Policies
Privacy policy
We collect what we need to send you honey and reply to your emails. We don’t sell your data. Here’s the detail.
Last updated September 1, 2026
Who we are
Functional Elixirs LLC (“we”) operates this website. Questions about this policy: hello@functionalelixirs.com.
What we collect
- Order information — name, shipping and billing address, email, phone (optional), and what you bought. Payment card details go directly to our payment processor (Stripe, Apple Pay, Google Pay or PayPal); we never see or store full card numbers.
- Messages — what you send us by email or the contact form.
- Newsletter — your email, if you join.
- Device & usage data — IP address, browser, pages viewed, referring site, collected via server logs and, if you accept them, analytics cookies. See Cookies.
How we use it
- To fulfil and deliver orders, send receipts and shipping updates, and handle returns.
- To remember your cart while you shop.
- To answer your messages.
- To understand how the site is used and fix what’s broken.
- To prevent fraud and meet legal obligations (tax, accounting).
Who we share it with
Only service providers who need it to do a job for us: payment processors, shipping carriers and label services, our email provider, our web host, and analytics (if you’ve opted in). Each is bound by contract to use your data only for that job. We do not sell personal information, and we do not “share” it for cross-context behavioural advertising as defined by California law.
Cookies
Essential cookies and local storage keep your cart and login working. Analytics cookies are off until you accept them in the banner. Details, and how to change your mind, in the Cookie notice.
How long we keep it
Order records for 7 years (tax law). Messages for 2 years. Server logs for 30 days.
Your rights
Wherever you live, you can ask us to access, correct or delete your personal information, or to stop sending you marketing. Email hello@functionalelixirs.com; we respond within 45 days and will verify your identity by matching your request to the email on the order.
California (CCPA / CPRA)
California residents also have the right to know the categories and specific pieces of personal information we’ve collected, the categories of sources, our purposes, and the categories of third parties we’ve disclosed it to; the right to delete; the right to correct; the right to limit use of sensitive personal information (we collect none beyond what’s needed to process a payment); and the right not to be discriminated against for exercising these rights. We do not sell or share personal information, so there is nothing to opt out of — but we honour Global Privacy Control signals regardless. You may designate an authorised agent to make a request on your behalf.
Other US states
Residents of Colorado, Connecticut, Virginia, Utah, Texas, Oregon and other states with comprehensive privacy laws have similar rights; use the same email. If we decline a request you may appeal by replying to our response.
Children
The site isn’t directed at children under 13 and we don’t knowingly collect their data. (Also: no honey for infants under 12 months.)
Security
TLS everywhere, hashed passwords, payment data handled by PCI-compliant processors, and access limited to the people who need it. No system is perfect; if we ever have a breach affecting you, we’ll tell you as the law requires.
Changes
We’ll post updates here and change the date at the top. Material changes get an email if we have your address.