Ruthy Caribbean Botanica

Privacy Policy

Effective date: May 12, 2026

This Privacy Policy describes how Ruthy Caribbean Botanica ("we," "us," or "our") collects, uses, and shares information when you use our mobile application, website, or place an order with us (collectively, the "Services").

By using the Services, you agree to this Policy. If you do not agree, please do not use the Services.

1. Information we collect

Information you provide

Information collected automatically

We do not collect

2. How we use information

3. Service providers we share information with

We share the minimum information needed with trusted vendors who help us run the business:

We do not sell your personal information. We do not share it with advertisers or data brokers.

4. Legal disclosures

We may disclose information if required by law, subpoena, or court order, or to protect the rights, property, or safety of Ruthy Caribbean Botanica, our customers, or others.

5. Data retention

We keep account and order information for as long as your account is active and for a reasonable period afterward to satisfy tax, accounting, and legal obligations (generally 7 years for transaction records). You can request deletion of your account at any time — see Section 7.

6. Security

We use industry-standard safeguards including encryption in transit (HTTPS/TLS), encryption at rest, restricted administrative access, and secure payment processing through Square. No system is perfectly secure, but we work to protect your information.

7. Your rights

Depending on where you live, you may have the right to:

To exercise any of these rights, email hello@ruthycaribbeanbotanica.com. We will respond within 30 days.

California residents (CCPA/CPRA)

California residents have the rights described above, plus the right to know what categories of personal information we collect, the right to non-discrimination for exercising privacy rights, and the right to limit the use of sensitive personal information. We do not sell or share personal information for cross-context behavioral advertising.

EU/UK residents (GDPR)

If you are in the EU or UK, our legal bases for processing are: (a) performance of a contract (to fulfill your orders), (b) legitimate interests (to operate and improve the Services, prevent fraud), (c) consent (for push notifications and marketing emails), and (d) legal obligation (tax and accounting records).

8. Children

The Services are not intended for children under 13 (or under 16 in the EU/UK). We do not knowingly collect personal information from children. If you believe a child has provided us with information, email us and we will delete it.

9. International transfers

We operate in the United States. If you use the Services from outside the US, your information will be transferred to and processed in the US, which may have different data protection laws than your country.

10. Account deletion

You can request deletion of your account and personal data at any time by emailing hello@ruthycaribbeanbotanica.com from the address on file. We will confirm and complete deletion within 7 business days, except where retention is required by law (e.g., past transactions for tax records).

11. Changes to this policy

We may update this Policy from time to time. The "Effective date" at the top reflects the latest revision. Material changes will be communicated in-app or by email before they take effect.

12. Contact us

Questions, requests, or complaints about this Policy:

Ruthy Caribbean Botanica
Email: hello@ruthycaribbeanbotanica.com