Privacy Policy
1. Privacy Overview
At Shilajit Roots, we are committed to protecting your privacy and ensuring that your personal information is handled in a safe and responsible manner. This Privacy Policy outlines the types of information we collect, how we use it, and the measures we take to protect it.
This policy applies to all information collected through our website, mobile applications, and any other interactions you may have with our brand. By using our services, you consent to the data practices described in this policy.
Our approach to privacy is built on transparency and trust. We believe that you should have full control over your data and understand exactly how it is being utilized to enhance your experience with Shilajit Roots. This document serves as a comprehensive guide to our data ecosystem.
2. Information We Collect
We collect information that you provide directly to us, as well as information that is collected automatically when you visit our Site.
Personal Information
This includes your name, email address, shipping address, billing address, phone number, and payment information. We collect this information when you make a purchase, create an account, or contact our support team.
Usage Data
We automatically collect information about how you interact with our Site, including your IP address, browser type, device information, pages visited, and time spent on each page.
Furthermore, we may collect biometric data if you choose to use certain advanced features of our mobile application, though such data is always encrypted and stored locally on your device whenever possible. We also gather social media handles if you connect your accounts to our platform for loyalty program tracking.
3. How We Use Your Data
We use the information we collect for various purposes, including:
- To process and fulfill your orders, including shipping and returns.
- To improve our products and services based on user feedback.
- To personalize your shopping experience and provide tailored recommendations.
- To communicate with you about your account, orders, and promotional offers.
- To monitor and analyze trends to enhance the Site's performance.
In addition to functional requirements, we use aggregated, non-identifiable data to conduct research on health trends and the efficacy of natural supplements in different demographics. This helps us refine our sourcing and purification processes to better serve our global community.
5. Data Security Measures
We implement a variety of security measures to maintain the safety of your personal information. This includes SSL (Secure Sockets Layer) encryption for all sensitive data transitions, regular security audits, and strict internal access controls.
While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee its absolute security.
All Shilajit Roots employees undergo mandatory privacy training. Our servers are housed in Tier-4 data centers with 24/7 physical security and multi-factor authentication requirements for all administrative access.
6. Data Retention Policy
We will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our policies.
For example, financial records are retained for seven years in accordance with tax regulations. Customer account information is kept active as long as the user remains engaged with our platform, but can be deleted upon request within 30 days of the verification of identity.
8. Your Privacy Rights (GDPR/CCPA)
Depending on your location, you may have the following rights regarding your personal data:
- The right to access the information we have on you.
- The right to rectify any inaccurate or incomplete information.
- The right to object to our processing of your personal data.
- The right of restriction of processing.
- The right to data portability.
- The right to withdraw consent.
If you are a resident of the European Economic Area (EEA), you have certain data protection rights under the General Data Protection Regulation (GDPR). If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA). To exercise these rights, please contact our Data Protection Officer.
9. International Data Transfers
Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction.
We ensure that any international transfers are conducted in compliance with applicable law and that adequate safeguards are in place to protect your information, such as the use of Standard Contractual Clauses approved by the European Commission.
10. Children's Privacy
Our Site is not intended for children under the age of 13. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child without parental consent, we will take steps to remove that information from our servers.
11. Policy Updates
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.
12. Contact Data Protection Officer
If you have any questions about this Privacy Policy, please contact our Data Protection Officer at:
Email: [email protected]
Address: 123 Wellness Way, Boulder, CO 80302