Privacy Policy
Last Updated: March 27, 2025
1. Introduction
Back To Your Roots Herbs (“we”, “us”, or “our”) is committed to protecting the privacy of our website visitors and customers (“you”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.backtoyourrootsherbs.com (the “Site”), including any other media form, media channel, mobile website, or mobile application related or connected thereto. Please read this privacy policy carefully. By using the Site, you agree to the terms of this Privacy Policy and our Terms of Service. If you do not agree with the terms of this privacy policy, please do not access the site.
2. Information We Collect
We may collect information about you in a variety of ways. The information we may collect on the Site includes:
Personal Data: Personally identifiable information, such as your name, shipping address, email address, telephone number, and company name (if applicable), that you voluntarily give to us when you register with the Site, place an order, or contact us.
Account Information: If you create an account, we collect information related to that account, including your username and securely hashed password.
Financial Data: Financial information, such as data related to your payment method (e.g., valid credit card number, card brand, expiration date) that we may collect when you purchase, order, return, or exchange products or services from the Site. We store only very limited, if any, financial information that we collect. Otherwise, all financial information is stored and processed by our third-party payment processors (e.g., Affirm), and you are encouraged to review their privacy policy and contact them directly for responses to your questions.
Derivative Data (Technical/Usage): Information our servers automatically collect when you access the Site, such as your IP address, your browser type, your operating system, your access times, and the pages you have viewed directly before and after accessing the Site. We may also collect information about the device you use to access the Site.
3. How We Use Your Information
Having accurate information about you permits us to provide you with a smooth, efficient, and customized experience. Specifically, we may use information collected about you via the Site to:
- Create and manage your account.
- Process your orders and payments, and deliver the products and services you requested.
- Email you regarding your account or order.
- Respond to your inquiries and provide customer support.
- Monitor and analyze usage and trends to improve your experience with the Site and our product offerings.
- Prevent fraudulent transactions, monitor against theft, and protect against criminal activity.
- Comply with legal and regulatory requirements.
- Send you newsletters or promotional materials if you have opted in to receive them.
4. Disclosure of Your Information
We may share information we have collected about you in certain situations. Your information may be disclosed as follows:
By Law or to Protect Rights: If we believe the release of information about you is necessary to respond to legal process, to investigate or remedy potential violations of our policies, or to protect the rights, property, and safety of others, we may share your information as permitted or required by any applicable law, rule, or regulation.
Third-Party Service Providers: We may share your information with third parties that perform services for us or on our behalf, including payment processing, data analysis, email delivery, hosting services, customer service, and shipping/order fulfillment.
Business Transfers: We may share or transfer your information in connection with or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
We do not sell your personal information to third parties for their marketing purposes.
6. Security of Your Information
We use administrative, technical, and physical security measures to help protect your personal information. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse. Any information disclosed online is vulnerable to interception and misuse by unauthorized parties.
7. Data Retention
We will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process it, and applicable legal requirements.
8. Your Data Protection Rights
Depending on your location (e.g., European Economic Area, California), you may have certain rights regarding your personal data. These may include the right to:
- Request access to and obtain a copy of your personal information.
- Request correction of any inaccurate information or completion of incomplete information.
- Request erasure (deletion) of your personal information under certain conditions.
- Object to or request restriction of processing of your personal information under certain conditions.
- Request the transfer of your data to another organization, or directly to you, under certain conditions (data portability).
- Withdraw consent at any time where we are relying on consent to process your personal data.
To exercise any of these rights, please contact us using the contact information provided below. We may need to verify your identity before responding to your request. Please note that we may not always be able to comply with your request for specific legal reasons, which will be notified to you, if applicable, at the time of your request.
9. International Transfers
Our operations are based in the United States. If you are accessing our Site from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States, where our servers are located and our central database is operated. By using our services, you consent to your information being transferred to our facilities and to the third parties with whom we share it as described in this Privacy Policy.
10. Children’s Privacy
Our Site and services are not directed to children under the age of 13 (or the relevant age of consent in your jurisdiction). We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information without parental consent, please contact us. If we become aware that we have collected personal information from a child without verification of parental consent, we take steps to remove that information from our servers.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The updated version will be indicated by an updated “Last Updated” date, and the updated version will be effective as soon as it is accessible. If we make material changes to this Privacy Policy, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this privacy policy frequently to be informed of how we are protecting your information.
12. Contact Us
If you have questions or comments about this Privacy Policy, please contact us via our Contact page.
Virginia Beach, VA