Privacy Policy | Healthy Herbs

I. Introduction and Scope

This Privacy Policy describes how Bella Phytologic, d/b/a Healthy Herbs Store (referred to as “The Company,” “we,” “us,” or “our”) collects, uses, protects, and handles your Personally Identifiable Information (PII). Please read this policy carefully. PII is information that can be used on its own or with other information to identify, contact, or locate a single person.

II. Information We Collect and How It Is Used

Information We Collect. We may collect PII, which includes, but is not limited to, your name, email address, mailing address, phone number, and payment information when you provide it to us. We also automatically collect “Device Information” such as your IP address, browser type, and cookie data as you interact with our site.

How We Collect Information. We collect information when you register, place an order, subscribe to a newsletter, fill out a form, use Live Chat, or otherwise enter information on our site. Device Information is collected automatically as you browse.

How We Use Your Information. We use your information to:

Process your transactions and fulfill orders;
Personalize your site experience;
Improve our website and services;
Service your customer service requests;
Follow up on correspondence (live chat, email, or phone);
Request ratings and reviews;
Send you marketing communications (you may opt-out at any time).

III. Protection and Security of Information

We implement a variety of security measures to maintain the safety of your personal information.

Our website is scanned regularly for security holes and known vulnerabilities.
Your personal information is contained behind secured networks and is only accessible by a limited number of persons with special access rights who are required to keep the information confidential.
All sensitive/credit information is encrypted via Secure Socket Layer (SSL) technology.
All transactions are processed through a gateway provider and are not stored or processed on our servers.

IV. Use of Cookies

Our site uses “cookies.” Cookies are small files transferred to your computer’s hard drive that enable our systems to recognize your browser and remember certain information.

We use cookies to:

Remember and process items in your shopping cart;
Understand and save your preferences for future visits;
Compile aggregate data about site traffic to improve our site.

You can choose to turn off all cookies through your browser settings. However, if you disable cookies, some site features may not function properly.

V. Third-Party Sharing and Disclosure

We share your Personal Information with third-party service providers to help us operate our business and provide services to you. For example:

We use WordPress and WooCommerce to power our online store.
We use payment processors (such as Stripe or PayPal) to handle transactions.
We use shipping providers (such as ShipStation or USPS) to fulfill your orders.
We use Google Analytics to help us understand how our customers use the Site.

Advertising and Remarketing. We also share information with third-party advertising partners (like Google and Facebook) to provide you with targeted advertisements or marketing communications (remarketing).

Under some privacy laws, particularly in California, this use of data for advertising may be considered a “sale” or “sharing” of personal information. You have the right to opt-out of this activity, as described in Section VI below.

Third-Party Links. Occasionally, we may include or offer third-party products or services on our website. These third-party sites have separate and independent privacy policies. We have no responsibility or liability for the content and activities of these linked sites.

VI. Your California Privacy Rights (CCPA)

If you are a California resident, you have the following specific rights regarding your personal information:

The Right to Know: The right to request that we disclose what personal information we collect, use, disclose, and sell.
The Right to Delete: The right to request the deletion of your personal information that we have collected.
The Right to Opt-Out of Sale/Sharing: The right to opt-out of the “sale” or “sharing” of your personal information, which (as defined by California law) includes our use of data for cross-context behavioral advertising.
The Right to Non-Discrimination: The right not to be discriminated against for exercising any of your CCPA rights.

How to Exercise Your Rights: To exercise your Right to Know or Right to Delete, please contact us at privacy@bellaphytologic.com. To exercise your Right to Opt-Out of Sale/Sharing, please email privacy@bellaphytologic.com.

How We Handle Do Not Track Signals: Please note that we do not alter our Site’s data collection and use practices when we see a Do Not Track signal from your browser.

VII. Your European Union (EU) Privacy Rights (GDPR)

If you are a resident of the European Economic Area (EEA), you have certain data protection rights. We process your personal information under the following legal bases:

Consent: You have given us clear consent to process your personal data for a specific purpose.
Contract: The processing is necessary for a contract we have with you (such as to fulfill an order you placed).
Legitimate Interests: The processing is necessary for our legitimate interests (such as for internal analytics or fraud prevention), so long as those interests are not overridden by your rights.

You have the following rights under the GDPR:

The right to access, update, or delete the information we have on you.
The right of rectification.
The right to object to our processing.
The right of restriction.
The right to data portability.
The right to withdraw consent at any time.

The Data Controller for your information is: Bella Phytologic, 396 Tesconi Ct., Santa Rosa, CA 95401. To exercise these rights, please contact us at privacy@bellaphytologic.com.

VIII. Children’s Privacy (COPPA)

We do not specifically market to children under the age of 13.

IX. Data Breach Notification (Fair Information Practices)

Should a data breach occur, we will notify affected users via email within a reasonable timeframe, as required by law, in accordance with Fair Information Practices.

X. Email Marketing Compliance (CAN-SPAM Act)

We collect your email address to send information, respond to inquiries, process orders, and send marketing communications. To be in accordance with CAN-SPAM, we: