01
What we collect. And nothing we do not need.
When you place an order or create an account, we collect:
- Your name, email address, shipping address, and phone number (phone is optional)
- Your order history and any subscription preferences you set
- Standard site interaction data (which pages you viewed, how long you stayed) through web analytics
That is the list. We do not buy data about you from other sources, and we do not enrich your profile from third-party trackers.
02
How we use it. To run the store. That is it.
- Fulfill and ship your order
- Send order confirmations and shipping updates
- Manage your subscription if you have one
- Reply when you contact us
- Send marketing email only if you have opted in. Every marketing email has a one-click unsubscribe at the bottom.
03
Who we share it with. The minimum to make a shipment happen.
- Shopify: the platform that runs the store, processes payments, and stores account data on our behalf
- Payment processor: Shopify Payments and Stripe handle card details. We never see or store your card number.
- USPS: receives your shipping address so the package can reach you
- Shopify Subscriptions: manages recurring orders if you have a subscription
- Web analytics: standard, aggregated, no personal identifiers
We never sell your information. We never rent it. We never share it for advertising on other platforms.
04
Cookies. The technical kind, not the snack.
We use a small number of cookies:
- Session cookies: keep your cart together while you shop. These expire when you close the tab.
- Analytics cookies: anonymous, aggregated, and optional. You can decline them at any time.
We do not use third-party advertising cookies. We do not retarget you across other websites.
05
Your rights. You own your data.
You can:
- Ask what we have on file about you
- Correct any inaccuracies
- Ask us to delete your data
- Opt out of marketing email
Email maxxsuperfoods@gmail.com with the request and we respond within five business days.
If you are a California resident, the CCPA gives you the rights above by default. If you are in the EU or UK, the GDPR does the same.
06
Children. We do not market to or knowingly collect data from anyone under thirteen.
If you are a parent and believe we have collected information from your child, email us and we will delete it.
07
Changes to this policy. We will tell you when we update it.
Material changes go up here with a new "last updated" stamp at the top. If a change is significant, we will email customers whose addresses we have on file.