Last Updated on September 16, 2025 by Jacqualyn

Last updated: June 28, 2025 – Privacy Policy

At-A-Glance

Important Disclaimer – This Privacy Policy is provided for general information only and does not constitute legal advice. Because privacy laws evolve and differ by jurisdiction, please consult qualified counsel to ensure this document satisfies all applicable requirements for your business.

This Privacy Policy explains our commitment to protecting your personal information and outlines the steps we take to keep your data safe and secure.

Privacy Policy – Keeping Information Safe Online

1. Who We Are Privacy Policy & How We Handle Your Personal Data

My Favorite Health Depot (“MFHD,” “we,” “our,” or “us”), part of the Shop Learn & Thrive Brand, is an online marketplace and educational platform dedicated to wellness products and resources. We operate through www.myfavoritehealthdepot.com (the “Site”) and related services (collectively, the “Services”).

Privacy Policy – Data Controller
My Favorite Health Depot
PO Box 571
Addison, Texas 75150

Where applicable, MFHD is the “controller” (GDPR) or “business” (CCPA/CPRA) for personal information processed through the Services.

2. Scope of This Privacy Policy

This Privacy Policy explains:

1. What information do we collect and why?
2. How we use, share, and safeguard that information.
3. The choices and rights you have regarding your personal data.
4. How to contact us with questions.

This policy applies to all visitors, customers, and any user (“you” or “your”) of our Services.

3. Privacy Policy Not Intended for Children Under 17

MFHD does not knowingly collect or solicit personal information from anyone under 17 years of age. Further, the Site, content, and Services are intended for individuals 17 years and older. If you are under 17, please do not use or provide any information on this Site. If we learn we have collected personal data from a person under 17, we will delete it promptly. Parents or guardians who believe we hold such data should email us @ shoplearnandthrive@gmail.com or contact us through this website.

(§ COPPA & EU/UK GDPR Articles 8–9 compliance)

4. Privacy Policy Information We Collect

Category	Examples	Purpose / Legal Basis*
A. Identifiers	Name, postal address, phone, e-mail, unique user IDs	Contract performance; Legitimate Interests; Consent (GDPR Art. 6 (1)(a)(b)(f))
B. Commercial Information	Product views, cart contents, purchase history	Contract performance; Legitimate Interests
C. Internet/Network Activity	IP address, device type, browser, referring pages, time spent, clicks	Legitimate Interests; Consent (cookie opt-in where required)
D. Payment Data	Last four digits of card, billing address (processed by PCI-compliant processor)	Contract performance; Legal Obligation
E. Health & Wellness Preferences	Only if you voluntarily share in reviews, surveys, or community forums	Consent; Legitimate Interests
F. Geolocation (coarse)	Country/region derived from IP	Legitimate Interests; Consent (if precise)

*“Legal Basis” terminology refers to EU/UK GDPR. Where other laws apply (e.g., CCPA/CPRA, VCDPA, CPA, PIPEDA), equivalent lawful grounds are used.

5. Privacy Policy: How We Use Your Information

We use personal information to:

1. Provide the Services – process orders, ship products, manage accounts.
2. Communicate with you – confirmations, customer support, newsletters (opt-in).
3. Improve and personalize the Site – analytics, A/B testing, product recommendations.
4. Detect and prevent fraud or misuse – security logging, audit trails.
5. Comply with legal obligations – tax, accounting, regulatory requests.

We do not sell personal information as defined under the California Consumer Privacy Act (CCPA/CPRA §1798.140(ad)(2)) or any similar legislation.

6. Privacy Policy Cookies & Tracking Technologies

As outlined in this Privacy Policy, any cookies or tracking tools we use are designed solely to improve your browsing experience and maintain site functionality.

Type of Cookie	Purpose	Opt-Out Options
Strictly Necessary	Browser settings may block, but the Site may malfunction.	Measure traffic and usage patterns (e.g., Google Analytics with/anonymization).
Performance / Analytics	Measure traffic and usage patterns (e.g., Google Analytics with /anonymization).	Consent banner for EEA/UK; “Do Not Track” respected where technologically feasible.
Functionality	Remember preferences (language, currency).	Opt-out via cookie banner.
Advertising / Retargeting	Currently not used. If added, prior opt-in consent will be required.

You can manage cookies in your browser settings and, for EEA/UK visitors, via our Cookie Preference Center accessible from every page footer.

