Privacy Policy

Last Updated: December 9, 2025

1. Introduction

This Privacy Policy describes how Vanillagood (“Vanillagood,” “Company,” “we,” “us,” or “our”) collects, uses, discloses, and protects your personal information when you visit or make a purchase from Vanillagood.com (the “Website”), or otherwise interact with us.

We are committed to handling your personal information in a responsible, transparent manner and in accordance with applicable privacy and consumer protection laws, including (where applicable) data protection principles inspired by the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA).

By using our Website, placing an order, creating an account, or contacting us, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described here, you should not use our Website or services.

2. Data Controller & Contact Details

The entity responsible for determining how and why your personal information is processed is:

Vanillagood
314 Green Acres Dr
Glasgow, KY 42141
United States

Email: support@vanillagood.com
Website: Vanillagood.com

If you have any questions about this Privacy Policy or how we handle your personal information, you may contact us using the details above.

3. Scope of This Privacy Policy

This Privacy Policy applies to personal information we collect about you when you:

Visit or browse our Website;
Place an order or attempt to place an order through the Website;
Create an account, subscribe to our communications, or participate in our promotions;
Communicate with us via email, contact forms, or other channels.

It does not apply to information collected by third-party websites or services that may be linked to or integrated with our Website, which are governed by their own privacy policies.

4. Information We Collect

We collect various types of information in connection with the services we provide. This may include:

(a) Information You Provide Directly

Contact details: name, email address, billing address, shipping address, phone number.
Account information: username, password, and preferences if you create an account.
Order information: products ordered, order value, delivery details, and any notes.
Customer support communications: messages, inquiries, and any information you provide when you contact us.

(b) Payment Information

We use third-party payment service providers to process payments securely. For this store, we accept payments via PayPal. When you make a purchase, your payment details (such as card information or PayPal account data) are handled directly by the relevant payment provider under their own terms and privacy policies. We do not store full payment card details on our servers.

(c) Information Collected Automatically

When you visit our Website, certain information may be collected automatically by our systems and by the Shopify platform, such as:

IP address and approximate location;
Browser type, device type, operating system, and language settings;
Referring pages, pages visited, time spent on pages, and clickstream data;
Device identifiers, cookies, and similar tracking technologies.

(d) Information from Cookies & Similar Technologies

We and our service providers may use cookies and similar technologies (such as web beacons or pixels) to support core website functions, keep your cart active, remember your preferences, understand how visitors use our Website, and measure the performance of our marketing efforts.

5. How We Use Your Information

We may use your personal information for the following purposes:

To process and fulfill orders: including order confirmation, payment processing, shipping, and delivery.
To provide customer support: to respond to your questions, requests, or complaints.
To operate and improve our Website: ensuring technical functionality, security, and user experience optimization.
To personalize your experience: remembering preferences, tailoring content, and suggesting products that may interest you.
To send transactional communications: order confirmations, shipping updates, important notices.
To send marketing communications (where permitted): such as newsletters or promotions, which you can opt out of at any time.
To prevent fraud and misuse: using risk analysis tools and security measures to protect our customers and business.
To comply with legal obligations: including tax, accounting, and regulatory requirements.

6. Legal Bases for Processing (Where Applicable)

Where data protection laws such as the GDPR apply, we rely on one or more of the following legal bases to process your personal information:

Contractual necessity: to fulfill our contract with you when you place an order or create an account.
Legitimate interests: such as improving our services, preventing fraud, and maintaining Website security, provided our interests are not overridden by your rights.
Legal obligations: to comply with laws and regulatory requirements (for example, tax and accounting rules).
Consent: where required for certain types of marketing, cookies, or other optional data uses. You can withdraw consent at any time.

7. Cookies & Tracking Technologies

Cookies are small data files stored on your device when you visit a website. We use cookies and similar technologies to:

Enable core shopping functions such as adding items to your cart and checking out;
Remember your preferences and account settings;
Understand how visitors use our Website and improve its performance; and
Measure and enhance the effectiveness of our communications and promotions.

You can adjust your browser settings to refuse cookies or alert you when cookies are being used. However, disabling certain cookies may impact your ability to use some features of our Website (for example, the shopping cart may not function properly).

8. How Shopify Processes Your Information

Our store is hosted on Shopify Inc., which provides the online e-commerce platform that allows us to sell our products and services. Your personal information is stored in Shopify’s data storage, databases, and the general Shopify application. Shopify may store data on secure servers located in the United States and Canada.

Shopify uses industry-standard security measures to protect your information and provides built-in features such as fraud analysis, secure payment processing, and encrypted checkout. For more information on how Shopify handles data, you can refer to Shopify’s own privacy documentation available on their website.

