Privacy Policy

Revised: October 11, 2026

This privacy notice for Desert Oak Apothecary LLC ("Desert Oak Apothecary," "Company," "we," "us," or "our") describes how and why we might collect, store, use, and/or share ("process") your information when you use our services ("Services"), such as when you:

  • Visit our website at https://www.desertoakapothecary.com, or any website of ours that links to this privacy notice

  • Call our business phone line

  • Engage with us in other related ways, including any sales, marketing, or events

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at info@desertoakapothecary.com.

SUMMARY OF KEY POINTS

This summary provides key points from our privacy notice. You can find more details about any of these topics in the section noted after each key point, or by using our table of contents below.

What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with Desert Oak Apothecary and the Services, the choices you make, and the products and features you use. See Section 1.

Do we process any sensitive personal information? We do not request sensitive personal information, such as health information, and we do not provide medical advice. See Section 1.

How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent. We process your information only when we have a valid legal reason to do so. See Section 2.

In what situations and with which parties do we share personal information? We share information with service providers that help us run our business, and in the other situations described in Section 4. We do not sell your personal information.

How do we keep your information safe? We have organizational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. See Section 6.

What are your rights? Depending on where you are located, applicable privacy law may give you certain rights regarding your personal information. See Section 7.

How do you exercise your rights? Email us at info@desertoakapothecary.com. We will consider and act upon any request in accordance with applicable data protection laws.

Want to learn more about what Desert Oak Apothecary does with any information we collect? Review the full notice below.

TABLE OF CONTENTS

  1. WHAT INFORMATION DO WE COLLECT?

  2. HOW DO WE PROCESS YOUR INFORMATION?

  3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?

  4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

  5. HOW LONG DO WE KEEP YOUR INFORMATION?

  6. HOW DO WE KEEP YOUR INFORMATION SAFE?

  7. WHAT ARE YOUR PRIVACY RIGHTS?

  8. CONTROLS FOR DO-NOT-TRACK FEATURES

  9. DO CALIFORNIA RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

  10. DO WE MAKE UPDATES TO THIS NOTICE?

  11. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

  12. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us, including by phone or email.

Personal Information Provided by You. The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:

  • usernames

  • mailing addresses

  • email addresses

  • phone numbers

  • names

  • passwords

  • contact preferences

  • contact or authentication data

  • billing addresses

  • debit/credit card numbers

  • business names and job titles (for wholesale and partnership inquiries)

Sensitive Information. We do not request or intentionally collect sensitive information, such as health or medical information, and we do not provide medical advice. Please do not share medical details when you call or email us. If you share them anyway, we use them to respond to your inquiry.

Payment Data. We may collect data necessary to process your payment if you make purchases, such as your payment instrument number (such as a credit card number), and the security code associated with your payment instrument. All payment data is processed and stored by Squarespace and its payment processors. You may find Squarespace's privacy notice here: https://www.squarespace.com/privacy.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Information collected when you call us

In Short: When you call us, we collect your phone number, records of the call, and the details you choose to share.

When you call our business line, we collect your phone number and caller ID information, the date, time, and length of the call, and the content of the call. Calls may be recorded and transcribed for quality and training purposes. Calls may also be answered by an automated phone assistant that uses artificial intelligence (AI), which may take a message that includes your name, contact information, the reason for your call, and any other details you choose to share. Our phone service provider also creates voicemails, call transcripts, and call summaries for us.

Information automatically collected

In Short: Some information, such as your IP address and browser and device characteristics, is collected automatically when you visit our website.

When you visit our website, we and our service providers automatically collect certain information, such as your IP address, browser and device type, pages viewed, the website that referred you, and the date and time of your visit. This information is collected using cookies and similar technologies.

We use Google Analytics to understand how visitors use our website. You can learn how Google uses this information at https://policies.google.com/technologies/partner-sites and opt out of Google Analytics at https://tools.google.com/dlpage/gaoptout.

If you arrive at our website through a link from a member of our affiliate program, our affiliate program provider uses a cookie to credit that affiliate for a resulting purchase.

You can block or delete cookies through your browser settings. Some features of the website, such as the shopping cart, may not work properly if you do.

Children's information

We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18 without verifiable parental consent, we will delete that information as quickly as is reasonably practical.

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

  • To facilitate account creation and authentication and otherwise manage user accounts. We may process your information so you can create and log in to your account, as well as keep your account in working order.

  • To deliver and facilitate delivery of services to the user. We may process your information to provide you with the requested service.

  • To respond to user inquiries/offer support to users. We may process your information to respond to your inquiries and solve any potential issues you might have with the requested service.

  • To send administrative information to you. We may process your information to send you details about our products and services, changes to our terms and policies, and other similar information.

  • To fulfill and manage your orders. We may process your information to fulfill and manage your orders, payments, returns, and exchanges made through the Services.

  • To record and transcribe calls for quality and training. We may record and transcribe calls, and use an automated phone assistant to answer calls and take messages, so we can respond accurately and improve our customer service.

