We collect the least we can get away with, we don't sell it, and we'd rather over-explain than leave you guessing.
Last updated: July 11, 2026
We collect the minimum we need. To run a store we need to know who's ordering, where to ship, and how to charge you. We ask for that and not much else. We don't sell your personal information, and we don't buy lists of strangers to spam.
Information you give us. When you place an order or sign up for the newsletter, you give us things like your name, email, shipping and billing address, and phone number. Payment card details go straight to our payment processor — we never see or store your full card number.
Information collected automatically. Like most sites, we log basic technical data: your IP address, browser and device type, the pages you visit, and how you got here. This comes from cookies and similar technologies, which you can control in your browser and through our cookie settings.
Information from partners. Our payment, shipping, email, and analytics providers may share limited information back to us — for example, whether a payment cleared or an email was delivered — so we can fulfill your order and support you.
To run the store. We use your information to process orders, take payment, ship products, handle returns and refunds, and answer your emails. This is the core of it.
To stay in touch, if you ask us to. If you sign up, we send occasional notes on dosing, sourcing, and what we're learning — no discount-spam. Every email has an unsubscribe link, and it works. We don't add you to marketing just because you bought something.
To improve and protect the site. We use aggregate analytics to understand what's working, and basic security tooling to prevent fraud and abuse. We don't use this to build a hidden profile we then sell.
To keep the store running (legitimate interest). If something breaks during checkout or a signup, our server logs a technical error report so we can fix it quickly. This runs regardless of cookie/analytics consent, since it's operational monitoring rather than marketing analytics, and it never includes your name, email, or other personal details — just what failed and why.
Service providers, only to do their job. We share data with the vendors that make the store run — our commerce platform, payment processor, shipping carriers, and email and analytics providers — and only the data each one needs. They're contractually limited to using it on our behalf.
Legal reasons. We may disclose information if the law requires it, or to protect the rights, safety, and property of our customers or ourselves. If the business is ever sold or merged, customer data may transfer as part of that — you'd be told.
Never for sale. We do not sell or rent your personal information, and we don't share it for cross-context behavioral advertising in the sense those terms are defined under laws like the CCPA/CPRA.
Access, correction, and deletion. Depending on where you live, you may have the right to see the personal information we hold about you, correct it, or ask us to delete it. Email [[email protected]] and we'll help. We won't discriminate against you for exercising these rights.
Marketing and cookies. You can unsubscribe from emails at any time, and you can adjust or withdraw cookie consent through the cookie-settings link in our footer.
Data retention. We keep order records as long as we need them for tax, accounting, and legal reasons, then delete or anonymize them. We don't hold onto data just because we can.
Children. Our products and site are for adults. We don't knowingly collect information from anyone under 18, and we don't market to them.
Changes to this policy. If we make a meaningful change, we'll update the date at the top and, where appropriate, tell you directly. Continuing to use the site after a change means you accept the updated policy.
Contact us. Questions about your privacy go to a real person. Email [[email protected]] or write to [Legal Entity Name], [mailing address].
Placeholder text for mockup purposes. Bracketed values must be filled in and the full policy reviewed by counsel against current GDPR/CCPA/CPRA and applicable state privacy law before launch.