Privacy Policy

Effective date: [DATE]
Last updated: [DATE]

This Privacy Policy explains how Parafresh LLC, a Wyoming limited liability company ("Parafresh", "we", "us", "our"), collects, uses, and protects personal information when you visit parafresh.com (the "Site"), create an account, place an order, subscribe to emails, or otherwise interact with us.

If you're in the EU/EEA, UK, California, or Canada, additional rights apply. Those sections are below.

1. Information we collect

1.1 Information you give us directly

Account information: name, email address, password (stored hashed, not in plaintext)
Order information: shipping and billing address, phone number (if provided), order contents, order history
Payment information: processed by our payment processor; we receive the last 4 digits of the card and the transaction status, but we do not store full card numbers
Customer service correspondence: the content of emails and form submissions you send us
Subscription preferences: product, cadence, status (active/paused/cancelled)
Marketing preferences: which Parafresh emails or SMS messages you've opted into
Reviews and user content: anything you post on a product page or send us for marketing use
Wholesale and B2B inquiries: business name, role, contact info, intended volume

1.2 Information we collect automatically

Device and browser data: IP address, browser type, operating system, device type, referring URL
Site usage: pages visited, time on page, links clicked, search queries on the Site
Cookies and similar technologies: for session management, cart persistence, analytics, and (with your consent where required) advertising. See Section 7 below.

1.3 Information from third parties

Payment processors confirm transaction success and provide fraud-risk signals
Email and SMS platforms may share opens, clicks, and bounces back to us
Advertising platforms (Pinterest, Meta, Google, TikTok) may share aggregated audience and conversion data
Analytics providers share aggregate behavior data
Authorized resellers (if applicable in the future) may share customer information for fulfillment purposes

2. How we use your information

We use personal information to:

Process orders and deliver products, including coordinating with our manufacturing and fulfillment partner
Manage subscriptions including scheduled charges, renewal reminders, pause and skip requests, and cancellations
Provide customer support including responding to your emails and requests
Send transactional communications (order confirmations, shipping notifications, subscription renewal reminders, account-security messages)
Send marketing communications if you've opted in (you can unsubscribe at any time via the link in any marketing email)
Improve the Site and our products through analytics
Run advertising including retargeting to bring you back to abandoned carts (with consent where required)
Prevent fraud and abuse
Comply with legal obligations including tax, customs, and consumer-protection laws

3. Legal basis (for EU/EEA and UK customers)

Under GDPR and the UK GDPR, we rely on the following legal bases:

Purpose	Legal basis
Processing your order	Performance of a contract (Article 6(1)(b))
Managing your subscription	Performance of a contract
Sending order/subscription transactional emails	Performance of a contract
Sending marketing emails	Your consent (Article 6(1)(a))
Improving the Site through analytics	Our legitimate interest (Article 6(1)(f))
Preventing fraud	Our legitimate interest and legal obligation
Responding to legal requests	Legal obligation (Article 6(1)(c))

You can withdraw consent at any time for purposes based on consent, by unsubscribing or contacting us.

Attorney note: confirm whether Parafresh needs to appoint an EU representative or UK representative under GDPR Article 27, given the volume of EU/UK customers expected.

4. How we share your information

We share personal information only as needed to run Parafresh, and only with the categories of recipients listed below. We do not sell your personal information in the traditional sense of selling data to data brokers. See Section 6 for California-specific definitions.

4.1 Service providers we share data with

Manufacturing and fulfillment partner (US-based): receives shipping address and order contents to produce and ship the order
Payment processors (Stripe, PayPal, or others shown at checkout): receive payment information directly from you
Email platform (e.g., Klaviyo, Mailchimp): receives email address and subscription preferences for transactional and marketing emails
SMS platform (if SMS is enabled): receives phone number and consent record
Analytics provider (e.g., Google Analytics 4): receives anonymized usage data and IP address (truncated where supported)
Advertising platforms (Pinterest, Meta, Google Ads, TikTok): receive conversion events and audience signals; cookie-based tracking only with consent where required
Customer support tools (helpdesk software, if applicable): receive support correspondence content
Cloud hosting and security (web host, CDN, security plugin): receive Site traffic and request data

4.2 Legal and safety

We may disclose information when required by law, court order, or government request, or to enforce our Terms, protect Parafresh or others from fraud, harm, or illegal activity, or in connection with a sale, merger, or restructuring of Parafresh.

