This Privacy Policy explains how we operator of the Whole Melts store at thewholemeltextracts.com , collects, uses, and protects your personal information. By using the Site, you agree to this Policy.
We treat your privacy as part of the product. Because our products are age-restricted and sensitive, we take particular care with your data.
1. Information We Collect
Information you give us:
- Contact details — name, email, phone number.
- Shipping and billing addresses.
- Order information — products purchased, order history.
- Age confirmation — your confirmation that you are 21 or older, and any age/ID verification we require.
- Communications — messages you send us via forms or email.
Information collected automatically:
- Device and usage data — IP address, browser type, pages viewed, and similar analytics.
- Cookies and similar technologies — see our Cookies section below.
Payment information:
- Payments are processed . We do not store full card numbers on our servers. Your payment details are handled by the processor under their own security and privacy terms.
2. How We Use Your Information
We use your information to:
- Process, fulfil, and deliver your orders.
- Verify your age and eligibility to purchase.
- Communicate with you about orders, support, and (if you opt in) marketing.
- Prevent fraud, counterfeiting, and unauthorized resale.
- Comply with legal obligations.
- Improve the Site and our products.
We process your data on the legal bases of [contract performance, legal obligation, legitimate interest, and consent — confirm applicable bases with counsel].
3. How We Share Your Information
We share personal information only as needed to run our business:
- Service providers — shipping carriers, payment processors, hosting, and analytics providers, under confidentiality obligations.
- Legal requirements — where required by law, court order, or to protect our rights.
- Business transfers — in connection with a merger, acquisition, or sale of assets.
We do not sell your personal information. [If any "sale/sharing" occurs under CCPA/CPRA definitions, disclose it and provide an opt-out.]
4. Cookies & Tracking
We use cookies and similar technologies to keep the Site working, remember your age confirmation and cart, understand usage, and (where applicable) support marketing. You can control cookies through your browser settings. [If you serve users in the EU/UK, implement a compliant cookie consent banner.]
5. Data Retention
We keep your personal information only as long as necessary to fulfil the purposes described here, including legal, accounting, and reporting requirements. Order records may be retained for [X years] to meet legal obligations.
6. Your Rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you.
- Correct inaccurate information.
- Delete your information ("right to be forgotten").
- Object to or restrict certain processing.
- Data portability.
- Opt out of marketing at any time via the unsubscribe link or by contacting us.
- [CCPA/CPRA: opt out of sale/sharing; non-discrimination for exercising rights.]
To exercise any right, contact us . We may need to verify your identity first.
7. Marketing Communications
If you opt in, we may send you emails about products, releases, and offers. You can unsubscribe at any time using the link in any marketing email or by contacting us. Transactional emails (order confirmations, shipping updates) are not marketing and will still be sent.
8. Data Security
We use reasonable technical and organizational measures to protect your information, including [SSL/TLS encryption, secure hosting, access controls]. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
9. Age & Children's Privacy
This Site is strictly for adults 21 and older. We do not knowingly collect information from anyone under 21. If we learn we have collected data from someone underage, we will delete it. If you believe a minor has provided us information, contact us immediately.
10. International Users
We operate from USA . If you access the Site from elsewhere, your information may be transferred to and processed , which may have different data protection laws.
11. Third-Party Links
The Site may link to third-party sites (for example, lab report hosts or social profiles). We are not responsible for their privacy practices. Review their policies separately.
12. Changes to This Policy
We may update this Policy from time to time. Changes take effect when posted, with the "Last updated" date revised. Significant changes will be communicated
13. Contact Us
Questions or requests about your privacy: [privacy email] [Legal business name and address] Or via our Contact page.
Adults 21+ only. We take particular care with age-restricted purchase data.