Privacy Policy

When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as "Device Information".

We collect Device Information using the following technologies:

• "Cookies" are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org.
• "Log files" track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
• "Web beacons", "tags", and "pixels" are electronic files used to record information about how you browse the Site.

Additionally, when you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including your name, billing address, shipping address, payment information (including credit card numbers, email address, and phone number. We refer to this information as "Order Information".

When we talk about "Personal Information" in this Privacy Policy, we are talking both about Device Information and Order Information.

We use the Order Information that we collect generally to fulfill any orders placed through the Site (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations). Additionally, we use this Order Information to:

• Communicate with you;
• Screen our orders for potential risk or fraud; and
• When in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.

We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimize our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns).

We share your Personal Information with third parties to help us use your Personal Information, as described above. We also use Google Analytics to help us understand how our customers use the Site — you can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/. You can also opt out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.

Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant, or other lawful requests for information we receive, or to otherwise protect our rights.

The contact information you provide us with as part of your product order, customer account, or wholesale client account is accessible to our team members. We do not share your full legal name, address, or confidential personal identifying information with any unauthorized third parties. Examples of authorized third parties include payment processors and technology providers directly engaged with maintaining and ensuring the functionality of the KindRx website.

Emails received through hello@kind-rx.com are reviewed by our staff members, sent onwards when necessary to other staff members, and deleted as quickly as possible. We do not disclose the names of senders to others outside of KindRx, i.e. third parties, without permission from the sender.

We use email service providers in the United States of America and Ireland. As a result, our emails are susceptible to lawful access in the United States of America and Ireland. Our current service provider is Google.

We administer a mailing service for notifications by email based on interest in topics that you have explicitly indicated to us. Outgoing messages are processed by our mail service and internet providers.

Personal data shall be subject to additional safeguards to ensure this data is processed securely. For example, we work hard to ensure data is encrypted when in transit and storage, and access to this data will be strictly limited to a minimum number of individuals and subject to confidentiality commitments.

We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Policy. Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to any of our websites; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorized access. When possible, encryption is used, both in transit and storage. Access controls within the company limit who may access information.

In the case of a personal data breach, when the personal data breach is likely to result in a high risk to the rights and freedoms of natural persons, KindRx shall communicate the personal data breach to you and other affected members without undue delay. Such information will be provided to you in clear and plain language and will describe the nature of the personal data breach and contain at least the information and measures referred to in points (b), (c), and (d) of Article 33(3) of the GDPR.

Direct communication of a data breach to you or other customers shall not be required if any of the following conditions are met:

• KindRx has implemented appropriate technical and organizational protection measures, and those measures were applied to the personal data affected by the personal data breach, in particular, those that render the personal data unintelligible to any person who is not authorized to access it, such as encryption;
• KindRx has taken subsequent measures which ensure that the high risk your rights and freedoms, or those of any other members, are longer likely to materialize;
• It would involve a disproportionate effort. In such a case, there shall instead be a public communication or similar measure whereby you and other members are informed in an equally effective manner.

As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For more information about how targeted advertising works, you can visit the Network Advertising Initiative's ("NAI") educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

You can opt-out of targeted advertising by using the links below:

• Facebook: https://www.facebook.com/settings/?tab=ads
• Google: https://www.google.com/settings/ads/anonymous
• Bing: https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads

Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance's opt-out portal at http://optout.aboutads.info/.

Please note that we do not alter our Site's data collection and use practices when we see a Do Not Track signal from your browser.

When you place an order through the Site, we will maintain your Order Information for our records unless and until you ask us to delete this information.

You can request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes in compliance with the General Data Protection Regulation (GDPR) of the European Union.

In further detail, you have the right to obtain from KindRx the erasure of personal data concerning you without undue delay and KindRx shall have the obligation to erase personal data without undue delay where one of the following grounds applies:

• The personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed;
• You withdraw the consent on which the processing is based, and where there is no other legal ground for the processing;
• You object to the processing pursuant to Article 21(1) of the GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) of the GDPR;
• The personal data has been unlawfully processed;
• The personal data has to be erased for compliance with a legal obligation in Union or Member State law to which KindRx is subject;
• The personal data has been collected in relation to the offer of information society services referred to in Article 8(1) of the GDPR.

Where KindRx has made the personal data public and is obliged to erase the personal data, KindRx, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform third-party controllers which are processing the personal data that the data subject has requested the erasure by such controllers of any links to, or copy or replication of, those personal data.

Paragraphs 1 and 2 shall not apply to the extent that processing is necessary: for exercising the right of freedom of expression and information; for compliance with a legal obligation which requires processing by European Union or Member State law to which KindRx is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in KindRx; for reasons of public interest in the area of public health in accordance with points (h) and (i) of Article 9(2) as well as Article 9(3) of the GDPR; for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) of the GDPR in so far as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing; or for the establishment, exercise or defence of legal claims.

You have the right to obtain from KindRx restriction of data processing where one of the following applies:

• You are contesting the accuracy of the personal data stored about you as part of your KindRx customer account, and you are requesting restriction for a period enabling the KindRx to verify the accuracy of your personal data;
• The processing is unlawful and you are opposing the erasure of your personal data and requesting the restriction of its use instead;
• KindRx no longer needs your personal data for the purposes of the platform, but you require the data for the establishment, exercise or defence of legal claims;
• You object to data processing pursuant to Article 21(1) of the GDPR pending the verification of whether the legitimate grounds of KindRx override the grounds that you claim.

Where processing has been restricted according to this article, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.

If you have obtained restriction of data processing pursuant to paragraph 1 of this Article, you shall be informed by KindRx before the restriction of processing is lifted.

You have the right to obtain from KindRx, without undue delay, the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.

The Site is not intended for individuals under the age of 18.

The information collected from visitors and members through contact forms is shared within our team only, as related to the particular inquiry itself. We do not share contact form inquiries, or other inquiries, with any third parties other than our website administration team.

For more information about our privacy practices, to update your preferences, review or update your information, submit a request, raise any issues regarding the processing of your personal data or raise any questions, comments, or concerns about the Policy, you may contact us by e‑mail at hello@kind-rx.com or by mail using the details provided below: