1. Introduction

a. This Privacy Policy (“Policy”) applies to the collection and processing of personal data (“Personal Data”) by ReplenishedRoot (“we”, “our”, “us”) in connection with our website and services. This Policy explains how we collect, use, and protect your Personal Data.

b. By visiting our website or purchasing something from us, you agree to the terms of this Privacy Policy.

2. Personal Data We Collect

a. Personal Data means any information that can identify an individual. It does not include anonymous data where the identity has been removed (e.g., IP address logs).

b. Information you may provide through our website includes:

• Contact Data: your name, email, billing address, shipping address, and phone number.
• Profile Data: username and password (if you create an account).
• Communications: questions, feedback, or messages shared through our website, email, or social media (including WhatsApp, Instagram, and Facebook).
• Transactional Data: details about your orders, invoices, and payment history.

3. How We Use Your Personal Data

We use your information to:

a. Provide products and services offered by ReplenishedRoot.

b. Respond to inquiries, requests, and feedback.

c. Improve our website, services, and customer experience.

d. Process payments securely and prevent fraud.

e. Fulfill our legal and financial obligations.

f. Send newsletters, updates, or promotions (if you have opted in).

g. Handle disputes or enforce our agreements.

4. Sharing Your Personal Data

To deliver our services, we may share your Personal Data with trusted third parties, including:

• Payment Processors & Financial Institutions (to process secure payments).
• Courier/Logistics Providers (for product delivery).
• Business Service Providers (such as web hosting or analytics platforms).
• Regulatory Authorities (where legally required).

We do not sell your Personal Data.

5. Protecting Your Personal Data

a. We take reasonable steps to secure your Personal Data through organizational, technical, and administrative safeguards.

b. If a data breach occurs, we will notify you and relevant regulators where required by law.

6. Data Retention

a. We keep your Personal Data only for as long as necessary to fulfill the purposes set out in this Policy, including compliance with legal and financial obligations.

b. If you maintain an account with us, we retain your information while your account is active or until you request deletion. Some data may be kept for legal or reporting purposes.