Privacy policy

Privacy Policy

Last updated: July 7, 2026

Coastal Root Co. operates this store and website, including all related information, content, features, tools, products, and services, in order to provide you with a curated shopping experience. These are referred to in this Privacy Policy as the “Services.”

Coastal Root Co. is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how Coastal Root Co. collects, uses, discloses, and protects your personal information when you visit our website, use our Services, make a purchase, communicate with us, sign up for marketing, or otherwise interact with Coastal Root Co.

Please read this Privacy Policy carefully. By using or accessing any of our Services, you acknowledge that you have read and understand this Privacy Policy and how we collect, use, and disclose your information.

If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, use, processing, and disclosure of your personal information.

Personal Information We Collect

When we use the term “personal information,” we mean information that identifies, relates to, describes, or can reasonably be linked to you or another person. Personal information does not include information that has been collected anonymously or de-identified so that it cannot reasonably identify or be linked to you.

Depending on how you interact with our Services, where you live, and what features you use, we may collect or process the following categories of personal information:

Contact Information
This may include your name, billing address, shipping address, email address, and phone number.

Order and Transaction Information
This may include products you view, add to your cart, purchase, return, exchange, or cancel, as well as order history, transaction details, shipping details, payment confirmation, and customer service records.

Payment Information
This may include payment card details, billing information, payment confirmation, and other payment-related information. Payment information is processed through Shopify and/or third-party payment processors. We do not store full payment card numbers on our own systems.

Account Information
This may include your username, password, preferences, saved addresses, order history, and account settings if you create an account.

Communications With Us
This may include information you provide when contacting us by email, through our website, social media, customer service forms, reviews, or other communication methods.

Device and Usage Information
This may include information about your device, browser, IP address, network connection, cookies, unique identifiers, pages viewed, products viewed, links clicked, search activity, cart activity, and how you interact with our Services.

Marketing and Preference Information
This may include your email preferences, marketing opt-ins, products you are interested in, and interactions with promotional communications.

How We Collect Personal Information

We may collect personal information from the following sources:

Directly from you when you create an account, place an order, contact us, subscribe to emails, submit a form, leave a review, or otherwise provide information to us.

Automatically through the Services when you visit our website, browse products, interact with our store, or use features powered by cookies, pixels, analytics tools, or similar technologies.

From Shopify and service providers who help us operate our store, process payments, fulfill orders, provide customer support, analyze website activity, prevent fraud, and improve the Services.

From partners or third parties such as marketing platforms, analytics providers, advertising partners, shipping providers, payment processors, social media platforms, or other third-party tools connected to our Services.

How We Use Personal Information

We may use your personal information for the following purposes:

To Provide, Operate, and Improve the Services

We use your personal information to operate our website, process orders, accept payments, fulfill purchases, arrange shipping, provide customer support, manage accounts, process returns or exchanges, remember preferences, improve our website, and provide a more personalized shopping experience.

To Process Orders and Transactions

We use your information to process payments, confirm orders, send order updates, arrange delivery, handle returns or refunds, prevent fraud, and maintain records related to purchases.

To Communicate With You

We may use your information to respond to questions, provide customer support, send order updates, notify you about your account, respond to requests, and maintain our business relationship with you.

For Marketing and Advertising

We may use your personal information to send promotional emails, newsletters, product updates, special offers, or other marketing communications where permitted by law.

We may also use information about your interactions with our website, products, emails, or advertisements to provide more relevant marketing and advertising.

You may opt out of promotional emails at any time by using the unsubscribe link included in our emails or by contacting us at Info@CoastalRootCo.com.

Even if you opt out of promotional communications, we may still send you non-promotional messages, such as order confirmations, shipping updates, account notices, policy updates, or customer service communications.

For Security and Fraud Prevention

We use personal information to help authenticate accounts, protect our website, detect and prevent fraud, investigate suspicious activity, protect our rights, and provide a secure shopping experience.

For Legal and Business Purposes

We may use personal information to comply with applicable laws, respond to valid legal requests, enforce our Terms of Service, protect our rights, resolve disputes, maintain records, cooperate with law enforcement or government agencies, and participate in legal or regulatory proceedings.

How We Disclose Personal Information

We may disclose personal information to third parties for legitimate business purposes, including:

Shopify

Our store is powered by Shopify. Shopify collects and processes personal information about your access to and use of the Services in order to provide, support, protect, and improve the Services.

Information you submit to the Services may be transmitted to and shared with Shopify and its service providers, including parties located in countries other than where you reside.

Vendors and Service Providers

We may disclose personal information to vendors and service providers who help us operate our business, including payment processors, shipping providers, fulfillment partners, customer support providers, IT providers, analytics providers, marketing platforms, cloud storage providers, fraud prevention providers, and professional advisors.

Business and Marketing Partners

We may disclose personal information to business and marketing partners to help provide advertising, analytics, promotional services, or personalized shopping experiences.

Depending on where you reside, you may have the right to opt out of certain targeted advertising, data sharing, or sales of personal information as defined by applicable law.

To exercise privacy choices, you may contact us at Info@CoastalRootCo.com.

When You Direct or Consent to Disclosure

We may disclose information when you direct us to do so, request that we do so, or otherwise provide consent. For example, this may occur when you use social media features, third-party integrations, shipping services, or other connected tools.

Business Transfers

We may disclose personal information in connection with a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or other business transaction involving Coastal Root Co.

Legal Compliance and Protection

We may disclose personal information when necessary to comply with applicable law, respond to subpoenas, court orders, search warrants, government requests, or legal processes, enforce our Terms of Service or policies, protect our rights, protect the rights or safety of others, detect fraud, or prevent unlawful activity.

