Section 1 Why do we process your information?

We use your information only for the following purposes:

• To fulfil our contract with you. When you place an order, we need your name, address, and contact details to deliver your products and communicate with you about your purchase. Without this information we cannot provide the service.
• With your consent. For certain activities — such as sending you marketing emails or SMS messages — we will always ask for your explicit permission first.
• To comply with legal obligations. Tax laws and other regulations sometimes require us to retain records related to your purchases.
• For legitimate business purposes. This includes activities such as security monitoring, debugging our website, short-term internal analytics, and maintaining the quality and safety of our products and services — all proportionate to the original purpose for which the data was collected.

Section 2 How do we collect information from you?

We may collect information through the following channels. Not all channels may be relevant to you, and we may combine information from different sources to serve you better.

Our website (botanicrain.co)

Most information we hold is collected directly through our Shopify-powered store when you browse, create an account, or make a purchase.

Email correspondence

If you contact us at hello@botanicrain.co, we retain information from that correspondence to follow up and resolve your enquiry.

Third-party sources

Occasionally we may receive information from third-party services — for example, from advertising platforms (such as Meta or Google) when you interact with one of our ads, or from analytics providers that aggregate data about how visitors use our website.

Section 3 What information do we collect?

Personal contact information

Your name, email address, shipping address, and phone number — collected when you create an account, place an order, or contact customer support.

Payment information

Credit or debit card details and billing address collected at checkout. Payment details are processed securely by Shopify Payments and our payment partners; BotanicRain does not store raw card numbers on our servers.

Account login information

If you create an account, we store your login email and (in hashed form) your password. Keep your password confidential and log out on shared devices.

Skin profile and preferences

If you take our Dosha Quiz or otherwise share information about your skin type or Ayurvedic constitution, we use this to personalise product recommendations. You may update or delete this information at any time by contacting us.

Technical and device information

Your IP address, browser type, operating system, and device identifiers — collected automatically when you visit our website, typically via cookies and similar technologies.

Website usage information

Pages viewed, links clicked, time on site, and other interaction data — collected via cookies, Google Analytics, and similar tools to help us understand how visitors use our store.

Customer feedback

Reviews, survey responses, or other feedback you voluntarily share with us about our products or services.

Section 4 How do we use your information?

Order fulfilment

We use your name, address, and payment details to process, ship, and communicate the status of your orders. We may share this information with fulfilment and logistics partners solely for this purpose.

Customer support

We use your contact details and order history to respond to enquiries, process returns or exchanges, and follow up on unresolved issues.

Personalised recommendations

Based on your Dosha profile, order history, and browsing behaviour, we may suggest products or content we think you will find useful.

Marketing communications

With your consent, we may send you emails or SMS messages about new products, seasonal offers, Ayurveda tips, and special promotions. You can unsubscribe at any time by clicking the link at the bottom of any marketing email or by emailing hello@botanicrain.co. Unsubscribing from marketing does not affect transactional communications such as order confirmations.

Website improvement

We use aggregate analytics data to understand how visitors move through our site, which pages perform well, and where we can improve the experience.

Advertising

We may use your information with third-party advertising platforms (Meta, Google) to show you ads tailored to your interests, including retargeting ads if you have previously visited our website. See Section 6 (Cookies) for details and opt-out options.

Security and legal compliance

We may use your information to detect fraud, resolve disputes, enforce our Terms of Service, and comply with applicable laws.

Section 5 How long do we retain your information?

We retain personal information only as long as necessary to fulfil the purposes described in this Policy or as required by law. In practice, this means:

• Order and payment records are retained for at least seven years to comply with tax regulations.
• Account information is retained for as long as your account remains active, and for a reasonable period thereafter in case you wish to reactivate it.
• Marketing preferences are retained until you withdraw consent.
• Analytics data is retained in aggregate (non-identifiable) form for internal benchmarking.

Section 6 Do we use cookies?

Yes. Cookies are small files placed on your device that help our website recognise you on return visits, remember your cart, and understand how you use the site. By continuing to use botanicrain.co you consent to our use of cookies as described below.

Strictly necessary cookies

Required for the website to function — including cart management, secure checkout, and fraud prevention. These cannot be disabled.

Analytics cookies

We use Google Analytics (GA4) to collect aggregate data about how visitors navigate our site. Your IP address is anonymised before storage. You may opt out by installing the Google Analytics opt-out browser add-on.

