Privacy Policy

SECTION 1 - HOW WE COLLECT AND USE YOUR INFORMATION

• What information do we gather when you shop with us?

When you make a purchase from our store, we collect essential personal details to process your order successfully. This includes your name, shipping address, email address, and payment information. Think of this as the digital equivalent of filling out a form at a physical store—we need these details to get your products to you safely and keep you updated on your order status.

• Automatic information collection explained:

Every time you visit our website, we automatically receive technical data from your device, including your IP address, browser type, and operating system. This isn't about tracking your personal activities—it's about understanding how our website performs across different devices and browsers so we can improve your shopping experience. For example, if we notice many customers using mobile devices, we'll prioritize mobile optimization.

• Our approach to email marketing:

We believe in permission-based communication. We'll only send you promotional emails about new products, special offers, and store updates if you've explicitly agreed to receive them. You're always in control of this preference and can opt out at any time.

Key takeaway: We collect only the information necessary to serve you better—nothing more, nothing less.

SECTION 2 - YOUR CONSENT AND CONTROL OVER YOUR DATA

Understanding implied consent:

When you complete a transaction with us—whether placing an order, verifying payment details, or arranging delivery—you're providing implied consent for us to use your information specifically for that purpose. This is a standard e-commerce practice that protects both you and us.

How we handle marketing consent:

If we want to use your information for secondary purposes beyond your transaction (such as marketing campaigns or customer surveys), we'll always ask for your explicit permission first. You'll have a clear choice to opt in or decline—there's no pressure either way.

Simple steps to withdraw your consent:

Changed your mind about receiving our communications? No problem. You have the absolute right to withdraw consent at any time. Simply:

• Send an email to manage@nutrivein.com with your request

• Mail us at: Nutrivein, 720 N 10th St A-330, Renton, WA 98057

• Use the "unsubscribe" link at the bottom of any marketing email

We'll process your request promptly and respect your decision completely.

Why this matters: Your consent isn't a one-time checkbox—it's an ongoing choice you control.

SECTION 3 - WHEN WE SHARE YOUR INFORMATION

Our disclosure policy is straightforward:

We take your privacy seriously and don't sell or rent your personal information to third parties. However, there are two specific circumstances where we may disclose your data:

1. Legal obligations: If required by law, court order, or government regulation, we must comply with legal disclosure requests.

2. Terms of Service violations: If you violate our Terms of Service, we may need to share relevant information to protect our business and other customers.

Transparency promise: We'll only disclose your information when legally obligated or absolutely necessary—never for commercial gain.

SECTION 4 - OUR E-COMMERCE PLATFORM: SHOPIFY

Understanding where your data lives:

Our online store operates on Shopify, one of the world's most trusted e-commerce platforms. Shopify provides the technological infrastructure that powers our store, processes transactions, and stores your data securely.

How Shopify protects your information:

Your data is stored on Shopify's secure servers, which are protected by advanced firewalls and multiple security layers. Think of it as a digital vault designed specifically to protect e-commerce data.

Payment security you can trust:

When you choose a direct payment method, your credit card information is encrypted using Payment Card Industry Data Security Standard (PCI-DSS) protocols—the same security standard used by major banks and financial institutions. Here's what happens:

• Your payment data is encrypted immediately during transmission

• Transaction information is stored only as long as necessary to complete your purchase

• Once your transaction is complete, your payment details are permanently deleted

• All payment gateways meet strict PCI-DSS requirements managed by Visa, Mastercard, American Express, and Discover

Additional resources:

For deeper insights into data handling and security practices, you can review:

• Shopify's Terms of Service

• Shopify's Privacy Statement

Bottom line: Your financial information is protected by bank-level security standards.

SECTION 5 - THIRD-PARTY SERVICE PROVIDERS

Who are third-party providers and why do we use them?

To deliver the best shopping experience, we work with specialized service providers who handle specific functions like payment processing, shipping, and analytics. These partners only access your information to the extent necessary to perform their specific services.

Payment processors and their policies:

Payment gateways and transaction processors have their own privacy policies governing how they handle your financial information. We strongly encourage you to review these policies to understand how your data is managed during payment processing.

Important jurisdiction considerations:

Here's something many shoppers don't realize: third-party providers may operate in different countries or states, which means your information could be subject to different privacy laws.

Real-world example: If you're shopping from Canada and your payment is processed through a U.S.-based gateway, your transaction data may be subject to U.S. legislation, including the Patriot Act.

When you leave our website:

Clicking external links or being redirected to third-party websites means you're no longer protected by our Privacy Policy. Each website has its own privacy practices, so we encourage you to read their privacy statements before sharing any personal information.

