as Chrome, Firefox, or Safari.
6.4 For users located in the United States, cookies and similar tracking technologies may be used for purposes that include operating and improving the Website, understanding how users interact with the Services, and supporting advertising and marketing activities, where permitted by applicable law.
6.5 Under certain the United States state privacy laws, the use of cookies and similar technologies for targeted advertising or cross-context behavioral advertising may be considered "sharing" of personal information, even where no monetary consideration is exchanged. Where such laws apply, You have the right to opt out of the sale or sharing of personal information through cookies or similar tracking technologies used for targeted advertising purposes.
6.6 You may manage Your cookie preferences through browser settings, device-level controls, or other tools made available on the Website. Where required by applicable law, We provide mechanisms that allow You to exercise Your right to opt out of targeted advertising and other cookie-based data processing activities.
6.7 Please note that disabling certain cookies or tracking technologies may impact the functionality, performance, or availability of certain features of the Website. WE ARE NOT RESPONSIBLE for any loss of functionality, degraded performance, or inability to access certain features of the Website or the Services resulting from Your browser, device, or cookie preference settings.
7. Security and Retention of Your Information
7.1 We have implemented and maintained appropriate technical and organizational security measures designed to safeguard Your personal data against accidental or unlawful destruction, loss, alteration, or unauthorized access. Nevertheless, no method of transmission over the Internet or method of electronic storage is completely secure. TO THE FULLEST EXTENT PERMITTED BY LAW, WE EXPRESSLY DISCLAIM LIABILITY for any unauthorized access, hacking, data loss, or other security breaches resulting from causes beyond Our reasonable control, including criminal acts of third parties, sophisticated cyber-attacks that exceed standard industry security measures, or vulnerabilities in third-party software or infrastructure.
7.2 We shall retain Your personal data only for the duration necessary to fulfill the purposes for which it was originally collected, including for the purposes of satisfying any legal, accounting, or reporting requirements or to resolve disputes. We may retain personal information for longer periods where necessary to comply with legal obligations, respond to claims, resolve disputes, enforce Our agreements, or establish, exercise, or defend legal claims, where permitted by applicable law.
7.3 For users located in the United States, We retain personal information for as long as reasonably necessary to fulfill the purposes for which it was collected, including to provide the Services, comply with legal obligations, resolve disputes, enforce Our agreements, and protect Our rights. Retention periods may vary depending on the nature of the information, the context in which it was collected, and applicable legal requirements.
7.4 We implement reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, or alteration, taking into account the nature of the data and the purposes for which it is processed.
8. Our Data Policy on Children
8.1 The Website and the Services are not directed to children under the age of eighteen (18), and We do not knowingly collect personal information from children under the age of eighteen (18) without the involvement and verifiable consent of a parent or legal guardian, where such consent is required under applicable law.
8.2 In certain jurisdictions, and as reflected in the Terms, minors may access or use the Website only with the involvement and consent of a parent or legal guardian. Parents or legal guardians are responsible for supervising the minor's use of the Website and for any personal information provided in connection with such use.
8.3 If We become aware that personal information has been collected from a minor without the required parental or guardian consent, We will take reasonable steps to delete such information or otherwise address it in accordance with applicable data protection laws.
8.4 Parents or legal guardians who believe that a minor has provided personal information through the Website without appropriate consent may contact Us using the contact details provided in the Contact Information section of the Policy.
9. Third-Party Websites
9.1 The Website may provide links to external websites for Your convenience. We do not endorse, and assume no liability for, the content, security, or privacy practices of such third-party sites. YOUR INTERACTIONS WITH ANY THIRD-PARTY WEBSITE ARE SOLELY BETWEEN YOU AND THAT THIRD PARTY, and You access such websites at Your own risk. Accessing any third-party website is done at Your own risk, and We encourage You to review their respective policies. This section applies equally to users located in the European Union, the United States, and other jurisdictions. We encourage You to review the privacy policies of any third-party websites You choose to access, as their data processing practices may differ from those described in the Policy.
10. Amendments to The Policy
10.1 We reserve the right to amend the Policy at any time to reflect changes in Our practices or for other operational, legal, or regulatory reasons. The revised Policy will be posted on this page along with the updated effective date. Your continued use of the Website following the posting of changes constitutes Your acceptance of such revised the Policy.
10.2 Where required by applicable the United States law, We will provide additional notice of material changes to the Policy in a manner consistent with legal requirements. The effective date at the top of the Policy indicates when it was last updated.
11. Contact Information
For questions, concerns, or claims regarding the Policy or Your data, please contact the Platform Operator:
Aura Health LLC 30 N Gould ST STE R, Sheridan, Wyoming 82801, United States of America
Support email: [email protected] Support number: +1 (507) 853-1222
This Contact Information applies to all privacy-related inquiries, including requests to exercise data protection or privacy rights under the GDPR, the CCPA/CPRA, and other applicable laws. When contacting Us, please specify that Your request relates to personal data or privacy so that We may respond appropriately and within the timeframes required by law.