While Shopify provides the technical infrastructure, Vanillagood remains responsible for the content of this Website, the products we list, and the way we use your personal information in connection with our business.

9. Payment Processing (PayPal)

When you choose to pay via PayPal, the transaction is processed by PayPal under its own terms and privacy policy. We receive limited information from PayPal, such as confirmation of payment and certain account details needed to associate the payment with your order and fulfill it.

We do not control how PayPal processes your data and encourage you to review PayPal’s privacy policy if you would like more details about their practices.

10. Sharing Your Information with Third Parties

We do not sell your personal information. We may share your information with trusted third parties to help us operate our business, provide our services, and comply with legal obligations. This may include:

Service providers: such as hosting providers, payment processors, shipping carriers, and customer support tools.
Analytics and performance partners: to understand Website usage and improve the user experience.
Professional advisors: such as accountants, auditors, and legal counsel when necessary.
Authorities and regulators: where required by law, court order, or to protect our rights or the rights of others.

When we share information with third parties, we aim to share only what is necessary and to engage partners that are committed to protecting your information in line with applicable legal requirements.

11. International Transfers

Our operations and our service providers may be located in different countries. As a result, your personal information may be transferred to and processed in countries outside of your state or country of residence, including the United States and Canada, which may have different data protection laws than those in your jurisdiction.

We take steps to ensure that any international transfers of personal information are carried out in accordance with applicable data protection laws and that appropriate safeguards are in place where required.

12. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law (for example, tax, accounting, or legal reporting requirements).

When we no longer need your personal information for these purposes, we will either delete it, anonymize it, or securely store it until deletion is possible.

13. Security of Your Information

We take reasonable technical and organizational measures to protect your personal information against unauthorized access, loss, misuse, or alteration. These measures may include encryption, access controls, secure backup, and regular monitoring of our systems.

No method of transmission over the Internet or method of electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security. You are responsible for keeping your account credentials secure and for notifying us promptly if you suspect any unauthorized activity.

14. Your Rights (Where Applicable)

Depending on your place of residence and applicable laws, you may have certain rights regarding your personal information, such as:

Right of access: to request confirmation that we process your data and receive a copy of the personal information we hold about you.
Right to rectification: to request that we correct inaccurate or incomplete information about you.
Right to erasure: to request that we delete your personal information in certain circumstances.
Right to restriction: to request that we limit the processing of your data in specific situations.
Right to object: to object to certain types of processing, such as direct marketing.
Right to data portability: to request a copy of your data in a structured, commonly used, and machine-readable format, where technically feasible.

To exercise any of these rights (where available), please contact us at support@vanillagood.com. We may request additional information to verify your identity and will respond within a reasonable timeframe, as required by law.

15. Additional Rights for California Residents

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), including the right to:

Know: request that we disclose the categories of personal information we collect, the sources, purposes, and categories of third parties with whom we share it.
Access: request a copy of specific pieces of personal information we hold about you.
Delete: request that we delete personal information we have collected from you, subject to certain exceptions.
Correct: request that we correct inaccurate personal information about you.
Non-discrimination: not be discriminated against for exercising any of your privacy rights.

We do not sell your personal information in the traditional sense. If our practices change, we will update this Privacy Policy and provide related options consistent with applicable law.

To submit a request under CCPA/CPRA, you may contact us at support@vanillagood.com. We will verify your identity and respond within the timeframe required by law.

16. Marketing Communications & Opt-Out

If you choose to subscribe to our newsletter or marketing communications, we may send you emails about new products, special offers, or other updates. You can opt out of marketing emails at any time by clicking the unsubscribe link in the email or by contacting us directly.

Even if you opt out of marketing communications, we may still send you transactional or service-related messages, such as order confirmations, shipping notifications, and important account or policy updates.

17. Children’s Privacy

Our Website and services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn that we have inadvertently collected information from a child under 13, we will take steps to delete it as soon as reasonably possible.

18. Do-Not-Track Signals & Online Tracking

Some web browsers offer a “Do Not Track” (DNT) feature that signals your preferences to websites regarding tracking. At this time, there is no universally accepted standard for how to respond to DNT signals, and our Website may not respond to all browser-based DNT or similar signals.

19. Links to Other Websites

Our Website may contain links to third-party websites or services. We are not responsible for the privacy practices, content, or security of those external sites. We encourage you to review the privacy policies of any websites you visit that are not operated by us.

20. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. When we make changes, we will revise the “Last Updated” date at the top of this page. We encourage you to review this page periodically to stay informed about how we protect your information.

Your continued use of the Website after any changes are posted constitutes your acceptance of the updated Privacy Policy.

21. How to Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, you may contact us at: