Privacy Policy

This Privacy Policy explains how Smooth Roots collects, uses, stores, and shares information when you visit our website, contact us, subscribe to updates, or purchase our products. This policy is starter legal copy for a United States ecommerce store and should be reviewed by a licensed attorney before launch.

By using this website, you acknowledge that you have read this Privacy Policy and understand how your information may be handled.

We may collect information you provide directly, including your name, email address, phone number, billing address, shipping address, order details, customer service messages, product preferences, and any other information you choose to provide.

We may also collect limited technical information automatically, such as your IP address, browser type, device information, pages viewed, referring pages, approximate location, and interactions with the website. This helps us operate the website, understand performance, prevent fraud, and improve the customer experience.

Smooth Roots should not directly store full payment card details on this website. Payments should be processed through a secure third-party payment provider such as Stripe, Shopify Payments, PayPal, or another approved checkout provider.

Your payment provider may collect and process payment information according to its own privacy policy and terms. Smooth Roots may receive order confirmation details, payment status, transaction identifiers, billing information, and fraud-prevention signals, but not full card numbers when using a compliant hosted checkout system.

We may use customer information to process orders, collect payment, ship products, send order updates, respond to questions, provide support, prevent fraud, improve the website, comply with legal obligations, and send marketing messages when permitted by law or customer consent.

If you join an email list, you may unsubscribe using the unsubscribe link in marketing emails or by contacting us. Transactional messages, such as order confirmations and shipping notices, may still be sent when needed to complete an order.

The website may use cookies, local storage, session storage, and similar technologies to keep the site working, support customer login, remember cart activity, remember theme preference, protect forms from bots, complete checkout, and improve the customer experience.

The current technical setup is designed around Supabase Auth for account sessions, Stripe Checkout for payment sessions, Cloudflare Turnstile for bot protection, browser storage for cart/theme persistence, and an on-site consent banner for optional analytics or marketing tools.

Analytics and marketing tools are disabled until a visitor accepts them. If enabled, the site can load Plausible and/or Google Analytics 4 using the public environment variables configured for the website. For more detail, review the Cookie Policy linked in the website footer.

We may share information with service providers who help us operate the business, including payment processors, ecommerce platforms, shipping carriers, fulfillment providers, email platforms, analytics providers, website hosts, fraud-prevention providers, professional advisors, and customer support tools.

We may also disclose information if required by law, to protect the rights and safety of Smooth Roots or others, to investigate fraud or security issues, or as part of a business transfer such as a merger, sale, or reorganization.

To fulfill orders, we may share shipping details such as your name, delivery address, email address, phone number if provided, and order-related shipping information with carriers or shipping software providers.

We keep information for as long as reasonably necessary to fulfill orders, provide support, comply with tax and accounting requirements, resolve disputes, enforce agreements, maintain business records, and meet legal obligations.

We use reasonable administrative, technical, and organizational safeguards designed to protect customer information. No website, checkout platform, or electronic storage method can be guaranteed to be completely secure.

Smooth Roots is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we collected information from a child under 13, we will take reasonable steps to delete it.

Depending on where you live, you may have rights to request access to, correction of, deletion of, or information about the personal information we maintain. Before launch, this section should be updated for the states where Smooth Roots sells products and any applicable privacy laws.

To make a privacy request, contact us at the customer service email address listed on the website. We may need to verify your identity before responding.

Smooth Roots is designed for customers in the regions shown at checkout. If you visit the website from outside the United States, your information may be processed in the United States or in other locations where our service providers operate.

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised last updated date.

For privacy questions, contact Smooth Roots at the customer service email address listed on the website. Before launch, replace this sentence with the official business email and, if required, the mailing address.