4.3 We do not share information for purposes you wouldn't reasonably expect

We don't share customer lists with unaffiliated brands. We don't rent or sell email addresses. If Parafresh ever wanted to share data outside the categories listed above, we would notify you and obtain consent first.

5. International data transfers

Parafresh is based in the United States. If you're outside the US, your information will be transferred to and processed in the US, where data protection laws may differ from those in your country. For EU/EEA, UK, and Swiss customers, we rely on Standard Contractual Clauses or equivalent safeguards for these transfers.

6. Your rights

Depending on where you live, you have one or more of the following rights:

6.1 EU/EEA and UK (GDPR / UK GDPR)

Access the personal information we hold about you
Correct inaccurate information
Delete your information ("right to be forgotten"), subject to legal retention requirements
Restrict or object to processing
Data portability (receive your information in a machine-readable format)
Withdraw consent at any time
Lodge a complaint with your local data protection authority

To exercise these rights, email [email protected]. We respond within 30 days.

6.2 California (CCPA/CPRA)

California residents have the right to:

Know what personal information we collect, use, disclose, and (if applicable) sell or share
Delete personal information, subject to legal exceptions
Correct inaccurate personal information
Opt out of "sale" or "sharing" of personal information for cross-context behavioral advertising (we honor the Global Privacy Control signal where transmitted)
Limit use of sensitive personal information
Non-discrimination for exercising these rights

To submit a request, email [email protected] with "California Privacy Request" in the subject line.

6.3 Canada (PIPEDA)

Canadian residents have the right to access, correct, and request deletion of personal information, and to withdraw consent. To submit a request, email [email protected].

6.4 Other jurisdictions

If you're in another jurisdiction (Australia, New Zealand, etc.), you may have similar rights under local law. Email us and we'll do our best to honor them.

7. Cookies and tracking technologies

We use cookies and similar technologies for:

Essential operation of the Site (cart persistence, account login, security): always on
Analytics (understanding how the Site is used): with consent where required by law
Advertising and retargeting (showing relevant Parafresh ads on other sites): with consent where required

If you're in the EU/EEA or UK, you'll see a cookie consent banner the first time you visit, and you can change your preferences anytime via the "Cookie preferences" link in the footer.

US residents not in California can opt out of advertising cookies through industry tools (DAA, NAI) and by enabling Do Not Track or Global Privacy Control in your browser.

Attorney note: ensure the cookie consent mechanism complies with EU GDPR/ePrivacy and California CPRA. Specifically, the consent banner must (a) not pre-tick non-essential categories, (b) allow refusal as easily as acceptance, and (c) record consent for audit.

8. Data retention

We keep personal information only as long as we need it for the purposes described above, or as required by law:

Order records: 7 years (for tax and consumer-protection compliance)
Account information: until you delete your account, then up to 90 days for backup purposes
Marketing subscription data: until you unsubscribe, then archived for audit purposes
Customer support correspondence: 3 years
Analytics data: up to 26 months (varies by tool)
Payment records: as required by PCI-DSS and tax law (typically 7 years for tax)

9. Security

We use technical and organizational measures appropriate to the sensitivity of the information we handle, including HTTPS encryption for all Site traffic, hashed password storage, restricted internal access to customer data, regular security updates to our hosting and plugin infrastructure, and PCI-DSS compliance for payment processing through our processors.

No system is 100% secure. If a security incident affects your personal information, we will notify you and the relevant authorities as required by applicable law.

10. Children's privacy

The Site and Parafresh products are not directed at children under 13 (or under 16 in some EU jurisdictions). We don't knowingly collect personal information from children. If you believe a child has provided personal information to us, contact [email protected] and we'll delete it.

Parafresh products are formulated for adults and are not intended for anyone under 18.

11. Third-party links

The Site may link to third-party sites (social media, blog citations, partner sites). We are not responsible for the privacy practices of those sites. Read their privacy policies before sharing information with them.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We'll post the updated version on this page and update the "Last updated" date. For material changes that affect how we use your information, we'll notify active subscribers and account holders by email.

13. Contact

For questions about this Privacy Policy or to exercise your rights, contact:

Parafresh LLC
[US business address to be added]
Wyoming, USA
[email protected]