Privacy policy

Information We Collect

We collect information you provide directly to us, including:

• Your email address, which you use to sign in with a one-time code. We don't use passwords.
• Your name, phone number, and delivery and billing addresses
• Payment information, which is handled by our payment processor. We never receive your full card number.
• Your confirmation that you are 21 or over and, for delivery to some states, that our products are legal where you live, recorded with each order
• Your order history
• Product reviews you send us, with the display name you choose, which is published with the review once we approve it
• Messages you send us through our contact form

We also record your IP address and basic browser information when you sign in, contact us or place an order, to keep the site secure and prevent abuse, for example by limiting repeated sign-in attempts.

How We Use Your Information

• Process and fulfill your orders
• Send order confirmations and shipping updates
• Respond to your questions and requests
• Send marketing communications (with your consent)
• Keep the site secure and prevent fraud and abuse
• Improve our website and products
• Comply with legal obligations

Marketing Emails

When you create an account, you confirm you are 21 or over and agree to receive emails from us about offers, discount codes and new releases. We record when you agreed. You can unsubscribe at any time by asking through our contact page, and we will stop within 10 business days. Unsubscribing does not stop emails about your orders or sign-in codes, which we need to send to provide the service.

Information Sharing

We do not sell your personal information. We share it only with the service providers that run our shop (website hosting, servers and databases, network security and image storage, email delivery, and bot protection), with our payment processor and shipping carriers for your orders, and when the law requires it. These providers handle your information on our behalf, only to run the services we use them for.

Data Security

We implement industry-standard security measures to protect your information. All transactions are encrypted using SSL technology. We do not store complete credit card information on our servers.

Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information
• Opt out of marketing communications
• Data portability where applicable

You can update your name, phone number and saved addresses yourself, in your account. To stop marketing emails, see Marketing Emails above.

For anything else, email us at contact@stealthbotanicals.com from the email address on your account. We'll reply to that address and act on your request once you confirm it from there, so that nobody else can see or delete your information. We respond within 30 days.

Some records we must keep even after deleting your account, because the law requires it: order, tax and payment records, and the age confirmation recorded with each order.

Cookies

We use only the cookies the shop needs to work:

• a sign-in cookie, which keeps you signed in for up to 7 days;
• a cart cookie, which remembers your cart for 30 days;
• a security cookie, which stops other websites submitting our forms in your name.

We use no analytics or advertising cookies. Your confirmation that you are 21 or over is kept in your browser only until you close it. Google's reCAPTCHA may set its own cookies; see below. You can control cookies through your browser settings, but without these the shop cannot sign you in or keep your cart.

Bot Protection (Google reCAPTCHA)

We use Google reCAPTCHA v3 on our contact form and at checkout to help prevent automated abuse. Its script loads on every page of the site. reCAPTCHA collects hardware and software information — such as device and application data — and behavioural signals to produce a risk score, in accordance with Google's own privacy practices. Your use of reCAPTCHA on this site is subject to the Google Privacy Policy and Terms of Service.