Effective Date: 04/18/2018
Last Updated: 10/27/2025

1. Introduction
Vera Herbals, LLC (“we”, “us”, “our”) is committed to protecting the privacy and security of personal information belonging to visitors to our website, customers (current and prospective), and other individuals whose data we collect (“you”, “your”). This Privacy Policy describes how we collect, use, disclose, retain, and otherwise process personal information in connection with our website, services, and business activities, and how you can exercise your rights in relation to that information.

2. Scope
This Policy applies to all personal information that we collect or maintain in the United States (and any data about U.S. residents), whether collected electronically (via website, mobile, email) or offline (via phone, in‑person, paper forms). It applies to both current and potential customers, vendors, service providers, website visitors, and other individuals whose data we handle.

3. Legal Framework and Our Commitments
We commit to compliance with applicable federal laws (such as the Children’s Online Privacy Protection Act “COPPA” if children under 13 are involved) and relevant state laws (including but not limited to the California Consumer Privacy Act (“CCPA”), the California Online Privacy Protection Act (“CalOPPA”), and other state privacy statutes).
We follow the core fair information‑practice principles: transparency, purpose limitation, data minimization, security, accuracy, retention limitation, individual access and rights.

4. Information We Collect
We may collect the following categories of personal information (depending on the nature of our interaction with you):

Identifiers: name, postal address, email address, phone number, company name, account username.
Contact, billing & shipping information: billing address, shipping address, payment method (note: see Section 7 for payment-related data).
Commercial information: order history, product/service interests, sample requests, inquiries or quotes.
Usage and technical information: IP address, browser type, device identifiers, website usage data (via cookies/analytics).
Sensitive personal data (if applicable): to the extent permitted and required, health‑/medical‑related data, biometric data, if you voluntarily provide it (for example, in product customization or contact forms).
Third‑party and publicly available information: e.g., if you provide a referral, or we obtain business contact information from publicly available sources.

We collect information by the following means: directly from you when you fill out a form, place an order, request a sample, subscribe to communications; automatically via website cookies/tracking; from third‑party sources (service providers, business databases) when legally permitted.

5. Use of Personal Information
We use your personal information only for the following business or commercial purposes:

To respond to your inquiries, provide customer service, process requests, quotes, orders, invoices and shipping.
To operate, maintain, improve, and personalize our website and services (including analytics, testing and research).
To communicate with you about our products, services, promotions, updates, events (where permitted under applicable law).
To comply with our legal obligations, enforce our terms of service, and protect our rights, customers, and business.
To ensure security, fraud prevention, risk assessment and quality assurance.
To fulfill any other purpose that was disclosed at the time you provided your personal information or for which you consent.

6. Sharing and Disclosure of Information
We will not sell your personal information. We may share or disclose your personal information in the following circumstances:

With third‑party service providers who perform functions on our behalf (such as payment processors, shipping/logistics, website hosting, data analytics, marketing platforms). We require these providers to maintain confidentiality and security of personal information and use it only for the purposes we specify.
With our affiliates or subsidiaries (if any) for the business purposes described above.
To comply with applicable laws, regulation, legal process, governmental requests or court orders.
To protect and defend our rights or property, and to prevent or investigate suspected fraud or illegal activity.
In the event of a merger, acquisition, sale of all or substantially all of assets, or other business reorganization involving our company; in such case we will require the receiving entity to abide by a privacy policy consistent with this one.

If required by applicable state law (for residents of that state), we will provide the relevant disclosures about third‑party sharing, sale, or targeted advertising (e.g., under CCPA, CalOPPA) and relevant opt‑out rights.

7. Data Security and Retention
We implement administrative, technical, and physical safeguards designed to protect the confidentiality, integrity, and availability of personal information. These measures include encryption (where appropriate), access controls (user authentication, role‑based privileges), regular data backups, and security audits.
We retain personal information only for as long as necessary to fulfill the purposes outlined above or as required by law, and then either securely delete, anonymize or aggregate the information. We periodically review our retention schedules to ensure compliance with applicable laws (see general guidance on retention under U.S. state law).

