Privacy Policy

1. Information We Collect

Personal Information

When you use our service, we collect the following personal information:

• Email Address: Used for account creation, authentication, and communication
• Name: Optional, used for personalized communication and delivery identification
• Delivery Location: Required for order fulfillment and delivery

Order Information

• Order Details: Products ordered, quantities, pricing
• Order History: Previous purchases and order patterns
• Order Status: Current status in our fulfillment queue
• Guest Order Matching: We link guest orders to user accounts when email addresses match

Communication Preferences

• Email Preferences: Your choices for receiving different types of notifications
• Notification Settings: Frequency preferences for order updates and marketing communications

2. How We Use Your Information

Order Processing

• Process and fulfill your orders
• Manage our queue-based fulfillment system
• Coordinate delivery to your specified location
• Enforce product limits to ensure fair distribution

Communication

• Send order confirmations and status updates
• Provide delivery notifications
• Send periodic updates about product availability (if opted in)
• Respond to customer service inquiries

Service Improvement

• Analyze order patterns to improve inventory management
• Monitor system performance and reliability
• Generate aggregate statistics for business operations

3. Information Storage and Security

Data Storage

Your information is stored in a secure database. We use industry-standard security measures to protect your data:

• No Passwords: We use magic link authentication - no passwords are stored
• Secure Sessions: JWT tokens with expiration for authenticated sessions
• Email Logging: We maintain logs of sent emails for delivery confirmation and troubleshooting

Data Retention

We retain your personal information indefinitely for business records, customer service, and operational purposes. Your data will remain in our systems unless you specifically request deletion. Upon receiving a deletion request, we will remove your personal information from our active databases, though some information may remain in backups or logs for legal and operational requirements.

4. Information Sharing and Third-Party Services

We do not independently sell, trade, or share your personal information with third parties.We value your privacy and keep your personal data within our systems, with these specific exceptions:

Third-Party Analytics

We use Google Analytics to understand website usage patterns. Google Analytics automatically collects certain information about your visit (as described in Section 6 below). This is the only third-party service that collects data from our website. Google processes this data according to their own privacy policy.

Other Sharing Circumstances

We may share your information only in these limited situations:

• With your explicit consent
• To comply with legal obligations, court orders, or government requests
• To protect our rights, safety, or property, or those of others
• In connection with a business transfer (merger, acquisition, or sale of assets)

Important: We never share your order history, email address, or other personal information with marketing companies, data brokers, or any other third parties for their independent use.

5. Your Privacy Rights

Email Preferences

• Manage your notification preferences in your account settings
• Unsubscribe from marketing emails using the link in any email
• Note: Essential order-related communications cannot be disabled

Data Access and Control

• View your order history and account information in your dashboard
• Update your delivery location and preferences
• Request account deletion by contacting us

6. Cookies and Tracking

Essential Cookies

Our website uses essential cookies for:

• Maintaining your login session
• Remembering your cart contents
• Basic site functionality

Analytics

We use Google Analytics to understand how visitors interact with our website. Google Analytics collects information such as:

• Pages visited and time spent on each page
• How you arrived at our site (referral source)
• General geographic location (country/city level)
• Device and browser information
• User interactions and navigation patterns

This information is collected anonymously and helps us improve our website and service. You can opt out of Google Analytics by installing theGoogle Analytics Opt-out Browser Add-on.

Advertising

We do not use advertising cookies or share data with advertising networks.

7. Data Security and Breach Notification

Security Measures: We implement reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure.

Data Breach Notification: In the event of a data breach that may affect your personal information, we will notify affected users via email within 72 hours of discovering the breach, unless law enforcement request that we delay notification. The notification will include the nature of the breach, what information was involved, and steps we are taking to address the situation.

8. Children's Privacy (COPPA Compliance)

Age Restriction: Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. Our Terms of Service require users to be at least 18 years old to place orders.

Parental Rights: If we learn that we have collected personal information from a child under 13 without verifiable parental consent, we will delete that information immediately. If you believe we have collected information from a child under 13, please contact us immediately.

9. Colorado Privacy Rights

Under the Colorado Privacy Act (CPA), Colorado residents have specific rights regarding their personal data:

• Right to Know: You can request information about what personal data we collect, use, and disclose
• Right to Access: You can request access to the personal data we have about you
• Right to Correction: You can request correction of inaccurate personal data
• Right to Deletion: You can request deletion of your personal data (subject to certain exceptions)
• Right to Data Portability: You can request your personal data in a portable format
• Right to Opt-Out: You can opt out of targeted advertising (we don't engage in this practice)

To exercise these rights, contact us at hello@crouchfarb.farm. We will respond within 45 days. We may request additional information to verify your identity before processing your request.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: hello@crouchfarb.farm
Phone: (555) 123-4567