Legal
Privacy Policy
Last updated: March 2026
Rawhide Organics ("we," "us," or "our") is a small-batch skincare company based in Utah. This Privacy Policy explains what information we collect when you visit our website or place an order, how we use it, and your rights regarding that information. We keep it simple because we believe your data deserves the same minimal approach as our ingredient list.
Information We Collect
Order information. When you place an order, we collect your name, email address, shipping address, and billing address. Payment is processed entirely by Stripe — we never see or store your card number, CVV, or full payment details. We receive only a payment confirmation token.
Contact information. If you reach out to us by email, we retain that correspondence to respond to you and to improve our customer service.
Account information. If you create an account, we store your email address and hashed password. We do not store plaintext passwords.
Usage data. Our website may collect standard analytics data — pages visited, browser type, device type, and approximate geographic location (country/state level). This is aggregated and not linked to individual identities unless you are logged in.
How We Use Your Information
We use the information we collect to:
- Process and fulfill your orders, including shipping and delivery confirmation
- Send order receipts and shipping tracking updates to the email you provided
- Respond to customer service inquiries
- Improve our products and website experience based on aggregated usage data
- Comply with legal obligations including tax and accounting requirements
We do not sell your personal information to third parties. We do not use your data for behavioral advertising. We will never share your contact information with another brand or marketing service without your explicit consent.
Third Parties We Work With
Stripe.We use Stripe to process payments. When you check out, your payment information is entered directly into Stripe’s secure, PCI-compliant system. Stripe’s privacy policy governs how Stripe handles your payment data. We receive only a non-sensitive confirmation token indicating your payment was successful.
Shipping carriers. To deliver your order, we share your name and shipping address with our shipping carrier (USPS, UPS, or similar). They use this information solely to complete delivery.
Supabase. Our website infrastructure uses Supabase for database and authentication services. Your account and order data is stored in our Supabase database. Supabase operates under its own privacy and security policies, including SOC 2 Type II compliance.
Beyond the above, we do not share your personal data with any other third parties.
Cookies
We use a minimal number of cookies. Our site may set:
- Authentication cookies — used to keep you logged in to your account. These are session-based and expire when you log out or close your browser.
- Analytics cookies — if we use analytics tooling, these may track aggregate page visit data. We do not use advertising pixels or cross-site tracking cookies.
You can disable cookies in your browser settings. Disabling authentication cookies will prevent account login functionality. No other core shopping features require cookies.
Data Retention
We retain order records — including your name, email, and shipping address — for a minimum of 7 years to comply with US federal and Utah state tax and accounting requirements. If you delete your account, your personal profile will be removed, but anonymized order records may be retained for legal compliance. Email correspondence is retained for up to 2 years.
California & Nevada Privacy Rights
If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to:
- Know what personal information we have collected about you
- Request deletion of your personal information (subject to legal retention requirements)
- Opt out of the "sale" of your personal information — we do not sell personal information, so this right is already honored
- Non-discrimination for exercising any of the above rights
Nevada residents have the right to opt out of the sale of their personal information under Nevada SB 220. Again, we do not sell personal information.
To exercise any of these rights, contact us at hello@rawhideorganics.com. We will respond within 45 days.
Security
We take reasonable technical measures to protect your personal information, including HTTPS encryption for all data in transit and industry-standard database security practices. No system is perfectly secure. If you have concerns about your account, please contact us immediately.
Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of our site after changes are posted constitutes your acceptance of the updated policy.