---

7. Privacy Policy Data Sharing and Disclosures

We share information only as necessary:

Recipient	Reason
Service Providers (e.g., payment gateways, fulfillment centers, email platforms)	Perform services on our behalf under binding contracts (GDPR Art. 28, CCPA-compliant).
Analytics Providers	Site usage measurement; IPs anonymized where required.
Legal & Regulatory Authorities	Comply with subpoenas, court orders, or lawful requests.
Corporate Transactions	In case of merger or acquisition, subject to confidentiality safeguards.

We never share data with third parties for their marketing purposes.

8. International Data Transfers – Privacy Policy

We operate in the United States and may transfer data to jurisdictions lacking an “adequate” decision under GDPR. When we do, we rely on:

• Standard Contractual Clauses (SCCs) approved by the European Commission.
• UK International Data Transfer Addendum (IDTA).
• Equivalent safeguards for other regions.

9. Privacy Policy Retention

As stated in this Privacy Policy, we retain personal information only as long as necessary for the purposes described.

We retain personal information only as long as necessary for the purposes described or as mandated by law (e.g., tax rules, warranty periods). Further, upon expiry, data is securely deleted or anonymized.

For a clear breakdown of what data privacy means and why it matters—not just legally, but as a trust-building strategy—see IBM’s overview on What Is Data Privacy?

10. Your Privacy Rights

Jurisdiction	Rights
EU/EEA & UK GDPR	Access, Rectification, Erasure, Restriction, Portability, Objection, Withdraw Consent, Lodge Complaint with supervisory authority.
California (CCPA/CPRA)	Know, Delete, Correct, Opt-Out of Sharing/Sale, Limit Use of Sensitive Info, Non-Discrimination.
Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA)	Access, Delete, Portability, Opt-Out of Targeted Ads & Profiling.
Canada (PIPEDA)	Access, Correct, Withdraw Consent, Challenge compliance.

Exercising Rights – Submit requests via email to shoplearnandthrive@gmail.com. Further, we will verify identity before fulfilling requests. California residents may also use the “Do Not Sell or Share My Personal Information” link in the footer (even though we do not sell data).

11. Privacy Policy – Security Measures

Our Privacy Policy outlines the security measures we take to protect your personal data, from encryption to multi-factor authentication.

We implement industry-standard technical and organizational safeguards, including:

• HTTPS/TLS encryption in transit.
• AES-256 encryption at rest for sensitive fields.
• Role-based access controls and multi-factor authentication.
• Regular security audits and vulnerability scanning.

No method of transmission or storage is 100 % secure; however, we strive to protect your data to the fullest extent.

---

12. Our Privacy Policy – Do Not Track & Global Privacy Control (GPC)

Our Site honors Global Privacy Control signals where technically feasible and treats them as an opt-out of any sale/sharing (though we do not sell data). Traditional “Do Not Track” (DNT) signals are also respected for analytics cookies.

---

13. Changes to This Privacy Policy

From time to time, we may update this Policy periodically to reflect changes in law, technology, or business practices. We will post the revised version and update the “Last updated” date. Further, material changes will be announced via a prominent Site notice or e-mail, where required.

14. Affiliate Marketing & Commission Disclosure

My Favorite Health Depot participates in several affiliate-marketing programs. This means that when you click certain outbound links and subsequently make a purchase, we may earn a commission at no additional cost to you.

How Affiliate Tracking Works

• When you click an affiliate link, a small text file (cookie) or similar technology records that your browser visited our Site before buying from the merchant.
• The information transmitted is generally limited to an anonymous referral identifier, the time of click, and—after purchase—the order amount.
• Affiliate cookies do not contain your name, e-mail address, payment data, or other direct identifiers.

Data Protection & Transparency

• We do not sell or trade your personal information to affiliates.
• Commission tracking is performed under contracts that require affiliates to use the data only for attribution and fraud-prevention purposes.
• You can disable affiliate cookies in your browser or via our Cookie Preference Center; however, doing so may prevent us from receiving credit for a sale.

FTC Endorsement Compliance

In keeping with U.S. Federal Trade Commission (FTC) guidelines, we mark affiliate links or otherwise disclose our commercial relationship inside relevant posts, emails, or pages.

Bottom line: Affiliate income indeed helps us maintain Thrive Wellness Community content and keep many resources free, without compromising your privacy.

15. Contact Us

Questions, concerns, or requests? Please reach out:

Privacy Office – My Favorite Health Depot
shoplearnandthrive@gmail.com