Privacy Policy for Dr. Charles Organics™

Personal Information We Collect

Information You Provide Directly

When you visit the Site, register for an account, make a purchase, subscribe to our newsletter, fill out a form, or otherwise interact with us, we may collect the following categories of personal information:

• Identity information: Your name, email address, mailing address, billing address, and phone number.
• Payment information: Credit card numbers, debit card numbers, and other payment details necessary to process transactions. All payment information is encrypted during transfer over networks.
• Order information: Products you purchase or add to your cart, billing and shipping addresses, and order history.
• Communication information: Any information you provide when contacting us, including through our "Contact Us" page (office@drcharlesorganics.com) or "Partner With Us" inquiry form, and any survey responses, newsletter signups, or feedback you share.
• Newsletter and SMS information: Your email address and phone number when you subscribe to our newsletter or SMS communications for product updates, wellness insights, brand news, and early access to upcoming offerings.

Information Collected Automatically

When you browse the Site, we automatically collect certain information about your device and browsing activity, including:

• Device information: Your web browser type and version, operating system, IP address, time zone, and some of the cookies installed on your device.
• Usage information: Information about the individual web pages or products you view, what websites or search terms referred you to the Site, how you interact with the Site, and the date and time of your visit.
• Location information: General geographic location data derived from your IP address, mailing address, or billing address.

We collect this information using the following technologies:

• Cookies: Data files placed on your device or computer that often include an anonymous unique identifier. For more information about cookies and how to disable them, visit www.allaboutcookies.org.
• Log files: Track actions occurring on the Site and collect data including your IP address, browser type, Internet service provider, referring and exit pages, and date/time stamps.
• Web beacons, tags, and pixels: Electronic files used to record information about how you browse the Site, including for analytics and advertising purposes.

How We Use Your Personal Information

We use the personal information we collect for the following purposes:

• Order fulfillment: To process and fulfill orders placed through the Site, including processing payment information, arranging for shipping, and providing order confirmations and invoices.
• Customer communication: To communicate with you about your orders, respond to inquiries submitted through our Contact Us page or Partner With Us form, and provide customer service.
• Marketing and promotions: When consistent with the preferences you have shared with us, to provide you with information, wellness tips, product updates, brand news, and advertising relating to our products or services via email, SMS, or other channels. You may opt out of marketing communications at any time using the "unsubscribe" link in any marketing email or by contacting us directly.
• Site improvement and analytics: To help us improve and optimize our Site by generating analytics about how our visitors browse and interact with the Site, and to assess the success of our marketing and advertising campaigns.
• Fraud prevention and security: To screen for potential risk and fraud, particularly using your IP address.
• Legal compliance: To comply with applicable laws, regulations, and legal processes.

How We Share Your Personal Information

We share your personal information with the following categories of third parties to help us use your personal information as described above:

• Shopify: We use Shopify to power our online store. You can read more about how Shopify uses your personal information at https://www.shopify.com/legal/privacy.
• Payment processors: We use Shopify Payments (powered by Stripe) and may also use PayPal to process transactions. These processors handle your payment data in accordance with their own privacy policies and Payment Card Industry Data Security Standards (PCI DSS).
• Analytics providers: We use Google Analytics to help us understand how our visitors use the Site. You can read more about how Google uses your personal information at https://www.google.com/intl/en/policies/privacy/. You can opt out of Google Analytics at https://tools.google.com/dlpage/gaoptout.
• Email and SMS marketing platforms: If we integrate with email marketing services (such as Klaviyo or similar platforms) or SMS marketing services, your contact information may be shared with those providers solely to deliver marketing communications you have opted into.
• Social media platforms: We may share data with social media platforms (including Meta/Facebook, Instagram, TikTok, and YouTube) when we use their advertising or analytics tools, such as the Meta Pixel.
• Domain and hosting providers: Our domain is registered through GoDaddy, Inc. GoDaddy may process limited technical data in connection with domain services.
• Fulfillment and shipping partners: We may share your shipping information with third-party logistics providers, fulfillment centers, and courier services to deliver your orders.
• Co-manufacturing partners: Our products are manufactured by Silver State Baking Company LLC, an FDA-registered facility. We do not share your personal customer data with our co-manufacturer.
• Legal compliance: We may share your personal information to comply with applicable laws and regulations, to respond to a subpoena, search warrant, or other lawful request for information we receive, or to otherwise protect our rights.

We do not sell your personal information to third parties.

Behavioral Advertising

We may use your personal information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For more information about how targeted advertising works, you can visit the Network Advertising Initiative's educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

You can opt out of targeted advertising by visiting:

• Facebook: https://www.facebook.com/settings/?tab=ads
• Google: https://www.google.com/settings/ads/anonymous
• Digital Advertising Alliance: http://optout.aboutads.info/

Do Not Track

Please note that we do not alter our Site's data collection and use practices when we see a Do Not Track signal from your browser.

Your Rights Under California Law (CCPA/CPRA)

If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:

• Right to know: You have the right to request that we disclose what categories and specific pieces of personal information we have collected about you, the sources of that information, the business purposes for collecting it, and the categories of third parties with whom we share it.
• Right to delete: You have the right to request that we delete personal information we have collected from you, subject to certain exceptions.
• Right to correct: You have the right to request correction of inaccurate personal information we maintain about you.
• Right to opt out of sale or sharing: We do not sell your personal information. If we share your personal information for cross-context behavioral advertising purposes, you have the right to opt out.
• Right to non-discrimination: We will not discriminate against you for exercising any of these rights.

To exercise any of these rights, please contact us using the information provided below. We may require verification of your identity before processing your request.

Data Retention

When you place an order through the Site, we will maintain your order information for our records unless and until you ask us to delete this information. We retain personal data for as long as necessary to fulfill the purposes for which it was collected, to comply with our legal obligations, resolve disputes, and enforce our agreements.

[DCO should confirm specific data retention periods for: (a) customer order records, (b) newsletter/SMS subscriber lists, (c) analytics data, and (d) inactive account data.]

Data Security

We implement reasonable administrative, technical, and physical security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. Payment information is encrypted during transfer using industry-standard Secure Socket Layer (SSL) technology, and payment transactions are processed through PCI DSS-compliant payment processors.

Currently, no method of transmission over the Internet or method of electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

Children's Privacy

Our Site and products are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will take steps to delete that information as quickly as possible. If you believe that a child under 18 has provided us with personal information, please contact us at the information provided below.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by updating the "Last Updated" date at the top of this page and, where required by law, by providing additional notice (such as by email or through the Site). We encourage you to review this Privacy Policy periodically.