Skip to content
← Back to log in

Privacy Policy — DRAFT

⚠️ DRAFT — NOT LEGAL ADVICE. Generated as a starting template. It has not been reviewed by an attorney and is not guaranteed to comply with the GDPR, CCPA/CPRA, or any other privacy law. Have a qualified lawyer review and finalize it, fill every [BRACKETED] placeholder, and confirm it matches the data you actually collect and the processors you actually use.

Effective date: [DATE] Last updated: [DATE]

This Privacy Policy explains how Midnight Peppers ("we," "us") collects, uses, and shares information when you use midnightpeppers.com (the "Site").

1. Information We Collect

  • Account information you provide when you register: full name, email address, password (stored hashed), and your age and research-use attestations.
  • Order information: shipping address, order contents, and order history. Payment card details are collected and processed by our third-party payment processor — we do not store full card numbers on our servers.
  • Communications: messages you send us (e.g., support requests).
  • Automatically collected data: basic technical data such as IP address, browser type, and pages viewed, collected through cookies and similar technologies to operate and secure the Site.

2. How We Use Information

We use information to: create and manage your account; verify your email and eligibility; process, fulfill, and ship orders; provide customer support; send transactional messages (order and account notifications); secure the Site and prevent fraud or abuse; and comply with legal obligations. [If you plan to send marketing email, add consent + opt-out language here.]

3. How We Share Information

We share information only as needed to run the business:

  • Payment processor — to process payments. [PROCESSOR NAME — TBD.]
  • Shipping carriers — to deliver orders.
  • Service providers — hosting, database, email delivery, and object storage vendors that operate the Site on our behalf under confidentiality obligations.
  • Legal — where required by law, to enforce our Terms, or to protect our rights, safety, or property.

We do not sell your personal information. [Confirm and tailor for CCPA/CPRA "sale/share" definitions with your attorney.]

4. Cookies

We use cookies and similar technologies for authentication (keeping you logged in), security, and basic site functionality. You can control cookies through your browser, but disabling them may break parts of the Site. [Add analytics / consent-banner language if you add analytics.]

5. Data Retention

We retain account and order information for as long as your account is active and as needed to fulfill orders, comply with legal, tax, and accounting obligations, and resolve disputes. [Specify retention periods with your attorney.]

6. Data Security

We use reasonable administrative and technical measures to protect your information, including hashed passwords and encrypted connections (HTTPS). No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, or to object to or restrict certain processing. To make a request, contact us at [CONTACT EMAIL]. [Tailor to GDPR / CCPA-CPRA / other applicable frameworks.]

8. Age Restriction

The Site is intended only for individuals 21 years of age or older. We do not knowingly collect information from anyone under 21. If you believe someone under 21 has provided us information, contact us and we will delete it.

9. Changes to This Policy

We may update this Policy from time to time. Material changes will be posted on this page with an updated date.

10. Contact

Privacy questions or requests: [CONTACT EMAIL / ADDRESS].