The Modern Apothecary

Effective Date: July 18, 2026

The Modern Apothecary (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have over it when you visit themodernapothecary.org or place an order with us. This Policy is incorporated by reference into our Terms & Conditions.

1. Information We Collect

Information you provide directly:

• Full name
• Email address
• Billing and shipping address (U.S. only)
• Payment information (see “Payment Processing” below — we do not store full card numbers)
• Age/identity verification information, where required
• Any communications you send to us (support requests, order questions, etc.)

Information collected automatically:

• IP address and approximate location
• Browser type and device information
• Pages visited, time on site, and referring URLs
• Cookies and similar technologies necessary for the site to function (e.g., keeping items in your cart)

We currently do not use advertising or analytics cookies (such as ad pixels or third-party trackers) on this website. If that changes in the future, we will update this Policy and, where required by law, provide an opt-out mechanism before doing so.

2. How We Use Your Information

We use the information we collect to:

• Process and fulfill your orders
• Communicate with you about your order, including shipping and support
• Verify your age and eligibility to purchase under our Terms & Conditions
• Prevent fraud, misuse, and unauthorized purchases
• Maintain the security and functionality of our website
• Comply with applicable legal and regulatory obligations

We do not use your information to send unsolicited marketing communications. If we ever introduce a marketing email list, we will only add you with your explicit opt-in, and you will be able to opt out at any time.

3. Payment Processing

We accept payment via the methods listed at checkout, which may include Venmo, Cash App, credit/debit card, or other processors. When you pay through a third-party payment app or processor, that transaction is subject to the privacy policy and terms of that provider (e.g., Venmo, Cash App, or our card processor) in addition to this Policy. We do not control, and are not responsible for, how those third parties handle your data. We receive only the information necessary to confirm and fulfill your order (e.g., payment confirmation, order amount).

4. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties for money. We share information only in these limited circumstances:

• Service providers: with parties who help us operate the site, process payments, and fulfill orders (e.g., payment processors, shipping carriers, website hosting). These parties may only use your information to provide services to us.
• Legal compliance: if required by law, subpoena, court order, or governmental request, or if we believe disclosure is necessary to protect our rights, prevent fraud, or protect the safety of any person.
• Business transfer: if we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice if this occurs.
• Password/account resets: if we offer account functionality, a password-reset request will include your IP address in the reset email for security purposes.

5. Cookies

Our website uses cookies necessary for basic functionality, such as remembering items in your cart or maintaining a login session if account features are enabled. You can control or disable cookies through your browser settings; disabling them may affect site functionality. As noted above, we do not currently use cookies for advertising or cross-site tracking.

6. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, meet legal and tax recordkeeping obligations, resolve disputes, and enforce our agreements. Order records are generally retained for a minimum of five (5) years to comply with recordkeeping obligations related to regulated product sales.

7. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your information from unauthorized access, loss, or misuse. Sensitive information (such as payment data) is encrypted in transit; look for “https” and a lock icon in your browser address bar. Access to personally identifiable information is limited to personnel who need it to perform their job (e.g., order fulfillment, customer support). No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your state of residence, you may have rights that include:

• The right to know/access the personal information we hold about you
• The right to request correction of inaccurate information
• The right to request deletion of your personal information, subject to our legal recordkeeping obligations
• The right to opt out of the sale or sharing of personal information (see below — we do not currently sell or share data in this way)
• The right to opt out of marketing communications (we do not currently send any)
• The right not to be discriminated against for exercising any of these rights

To exercise any of these rights, contact us at [insert privacy contact email]. We will take reasonable steps to verify your identity before fulfilling a request and will respond within the timeframe required under applicable law (generally 45 days for California requests, extendable once by an additional 45 days if needed).

9. California Residents (CCPA/CPRA)

The Modern Apothecary does not sell personal information for monetary consideration and does not share personal information with third parties for cross-context behavioral advertising, as those terms are defined under the CCPA/CPRA. We share limited information only with service providers as described in Section 4, which does not constitute a “sale” or “sharing” under California law. If this changes, we will update this Policy and provide the required opt-out tools at that time.

California residents may also have rights under California’s “Shine the Light” law (Civil Code § 1798.83) regarding disclosures to third parties for direct marketing; we do not share information for that purpose.

10. Other State Privacy Rights

Residents of certain other states (including, as of this Policy’s effective date, Colorado, Connecticut, Utah, Virginia, and others with comparable consumer privacy laws) may have similar rights to know, access, correct, delete, and opt out of certain uses of personal information. To make a request under any applicable state law, contact us using the information in Section 13. As with California requests, we will verify your identity and respond within the timeframe required by the applicable law.

11. Children’s and Minors’ Privacy

Our website is not directed to, and we do not knowingly collect personal information from, anyone under the age of 21. If we become aware that we have inadvertently collected such information, we will take steps to delete it promptly. See our Terms & Conditions for our age-verification and minor-purchase policy.

12. Third-Party Links and Embedded Content

Our website may contain links to third-party websites or embedded content. This Policy does not apply to those sites or services, and we are not responsible for their privacy practices. We encourage you to review the privacy policy of any third-party site before providing information to it.

13. Contact Us

If you have questions or concerns about this Privacy Policy, or to submit a request regarding your personal information, contact us at:

The Modern Apothecary cs@themodernapothecary.org

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page. Material changes affecting how we use previously collected information will be communicated via a notice on this website. Your continued use of the site after a change constitutes acceptance of the updated Policy.