Find us online at

Find us at

Available on

Privacy policy

We don’t intentionally collect sensitive categories like health conditions, precise geolocation, or government ID. If you volunteer health information in a support message, we use it only to answer you.

We use automated tools to flag risky orders. We don’t make decisions with legal effects about you purely by automation.

If you’re in the EEA or UK, we rely on: performance of a contract (fulfilling your order), legitimate interests (site security, fraud prevention, improving our products), consent (marketing email and text, non-essential cookies — withdrawable any time), and legal obligation (tax and product-safety records).

We share personal information with service providers who need it to do work for us, under contracts that limit what they can do with it:

We also share when the law requires it, to protect our rights or someone’s safety, and with an acquirer if the business is sold or merged.

We don’t sell personal information for money. But some US state privacy laws define “sell” and “share” broadly enough to include letting ad platforms set cookies on our site for targeted advertising. Under those definitions, we do share identifiers and browsing activity with advertising partners.

To opt out: use the “Your Privacy Choices” link in the site footer, turn off advertising cookies in our cookie banner, or send a Global Privacy Control signal from your browser — we honor it. We don’t knowingly sell or share the information of anyone under 16.

Cookies are small files stored by your browser. We use four kinds:

Manage them through our cookie banner in your browser settings. Blocking necessary cookies will break checkout. We also use pixels in email to tell whether a message was opened.

Marketing email and texts are opt-in. Unsubscribe from email with the link at the bottom of any message; reply STOP to any text. We’ll still send messages about orders you’ve placed. Carriers aren’t liable for delayed or undelivered messages. Your mobile number is never shared or sold to third parties for their own marketing.

Order and tax records: 7 years, as required by law. Account data: while your account is open, then 24 months. Marketing contacts: until you unsubscribe, then a suppression record so we don’t contact you again. Analytics data: 14–26 months depending on the tool.

We use TLS encryption in transit, restrict internal access to people who need it, and rely on PCI-compliant processors for payment. No system is perfectly secure, so we can’t guarantee absolute security. If a breach affects your information, we’ll notify you as the law requires.

Depending on where you live, you may have the right to: know what we hold about you, get a copy of it, correct it, delete it, opt out of targeted advertising and of “sale” or “sharing,” limit use of sensitive information, and not be discriminated against for exercising any of this.

To make a request, email hello@drinkjetty.com. We’ll verify your identity by matching details against your order history, and respond within 45 days. An authorized agent can act for you with written permission.

If we deny a request, you can appeal by replying to our response with “appeal” and your reasoning.

Under the CCPA/CPRA, California residents have the rights listed above, including the right to opt out of sale and sharing, and the right to limit sensitive personal information. We disclosed the categories we collect, the sources, our purposes, and the categories of third parties above. We don’t offer financial incentives beyond standard discounts available to all subscribers. Shine the Light requests: email hello@drinkjetty.com.

Residents of states with comprehensive privacy laws have access, correction, deletion, portability, and opt-out rights, exercised the same way. Virginia and Colorado residents may appeal a denial as described above.

Nevada residents may opt out of the sale of covered information by emailing hello@drinkjetty.com.

We handle personal information in line with PIPEDA and, for Quebec residents, Law 25. Marketing email follows CASL — we send it with your express consent and every message identifies us and includes an unsubscribe link. You can ask for access to your information or complain to the Office of the Privacy Commissioner of Canada.

We operate in the United States and our providers may process data there and elsewhere. Where we move data out of the EEA, UK, or Canada, we rely on Standard Contractual Clauses or another approved safeguard. Contact us for details.

The site isn’t directed at children under 13, and we don’t knowingly collect their personal information. If you believe a child gave us information, email hello@drinkjetty.com and we’ll delete it.

We’ll post updates here with a new “last updated” date. If a change materially affects how we use your information, we’ll email you or show a notice on the site before it takes effect.