Wholistic Blends Privacy Policy

Effective Date: July 1, 2025

Wholistic Blends (“we,” “our,” or “us”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit our website ([insert URL]) or purchase our products.
By using our services, you agree to the terms of this policy.

1. Information We Collect
We collect the following categories of data:
A. Personal Information
• Identifiers: Name, email address, phone number, billing/shipping address.
• Payment Details: Credit card information (processed securely via Stripe/PayPal; we do not store full card numbers).
• Account Data: Order history, wishlists, login credentials (if you create an account).
B. Technical Data
• Device/Usage Information: IP address, browser type, operating system, pages visited, referring URLs.
• Cookies & Tracking: We use cookies (see Section 4) and third-party tools (e.g., Google Analytics) to analyze site traffic.
C. Optional Data
• Marketing Preferences: If you opt in to newsletters or promotions.
• User-Generated Content: Product reviews, survey responses.
Note: We do not knowingly collect data from children under 13 (see Section 7).

2. How We Use Your Information
We process your data for the following purposes:
Purpose Legal Basis (GDPR)
Order fulfillment Contractual necessity
Customer support Legitimate interest
Email marketing Consent (opt-in required)
Fraud prevention Legal obligation
Website improvements Legitimate interest

3. Sharing Your Information
We do not sell your data. We only share it with:
• Service Providers: Payment processors (Stripe, PayPal), shipping carriers (USPS, FedEx), email platforms (e.g., Klaviyo).
• Legal Compliance: If required by law (e.g., court orders, tax audits).
• Business Transfers: In case of a merger or acquisition (users will be notified).
Third-Party Safeguards: All partners must protect your data under confidentiality agreements.

4. Cookies & Tracking Technologies
• Types Used: Essential (session cookies), analytics (Google Analytics), marketing (Facebook Pixel).
• Your Control: Disable cookies via browser settings or our Cookie Banner. [Link to cookie policy if separate.]

5. Your Rights & Choices
Depending on your location, you may:
• Access/Correct your data.
• Delete your account or personal data (exceptions apply for legal records).
• Opt out of marketing emails (via unsubscribe link).
• Limit automated tracking (e.g., browser “Do Not Track” settings).
• Request data portability (GDPR).
To exercise these rights, contact us at info@wholisticblends.com. We’ll respond within 30 days and may verify your identity first.
California Residents: Under the CCPA/CPRA, you may opt out of “sales” of data (though we do not sell data).

6. Data Security & Retention
• Security Measures: SSL encryption, PCI-compliant payments, staff training.
• Retention Periods:
o Orders: 7 years (tax compliance).
o Inactive accounts: 2 years.
o Marketing data: Until you unsubscribe.
No method is 100% secure, but we promptly investigate any breaches and notify affected users if legally required.

7. Children’s Privacy
Our services are not directed at children under 13. If we learn we’ve collected such data, we’ll delete it immediately.

8. International Data Transfers
If your data is transferred outside your country (e.g., via Google Analytics), we ensure safeguards like:
• EU-US Data Privacy Framework compliance.
• Standard Contractual Clauses (SCCs).

9. Changes to This Policy
We’ll notify users of material changes via email or website notices. The updated date will reflect the latest version.

10. Contact Us
For questions or to exercise your rights:
Email: info@wholisticblends.com