Privacy policy

What we collect, why we collect it, and what you can ask us to do about it.

Last updated August 26, 2026

Template notice for the site owner.

This document is a working template, not legal advice. Before launch, have it reviewed against your actual data practices and the laws that apply to you — in particular the CCPA/CPRA if you serve California residents, and any state privacy laws covering your customers. Remove this notice once reviewed.

Who we are

Grow Well Naturals operates this website. For any privacy question, contact us at support@growellnatural.com. Our business address is listed on the Contact Us page.

Information we collect

Information you give us

Order information — name, email address, phone number, shipping address and the contents of your order.
Messages — anything you send through the contact form or by email.
Marketing — your email address if you sign up for updates.

We do not collect payment card numbers at all. No payment provider is connected yet, so this site cannot take a card payment. When one is connected, card details will be entered directly into the provider's own secure fields and will not reach our servers.

Information collected automatically

Device and usage data — IP address, browser type, pages viewed and referring site, collected through analytics.
Local storage — your cart, your saved items and a short summary of orders you placed on this device are stored in your own browser so they survive a page refresh. The order summary holds the order number, date, status, carrier, tracking number, item names and totals. It does not hold your name, address, email address or payment details. Summaries are removed automatically after 120 days, only the ten most recent are kept, and you can delete them yourself at any time from the Track Order page. This data stays on your device and is not transmitted to us.

Why we use it

To process, ship and support your order.
To answer questions you send us.
To detect and prevent fraudulent transactions.
To understand how the site is used, so we can improve it.
To send marketing email, only if you asked for it.
To meet tax, accounting and other legal obligations.

Who we share it with

We do not sell your personal information. We share it only with service providers who need it to do their job for us:

Payment provider — to take payment and handle refunds.
Shipping carriers — to deliver your order and provide tracking.
Email provider — to send order confirmations and, where you have opted in, marketing.
Analytics and advertising providers — to measure site usage and the performance of our advertising.
Legal authorities — where we are required by law to do so.

Analytics and advertising

We use analytics to understand which pages and products people look at, and advertising tools to measure whether our ads lead to purchases. These providers may set cookies or similar identifiers in your browser. You can opt out of personalised Google advertising through Google My Ad Center, and most browsers let you block or delete cookies entirely.

How long we keep it

Order records are kept for as long as required for tax and accounting purposes. Marketing contacts are kept until you unsubscribe. Support emails are kept for two years unless you ask us to delete them sooner.

Categories of personal information we collect

Over the past twelve months we have collected the following categories, from you directly or automatically as described above:

Identifiers — name, email address, postal address, phone number, IP address.
Commercial information — products viewed, items in your cart, orders placed.
Internet activity — pages viewed, referring site, device and browser information.
Inferences — audience signals derived by our advertising providers from the above.

We do not collect biometric data or precise geolocation, and we do not ask you for health information. We do not knowingly collect information from anyone under 16.

Because everything we sell is a dietary supplement, what you view and what you order can support an inference about your health, and California law treats a health inference as sensitive personal information. We use it only to fulfil your order, to answer your questions, and to measure and target our advertising in the way described under Selling and sharing below. We do not use it to infer anything about you beyond that, and we never sell it.

Selling and sharing

We do not sell your personal information for money.

However, California and several other states define “sharing” broadly. When we run advertising through Google, identifiers and internet-activity data may be shared with Google for cross-context behavioural advertising — that is, to measure our ads and to show you relevant ones on other sites. Under those laws that counts as sharing, and you have the right to opt out of it.

To opt out, use the “Your Privacy Choices” link in the footer of any page on this site. It turns off advertising identifiers for this browser immediately and remembers the choice on your next visit. You can also email us and we will action it for your account.

Opting out does not affect your order, your cart, or the emails we send you about an order you have placed.

Your choices and rights

Depending on where you live, you may have the following rights. We honour them for every U.S. customer regardless of state, because operating one standard is simpler and fairer.

Know and access — ask what personal information we hold about you, where it came from, why we have it, and who we disclosed it to, and receive a copy.
Correction — ask us to fix anything inaccurate.
Deletion — ask us to delete your information, except records we must keep to complete your order or by law.
Opt out of sharing for advertising — via , or by email.
Opt out of marketing email — use the unsubscribe link in any marketing email, or email us.
Limit use of sensitive information — ask us to stop using health inferences drawn from what you browsed or bought for advertising. Email us with the subject line “Limit sensitive use” and we will apply it to your account; using also stops it for this browser straight away.
No retaliation — we will never charge you a different price or give you worse service for exercising any of these rights.

To exercise any of these, email support@growellnatural.com with the subject line “Privacy request”. We will confirm receipt within 10 business days and respond within 45 days, extending once by a further 45 days only where the law allows and telling you if we do. We will verify your identity against the details on your order before acting. An authorised agent may act for you with written permission.

If we decline a request we will tell you why, and you may appeal by replying to that email; we will respond to an appeal within 45 days.

Global Privacy Control

Where your browser sends a Global Privacy Control (GPC) signal, we treat it as a valid request to opt out of sharing for advertising, and we apply it to that browser automatically.

Children

This site is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has given us personal information, contact us and we will delete it.

Security

The site is served over HTTPS. No payment provider is connected yet, so the site does not take card details at all. When one is connected, card data will be entered in the provider's own PCI DSS compliant fields and will not reach our servers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Changes

If we change this policy we will update the date at the top of this page. Material changes will be posted here before they take effect.