Our recommendation: Stay informed about where your data goes and who has access to it—knowledge is power when it comes to privacy.

SECTION 6 - SECURITY MEASURES WE'VE IMPLEMENTED

Our multi-layered security approach:

Protecting your personal information isn't just a legal requirement—it's a fundamental commitment we take seriously. We've implemented industry-leading security practices including:

Encryption standards:

• Secure Socket Layer (SSL) technology encrypts data during transmission

• AES-256 encryption protects stored credit card information (the same encryption used by government agencies)

• All security protocols comply with PCI-DSS requirements

Honest transparency about security:

While we implement the highest security standards available, no method of internet transmission or electronic storage is 100% secure. We follow all mandatory security requirements and continuously update our practices to stay ahead of emerging threats.

What we do to minimize risks:

• Regular security audits and updates

• Employee training on data protection

• Restricted access to personal information

• Continuous monitoring for suspicious activities

Your role in security: Use strong, unique passwords and be cautious about phishing emails claiming to be from our store.

SECTION 7 - COOKIES AND TRACKING TECHNOLOGY

What are cookies and why do we use them?

Cookies are small text files stored on your device that help websites remember your preferences and improve functionality. They're not harmful—think of them as digital bookmarks that enhance your browsing experience.

Complete transparency: Our cookie inventory

We believe in full disclosure. Here's exactly what each cookie does:

_session_id

• Purpose: Stores temporary session information (like referral source and landing page)

• Duration: Active only during your current browsing session

• Benefits: Helps us understand how you found our store

_shopify_visit

• Purpose: Tracks visit statistics for internal analytics

• Duration: 30 minutes from your last activity

• Benefits: Helps us understand peak shopping times and improve server performance

_shopify_uniq

• Purpose: Counts individual customer visits

• Duration: Expires at midnight of the next day

• Benefits: Helps us distinguish between new and returning customers

cart

• Purpose: Remembers items you've added to your shopping cart

• Duration: 2 weeks

• Benefits: Prevents frustration if you need to leave and return later

_secure_session_id

• Purpose: Maintains secure session during browsing

• Duration: Current session only

• Benefits: Ensures secure communication between your browser and our server

storefront_digest

• Purpose: Manages access to password-protected stores

• Duration: Indefinite (only for password-protected stores)

• Benefits: Remembers your access credentials

Your cookie choices:

You have complete control over cookie preferences through your browser settings. Disabling cookies may affect website functionality, but the choice is entirely yours.

SECTION 8 - AGE REQUIREMENTS FOR USING OUR WEBSITE

Legal age confirmation:

By using our website, you confirm that you meet one of these criteria:

• You are at least the age of majority in your state or province (typically 18 or 19 years old)

• You are the age of majority AND have provided consent for minor dependents to use this site under your supervision

Why this matters:

Age restrictions protect minors and ensure we comply with laws like COPPA (Children's Online Privacy Protection Act). We take child safety seriously and don't knowingly collect information from children without parental consent.

SECTION 9 - PRIVACY POLICY UPDATES

Our commitment to keeping you informed:

Privacy laws and best practices evolve constantly. We reserve the right to modify this privacy policy to reflect legal changes, new technologies, or improved practices.

How we handle updates:

• Changes take effect immediately upon posting to our website

• Material changes trigger a prominent notification on this page

• We'll clearly communicate what information we collect, how we use it, and disclosure circumstances

Business transitions:

If Nutrivein is acquired by or merges with another company, your information may transfer to the new ownership to ensure continued service. We'll notify you of any ownership changes that affect data handling.

Best practice: Bookmark this page and review it periodically to stay informed about how we protect your privacy.

SECTION 10 - YOUR RIGHTS AND HOW TO CONTACT US

You have comprehensive data rights, including:

• Access: Request to see what personal information we have about you

• Correction: Update inaccurate or outdated information

• Amendment: Modify your information as your circumstances change

• Deletion: Request complete removal of your personal data (subject to legal retention requirements)

• Complaint: Register concerns about our privacy practices

Multiple ways to reach our Privacy Compliance Officer:

Email: manage@nutrivein.com (fastest response time)

Address: 720 N 10th St A-330
Renton, WA 98057

What to expect:

• We'll respond to privacy inquiries within 30 days

• Complex requests may require additional verification to protect your identity

• We'll explain our process and timeline clearly

We're here to help: Your privacy questions and concerns are important to us—never hesitate to reach out.

Privacy as Partnership

Your trust is the foundation of our business relationship. This privacy policy isn't just a legal requirement—it's our promise to handle your personal information with the care and respect it deserves. We believe informed customers are empowered customers, and we're committed to transparency every step of the way.

Thank you for trusting Nutrivein with your personal information and your business.