Relationship With Shopify

Our Services are hosted by Shopify, which enables us to provide our online store and related Services to you.

Shopify may collect and process personal information about your interactions with our store, other merchants, and Shopify in order to provide, protect, improve, and personalize its services.

In some cases, Shopify may process personal information independently for its own purposes, including to provide enhanced features, fraud prevention, analytics, and personalized shopping experiences.

To learn more about how Shopify uses personal information, you may review Shopify’s Consumer Privacy Policy through Shopify’s website.

Depending on where you live, you may also have certain rights with respect to personal information processed by Shopify.

Cookies and Similar Technologies

We and our service providers may use cookies, pixels, tags, analytics tools, and similar technologies to operate the website, remember your preferences, understand how visitors use the Services, improve functionality, prevent fraud, support advertising, and personalize your shopping experience.

You may be able to control cookies through your browser settings. If you disable cookies, some parts of the Services may not function properly.

Depending on where you live, you may have additional rights to manage cookies or opt out of certain tracking technologies.

Third-Party Websites and Links

The Services may contain links to websites, apps, platforms, or online services operated by third parties.

If you follow links to websites or platforms not controlled by Coastal Root Co., you should review their privacy policies, security practices, and terms of use.

We are not responsible for the privacy, security, accuracy, content, or practices of third-party websites, platforms, or services.

Information you share on public or semi-public platforms, including social media, may be viewable by others and may be used by third parties according to their own policies.

Children’s Privacy

Our Services are not intended for children under the age of 13.

We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at Info@CoastalRootCo.com so we can take appropriate steps to delete the information.

We do not knowingly sell or share personal information of individuals under 16 years of age as those terms are defined under applicable privacy laws.

Security of Your Information

We use reasonable administrative, technical, and organizational measures to help protect personal information.

However, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee perfect security.

Please avoid sending sensitive or confidential information to us through unsecured channels.

You are responsible for maintaining the confidentiality of your account credentials and for any activity under your account.

Retention of Personal Information

We retain personal information for as long as reasonably necessary to provide the Services, fulfill orders, maintain your account, comply with legal obligations, resolve disputes, enforce agreements, prevent fraud, maintain business records, and support legitimate business purposes.

The length of time we retain information depends on the nature of the information, the purpose for which it was collected, legal requirements, and business needs.

Your Rights and Choices

Depending on where you live, you may have some or all of the following rights regarding your personal information. These rights are not absolute and may apply only in certain circumstances.

Right to Access or Know

You may have the right to request access to personal information we maintain about you.

Right to Delete

You may have the right to request that we delete certain personal information we maintain about you.

Right to Correct

You may have the right to request that we correct inaccurate personal information we maintain about you.

Right to Portability

You may have the right to receive a copy of personal information we maintain about you in a portable format, where required by law.

Right to Opt Out of Sale, Sharing, or Targeted Advertising

Depending on where you live, you may have the right to opt out of the sale or sharing of personal information or the processing of personal information for targeted advertising.

To exercise this right, you may use any privacy choices or opt-out tools available on our website, adjust your cookie preferences where available, or contact us at Info@CoastalRootCo.com.

If you visit our website with a legally recognized universal opt-out preference signal enabled, such as Global Privacy Control, we will process that signal where required by applicable law.

Other than legally required signals, we may not respond to “Do Not Track” signals sent by browsers or devices.

Managing Marketing Communications

You may opt out of promotional emails at any time by clicking the unsubscribe link in our emails or by contacting us at Info@CoastalRootCo.com.

If you opt out of marketing communications, we may still send you non-promotional messages, including order updates, shipping notices, account communications, customer service responses, or legal notices.

Authorized Agents

Where permitted by law, you may designate an authorized agent to submit privacy requests on your behalf.

Before accepting a request from an authorized agent, we may require proof that you authorized the agent to act on your behalf, and we may require you to verify your identity directly with us.

Verification of Requests

We may need to verify your identity before processing certain privacy requests.

We will respond to privacy requests within the timeframe required by applicable law.

We will not discriminate against you for exercising your privacy rights.

Rights for Residents of the United Kingdom or European Economic Area

If you reside in the United Kingdom or European Economic Area, you may have additional rights under applicable data protection laws, subject to certain limitations and exceptions.

These rights may include:

The right to object to certain processing.

The right to restrict certain processing.

The right to withdraw consent where processing is based on consent.

The right to lodge a complaint with your local data protection authority.

If we transfer personal information outside the European Economic Area or United Kingdom, we will rely on recognized transfer mechanisms where required, such as Standard Contractual Clauses or other lawful transfer mechanisms.

Complaints

If you have concerns or complaints about how we process your personal information, please contact us at Info@CoastalRootCo.com.

Depending on where you live, you may have the right to appeal our decision or lodge a complaint with your local data protection authority.

International Transfers

We may transfer, store, and process personal information outside the country, state, or region where you live.

If we transfer personal information from the European Economic Area or United Kingdom to another country, we will rely on legally recognized transfer mechanisms where required by applicable law.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, technologies, legal requirements, or business operations.

When we update this Privacy Policy, we will post the revised version on this website and update the “Last updated” date.

Where required by law, we will provide additional notice of material changes.

Your continued use of the Services after an updated Privacy Policy is posted means you acknowledge the updated Privacy Policy.

Contact Us

If you have any questions about this Privacy Policy, our privacy practices, or if you would like to exercise any privacy rights available to you, please contact us at:

Coastal Root Co.
Email: Info@CoastalRootCo.com

For purposes of applicable data protection laws, Coastal Root Co. is the data controller of your personal information.