8. Cookies, Tracking and Do‑Not‑Track
Our website uses cookies, web beacons, pixels and other tracking technologies to collect usage data and improve user experience, site performance, and advertising/marketing efforts (where applicable).
You may control or disable cookies through your browser settings or by following the opt‑out instructions we provide. Please note that disabling cookies may impact your ability to use certain features of the website.
At present, we do not respond to browser “Do Not Track” signals. (If this changes, we will update this policy accordingly.)

9. Children’s Privacy
Our website and services are not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware we have collected such information, we will promptly delete it. Where required by law (such as COPPA), we provide parental notice, obtain verifiable parental consent, and give the parent or guardian the right to review, delete, or refuse further use of the child’s personal data.

10. International Data Transfers
If we transfer any personal information internationally (outside the U.S.), we will ensure that adequate safeguards are in place consistent with applicable law (for example, contractual commitments, privacy‑shield or equivalent mechanisms, or other protective mechanisms) and we will disclose that fact to you where required.

11. Consumer Rights (for U.S. Residents, Including State Rights)
Depending on where you live and applicable state law, you may have certain rights with respect to your personal information including:

The right to access or request a copy of your personal information.
The right to correct or update your personal information.
The right to request deletion or anonymization of your personal information (subject to exceptions).
The right to opt‑out of certain processing activities (for example, sale of personal information or targeted advertising) if applicable under law.
The right to non‑discrimination for exercising your rights.
The right to know the categories of personal information we have collected, the purposes for which it is used, and the categories of third parties with whom it is shared.

If you are a resident of California, Colorado, Connecticut, Utah, Virginia, or any other state with a comprehensive privacy law, you may have additional rights. (See relevant state law summaries for details.)
To exercise any of these rights, you may contact us at the contact information provided below. We will respond within the timeframe required by applicable law (typically 30–45 days) after verifying your identity.

12. Third‑Party Websites and Links
Our website may contain links to third‑party websites, plug‑ins or services (for example, social media, payment gateways). We are not responsible for the privacy practices or content of those external sites. We encourage you to review the privacy policies of any sites you visit.

13. Marketing Communications and Unsubscribing
If you have provided your email or other contact information and opted in to receive marketing communications from us, you may unsubscribe or opt‑out at any time by following the instructions included in those communications (e.g., “unsubscribe” link) or by contacting us directly. For non‑promotional communications (for example, notifications about your account or service), you may not be able to opt‑out (as they are essential to the service).

14. Retention and De‑Identification
As noted above, we retain personal information only as long as necessary for the original purpose or as required by law. When we no longer need the data, we securely destroy, delete or anonymize it. For paper records, we use methods such as shredding; for electronic records, we use secure deletion or anonymization. We document our retention schedule and periodically review whether continued retention is justified.

15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time (for example, as our business practices or legal/regulatory obligations change). When we do, we will update the “Last Updated” date at the top of this policy and publish the revised policy on our website. We encourage you to review this policy periodically. Your continued use of our website and services after modification constitutes your acknowledgment of the revisions, where legally permitted.

16. Contact Information
If you have questions, wish to exercise your rights, or want to request more information about our privacy practices, you may contact:
Vera Herbals, LLC
777 Industry Loop
Stevensville, MT, 59870
Email: contact@veraherbals.com

17. Additional Disclosures for California Residents
If you are a resident of California, then in addition to the above, we provide the following disclosures:

The categories of personal information we have collected in the last 12 months (see Section 4).
The categories of personal information we have sold or shared for a business purpose in the last 12 months: None (unless otherwise disclosed).
Your right to request a “Do Not Sell My Personal Information” link.
How to submit a request to know, delete or opt‑out (see Section 11).
We will not discriminate against you for exercising your rights under California law.

18. Miscellaneous
This Privacy Policy is governed by the laws of the state of [Insert State] (excluding its conflict‑of‑laws rules). If any provision of this Policy is found invalid or unenforceable, the remaining provisions shall remain in full force and effect. Our failure to enforce any right or provision under this Policy will not constitute a waiver of such right or provision.
We may assign or transfer our rights and obligations under this Policy to a successor entity in connection with a business transaction, provided that the successor commits to honoring this Policy or a substantially similar one.