  • To understand how our website is used. We may use analytics information to improve our website and Services.

  • To manage our affiliate program. We may use referral information to credit affiliates for purchases they refer.

  • To save or protect an individual's vital interest. We may process your information when necessary to save or protect an individual's vital interest, such as to prevent harm.

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?

In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e., legal basis) to do so under applicable law, like with your consent, to comply with laws, to provide you with services to enter into or fulfill our contractual obligations, to protect your rights, or to fulfill our legitimate business interests.

If you are located in the United Kingdom or European Economic Area, this section applies to you.

The privacy laws that apply to you require us to explain the legal bases we rely on to process your personal information. We may rely on the following legal bases:

  • Consent. We may process your information if you have given us permission (i.e., consent) to use your personal information for a specific purpose. You can withdraw your consent at any time. See Section 7.

  • Performance of a Contract. We may process your personal information when we believe it is necessary to fulfill our contractual obligations to you, including providing our Services or at your request prior to entering into a contract with you.

  • Legitimate Interests. We may process your information when it is reasonably necessary for our legitimate business interests, such as understanding how our website is used, improving our customer service, and preventing fraud, as long as those interests do not outweigh your rights.

  • Legal Obligations. We may process your information where we believe it is necessary for compliance with our legal obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend our legal rights, or disclose your information as evidence in litigation in which we are involved.

  • Vital Interests. We may process your information where we believe it is necessary to protect your vital interests or the vital interests of a third party, such as situations involving potential threats to the safety of any person.

If you are located in Canada, this section applies to you.

We may process your information if you have given us specific permission (i.e., express consent) to use your personal information for a specific purpose, or in situations where your permission can be inferred (i.e., implied consent). You can withdraw your consent at any time. We may also process your information without your consent where permitted or required by law.

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We may share information in specific situations described in this section and/or with the following third parties.

We may need to share your personal information in the following situations:

  • Service Providers. We share personal information with service providers that perform services for us, such as website hosting and payment processing, shipping, phone and call handling, website analytics, email, and our affiliate program. These providers may use automated tools, including artificial intelligence (AI), to process information on our behalf, such as transcribing calls or organizing email. They may use your information only to provide services to us.

  • Text Messaging. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent will not be shared with any third parties, except service providers that help us deliver messages.

  • Legal Requirements. We may disclose your information when required by law, such as to comply with a subpoena, court order, or other legal process.

  • Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

We do not sell your personal information, and we do not share it with third parties for their own marketing purposes.

5. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this privacy notice unless otherwise required by law.

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).

Call recordings, call transcripts, voicemails, and messages taken by phone are deleted once your inquiry is resolved, unless we need to keep them longer to comply with the law or to resolve a dispute.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

6. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We aim to protect your personal information through a system of organizational and technical security measures.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.

7. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: Depending on where you live, you may have rights to access, correct, or delete your personal information.

Depending on where you live, including in the United Kingdom, the European Economic Area, Canada, and some U.S. states, you may have the right to request access to or a copy of your personal information, ask us to correct or delete it, object to or restrict how we process it, or withdraw consent you have given. Withdrawing consent does not affect processing that took place before you withdrew it. To make a request, email us at info@desertoakapothecary.com. We will respond in accordance with applicable law.

If you are located in the United Kingdom or European Economic Area and you believe we are unlawfully processing your personal information, you have the right to complain to your local data protection authority.

Opting out of marketing emails: You can unsubscribe from our marketing emails at any time by clicking the unsubscribe link in any email we send or by contacting us. We may still send you service-related messages, such as order updates or replies to your requests.

Account Information

If you would at any time like to review or change the information in your account or terminate your account, you can:

  • Contact us using the contact information provided.

  • Log in to your account settings and update your user account.

Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal terms and/or comply with applicable legal requirements.

8. CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this privacy notice.

9. DO CALIFORNIA RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: Yes. If you are a California resident, you have the rights described in this section.

Disclosures for direct marketing. California residents may request information about any personal information we have disclosed to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes.

Online tracking. Section 1 describes the information we and our service providers collect automatically when you visit our website, and Section 8 explains how we respond to Do-Not-Track signals. Third parties, such as Google, may collect information about your online activities over time and across different websites when you use our website.

Other California privacy rights. We do not sell your personal information. If California law gives you additional rights, such as the right to know, correct, or delete your personal information, you can exercise them by emailing info@desertoakapothecary.com.

10. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this privacy notice from time to time. The updated version will be indicated by an updated "Revised" date and the updated version will be effective as soon as it is accessible. If we make material changes to this privacy notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this privacy notice frequently to be informed of how we are protecting your information.

11. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, email Desert Oak Apothecary LLC, San Antonio, Texas, at info@desertoakapothecary.com.

12. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Based on the applicable laws of where you live, you may have the right to request access to the personal information we collect from you, change that information, or delete it. To request to review, update, or delete your personal information, email us at info@desertoakapothecary.com.