Privacy Policy

1. Information We Collect

1.1 Information You Provide

We collect information you provide directly, including:

• Name, email address, billing address, and shipping address;
• Phone number;
• Payment information, which is processed by our payment processors. We do not store full payment card numbers;
• Order history and purchase activity;
• Subscription enrollment and status;
• Rewards program and referral program activity;
• Reviews, questions, and other content you submit to us;
• Messages you send to our virtual assistant or to our support team through the chat window on this site, including anything you choose to type into it; and
• Information you submit when booking a consultation, including your name, email address, phone number, the meeting format you select, and the topics you describe.

1.2 Information Collected Automatically

We automatically collect certain technical information when you visit our website, including:

• IP address and approximate location;
• Browser type, device type, and operating system;
• Pages visited, referring pages, and time spent on the site;
• How you interact with our pages, including the links and buttons you click and your interactions with forms, as described in Section 5;
• Technical reports generated when part of a page fails to work correctly in your browser, as described in Section 5;
• Information collected through cookies and similar technologies, as described in Sections 5 and 6;
• Information held temporarily in your browser’s session storage by our chat assistant, which consists of a randomly generated conversation identifier, the text of your current conversation, and whether the chat window is open. That information is cleared when you close the browser tab; and
• Fraud prevention signals.

1.3 Information We Do Not Collect

We do not collect or store your date of birth or your government-issued identification. Age and identity verification is required by law before we ship, and that information is submitted directly to our age and identity verification provider. It is not entered into or held by our website. See Section 3.

2. How We Use Your Information

We use the information we collect to:

• Process and fulfill orders;
• Confirm that age and identity verification has been completed, as described in Section 3;
• Manage subscriptions and recurring billing;
• Operate the rewards program and the referral program;
• Prevent fraud, abuse, and unauthorized account activity, including associating accounts, orders, and attempted orders with a person who has engaged in conduct prohibited by the Master Terms & Conditions, Section 5, using information reasonably available to us such as name, email address, shipping and billing addresses, payment method, device and network information including IP address, verification records, and order history;
• Provide customer support, including through our virtual assistant;
• Schedule and conduct consultations you request;
• Send transactional communications, including order confirmations, shipping updates, and account notices;
• Send marketing communications, subject to your preferences;
• Invite you to review products you have purchased, and publish reviews you submit;
• Measure how our website performs, and find and fix errors in it, as described in Section 5; and
• Comply with legal obligations and respond to lawful requests.

3. Age and Identity Verification

Because our products are subject to age restrictions, age and identity verification is required before an order is processed.

Verification is performed by AgeChecker.net, an independent third-party verification provider. Your date of birth and any government-issued identification you are asked to provide are submitted directly to that provider. We do not receive, store, or have access to those documents, and the provider’s own privacy policy and terms govern how it handles them. If we change verification providers, we will update this Policy. That provider operates its own website and sets its own cookies, including advertising and analytics cookies, on its own domain during verification. Those are not set by us and are not covered by Section 5.

We receive the outcome of the verification check and the limited information needed to associate that outcome with your order and account. We retain that record for as long as necessary to demonstrate that verification was completed, to prevent fraud and abuse, and to enforce the Master Terms & Conditions, including Section 5.

4. How We Share Your Information

We share limited information with third parties as necessary to operate our business, including:

• Payment processors, for billing and payment fraud prevention;
• Shipping carriers and fulfillment partners, for order delivery;
• Our age and identity verification provider, as described in Section 3;
• Fraud prevention and security service providers;
• Website hosting, email, and customer support service providers;
• Our website analytics provider, as described in Section 5;
• Our product analytics provider, as described in Section 5;
• Our error monitoring provider, as described in Section 5;
• Our email marketing platform, as described in Section 5;
• The artificial intelligence provider that powers our virtual assistant, as described in Section 5;
• Our product review platform, as described in Section 5;
• Our appointment scheduling provider, as described in Section 5;
• Our form security provider, as described in Section 5; and
• Legal or regulatory authorities, where required by law or in response to valid legal process.

Where we engage a service provider, we require by contract that it use the information only to perform services for us and not for its own purposes. That restriction does not apply to our age and identity verification provider or to our appointment scheduling provider, each of which operates under its own terms as described in Sections 3 and 5.

5. Analytics, Advertising, and Third-Party Services

We do not sell your personal information, and we do not share it for targeted advertising.

Website analytics

We use Google Analytics to measure how our website performs. This technology reports website usage to Google, including pages visited, approximate location, and identifiers stored in your browser. We use it for measurement only. We currently operate two Google Analytics properties, and the cookies each one sets are identified individually in Section 6. We have not enabled Google advertising features on either property, we do not use Google advertising tags on this website, we do not use social media advertising pixels, and we do not participate in any third-party affiliate advertising network.

Product analytics

We use PostHog, a product analytics service, to understand how visitors use our website so that we can improve it. PostHog automatically records the pages you view and how you interact with them, including the links and buttons you click, your interactions with forms, repeated rapid clicks on the same spot, and clicks that produce no response. That information, together with your IP address, your browser and device information, and an identifier stored in your browser, is sent to PostHog’s servers in the United States. We have configured PostHog not to create a profile of an individual visitor unless that visitor has been identified to it. We use it for measurement only.

Error monitoring

We use TrackJS to detect errors in our website’s code. When a script error occurs on a page you are viewing, information about that error is sent to TrackJS, including the error message, the address of the page, and your browser, device, and operating system, along with your IP address, which accompanies any request your browser makes. We use it only to find and fix problems with the website.

Session recording

We do not record or replay visitor sessions. None of the services described in this Section is configured to capture a recording of what you see or do on our website. We will not begin recording or replaying sessions unless we first amend this Policy to describe that practice, and any such amendment takes effect as provided in Section 13.

Email marketing

We use Klaviyo, an email marketing platform, to send order and account notifications and marketing email, and to see which messages are opened and acted on. Where you subscribe, place an order, or otherwise provide your email address, that address and your order history are shared with Klaviyo. Klaviyo also sets cookies, identified in Section 6, that connect your activity here to your subscriber record. An email address you enter at checkout is shared with Klaviyo when you enter it, whether or not you complete the order. If you do not complete it, we may email you about the items you left. Where Klaviyo has already identified your browser, the products you view are recorded, and we may email you about them. These are marketing emails. You may unsubscribe from marketing email at any time using the link in any message.

Virtual assistant

The chat window on this site is our own software, built in-house and hosted on our own systems. To generate a reply, the message you send, the recent messages in that conversation, and information drawn from this website such as page text and product details are transmitted to Anthropic, the artificial intelligence provider that powers the assistant. Where you have proven ownership of an order by order number, emailed code, or account login, the details of that order may also be transmitted so that the assistant can answer your question about it. Your IP address, your cookies, and your account credentials are not transmitted to that provider. Anthropic states that it deletes these inputs and outputs from its systems within thirty days, that it does not use them to train its models, and that content its automated safety systems flag may be retained for longer. Messages exchanged with a member of our team rather than with the assistant are never transmitted to that provider.

Product reviews

We use YUKO, an independent product review platform, to collect and display customer reviews. Where you place an order, your name, email address, and order details are shared with YUKO so that it can invite you to review what you purchased and verify that a reviewer bought the product. Reviews you submit, and the name you choose to display with them, are published on this site and held by YUKO.

Consultation scheduling

We use Calendly, an independent third-party scheduling provider, for consultation booking. Where you book a consultation, the name, email address, phone number, meeting format you select, and anything you enter in the booking form are submitted directly to Calendly. We receive the resulting booking record. That provider’s own privacy policy and terms govern how it handles what you submit, and if we change scheduling providers, we will update this Policy.

Form security

We use Google reCAPTCHA to protect the forms on this site from automated abuse. Where you load or submit a form, reCAPTCHA collects information about your device and your interaction with the page, including your IP address, and sends it to Google to distinguish human visitors from automated ones. That use is governed by Google’s privacy policy and terms of service.

If any of this changes, we will update this Policy before the change takes effect, in accordance with Section 13.

You may block or delete cookies through your browser settings, or contact us at support@wholeearthgifts.com with any question about the technologies we use.

