Privacy policy

What we collect

• Account details: name, email, phone, password hash.
• Order data: items, prices, billing and shipping addresses, payment processor references (never card numbers).
• Age and identity verification: the provider's pass/fail result and reference token only. We do not retain identity documents.
• Wholesale documents: resale certificates and licences, retained for the period required by tax law.
• Marketing consent records, support messages and attachments.
• Analytics identifiers and cookies, subject to your consent choices.

Data minimisation

We retain the least data needed for the purpose. Prohibited product-level and health-inferring data is never transmitted to advertising platforms, and cookie and tracking consent is honoured before any non-essential script loads.

Retention

Order and tax records are retained for the statutory period. Verification results are retained only as long as the provider contract and applicable law require. Support attachments are purged on a rolling schedule.

Your rights

You may request access, correction, export or deletion of your personal data, and opt out of sale or sharing where applicable. Email privacy@overstockhemp.com.