FREE SHIPPING on all orders over $49
1. Introduction & Scope of Privacy Policy
This Privacy Policy explains how GoKratom Botanicals LLC ("GoKratom", "we", "us", or "our") collects, uses, discloses, and protects information when you visit our website (gokratom.com), interact with our customer care team, participate in our loyalty program, or order botanical products from us.
Please read this document carefully. By using our website, purchasing our botanical products, or submitting personal data to us, you consent to the data collection and usage practices described herein.
2. Categories of Information We Collect
We collect several types of information from and about users of our Site, including:
| Data Category | Specific Elements Collected | Primary Purpose |
|---|---|---|
| Contact & Identifiers | Full legal name, billing address, delivery address, email address, phone number. | Order fulfillment, tracking notifications, and direct customer support. |
| Age Verification Data | Date of birth, government ID verification token (processed via secured third-party check). | Strict statutory compliance with 21+ botanical age sales mandates. |
| Financial & Transactional | Encrypted payment tokens, card brand, last 4 digits, billing address, transaction history. | PCI-compliant payment processing, fraud prevention, and refund processing. |
| Technical & Browsing | IP address, browser type, device identifiers, referring URL, pages viewed, time spent. | Website performance optimization, UX enhancement, and security diagnostics. |
| User Preferences & Reviews | Product strain preferences, review submissions, questionnaire answers, promo redemptions. | Personalized recommendations and customer service improvements. |
3. How We Collect Your Information
We gather data through three primary channels:
- Directly From You: When you register an account, enter shipping details at checkout, contact support via email or web forms, or leave product reviews.
- Automated Technologies: As you navigate through our Site, we automatically log browser telemetry, device information, and interaction events via HTTP cookies and server log files.
- Authorized Third Parties: We receive verification confirmation tokens from accredited identity verification partners and payment gateway processors.
4. Purposes for Processing Your Personal Data
We utilize the collected information strictly for legitimate commercial and legal purposes:
- Order Fulfillment: Packaging, shipping, providing real-time tracking, and handling any post-delivery questions or returns.
- Statutory Compliance: Enforcing the mandatory 21+ age barrier and ensuring shipments are not dispatched to prohibited county/state jurisdictions.
- Fraud Prevention & Payment Security: Detecting suspicious account activity, preventing chargebacks, and authenticating high-value transactions.
- Customer Support: Assisting you with dosage guidelines, lab analysis inquiries, order revisions, or batch lot inquiries.
- Transactional Communications: Sending order receipts, tracking updates, and critical policy changes (you cannot opt out of these essential transactional notices).
- Marketing (Opt-in Only): Providing strain release newsletters and subscriber discount codes only if you explicitly choose to subscribe.
5. Age Verification & Minor Data Safeguards
In compliance with the Children's Online Privacy Protection Act (COPPA) and state botanical regulations, if we learn that we have inadvertently received personal information from an individual under 21 years of age, we will immediately purge that data from all active systems and void any associated transactions.
6. Third-Party Disclosures & Service Providers
We do NOT sell, rent, or lease your personal information to data brokers or advertising exchanges. We only share information with trusted third-party service providers bound by strict confidentiality and data protection agreements:
- Shipping Carriers: United States Postal Service (USPS), UPS, and regional freight carriers for accurate package delivery.
- Payment Processors: Tier-1 PCI-DSS compliant credit card processors and secure merchant banking partners.
- Identity Verification Partners: Secure automated verification services to confirm 21+ eligibility.
- Laboratory & Quality Systems: Third-party batch verification and digital COA hosting providers.
- Legal & Regulatory Authorities: Only when strictly required by valid subpoena, court order, or applicable law to protect safety and public health.
7. Cookies, Pixels, & Tracking Technologies
Our Site utilizes first-party and third-party cookies, web beacons, and local storage tokens to deliver a smooth shopping experience:
- Essential Cookies: Required for cart persistence, checkout sessions, and security verification. You cannot disable these without breaking store functionality.
- Performance & Analytics Cookies: Enable us to measure page speed, identify broken links, and analyze traffic patterns to optimize layout.
- Functional Cookies: Remember your selected preferences (such as preferred vein filter or currency format).
You can instruct your browser to refuse all cookies or notify you when a cookie is sent. However, disabling cookies will prevent you from adding items to your shopping cart or completing checkout.
8. Data Security & Encryption Standards
GoKratom implements robust administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, alteration, or disclosure:
- End-to-End Encryption: 256-bit Secure Sockets Layer (SSL) / Transport Layer Security (TLS) encryption on all web endpoints and API communications.
- PCI-DSS Compliance: Cardholder data is tokenized directly via accredited merchant gateways; our web servers never store raw credit card numbers.
- Access Controls: Strict role-based permissions ensuring only authorized personnel with verified operational need can access order archives.
9. Your Privacy Rights (CCPA / CPRA & GDPR)
Depending on your state or jurisdiction of residence (such as California under CCPA/CPRA, Colorado, Virginia, or the European Economic Area under GDPR), you possess specific rights regarding your personal information:
- Right to Know / Access: You have the right to request a copy of the specific personal data we hold about you.
- Right to Deletion / Erasure: You can request that we delete your personal information, subject to statutory retention requirements for financial records and tax audits.
- Right to Rectification: You may update or correct inaccurate profile or contact details at any time through your account panel.
- Right to Opt-Out of Marketing: Every promotional email includes a single-click unsubscribe link in the footer.
- Right to Non-Discrimination: We will never deny services, alter prices, or provide different product quality if you exercise your statutory privacy rights.
To exercise any of these rights, email our Data Protection Officer at [email protected] with the subject line "Privacy Rights Request".
10. Data Retention & Storage Periods
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, tax, or reporting requirements.
Transactional order records (invoices, batch lot receipts, shipment confirmations) are typically retained for seven (7) years to comply with federal tax laws and cGMP quality tracking standards. Inactive customer accounts with no purchase history for more than 24 months are routinely depersonalized.
11. Modifications to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our botanical practices, operational standards, or evolving legal frameworks. When updates occur, we will revise the "Last Updated" date at the top of this document. Material changes will be accompanied by a prominent notice on our homepage or via direct email to registered customers.
12. Contact Our Data Protection Officer
If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact our Data Protection Officer: