COOKIE POLICY

WHAT ARE COOKIES?

Cookies are small text files that are stored on your device (computer, tablet, or mobile phone) when you visit our website. They help us provide you with a better experience by remembering your preferences and understanding how you use our site.

1. TYPES OF COOKIES WE USE

🔐 Cannot be disabled ESSENTIAL COOKIES

Purpose: Required for basic website functionality and security

What they do:

• Maintain your login session securely
• Remember your health questionnaire progress
• Ensure secure data transmission for health information
• Prevent unauthorized access to your account
• Enable secure payment processing

Examples:

• Session authentication tokens
• Security verification cookies
• Shopping cart contents
• Form submission tokens

Legal basis: Legitimate interest (essential for service functionality)

📊 Can be disabled ANALYTICS COOKIES

Purpose: Help us understand how users interact with our website

What they do:

• Track page views and user journeys
• Measure website performance and loading times
• Identify popular content and features
• Help us improve user experience
• Generate aggregate usage statistics

Examples:

• Google Analytics cookies
• Heatmap tracking (Hotjar, etc.)
• Page load performance metrics
• User behavior analytics

Legal basis: Consent (you can opt-out)

🎯 Can be disabled MARKETING COOKIES

Purpose: Deliver relevant advertisements and measure campaign effectiveness

What they do:

• Remember your interests and preferences
• Show you relevant health and wellness ads
• Track effectiveness of our marketing campaigns
• Personalize content based on your interests
• Prevent showing the same ad repeatedly

Examples:

• Facebook Pixel
• Google Ads tracking
• Retargeting pixels
• Email marketing tracking

Legal basis: Consent (you can opt-out)

⚙ Can be disabled FUNCTIONAL COOKIES

Purpose: Enhance your experience with additional features

What they do:

• Remember your language and region preferences
• Save your communication preferences
• Store your accessibility settings
• Remember your shipping address
• Personalize content layout

Examples:

• Language preference cookies
• Theme/display preferences
• Saved addresses and preferences
• Communication settings

Legal basis: Consent (you can opt-out)

2. HEALTH INFORMATION AND COOKIES

🏥 Special Considerations for Health Data:

What cookies may contain related to health services:

• Session identifiers: To link you to your secure health data
• Progress tracking: Which step of the questionnaire you're on
• Preference cookies: Your communication and privacy preferences
• Security tokens: To protect your health information

What cookies will NEVER contain:

• Your actual health symptoms or conditions
• Medical history details
• AI analysis results
• Medication information
• Personal health identifiers

HIPAA Compliance:

Our use of cookies complies with HIPAA requirements for protecting health information. Any cookies related to your health service session are encrypted and contain only reference identifiers, not actual health data.

3. THIRD-PARTY COOKIES

Analytics Services:

Google Analytics:

• Tracks website usage and performance
• Helps us improve user experience
• Data anonymized and aggregated
• Can be opted out via Google's tools

Hotjar (if used):

• Provides heatmaps and user session recordings
• Helps identify user experience issues
• Health pages excluded from recording
• Can be opted out in privacy settings

Marketing Services:

Google Ads:

• Enables retargeting advertisements
• Tracks conversion from ads to orders
• Does not access health information
• Can be opted out via Google Ad Settings

Facebook Pixel:

• Tracks effectiveness of Facebook advertising
• Enables custom audience creation
• Limited to general website activity
• Can be opted out via Facebook settings

Payment Processing:

Stripe/PayPal cookies:

• Enable secure payment processing
• Fraud prevention and detection
• Required for transaction completion
• Subject to payment processor privacy policies

4. COOKIE MANAGEMENT AND YOUR CHOICES

🛠 How to Control Cookies:

Browser Settings:

Most browsers allow you to control cookies through their settings:

• Chrome: Settings > Privacy and Security > Cookies
• Firefox: Settings > Privacy & Security > Cookies and Site Data
• Safari: Preferences > Privacy > Cookies and website data
• Edge: Settings > Cookies and site permissions

Our Cookie Consent Tool:

• Available on first visit and in privacy settings
• Granular control over cookie categories
• Easy opt-in/opt-out for non-essential cookies
• Settings remembered for future visits

Opt-Out Links:

⚠ Impact of Disabling Cookies:

