Privacy Policy

This policy is provided as a starting template and is pending legal review. It has not been reviewed or approved by an attorney. Delete this notice once counsel has approved the wording.

Overview

Effective date: [EFFECTIVE DATE]

This Privacy Policy explains how [COMPANY LEGAL ENTITY] ("we," "us," or "our") collects, uses, and shares information when you visit this website, submit a contact form, create an account, or place an order.

Information we collect

Information you give us. Name, email address, phone number, billing and shipping addresses, company name, and anything else you include in a contact form, account registration, or order.
Order and payment information. Products ordered, order value, and transaction records. Full payment card numbers are handled by our payment processors; we do not store them.
Account information. Login credentials, saved addresses, and preferences if you create an account.
Information collected automatically. IP address, browser and device type, referring page, pages viewed, and similar usage data collected through cookies and analytics tools.

How we use information

To process, fulfil, and ship orders, and to handle returns and refunds.
To respond to enquiries and provide customer support.
To send transactional messages such as order confirmations and shipping updates.
To send marketing email where you have asked to receive it.
To detect, prevent, and investigate fraud or misuse of the site.
To measure and improve how the site and our products are presented.
To meet legal, tax, and record-keeping obligations.

Cookies and analytics

We use cookies and similar technologies to operate the store, remember the contents of your cart, keep you signed in, and understand how the site is used. We use Google Analytics 4 (GA4) to measure site traffic and usage; GA4 sets cookies and processes usage data on our behalf.

You can control or block cookies through your browser settings. Blocking some cookies may affect how parts of the site work, including checkout.

Service providers we share information with

Shopify — ecommerce platform, hosting, and checkout.
Payment providers — payment authorisation, settlement, and fraud screening.
Email and marketing providers — delivery of transactional and marketing email.
Zoho CRM — customer relationship management and enquiry follow-up.
Shipping carriers and fulfilment partners — delivery of orders.
Analytics providers — Google Analytics 4.

These providers receive only the information they need to perform services for us, and we ask them to protect it. We may also disclose information where required by law, to enforce our terms, or in connection with a sale or reorganisation of the business.

We do not sell personal information or share it for cross-context behavioural advertising. [CONFIRM THIS STATEMENT IS ACCURATE FOR YOUR CURRENT ADVERTISING AND ANALYTICS SETUP.]

Data retention

We keep order and transaction records for as long as we need them to fulfil orders, provide support, and meet tax, accounting, and other legal record-keeping obligations. Account and marketing records are kept until you ask us to delete them or you close your account. Contact-form enquiries are kept for as long as we need them to answer you and keep a record of the correspondence.

Your choices and rights

Request a copy of the personal information we hold about you.
Ask us to correct information that is inaccurate or out of date.
Ask us to delete information, subject to records we are required to keep.
Unsubscribe from marketing email at any time using the link in any marketing message.
Ask us not to sell or share your personal information.

Depending on where you live, you may have additional rights under laws such as the California Consumer Privacy Act (as amended by the CPRA) or the EU and UK General Data Protection Regulation. To make a request, email info@CLO2Remedies.com. We may need to verify your identity before we act on a request, and we will not treat you differently for making one.

Children

This site is intended for adults. It is not directed at children under 16, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.

Security

We use reasonable administrative, technical, and physical safeguards, and we rely on the Shopify platform for store and checkout security. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Visitors outside the United States

We operate from the United States. If you use this site from another country, your information may be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your country.

Changes to this policy

We may update this policy from time to time. The effective date at the top of this page shows when it was last revised. Material changes will be posted on this page.