Critical Health
Dev note: this is a starting template, not legal advice. Replace every [bracketed] placeholder and have an attorney review before this page goes live.

Privacy Policy

Last updated: [date]

What we collect

When you place an order, we collect the information needed to fulfill it: your name, shipping address, email address, and order details. If you create an account or sign up for our newsletter, we collect your email address. We also collect basic site-usage data (pages visited, general location by IP) through standard analytics tools.

Payment information

We do not collect or store your card details. Payments are processed by Stripe, a third-party payment processor. Stripe handles your card information directly under its own privacy and security practices — see stripe.com/privacy.

How we use your information

We use your information to process and ship orders, respond to support requests, send order updates, and — if you’ve opted in — send marketing emails about new products and drops. We do not sell your personal information to third parties.

Third-party services

We use third-party services to run this site and business, including [Stripe for payments], [Vercel for hosting], and [email/marketing platform]. Each handles data under its own privacy policy.

Cookies

We use cookies for basic site functionality (like keeping items in your cart) and for analytics. You can disable cookies in your browser settings, though some site features may not work correctly without them.

Your rights

You can request a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it, by contacting us at [support email]. If you are a California resident, you have additional rights under the CCPA, including the right to opt out of the sale of personal information — though we do not sell personal information. If you are in the EU/UK, you have rights under GDPR, including the right to data portability.

Data retention

We retain order information for as long as needed for tax, accounting, and legal purposes. You can request deletion of your account and associated data at any time, subject to records we're legally required to keep.

Children's privacy

This site is not directed at children under 18, and we do not knowingly collect personal information from anyone under 18.

Changes to this policy

We may update this policy from time to time. We’ll update the “Last updated” date above when we do.

Contact

Questions about this policy? Contact us at [support email] or [business mailing address].