Effective date: September 15, 2025
Controller: 75 East Center, PO Box 982, Springville UT 84663. [email protected]. 1-800-988-9120Representative and DPO (if applicable): [name and contact]
This policy explains how we collect, use, share, and protect personal data when you visit our site, subscribe, or interact with us.1) Data We Collect
Identifiers: name, email, mailing address, phone, IP address, cookie IDs, device identifiers.
Commercial data: purchase history, preferences, referral source, campaign attribution.
Internet or network activity: pages viewed, timestamps, clicks, open rates, user agent, approximate location derived from IP.
Communications: messages you send us, survey responses, support requests.
Inferences: segments or interests derived from the above.
Sensitive data: we do not seek sensitive categories. Do not send health, financial account numbers, or government IDs through public forms.
2) Sources
You, your devices, our service providers, referral partners, ad or analytics partners, and publicly available sources.
3) Purposes of Processing
Provide and improve the site and newsletters.
Send emails and optional SMS with your consent.
Personalize content and measure performance.
Process purchases, payments, and fulfill orders or events.
Prevent fraud and secure our services.
Comply with law, respond to lawful requests, and enforce terms.
4) Legal Bases (GDPR and similar)
Consent for marketing, cookies that are not strictly necessary, and optional SMS.
Contract for delivering requested services.
Legitimate interests for analytics, security, and service improvement, balanced against your rights.
Legal obligation where we must keep records or respond to authorities.
5) Sharing and Disclosure
We share personal data with:
Processors: email and SMS platforms, analytics, hosting, customer support, payment processors, cloud storage, form and survey tools, and security services; all under contracts that limit use to our instructions.
Business transfers: in a merger, acquisition, or reorganization.
Legal: to comply with law or protect rights, safety, and property.
We do not sell personal information for money. We may share certain data for targeted advertising or cross-context behavioral advertising where permitted; you can opt out using the controls in the Cookie Notice and Your Rights section.
6) International Transfers
We may transfer data to countries without the same level of protection as your own. Where required we use approved safeguards such as EU Standard Contractual Clauses and additional measures.
7) Retention
We keep personal data only as long as needed for the purposes above, then delete or anonymize it. Suppression lists are retained to honor opt-outs.
8) Your Rights
Your local law may give you rights such as:
Access, correction, deletion, restriction, portability, and objection.
Withdraw consent for marketing at any time.
Opt out of targeted advertising or profiling where applicable.
To exercise rights, email [privacy email], or use the links in our emails. We will verify your request, respond within required timelines, and explain if exceptions apply. Authorized agents may submit requests when permitted by law.
9) Children
We do not knowingly collect personal data from children under 13. If you believe a child provided data, contact us so we can delete it.
10) Security
We use administrative, technical, and physical safeguards, including access controls, encryption in transit, hardened cloud infrastructure, and regular review of processors. No system is perfectly secure; report suspected incidents to [security email].
11) Cookies and Similar Technologies
We use cookies, pixels, and local storage to operate the site, remember preferences, measure performance, and personalize content. See the Cookie Notice below for details and your choices.
12) Email and SMS Marketing
Emails include unsubscribe links, and your opt-out is honored promptly in line with CAN-SPAM and other laws.
SMS requires separate opt-in; reply STOP to end, HELP for help.
13) Do Not Track and Global Privacy Control
We recognize legally required browser-level signals such as Global Privacy Control where applicable, which we treat as an opt-out of targeted advertising for that browser.
14) State-Specific Disclosures
Residents of California, Colorado, Connecticut, Utah, Virginia, and other jurisdictions have state-specific rights. We disclose the categories collected, sources, purposes, and sharing as set out above. California residents may also request information about disclosures for business purposes and opt out of sharing for cross-context behavioral advertising.
15) Changes
We will update this policy as needed, post the new effective date, and in case of material changes provide notice through the site or email.
16) Contact
Questions or requests: [email protected].
If you are in the EEA or UK, you may contact your local authority; in the UK the ICO; in the EU your local Data Protection Authority.