Privacy Policy

1. Information We Collect

When you visit our website or place an order, we collect only the information needed to complete your purchase and run the site properly:

• Name, billing address, shipping address, email address, and phone number
• Payment details (processed securely — we never see or store full credit card numbers)
• Basic device information (IP address, browser type, etc.) for security and site improvement

2. How We Use Your Information

We use your information only to:

• Process and fulfill your orders
• Send order confirmations, shipping updates, and (if you opt in) occasional marketing emails
• Prevent fraud and keep the site secure
• Improve our website

3. Who Sees Your Information

We never sell, rent, or trade your personal information with anyone for marketing or any other purpose. The only limited times any data leaves our company are:

• Payment processing: When you pay with PayPal or a credit/debit card, only the information required to complete the transaction is securely sent to PayPal and/or Authorize.Net. These are PCI-compliant processors and are contractually prohibited from using your data for anything else.
• Shipping carriers: To deliver your order, we share your name and shipping address with the carrier (such as FedEx or USPS). They use this information solely to deliver your package.
• Security & performance: Our site uses Cloudflare to protect against attacks and speed up delivery; technical data such as your IP address may pass through it for these purposes.
• Google Analytics: We use Google Analytics to see general traffic patterns (for example, which pages are popular). This is anonymous data — no names, emails, or addresses are shared. You can opt out here: tools.google.com/dlpage/gaoptout
• Legal requirements: Only if required by law (for example, a court order).

Apart from these limited cases, no one else ever receives your information.

4. Cookies

We use a few essential cookies to make the shopping cart and checkout work. We also use Google Analytics cookies (see above). You can disable cookies in your browser if you prefer, though some site features may not work properly without them.

We also use Microsoft Advertising (Bing) Universal Event Tracking cookies to measure whether our Bing ads lead to visits and orders. Microsoft may use this data as described in its privacy statement. You can opt out of personalized ads at https://account.microsoft.com/privacy/ad-settings.

YouTube API Services

We use YouTube API Services to run our own YouTube channel, BH Herbal Solutions. Our internal tool uploads our own videos and Shorts, reads and replies to comments on our videos, and posts a small number of human-reviewed replies to public comments on other creators’ health videos. When you use YouTube, including our channel and our comments, the YouTube Terms of Service apply, and Google’s use of your information is described in the Google Privacy Policy.

• What we access: Our own channel’s data (our videos, playlists and basic channel statistics) and public comments, with the commenter’s public display name and channel ID, on our videos and on public videos where we reply.
• How we use it: Only to manage our channel and to read and answer comments. We do not use it for ad targeting, we do not combine it with customer order information, and we never sell it.
• How we store it: We keep copies of other people’s comments and names only as long as needed to reply, and delete them within 30 days.
• Sharing: We do not share YouTube data with anyone, except when required by law.
• Revoking access: We never ask you to sign in with Google. If you have given any app access to your Google account, you can review or remove that access at security.google.com/settings/security/permissions. To ask us to delete YouTube data about you, email us.

Social Media Platforms and API Data

We use the official APIs of Facebook, Instagram, Threads, TikTok, YouTube, Pinterest, Tumblr, Reddit, Bluesky and Google Business Profile only to run our own BH Herbal Solutions accounts. Our internal tool publishes our own posts and videos, reads comments and replies left on our own posts, answers them, and reads performance statistics for our own accounts. It is used only by BH Herbal Solutions staff. We do not offer it to other people or businesses.

When someone comments on our posts, we may temporarily store the comment text, the comment ID and the public username so we can reply. We delete this data within 30 days. We don’t keep profile details or media files. We never sell or share data from these platforms, never use it to build profiles of people or target ads, and never use it to train AI models.

Deleting your data

To ask us to delete any data about you that we got from these platforms, email [email protected] or call 808-460-4015. We confirm deletion within 30 days. You can also remove our access at any time in your account settings, for example Facebook / Instagram / Threads Settings > Apps and Websites, TikTok Settings > Security > Manage app permissions, or Pinterest Settings > Security > Apps.

5. Data Retention

We keep your order and account information only for as long as needed to fulfill your orders, provide support, and meet our legal, tax, and accounting obligations. When it is no longer needed, we securely delete or anonymize it.

6. Your Rights

You can always ask us to:

• See what information we have about you
• Correct or delete your information
• Stop receiving marketing emails (use the “unsubscribe” link or reply to any email)

Just email us. Depending on where you live (for example, California or the European Union), you may have additional rights over your personal data under laws such as the CCPA/CPRA or GDPR — including the right to access, delete, or restrict its use. We honor these requests for all customers; simply contact us and we’ll take care of it.

7. Children’s Privacy

Our website and products are intended for adults. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.

8. Data Security

We use industry-standard encryption (SSL) and follow strict security procedures to protect your information.

9. Changes to This Policy

We may update this policy from time to time. Any changes will be posted on this page, with the “Last updated” date revised accordingly.

10. Contact Us

Questions or requests about your personal information? Email us — we’re happy to help.