1. Overview

Natural Botanical Supply (“we,” “us,” or “our”) operates naturalbotanicalsupply.com (the “Site”) and provides botanical materials for research, education, craft, and collection purposes.

This Privacy Policy describes how we collect, use, and share personal information when you visit the Site, place an order, or interact with us. It applies to all visitors and customers.

By using the Site, you consent to the practices described in this Privacy Policy. If you do not agree, please do not use the Site.

2. Information We Collect

We collect the following categories of personal information:

Information You Provide to Us

• Contact details — name, email address, phone number, billing address, shipping address
• Payment information — payment method details (processed by our payment providers; we do not store full card numbers on our servers)
• Account information — username, password, and preferences if you create an account
• Order information — products purchased, order value, delivery instructions
• Communications — messages you send us through contact forms, email, or customer support

Information We Collect Automatically

• Device and technical data — IP address, browser type, operating system, device type
• Usage data — pages visited, time spent on pages, links clicked, referring website
• Cookie data — identifiers stored in cookies and similar technologies (see section 7)

Information from Third Parties

• Payment processors — confirmation that a payment was completed, and limited transaction details
• Shipping carriers — delivery confirmation and tracking updates
• Analytics providers — aggregated traffic and behavior data

3. How We Collect Information

We collect personal information through the following methods:

• Directly from you — when you place an order, create an account, contact support, or sign up for communications
• Automatically — through cookies, pixels, and analytics tools when you browse the Site
• From service providers — payment processors and shipping carriers who share limited information with us to fulfill your order

4. How We Use Your Information

We use personal information for the following purposes:

• Order fulfillment — processing payments, packing and shipping orders, sending order confirmations and updates
• Customer support — responding to inquiries, resolving issues, processing refunds
• Site operation — maintaining and improving the Site, preventing fraud, ensuring security
• Marketing — sending promotional emails about products or offers (only if you have opted in; you can unsubscribe at any time)
• Analytics — understanding how visitors use the Site so we can improve content and navigation
• Legal compliance — complying with applicable laws, responding to legal requests, enforcing our Terms and Conditions

5. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal information under the following legal bases:

Purpose	Legal Basis
Processing orders and payments	Contract performance
Shipping and delivery	Contract performance
Customer support	Contract performance or legitimate interest
Marketing emails	Consent (you may withdraw at any time)
Site analytics	Consent or legitimate interest
Fraud prevention and security	Legitimate interest or legal obligation
Legal compliance	Legal obligation

6. How We Share Your Information

We do not sell your personal information. We share it only with the following categories of service providers, and only to the extent necessary to operate the Site and fulfill your orders:

Payment Processors

When you make a purchase, your payment information is processed by third-party payment providers (such as Stripe, PayPal, or similar). These providers receive the payment details needed to complete your transaction. We do not store full payment card numbers on our servers.

Shipping Carriers

We share your name, shipping address, and order details with shipping carriers to deliver your order. Carriers may use this information to provide tracking updates and delivery confirmation.

Analytics Providers

We use analytics tools to understand how visitors use the Site. These tools may collect usage data, device information, and IP addresses. Where required by law, we obtain consent before these tools are activated.

Email Service Providers

If you opt in to marketing communications, we share your email address with an email service provider to deliver those messages. You can unsubscribe at any time.

Legal Requirements

We may disclose personal information if required by law, court order, or legal process, or to protect the rights, property, or safety of Natural Botanical Supply, our customers, or others.

7. Cookies & Tracking Technologies

The Site uses cookies and similar technologies to:

• Enable essential functionality — shopping cart, checkout, account login (these cookies are necessary for the Site to work)
• Analyze usage — understand how visitors navigate the Site (analytics cookies)
• Support marketing — measure the effectiveness of advertising and show relevant content (marketing cookies)

Essential cookies are required for basic Site functionality and cannot be disabled. Non-essential cookies (analytics and marketing) are only activated with your consent where required by law.

You can manage cookie preferences through the cookie consent banner on the Site, or through your browser settings. Disabling certain cookies may affect Site functionality.

8. Data Retention

We retain personal information only as long as necessary for the purposes described in this policy, or as required by law:

Data Type	Retention Period
Order and transaction records	7 years (tax and legal compliance)
Customer account information	Until account deletion, or after 3 years of inactivity
Marketing preferences	Until opt-out, then deleted
Analytics data	Up to 26 months
Support communications	3 years

9. How We Protect Your Data

We implement appropriate technical and organizational measures to protect personal information from unauthorized access, loss, or misuse:

• SSL/TLS encryption — all data transmitted to and from the Site is encrypted
• Secure payment processing — payment details are handled by PCI-compliant processors; we do not store full card numbers
• Access controls — personal data is accessible only to staff who need it to perform their duties
• Regular updates — we keep our platform, plugins, and software updated to address security vulnerabilities
• Backups — encrypted backups of Site data are maintained

No method of transmission or storage is completely secure. While we take reasonable precautions, we cannot guarantee absolute security.

10. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

For EEA/UK Residents (GDPR)

• Right to access — request a copy of the personal information we hold about you
• Right to rectification — request correction of inaccurate or incomplete information
• Right to erasure — request deletion of your personal information, subject to legal retention obligations
• Right to restrict processing — request that we limit how we use your information
• Right to data portability — request your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interest
• Right to withdraw consent — withdraw consent for marketing or non-essential cookies at any time

For California Residents (CCPA/CPRA)

• Right to know — request details about the categories and specific pieces of personal information we have collected about you, the sources, and the purposes
• Right to delete — request deletion of personal information we have collected from you, subject to certain exceptions
• Right to correct — request correction of inaccurate personal information
• Right to opt out — we do not sell personal information; you have the right to opt out of the sale or sharing of personal information for cross-context behavioral advertising
• Right to non-discrimination — we will not discriminate against you for exercising your privacy rights

How to Exercise Your Rights

To exercise any of these rights, contact us using the details in section 14. We will respond to verifiable requests within the timeframe required by applicable law (usually 30 days for GDPR, 45 days for CCPA).

We may need to verify your identity before processing a request. We will only use the information you provide for verification purposes.

11. International Data Transfers

Natural Botanical Supply operates from the United States. If you are located outside the US, your personal information will be transferred to and processed in the US, where data protection laws may differ from those in your jurisdiction.

Where we transfer personal information from the EEA or UK to the US, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) or other approved transfer mechanisms.

12. Children’s Privacy

The Site is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will delete it promptly.

If you believe a child has provided us with personal information, please contact us using the details below.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we do, we will update the “Last Updated” date at the top of this page.

Material changes will be communicated through a notice on the Site or by email where appropriate. We encourage you to review this page periodically.

14. Contact Us