Privacy Policy

Last updated: April 23, 2026

Gaia's Garden Organics ("we," "us," "our") respects your privacy. This Privacy Policy explains what information we collect when you visit gaiasgardenorganics.com, place an order, subscribe to our newsletter, or otherwise interact with us — and how we use, share, and safeguard that information.

We are a small, family-run herbal apothecary based in Umpire, Arkansas. We only collect the information we need to fulfill your orders, stay in touch, and keep the site running — and we never sell your personal information.

Information we collect

Information you provide directly

Order information — name, shipping address, billing address, email, and phone number when you place an order.
Payment information — card and billing details are entered on Stripe's hosted checkout and processed by Stripe; we never see or store full card numbers on our servers.
Account and newsletter information — email address (and optionally name) when you subscribe to our newsletter, redeem a welcome offer, or opt in to marketing at checkout.
Customer service messages — anything you send us via our contact form or email, including the content of the message and your reply-to address.
Reviews and quiz responses — content you submit when writing a product review or completing one of our on-site quizzes (flower essence quiz, dosha quiz). Review content you submit may be displayed publicly on the associated product page.

Information collected automatically

Log and device data — IP address, browser type, referring page, pages visited, and timestamps. This is used for security, fraud prevention, and to keep the site running reliably.
Cookies and similar technologies — we use a small number of first-party cookies and browser storage to keep items in your cart, remember whether you've seen the welcome offer, and keep you signed in if you're an administrator. See "Cookies" below.

How we use your information

To process, fulfill, and ship your orders, and to provide customer service related to those orders.
To send order confirmations, shipping updates, and other transactional messages.
To send our newsletter and occasional marketing messages — only if you've opted in. You can unsubscribe at any time using the link at the bottom of any marketing email.
To manage any recurring subscriptions you've started through our Subscribe & Save program.
To personalize your experience — for example, remembering your cart or showing you products related to a quiz result.
To analyze how the site is used so we can improve it.
To detect and prevent fraud, abuse, and security incidents.
To comply with our legal obligations, including tax reporting and responding to lawful requests.

Who we share your information with

We share your information only with the service providers we need to run the business. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

Stripe — processes all payments and (if you use Subscribe & Save) manages your recurring subscription and billing portal.
Resend — delivers our transactional emails (order confirmations, shipping updates) and newsletter.
USPS — delivers your order. We share the name and address you provide at checkout.
Replit — hosts this website, including our application servers and image storage.
Legal and safety — we may disclose information if required by law, subpoena, court order, or to protect the rights, property, or safety of Gaia's Garden Organics, our customers, or others.
Business transfers — if we ever sell, merge, or transfer the business, customer information may transfer as part of that transaction. We'll let you know if that happens.

Cookies and analytics

We use a small number of cookies and browser storage entries to make the site work:

Cart and session — remembering the items in your cart, recently viewed products, and whether you've dismissed the welcome offer.
Authentication — keeping administrators signed in to the admin dashboard.
Analytics — basic, privacy-respecting analytics to understand aggregate traffic. We do not use cross-site tracking, third-party ad pixels, or retargeting tags.

Most browsers let you block or delete cookies through your settings. Blocking cookies may prevent some parts of the site — like the cart and checkout — from working.

Email marketing

When you subscribe to our newsletter, claim a welcome offer, or opt in to marketing at checkout, you're telling us it's okay to email you about new products, seasonal herbal content, and occasional promotions. We send these through Resend. Every marketing email includes an unsubscribe link, and you can also email us at hello@gaiasgardenorganics.com to be removed. Unsubscribing from marketing does not unsubscribe you from transactional messages about orders you've placed.

Your privacy rights

Depending on where you live, you may have the right to:

Request access to the personal information we hold about you.
Request correction or deletion of that information.
Opt out of marketing emails at any time.
Ask us to limit how we use your information.
Request a copy of your information in a portable format.

If you live in California, Colorado, Connecticut, Virginia, or another state with comprehensive privacy laws, you have specific rights under those laws, including the right to know, delete, correct, and opt out of "sale" or "sharing" as defined by those laws. You can review your options on our Your Privacy Choices page or email us to exercise any of these rights.

To make a request, email hello@gaiasgardenorganics.com with the subject line "Privacy Request." We may need to verify your identity before responding. We'll respond within the timeframes required by applicable law.

Data retention

We keep order and customer records as long as is reasonably needed to provide our services, honor warranties and returns, and comply with legal obligations (including tax and accounting requirements). Newsletter subscriber records are retained until you unsubscribe. We periodically review and delete information we no longer need.

Security

We use industry-standard safeguards to protect your information, including encrypted connections (HTTPS), hashed administrator passwords, and a managed database with access controls. Payment card details are handled entirely by Stripe, which is PCI-DSS Level 1 certified. No system is perfectly secure, and we cannot guarantee absolute security, but we take our responsibility to protect your information seriously.

Children's privacy

Our site and products are not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

International visitors

We are based in the United States and currently ship within the United States. If you access the site from outside the U.S., your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country.

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we'll update the "Last updated" date at the top of this page and, where appropriate, notify you by email. We encourage you to review this policy periodically.

Contact us

Questions, concerns, or privacy requests? Write to us:

Gaia's Garden Organics
Email: hello@gaiasgardenorganics.com
Umpire, Arkansas, USA