Botanical Shop Privacy Policy
This Botanical Shop privacy policy explains what information we collect when you visit boticalshop.com or place an order, why we need it, and how we keep it safe. In short, we only collect what we need to get your order to you, and we never sell your details.
Who we are
Botanical Shop is an online store selling natural botanicals, including Mimosa hostilis root bark, San Pedro cactus and Acacia. We are based in Cincinnati, Ohio, USA, and we run the website boticalshop.com.
When this policy says "we", "us" or "our", it means Botanical Shop. When it says "you", it means anyone who visits our website, creates an account or places an order.
What information we collect
Information you give us
- Order details: your name, shipping and billing address, email address, phone number and the products you order.
- Account details: if you create an account on My Account, your username, email and password (stored in encrypted form, so we cannot read it).
- Messages: anything you tell us when you email, call or message us, for example about an order or a bulk request.
- Order notes: any notes you add at checkout, such as delivery instructions.
Information collected automatically
- Device and browser data: your IP address, browser type, device type and general location (city or region, never your exact address).
- Site activity: pages you view, items you add to your cart, and how you arrived at our site.
- Cookies: small files that keep your cart and login working. See Cookies below.
We do not ask for your Social Security number, date of birth, ID documents or full card numbers.
Manual payments and your data
Botanical Shop uses manual payment. In other words, no money is taken on our website when you place an order. Instead, we email you payment instructions, and you then pay through the method you chose, such as Bitcoin, Cash App, Zelle, Chime, Apple Pay, Visa or e-Transfer.
Because of this, your card number and banking login never pass through or get stored on our website. When you pay, we only receive what the payment service normally shows a seller, for example:
We use this only to match your payment to your order. The payment service you choose also handles your data under its own privacy policy, so we recommend reading it too.
How we use your information
We only use your information for clear, everyday reasons:
- To fulfil your order: confirm it, send payment instructions, check your payment, pack it and ship it.
- To keep you updated: send your order confirmation, tracking number and any delivery news.
- To help you: answer your questions and sort out any problem, such as a return or replacement.
- To protect the shop: spot fake orders, fraud and spam.
- To improve our website: understand which pages work well, so we can make the site faster and easier to use.
- To follow the law: keep tax and sales records, and respond to lawful requests.
We only send marketing emails, such as offers or new stock news, if you have agreed to receive them. Every marketing email has an unsubscribe link, and order emails like tracking updates are never marketing.
Who we share it with
We never sell, rent or trade your personal information. We only share it with trusted services when we need to, and only the part they need:
| Who | Why | What they get |
|---|---|---|
| Shipping carriers | To deliver your package | Name, shipping address, phone (for delivery problems) |
| Payment services | When you pay using the method you chose | What you send with your payment |
| Website hosting and tools | To run our website, store and email system | Data stored on our site, held securely for us |
| Security and anti-spam tools | To block fraud, bots and attacks | IP address and technical data |
| Authorities | Only if the law requires it | Only what a lawful request asks for |
These services may only use your information to do the job we asked them to do. Our website may also link to other sites, for example a carrier's tracking page. Those sites have their own privacy policies, and we are not responsible for them.
Cookies
Cookies are tiny text files saved in your browser. We mainly use them so the shop works properly, for example so your cart remembers what you added.
| Type | Examples | What it does |
|---|---|---|
| Essential (cart and checkout) | woocommerce_cart_hash woocommerce_items_in_cart wp_woocommerce_session_ | Remembers your cart while you shop and through checkout |
| Essential (login) | wordpress_logged_in_ wordpress_sec_ | Keeps you signed in to your account |
| Preferences | woocommerce_recently_viewed | Remembers products you looked at |
| Analytics | Visitor statistics tools | Counts visits and popular pages, so we can improve the site |
You can block or delete cookies in your browser settings at any time. However, if you block essential cookies, your cart and checkout will not work.
How long we keep it
- Orders: kept for as long as tax and accounting law requires us to keep sales records.
- Your account: kept until you ask us to delete it.
- Emails and messages: kept for up to 2 years after the matter is closed, then deleted.
- Website logs and analytics: kept for up to 14 months.
When we no longer need information, we delete it or remove anything that identifies you.
How we keep it safe
We protect your information with sensible security steps. For example, our whole website uses HTTPS encryption, passwords are stored in encrypted form, and only the people who pack and support orders can see order details. In addition, we keep our website software up to date and use security tools to block attacks.
No website can promise to be 100% secure. However, if we ever learn of a data breach that affects you, we will tell you as the law requires.
Your privacy rights
You can ask us to:
Depending on where you live, for example California, Colorado, Virginia or another state with a privacy law, you may have extra rights under that law. Since we do not sell or share your data for targeted advertising, there is nothing to opt out of. We also respect Global Privacy Control (GPC) browser signals.
To make a request, email sales@boticalshop.com with the subject "Privacy request". To protect you, we may ask you to confirm details from a past order before we act. We reply within 30 days and never treat you differently for using your rights.
Age and children
Our website and products are for adults aged 18 and over. We do not knowingly collect information from anyone under 18. If you believe a child has given us their details, please contact us, and we will delete them.
Changes to this policy
We may update this privacy policy from time to time, for example when we add a new service or the law changes. When we do, we will change the "Last updated" date at the top of this page. If a change is important, we will also tell you by email or with a notice on our website.
Contact us about privacy
If you have any question about this privacy policy or your data, please get in touch. A real person in Cincinnati will reply, usually within the hour, Monday to Saturday.
Questions about your data?
Botanical Shop · Cincinnati, Ohio, USA. You can also read our Terms & Conditions and FAQ.