Analytics Cookies:

• No impact on website functionality
• We'll have less data to improve user experience
• Performance issues may take longer to identify

Marketing Cookies:

• No impact on core functionality
• You may see less relevant advertisements
• May receive more generic marketing content

Functional Cookies:

• Some convenience features may not work
• Preferences will not be remembered
• May need to re-enter information frequently

5. MOBILE APP COOKIES AND TRACKING

Mobile App Data Collection:

If you use our mobile app:

• Device identifiers: Used for app functionality and security
• Usage analytics: How you interact with the app
• Push notification tokens: To send health reminders
• Crash reporting: To improve app stability

Mobile-Specific Privacy Controls:

• iOS: Settings > Privacy & Security > Tracking
• Android: Settings > Privacy > Ads > Opt out of Ads Personalization
• App settings: In-app privacy controls available

6. COOKIE RETENTION PERIODS

Session Cookies:

• Duration: Deleted when you close your browser
• Purpose: Maintain your session while using the site
• Examples: Login status, shopping cart contents

Persistent Cookies:

• Essential cookies: Up to 1 year
• Analytics cookies: Up to 2 years
• Marketing cookies: Up to 1 year
• Functional cookies: Up to 1 year

Automatic Deletion:

• Cookies automatically expire after set periods
• You can manually delete cookies anytime through browser settings
• We regularly review and minimize cookie retention periods

7. INTERNATIONAL USERS AND GDPR

GDPR Compliance (EU Users):

Legal basis for cookies:

• Essential cookies: Legitimate interest
• Non-essential cookies: Explicit consent required

Your GDPR Rights:

• Right to consent: Clear opt-in for non-essential cookies
• Right to withdraw: Easy opt-out anytime
• Right to information: This policy explains our cookie use
• Right to data portability: Cookie preferences can be exported

GDPR Cookie Consent:

• Granular consent options provided
• Consent recorded and timestamped
• Easy withdrawal mechanism available
• Regular consent renewal requested

California Privacy Rights (CCPA):

Do Not Sell My Personal Information:

• Cookie opt-out available for California residents
• Third-party cookie sharing can be restricted
• Enhanced privacy controls in account settings

8. COOKIE SECURITY

Security Measures:

• Encryption: Sensitive cookies are encrypted
• Secure transmission: Cookies sent over HTTPS only
• SameSite protection: Prevents cross-site request forgery
• HttpOnly flags: Prevents JavaScript access to sensitive cookies

Health Data Protection:

• No health data in cookies: Actual health information never stored in cookies
• Session protection: Health session cookies are highly secure
• Regular rotation: Security tokens regularly updated
• Audit logging: Cookie access logged for security monitoring

9. UPDATES TO COOKIE POLICY

When We Update This Policy:

• New cookie types: When we add new functionality
• Regulatory changes: To comply with new privacy laws
• Security improvements: Enhanced protection measures
• User feedback: Based on customer requests

How We Notify You:

• Email notification: For significant changes
• Website banner: Prominent notice on site
• Updated consent tool: New consent request if needed
• 30-day notice: For material changes

10. CONTACT INFORMATION

Cookie Questions and Concerns:

Technical Support:

• Cookie issues: Help with browser settings
• Opt-out assistance: Help disabling unwanted cookies
• Privacy controls: Assistance with preference settings

Data Protection Officer:

For GDPR-related inquiries:
Email: ethan@templeofherbs.com
Subject: "GDPR - Cookie Policy"

11. USEFUL TOOLS AND RESOURCES

Browser-Based Tools:

• Clear browsing data: Remove all cookies and cached data
• Incognito/Private mode: Browse without storing cookies
• Cookie blockers: Browser extensions that block tracking
• Privacy-focused browsers: Browsers with enhanced privacy protection

Third-Party Opt-Out Tools:

• Network Advertising Initiative: www.networkadvertising.org/choices
• Digital Advertising Alliance: www.aboutads.info/choices
• European Interactive Digital Advertising Alliance: www.youronlinechoices.eu

Educational Resources:

• All About Cookies: www.allaboutcookies.org
• Cookie information from browsers:
  • Google Chrome Cookie Info
  • Mozilla Firefox Cookie Info
  • Apple Safari Cookie Info