RREFILLNUTRITIONCart

Privacy Policy

What we collect, why, and what you can do about it.

Last updated: Not yet published

Draft — not reviewed by counsel

This is a structured starting point, not legal advice. Every highlighted blank needs a real answer, and the whole document needs review by a lawyer before the store takes money.

1. Who we are

This policy describes how [LEGAL ENTITY NAME, LLC], doing business as Refill Nutrition, handles personal information collected through this website.

2. What we collect

Information you give us

  • Name, email address, phone number
  • Shipping and billing addresses
  • Order history and product preferences
  • Anything you send us in a message or support request

Information collected automatically

  • IP address, browser type, device type
  • Pages visited and time spent
  • Referring website

What we do not collect

We do not store full payment card numbers. Payment details go directly to our payment processor.

We do not ask for or knowingly collect health information. Please don't send us medical details — we're not equipped to safeguard them and can't advise on them.

3. How we use it

  • To process, ship, and support your orders
  • To respond when you contact us
  • To send order confirmations and shipping updates
  • To send marketing email, only if you opt in — and you can opt out in any message
  • To detect fraud and secure the site
  • To understand which parts of the site people use

4. Who we share it with

We don't sell personal information. We share only what's needed with:

  • [PAYMENT PROCESSOR] — to process payments
  • [SHIPPING CARRIERS] — to deliver orders
  • [EMAIL PROVIDER] — to send order and marketing email
  • Supabase — database hosting
  • Cloudflare — website hosting and security
  • Law enforcement, when legally required

5. Cookies

We use cookies to keep your cart working and to understand site usage. You can block cookies in your browser, though parts of the site may stop working.[Add a cookie banner if using analytics or advertising trackers]

6. How long we keep it

Order records are kept as long as needed for tax, accounting, and legal purposes — typically[NUMBER] years. Marketing contacts are kept until you unsubscribe.

7. Your rights

Depending on where you live, you may have the right to request access to your personal information, request correction or deletion, opt out of marketing, and not be discriminated against for exercising these rights.

California residents have additional rights under the CCPA/CPRA, including the right to know what is collected and to request deletion.[LAWYER: confirm CCPA applicability thresholds and add state-specific language]

To make a request, contact us at [EMAIL ADDRESS].

8. Children

This site is not directed at anyone under 18 and we don't knowingly collect information from them. If we learn we have, we'll delete it.

9. Security

We use industry-standard measures to protect personal information, including encrypted connections. No method of transmission or storage is perfectly secure, and we can't guarantee absolute security.

10. Changes

We may update this policy. The "last updated" date at the top reflects the current version.

11. Contact

Privacy questions: [EMAIL ADDRESS],[MAILING ADDRESS].