Privacy Policy
Last updated: July 2026
This policy explains what Pure and Delicious LLC (“Pure & Delicious,” “we”) collects, why we collect it, and what you can ask us to do with it. We've tried to write it in plain English rather than legalese.
We do not sell or share your personal information, and we never will.
What we collect
Information you give us directly:
- Account: name and email address when you create an account.
- Orders: shipping address, order contents, and order history.
- Email signups: your email address if you join our list.
- Messages: anything you send us through the contact form.
- Wholesale applications: clinic name, contact details, and business information.
We never see your card number. Payment details are entered on Stripe's own checkout page and handled entirely by Stripe. Nothing sensitive touches our servers — we only receive a confirmation that payment succeeded, plus the last four digits and card brand for your receipt.
Cookies and local storage
We use only what the store needs to function. There is no analytics script, no advertising pixel, and no third-party tracker on this site.
- Session cookies — keep you signed in.
- Referral cookie (
pd_ref, 30 days) — if you arrive through a referral link, this records who sent you so they get credit. - Your cart (
pd-cart-v1, 30 days) — kept in your own browser's local storage so your cart survives a refresh or a closed tab. It never leaves your device until you check out.
How we use it
- Process and ship your orders, and handle returns.
- Manage subscriptions and send renewal notices before we bill you.
- Send order confirmations, shipping updates, and account emails.
- Send marketing email, only if you asked for it — every marketing email has a one-click unsubscribe.
- Answer your questions and provide support.
- Detect fraud and abuse, including referral abuse.
- Meet tax, accounting, and other legal obligations.
Who processes your data
We use a small number of vendors to run the store. They only receive what they need to do their job, and they aren't permitted to use it for anything else:
- Stripe — payment processing and subscription billing.
- Supabase — our database and account sign-in.
- Vercel — website hosting.
- Resend — sending order and account email.
- Shippo — shipping labels and tracking; receives your shipping address only.
How long we keep it
Order records are kept as long as tax and accounting rules require — generally seven years. Account information is kept while your account is open. If you unsubscribe from marketing, we keep your email address on a suppression list specifically so we don't email you again by mistake.
Your rights
Wherever you live, you can ask us to show you the personal information we hold about you, correct it, or delete it. If you're in California, Colorado, Connecticut, Virginia, or another state with a consumer privacy law, those laws also give you the right to know what we collect, to delete it, to correct it, and not to be discriminated against for exercising those rights. Since we don't sell or share personal information, there's nothing to opt out of on that front.
To make a request, use our contact page. We'll verify it's really you and respond within 45 days. Some records — completed orders, for example — we may have to keep for legal reasons even after a deletion request; we'll tell you if that applies.
Children
This site isn't directed at children under 13, and we don't knowingly collect their information. If you believe a child has given us personal information, contact us and we'll delete it.
Security
Connections to this site are encrypted, payment data is handled by Stripe rather than by us, and access to customer records is limited to people who need it. No system is perfectly secure, but we keep the amount of sensitive data we hold deliberately small.
Changes
If we make a material change to this policy, we'll update the date at the top and, where it meaningfully affects you, tell you by email.
Contact
Questions about privacy? Reach us through our contact page.