Privacy Policy

1. The short version

This policy is issued by AddGoodFoods, LLC ("Add Good Foods," "we," "us"). We run a small food shop, and we collect what a small food shop needs: your email address, the shipping details for your order, and one cookie that keeps your cart together. We count visits to our pages without cookies and without identifying anyone; we don't use advertising trackers, we don't buy data about you, and we don't sell or rent anything we have. The rest of this page is the long version of that sentence.

2. What we collect

• Email address. Collected at checkout so we can send your order confirmation and shipping updates and, only if you check the box, marketing email. We record when you gave or withdrew marketing consent, because the history is your protection as much as ours.
• Name and shipping address. Entered during checkout, used to put your order on a box and quote shipping. A ZIP code you type into the cart's shipping estimator is used for exactly that estimate.
• Order history. What you bought, when, for how much, and its shipping status: the record any store keeps.
• One cookie. A first-party session cookie (30 days, HttpOnly) that holds your cart and sign-in together. It identifies your browser session, not your identity across the web. We set no analytics or advertising cookies; there is nothing to opt out of.
• Email delivery signal. Our order emails include a tiny first-party image that tells us, in aggregate (not individually), whether our e-mails are getting through — it carries no identity and talks only to our own server.
• Visit counts. When a page loads, our own server notes which page it was, the site that sent you (when your browser says), your country (looked up from your IP address, which isn't kept), and your device type and browser. To count visitors without a cookie, the server turns your IP address and browser into a one-way code using a secret that changes every day and is then deleted, so the code can't be traced back to you or connected to another day's visit. Nothing is stored on your device, and none of it is shared.
• Server logs. Like nearly every web server, ours records requests (IP address, page, time) for security and debugging, and these rotate away on a short schedule.

We never see or store your card number; payment details go directly to Stripe (their privacy policy covers that leg). We don't collect data about you from anyone else, and we don't run SMS programs.

3. How we use it

• To fulfill orders: charge (via Stripe), pack, ship, and email you confirmations and tracking.
• To run subscriptions: bill each cycle and honor your pauses and cancellations.
• To send marketing email, only with your consent, and every message includes a way out. Unsubscribing is honored immediately and recorded.
• To respond when you email us.
• To understand, in aggregate, which pages are read and how people find us.
• To keep the site and shop safe: preventing fraud and abuse, complying with law, and keeping the business records (orders, taxes) the law requires us to keep.

4. Who we share it with

Only the services that move your order, and only what each needs:

• Stripe: payment processing (email, order total; your card goes to them directly).
• Shippo and the postal carriers: name and address, to buy the label that gets the box to you.
• Our email provider: to deliver order and account email to you.
• Our hosting provider: the servers this site runs on.

Beyond that: professional advisors if we need them, authorities if the law compels us, and a successor if the business is ever sold, in which case this policy binds what they receive. We do not sell, rent, or trade personal information, and we have no advertising partners to share it with.

5. Your choices and rights

• Marketing email: use the unsubscribe link in any message, or email us, and it stops.
• Access, correction, deletion: email orders@addgoodfoods.com and we'll show you what we have, fix it, or delete it. We extend these rights to everyone, not just residents of states whose laws require it (California and a growing list). We'll verify the request came from the email in question, and we answer within 30 days.
• What we must keep: completed order records stay for tax and accounting purposes even after a deletion request; we delete everything deletion can lawfully reach.

Because we set no tracking cookies, "Do Not Track" signals and cookie-blocking extensions don't conflict with anything here; the shop works fine with them on.

6. How long we keep things

Order records: as long as tax and business law requires. Marketing email addresses: until you unsubscribe or ask us to delete you. Consent history: as long as the address is on file, so we can prove we had permission. Server logs: briefly, on rotation. Visit counts: kept as anonymous records of each visit; the daily secret behind them is deleted every day. Sign-in links: they expire in 30 minutes and are stored only as hashes.

7. Security

The site runs over TLS, sign-in tokens are stored hashed, admin access is protected by two-factor authentication, and card data never touches our systems. No one can honestly promise perfect security on the internet, so we won't; we can promise the attack surface here is small because the data we hold is small.

8. Children

Our site isn't directed to children and we don't knowingly collect personal information from anyone under 16. If you believe a child has given us information, email us and we'll delete it.

9. Changes to this policy

If we change what we collect or how we use it, we'll update this page and its date, and for material changes we'll say so plainly, on the site or by email. We won't quietly start collecting more than a small food shop needs.

10. Contact

Privacy questions and requests: orders@addgoodfoods.com
AddGoodFoods, LLC · 7901 4th St N #24647 · St. Petersburg, FL 33702