Privacy Policy

Natural Pet Pantry ("we," "us," or "our") operates the NaturalPetPantry.com website (the "Site"). This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and your rights regarding that information.

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

1. Information We Collect

Information You Provide

• Name, email address, phone number, and password when you create an account
• Shipping and billing addresses when you place an order
• Payment information when you make a purchase (see Section 3)
• Any information you submit through our contact form

Information Collected Automatically

When you visit our Site, we process technical information such as IP address and browser user-agent for security, fraud prevention, and rate limiting. We also use privacy-respecting analytics services to understand how visitors use our Site so we can improve it; see Section 5 for details. We do not use advertising networks, remarketing pixels, or cross-site behavioral tracking.

To diagnose technical problems and improve reliability, a small random sample of browsing sessions may be recorded by our error-monitoring service. These recordings are used only to reproduce bugs and are retained for a limited period.

Information We Derive

We compute aggregate statistics about your account activity (such as total orders, average order value, order frequency, and recurring item status) to operate recurring deliveries, detect payment issues, and provide customer support. We also maintain an internal activity log of account events for security and audit purposes.

2. How We Use Your Information

We use your personal information to:

• Process and fulfill your orders, including payment, delivery, and tax calculation
• Create and manage your account
• Send transactional emails such as order confirmations and delivery reminders
• Send transactional text messages (SMS) about your own orders to your verified phone number, only when you have explicitly opted in
• Send optional delivery area reminders (a heads-up before we're in your neighborhood) when you have explicitly opted in from your Notifications tab
• Manage recurring orders on your behalf
• Respond to your inquiries
• Protect against fraud and abuse
• Improve our Site and services

3. Payment Information

Your credit card information is collected and processed directly by our PCI-compliant payment processor. We never receive or store your full credit card number. We retain only a masked reference (last 4 digits and card brand) so you can identify your saved cards.

4. Third-Party Service Providers

We share your information only with the following categories of service providers as necessary to operate our business:

• Payment processing: to tokenize cards and process transactions
• Transactional email delivery: to send order confirmations, delivery reminders, and account notifications
• Transactional SMS delivery and phone verification: to send opt-in text messages about your orders and to verify your phone number via a one-time code, when you choose SMS notifications
• Address verification and geocoding: to validate delivery addresses and confirm delivery zones
• Government tax authorities: to calculate destination-based sales tax
• Hosting, database, and infrastructure providers: to securely store and serve your data
• Analytics: to measure aggregate site traffic and understand how visitors use our Site
• Error monitoring and diagnostics: to detect and resolve technical issues

These providers are not permitted to use your data for their own purposes. We may also disclose information when required by law or to protect our rights.

5. Cookies & Browser Storage

We use the following categories of cookies and similar technologies:

• Essential cookies: To keep you signed in to your account. These are required for the Site to function.
• Analytics cookies: We use Google Analytics 4 to understand how visitors use our Site so we can improve it. Google Analytics sets first-party cookies (such as _ga and _ga_*) that record a pseudonymous identifier and basic interaction data such as pages viewed, referring site, and approximate geographic region. We have not enabled Google's advertising features, so this data is not used for ad targeting or remarketing.
• Cookieless analytics: We also use Vercel Analytics, which measures aggregate traffic without setting cookies or tracking individual users across sites.

Your shopping cart is stored in your browser's local storage. We do not use advertising cookies, remarketing pixels, or cross-site behavioral tracking.

Your choices. When you first visit, a banner lets you decline analytics cookies, and you can change your choice at any time using the Cookie Settingslink in the footer. We also honor the Global Privacy Control (GPC) signal: if your browser sends it, we treat analytics as declined automatically. You can additionally install Google's official opt-out browser add-on at tools.google.com/dlpage/gaoptout. Most browsers also let you block or delete cookies in their settings; note that blocking essential cookies will prevent you from staying signed in.

6. Data Security

We use industry-standard security measures to protect your personal information, including encrypted connections and secure payment processing. While we take reasonable precautions, no method of transmission over the Internet is 100% secure. We will never ask you to submit your password or financial information via email.

7. Data Retention

We retain your account and order information for as long as your account is active or as needed to provide services, comply with legal and tax obligations, and resolve disputes. You may request deletion of your account at any time by contacting us.

8. Your Rights

You may:

• Request a copy of the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your personal data, subject to legal retention requirements
• Opt out of non-essential communications at any time

To exercise any of these rights, contact us using the information below. We will respond within 30 days.

9. California Residents (CCPA/CPRA)

If you are a California resident, the CCPA and CPRA provide you with additional rights, including the right to know what personal information we collect, request its deletion, and opt out of its "sale" or "sharing." We do not sell your personal informationfor monetary consideration. Our use of Google Analytics may, under a broad reading of the CPRA, qualify as "sharing" for analytics purposes; you can opt out at any time using the methods described in Section 5.

10. Children's Privacy

Our Site is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

11. Contact Form Submissions

Messages you send through our contact form are delivered to the appropriate member of our team by email and are not stored in our customer database.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected by the "Last updated" date at the top of this page. When you create an account, we record the version of this Privacy Policy and our Terms of Service that you accepted, along with the timestamp of acceptance.

13. Contact Us

If you have questions or requests regarding this Privacy Policy, please contact us.