Privacy Notice

Effective date: September 6, 2026

Cascadia Roots respects your privacy. This notice explains what information we collect through cascadiaroots.com, why we collect it, how it may be shared, and the choices available to you.

This notice applies to information collected through our online store, customer accounts, contact forms, newsletter signups, and related interactions with Cascadia Roots.

Information We Collect

Information you provide

We may collect information you provide when you place an order, create an account, join our email list, contact us, submit a review, or otherwise interact with our shop. This may include:

• Your name

• Email address

• Billing and shipping addresses

• Telephone number, if provided

• Account and login information

• Order number and purchase history

• Product preferences

• Reviews, questions, and other messages you send us

• Newsletter and marketing preferences

Payment information

Payments are processed through BigCommerce and the payment provider selected during checkout. These providers process payment-card or account information according to their own privacy and security practices.

Cascadia Roots may receive limited payment-related information, such as the payment method, transaction status, billing details, and payment confirmation. We do not need access to your complete payment-card number to fulfill your order.

Information collected automatically

When you visit our website, our ecommerce platform and enabled service providers may automatically collect information such as:

• IP address

• Browser and device information

• Pages viewed and links selected

• Referring website

• Approximate location derived from an IP address

• Shopping-cart and checkout activity

• Account and session information

• Cookie identifiers and consent preferences

• Dates and times of visits

• Website performance and diagnostic information

How We Use Information

We may use personal information to:

• Process, fulfill, and deliver orders

• Provide order confirmations, tracking, and customer support

• Manage customer accounts, shopping carts, and wish lists

• Respond to questions, reviews, and other communications

• Send marketing emails when you have chosen to receive them

• Personalize your shopping experience

• Maintain, troubleshoot, and improve our website

• Understand how customers use our store

• Detect fraud, abuse, security incidents, and technical problems

• Maintain business, tax, accounting, and transaction records

• Enforce our terms and protect our legal rights

• Comply with applicable legal obligations

We aim to collect and use only the information reasonably necessary for these purposes.

Cookies and Similar Technologies

Our website uses cookies and similar technologies to operate the store, remember shopping-cart and account activity, save preferences, understand website performance, and support enabled analytics or advertising tools.

These technologies may include:

• Essential cookies, which are necessary for checkout, security, account access, and basic store functions

• Functional cookies, which remember preferences and enable additional features

• Analytics cookies, which help us understand how visitors use the website

• Advertising cookies, if enabled, which may help measure promotions or show relevant advertising

You can control cookies through your browser settings and through any cookie-consent controls provided on our website. Blocking essential cookies may prevent parts of the store from working correctly.

How We Share Information

We do not sell or rent customer information for money.

We may share information with service providers that help us operate Cascadia Roots, including:

• BigCommerce, which hosts and operates our online store

• Payment processors and payment gateways

• Shipping carriers and fulfillment services

• Email and newsletter providers

• Website hosting, security, and technical-support providers

• Analytics providers

• Advertising and social-media platforms, if those tools are enabled

• Professional advisers such as accountants, insurers, and legal counsel

These providers may use information only as permitted by their agreements and their own privacy obligations.

We may also disclose information when reasonably necessary to comply with the law, respond to lawful requests, prevent fraud or harm, enforce our terms, or protect Cascadia Roots, our customers, or others.

If Cascadia Roots is involved in a merger, sale, financing, restructuring, or transfer of business assets, customer information may be transferred as part of that transaction, subject to applicable law.

Targeted Advertising and Sale of Personal Information

Cascadia Roots does not sell personal information for money.

Some privacy laws define “sale,” “sharing,” or “targeted advertising” broadly enough to include certain advertising cookies, pixels, or similar technologies. If Cascadia Roots enables tools that fall within those definitions, eligible visitors may have the right to opt out.

You may contact us at cascadiaroots@gmail.com with questions about the advertising or analytics technologies currently used on our website or to request an available opt-out.

Email Marketing

We send promotional emails only when you have signed up or otherwise agreed to receive them.

You can unsubscribe at any time by using the link included in our marketing emails. We may still send non-promotional messages necessary to complete an order, provide customer support, communicate account information, or meet legal obligations.

How Long We Keep Information

We retain personal information only as long as reasonably necessary for the purposes described in this notice, including order fulfillment, customer service, fraud prevention, accounting, tax, legal, and recordkeeping requirements.

Retention periods vary depending on the type of information, why it was collected, and applicable legal obligations. We may retain limited information necessary to document a privacy request or honor an unsubscribe request.

Your Privacy Choices

Depending on where you live and which privacy laws apply, you may have the right to request that we:

• Confirm whether we process your personal information

• Provide access to certain personal information

• Correct inaccurate information

• Delete certain information

• Provide a portable copy of certain information

• Explain the categories of information shared with third parties

• Opt you out of certain targeted advertising, profiling, or sales of personal information

• Review an appeal if a privacy request is denied

These rights may be subject to exceptions, identity verification, and legal recordkeeping requirements.

To make a privacy request, email cascadiaroots@gmail.com with the subject line Privacy Request. Please describe your request clearly. We may need to verify your identity before providing, correcting, or deleting information.

You may also designate an authorized agent where applicable. We may request reasonable proof that the agent is authorized to act for you.

Children’s Privacy

Our website is intended for a general audience and is not directed to children under 13. We do not knowingly collect personal information directly from children under 13.

If you believe a child has provided personal information through our website, contact us so we can review and address the situation.

Data Security

We use reasonable administrative, technical, and organizational measures intended to protect personal information. We also rely on third-party ecommerce, payment, shipping, and communication providers that maintain their own security programs.

No website, transmission method, or storage system can be guaranteed completely secure. Please protect your account password and contact us if you suspect unauthorized activity involving your Cascadia Roots account.

Third-Party Websites

Our website may link to retailers, social-media platforms, shipping providers, or other third-party websites. Their privacy practices are governed by their own notices, not this one.

Review a third party’s privacy notice before providing personal information through its website or service.

Visitors Outside the United States

Cascadia Roots is based in Oregon, United States. If you visit or place an order from another country, your information may be processed in the United States or other locations where our service providers operate.

Privacy protections in those locations may differ from those in your home country.

Changes to This Notice

We may update this Privacy Notice when our practices, services, or legal obligations change. The effective date at the top will show when the notice was most recently revised.

Material changes may also be communicated through the website or another appropriate method.

Contact Us

Questions, concerns, and privacy requests can be sent to:

Cascadia Roots
Salem, Oregon
cascadiaroots@gmail.com