6. Cookies and Similar Technologies

We use cookies and similar technologies to keep you signed in, hold the contents of your cart, remember your preferences, record the source that brought you to the site so that a visit is attributed correctly, support fraud prevention, and measure website performance. You may adjust or block cookies through your browser settings, although doing so may affect how parts of the website function.

The cookies set on this website are:

• PHPSESSID. Set by our website. Expires when you close your browser. Maintains your session on the server so that the site functions correctly as you move between pages.
• nitroCachedPage. Set by our website performance and caching service. Expires when you close your browser. Records that the page you are viewing was served from cache.
• __kla_id. Set by Klaviyo, our email marketing platform. Expires approximately thirteen months after it is set. Identifies your browser to that platform and connects activity on this site to your subscriber record.
• _ga. Set by Google Analytics. Expires approximately thirteen months after it is set. Distinguishes one visitor from another for measurement.
• _gid. Set by Google Analytics. Expires approximately twenty-four hours after it is set. Distinguishes one visitor from another for measurement.
• _ga_5DJD9WW2WX. Set by Google Analytics. Expires approximately thirteen months after it is set. Maintains session state for one of our two analytics properties.
• _ga_59EQTTMSPG. Set by Google Analytics. Expires approximately thirteen months after it is set. Maintains session state for the other of our two analytics properties.
• sbjs_first. Set by our website. Expires when you close your browser. Records the source that first brought you to the site, so that a visit is attributed correctly.
• sbjs_first_add. Set by our website. Expires when you close your browser. Records the page and time of that first visit.
• sbjs_current. Set by our website. Expires when you close your browser. Records the source that brought you to the site on your current visit.
• sbjs_current_add. Set by our website. Expires when you close your browser. Records the page and time of your current visit.
• sbjs_session. Set by our website. Expires approximately thirty minutes after your last page view. Counts the pages viewed in your current visit.
• sbjs_udata. Set by our website. Expires when you close your browser. Records basic browser information used in attribution.
• sbjs_migrations. Set by our website. Expires when you close your browser. Records the internal version of the attribution data above.

Where you add an item to your cart, log in to an account, or complete a purchase, these additional cookies are set:

• woocommerce_items_in_cart. Set by our website. Expires when you close your browser. Records whether your cart has anything in it.
• woocommerce_cart_hash. Set by our website. Expires when you close your browser. Records the contents of your cart so that totals update correctly.
• wp_woocommerce_session_. Set by our website, followed by a unique identifier. Expires a short time after your visit ends. Links your browser to your cart and checkout data held on our server.
• wjecf_free_product_coupons. Set by our website. Expires when you close your browser. Tracks free product offers applied to your cart.
• wordpress_logged_in_. Set by our website, followed by a unique identifier. Expires when you close your browser. Keeps you signed in to your account.
• wordpress_sec_. Set by our website, followed by a unique identifier. Expires when you close your browser. Secures the signed-in session in the account area.
• wordpress_test_cookie. Set by our website. Expires when you close your browser. Checks whether your browser accepts cookies.
• wp_lang. Set by our website. Expires when you close your browser. Records your language preference.
• wp-settings-. Set by our website, followed by a user number. Expires approximately one year after it is set. Records display preferences in the account area.
• wp-settings-time-. Set by our website, followed by a user number. Expires approximately one year after it is set. Records when those preferences were last changed.

Some of the services we use set cookies on their own domains rather than on ours. Our website performance and caching service sets a cookie named __cf_bm on nitrocdn.com and getnitropack.com, which expires approximately thirty minutes after it is set and is used to distinguish human visitors from automated traffic. Klaviyo sets cookies on klaviyo.com, including __ssid, _cq_duid, _cq_session, _cq_suid, _ga_E2RS7HT946, _hp2_id.91017801, apt.uid, kl_csrftoken, kl_region, kl_sessionid, kl_test_cookie, and tcm, which identify your browser to that platform and connect your activity here to your subscriber record.

7. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, disclosure, or misuse. No system is completely secure, and we cannot guarantee absolute security. Where a security incident affecting your personal information occurs, we will notify you as required by applicable law.

