Privacy Policy

1. Information We Collect

When you interact with Anam Cara Performance & Wellness, we may collect the following types of personal information:

• Name— provided when you place an order or submit a contact inquiry.
• Email address— used to send order confirmations, invoices, and order-status communications.
• Order history— a record of the products you have ordered, including quantities, pricing, and dates.
• Order notes— any additional information you provide when placing an order (e.g., special instructions or preferences).
• IP address— collected automatically through server logs when you visit our website. This information is used for security monitoring and troubleshooting purposes only.

We collect information only when it is voluntarily provided by you or automatically generated through standard server operations. We do not use hidden forms, tracking pixels, or other covert data-collection mechanisms.

2. How We Use Your Information

The personal information we collect is used for the following purposes:

• Process orders— to fulfill your product orders, manage inventory, and maintain accurate business records.
• Send confirmations and invoices— to provide you with email receipts, order confirmations, and invoices related to your purchases.
• Communicate order status— to notify you of updates regarding your order, including shipping information, delays, or any issues that require your attention.
• Improve our services— to understand how our website is used and to make improvements to our product offerings, website functionality, and customer experience.

We do not use your personal information for automated decision-making or profiling.

3. Data Storage and Security

Your personal data is stored and processed using the following infrastructure:

• Supabase (PostgreSQL)— our primary database provider. Order records, customer information, and product data are stored in a managed PostgreSQL database hosted by Supabase. Supabase enforces row-level security (RLS) policies and encrypts data at rest.
• Vercel— our website hosting provider. Our application is deployed on Vercel's edge network, which handles incoming requests and serves our website. Server logs containing IP addresses are managed by Vercel.

We implement reasonable administrative, technical, and physical security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encrypted connections (HTTPS/TLS), environment-variable-based secret management, and access controls on our database and hosting infrastructure.

However, no method of electronic transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

4. Third-Party Services

We use the following third-party service providers to operate our business. Each provider receives only the minimum data necessary to perform its function:

• Resend— our email delivery provider. Resend receives customer email addresses for the sole purpose of delivering transactional messages such as order confirmations, invoices, and status updates. Resend does not use your email address for marketing or any purpose beyond message delivery.
• Supabase— our database provider. Supabase stores and manages customer and order data within a secure, managed PostgreSQL environment.
• Vercel— our hosting provider. Vercel serves our website and processes incoming web requests. Standard server logs may include IP addresses and request metadata.

We do not sell, rent, trade, or otherwise share your personal data with advertisers, data brokers, or any other third parties for marketing purposes. Your information is shared only with the service providers listed above, and only to the extent required to operate our business.

5. Cookies

Our website uses a minimal approach to cookies. We use only one cookie:

• ac-admin— a session cookie used exclusively for administrator authentication. This cookie is set only when an administrator logs into the admin dashboard and is used to maintain the admin session. It is not set for regular visitors or customers.

We do not use tracking cookies, analytics cookies, or advertising cookies of any kind. We do not use Google Analytics, Facebook Pixel, or any other third-party tracking tools. Your browsing activity on our website is not tracked, profiled, or shared with any external party.

6. Data Retention

We retain your personal information in accordance with the following practices:

• Order data— records of orders, including customer names, email addresses, order details, and transaction history, are retained indefinitely for business accounting, legal compliance, and record-keeping purposes.
• Contact inquiries— information submitted through contact forms or direct email communication is retained for as long as reasonably needed to respond to your inquiry and maintain a record of the correspondence.

If you would like your data removed, please contact us using the information provided in the Contact section below. We will process deletion requests in a timely manner, subject to any legal obligations that require us to retain certain records.

7. Your Rights

You have the following rights with respect to your personal data:

• Right to access— you may request a copy of the personal information we hold about you.
• Right to correction— you may request that we correct any inaccurate or incomplete personal data we have on file.
• Right to deletion— you may request that we delete your personal data, subject to any legal obligations that require us to retain certain information.

To exercise any of these rights, please contact us at the email address listed in the Contact section below. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

8. Children's Privacy

Anam Cara Performance & Wellness and its products are intended exclusively for individuals who are 21 years of age or older. Our website and services are not directed at children, minors, or anyone under the age of 21.

We do not knowingly collect personal information from anyone under 21 years of age. If we become aware that we have inadvertently collected personal data from a person under 21, we will take prompt steps to delete that information from our records. If you believe that we may have collected information from someone under 21, please contact us immediately at the email address provided below.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. When we make changes, we will revise the “Last updated” date at the top of this page.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website and services after any changes to this policy constitutes your acceptance of the updated terms.

10. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

Anam Cara Performance & Wellness
Email: hello@anamcara.lifestyle

We will make every reasonable effort to respond to your inquiry in a timely manner.