Advertising and retargeting cookies

We work with Meta (Facebook/Instagram) and Google to show you relevant BotanicRain ads on other platforms. This involves sharing limited identifiers (such as a hashed email or pixel event data) with those platforms. To opt out of this type of tracking, you can:

• Adjust your ad preferences directly in your Meta or Google account settings.
• Use your browser's privacy controls or a tool such as Global Privacy Control.
• Email us at hello@botanicrain.co to request that we remove your data from any custom audience lists we maintain.

You can also manage or disable cookies at any time through your browser settings. Note that disabling certain cookies may affect the functionality of our website, including the ability to complete a purchase.

Section 7 With whom do we share your information?

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may share your information in the following limited circumstances:

Service providers

We share information with vendors who help us run our business — including Shopify (our e-commerce platform), shipping carriers, payment processors, and email marketing tools. These providers are contractually obligated to use your information only for the specific services they perform for us and to keep it secure.

Advertising platforms

As described in Section 6, we share limited data with Meta and Google for advertising purposes. This sharing may be considered a "sale" or "sharing" under certain state privacy laws. You have the right to opt out (see Section 10).

Legal requirements

We may disclose your information if required to do so by law, court order, or governmental authority, or to protect the rights, property, or safety of BotanicRain, our customers, or others.

Business transfers

In the event of a merger, acquisition, or sale of all or part of our business, your information may be transferred as part of that transaction. We will notify you and take reasonable steps to ensure your information continues to be protected.

Section 8 How do we protect your information?

Encrypted transmission

Our website uses TLS (HTTPS) encryption for all data transmitted between your browser and our servers, including during checkout.

Payment security

Card payments are processed via Shopify Payments, which is PCI DSS Level 1 compliant — the highest level of certification available in the payments industry. We never see or store your raw card details.

Access controls

Access to customer data within our systems is restricted to authorised personnel who need it to perform their job, and is governed by role-based access controls.

What you can do

No security system is foolproof. Please protect your account by choosing a strong, unique password and logging out on shared or public devices. Contact us immediately at hello@botanicrain.co if you suspect your account has been compromised.

Section 9 Other important policies

Children under 16

Our website is not directed to children under the age of 16. We do not knowingly collect personal information from anyone under 16. If we become aware that we have done so, we will delete it promptly.

Third-party links

Our website may link to third-party sites — including social media platforms and partner brands — that we do not control. This Policy does not apply to those sites. We encourage you to review their privacy policies before providing any personal information.

Changes to this Policy

We may update this Policy from time to time. For material changes, we will notify you by email or by placing a prominent notice on our website before the change takes effect. The date at the top of this page always reflects the most recent revision.

International transfers

BotanicRain is operated from the United States. If you are located outside the US, your information will be transferred to and processed in the US. By using our website, you consent to this transfer.

Section 10 How can I exercise my privacy rights?

Regardless of where you live, we are committed to honouring the following rights with respect to your personal information:

Right to Know

You may request a copy of the personal information we hold about you, including the categories of data, the sources from which it was collected, the purposes for which it is used, and the third parties with whom it has been shared.

Right to Delete

You may request that we delete your personal information. In some cases we may be required by law to retain certain records (such as purchase history for tax purposes), and we will inform you if a full deletion is not possible.

Right to Correct

You may request that we correct any inaccurate personal information we hold about you.

Right to Opt Out of Advertising Data Sharing

You have the right to opt out of the sharing of your personal information with third-party advertising platforms (Meta, Google) for targeted advertising purposes. To exercise this right, email us at hello@botanicrain.co with the subject line "Opt Out of Advertising".

Right to Non-Discrimination

We will not deny you products or services, charge you different prices, or provide a reduced quality of service because you exercised any of your privacy rights.

How to submit a request

To exercise any of the rights above, please email hello@botanicrain.co with the subject line "Privacy Request". We will acknowledge your request within 5 business days and respond within 45 days. If we need additional time (up to 90 days total), we will let you know.

We may ask you to verify your identity before processing your request. You may also designate an authorised agent to submit a request on your behalf, provided they supply written proof of authorisation.

California residents

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have additional rights including the right to know whether their personal information has been sold or disclosed for business purposes in the preceding 12 months. BotanicRain does not sell personal information in the traditional sense, but we do share limited identifiers with advertising platforms as described in this Policy, which may constitute a "sale" under California law. To exercise your California rights, please contact us as described above.

Under California's Shine the Light law (Civil Code § 1798.83), California residents may also request information about personal information shared with third parties for their direct marketing purposes. We do not share personal information with third parties for their own direct marketing. For a copy of this notice, email hello@botanicrain.co with subject line "California Shine the Light Request".

Section 11 How can you contact us?

For any questions, concerns, or requests relating to this Privacy Policy or how we handle your personal information, please reach out:

We aim to respond to all privacy-related enquiries within 5 business days.