8. Data Retention

We retain personal information for as long as necessary to provide services, fulfill orders, maintain business records, comply with legal obligations, resolve disputes, and prevent fraud and abuse. Retention periods vary by the type of information and by applicable legal requirements. Because we never receive your date of birth or your identification documents, we retain neither.

Conversations with our virtual assistant are held in our own database and deleted thirty days after the conversation ends. Where you leave a message for our team, that message is retained until our team deletes it. Your IP address is not stored with a conversation. It is converted into a one-way value that cannot be reversed, and that value is used only to limit the rate of incoming messages.

Information is processed and stored in the United States.

9. Your Rights and Choices

Depending on your jurisdiction, you may have the right to:

• Access or request a copy of the personal information we hold about you;
• Request correction of inaccurate personal information;
• Request deletion of your personal information;
• Opt out of marketing communications;
• Opt out of the sale of your personal information, or of its sharing for targeted advertising, neither of which we do, as described in Section 5; and
• Appeal a decision by us to deny a request.

To exercise any of these rights, contact us at support@wholeearthgifts.com. Before we act on a request to access, correct, or delete personal information, we will take reasonable steps to verify that the request comes from you or from a person authorized to act for you, and we may decline a request we cannot verify. We will respond within the time required by applicable law.

We may deny or limit a request where the information is required for fraud prevention, legal compliance, dispute resolution, or another purpose applicable law permits us to keep it for. Where we deny a request, we will tell you why, and you may appeal by replying to our decision at the same address. We will inform you of the outcome of an appeal.

Deleting your account does not reverse a forfeiture of rewards points or referral credit, and it does not entitle you to reinstatement of either.

10. Marketing Communications

You may unsubscribe from marketing communications at any time, including emails about an unfinished checkout or products you viewed, by following the unsubscribe link in any email or by contacting us. Opting out of marketing does not affect transactional communications relating to your orders or your account.

11. Age Restriction and Children’s Privacy

Our website and services are intended for adults 21 and over. We do not knowingly collect personal information from anyone under 21. Where we become aware that an account belongs to a person under 21, we will close the account and delete the associated personal information.

Our website and services are not directed to children. We do not knowingly collect personal information from a child under 13, and where we become aware that we have, we will delete it promptly.

12. Affiliate Program Participants

This Section applies to participants in our affiliate program rather than to customers. Where an affiliate also purchases from us as a customer, the rest of this Policy applies to that activity in the same way it applies to any customer.

From an affiliate we collect the legal name of the individual, the legal entity name where the affiliate is an entity, a mailing address, a phone number, an email address, and the taxpayer identification number provided on Internal Revenue Service Form W-9, which is a Social Security number for an individual or an Employer Identification Number for an entity. We also collect the payment details required to issue commissions, which may be a mailing address, an email address, or a phone number associated with the affiliate’s selected payment method. We do not request or hold a driver’s license, a passport, or any other government-issued identification document from an affiliate.

We use that information to activate the affiliate’s promotional code, to calculate and issue commission payments, to meet our federal tax reporting obligations, and to administer the affiliate relationship.

The completed Form W-9 is retained as a physical record at our office. It is not stored in the affiliate area, on our website, or with any third party. We retain it for the period required by applicable tax law and then destroy it.

The affiliate area on our website holds program documents, brand assets, and the affiliate’s account and performance records. It does not hold signed agreements, tax forms, or taxpayer identification numbers.

We share affiliate information only as necessary to issue payment and to meet legal and tax obligations. We do not sell affiliate information, and we do not share it for targeted advertising.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the Last Updated date at the top of this document. Changes take effect when posted, except that a change which materially expands how we use or share personal information we have already collected takes effect thirty (30) days after it is posted, and we will notify account holders by email before it takes effect. A change does not apply retroactively to a dispute that arose before the change took effect.

14. Contact Information

For questions, requests, or concerns regarding this Privacy Policy:

Whole Earth Group, LLC d/b/a Whole Earth Gifts
4108 SW Green Oaks Blvd. #173176
Arlington, Texas 76003
Phone: 1-888-695-7286
Email: support@wholeearthgifts.com
Website: www.wholeearthgifts.com