Privacy Policy

The short version

We collect what we need to send you an order and, if you ask for it, an email. We don’t sell your personal information. Your card details never touch our servers. We do use Google and Meta advertising and analytics tools, which is explained below, and you can opt out. Want your data deleted? Email care@wholesomewellness.com and we do it.

Who we are

This site is operated by Wholesome Wellness, 6804 NE 79th Court, Portland, Oregon 97218, USA. For anything on this page, email care@wholesomewellness.com and a person will read it.

What we collect

When you place an order

• Your name, email address, shipping address and phone number.
• What you ordered, what you paid, and any discount code you used.

We never see or store your card number. Card details go straight from your browser to Stripe, our payment processor. We are told that a payment succeeded and shown the last four digits. That is all that reaches us.

When you join our email list

Your email address, and your first and last name if you give them. Nothing else. Every email we send has an unsubscribe link, and it works immediately.

When you take the quiz

Your answers, and your email address only if you choose to give it. The email is optional — you can see your results without one. If you do give it, we store your answers with it so the protocol we send matches what you told us.

In your browser

We keep a few things in your browser’s local storage so the site works: your cart, your quiz answers while you are part-way through, and a note of when you last saw the welcome offer so it isn’t shown to you repeatedly. That data stays on your device.

Advertising and analytics

We use the following to understand how the site is used and to show our products to people who might want them:

• Google Analytics — how people move through the site, which pages work and which don’t. Google receives your IP address, device and browser details, and the pages you visited.
• Google Ads — measures whether an advert led to a purchase, and allows us to show adverts to people who have visited before.
• Meta Pixel (Facebook and Instagram) — the same, for adverts on Meta’s platforms. Meta receives your device details and the actions you took here, such as viewing a product or completing an order.
• Klaviyo onsite — a script on every page that records which products you looked at, so we can send you an email about something you were interested in. It sets its own cookies. If you give us your email address — by signing up, taking the quiz, or asking for order emails at checkout — that browsing history is linked to it. If you don’t, it stays anonymous, and unticking the email box at checkout means we don’t make the link.

These tools use cookies and similar identifiers, and they let Google, Meta and Klaviyo connect your activity here with the profile they already hold about you. That is how advertising measurement works, and we would rather say so plainly than bury it.

How to turn it off

• Use your browser’s cookie settings to block third-party cookies.
• Install Google’s official opt-out add-on for Analytics.
• Change your ad preferences in your Google account and your Meta account, which controls what both companies do with what they collect.
• Most browsers offer a “do not track” setting; we honour it where the tools we use support it.

Blocking any of this does not stop you shopping. Nothing on this site needs an advertising cookie to work.

Who else we share data with

Only the companies that make the shop work, and only what each one needs:

• Stripe — payments and subscriptions. Receives your name, email, billing and shipping address, and your payment details.
• Flexport — our fulfilment partner, who picks and ships your order. Receives your name, shipping address, email and what you ordered. Nothing about your payment.
• Klaviyo — email. Receives your email address, your name, and your quiz answers if you took the quiz.
• Netlify — hosting. Handles the requests your browser makes to this site.

We do not sell your personal information, and we do not hand it to anyone for their own marketing.

One thing worth knowing about discount codes

Our codes are limited to one per customer, on a first order. To enforce that without keeping a list of everyone’s email address, we store a one-way cryptographic hash of your email rather than the address itself. It lets us check whether you have already used a code, and it cannot be turned back into your email.

How long we keep it

We keep records for up to five years, which covers the tax and accounting periods we have to be able to answer for. Two exceptions, both in your favour: if you unsubscribe we stop emailing you immediately, and if you ask us to delete your data we delete everything we are not legally required to keep.

Your rights

Wherever you live, you can ask us to:

• Tell you what we hold about you.
• Correct anything that is wrong.
• Delete it.
• Send you a copy in a portable format.
• Stop sending you marketing, which you can also do yourself from any email.

Email care@wholesomewellness.com and we will action it within 30 days. We will not charge you, and we will not treat you differently for asking.

If you are in California, you have the right to know what personal information we collect, to have it deleted, to correct it, and not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined by the CCPA, other than the advertising cookies described above, which you can turn off using the methods in that section.

Security

The site runs over HTTPS everywhere. Payment details are handled entirely by Stripe and never reach our systems. Access to customer data is limited to the people who need it to run the shop. No system is perfect, and if something happens that affects you, we will tell you rather than hope you don’t notice.

Children

This site and these products are for adults. We do not knowingly collect information from anyone under 18. If you believe a child has given us their details, email care@wholesomewellness.com and we will delete them.

Changes to this policy

If we change how we handle your data, we update this page and the date at the top of it. If the change is significant and you are on our email list, we will tell you by email rather than expect you to notice.