Privacy Policy

1. What we collect

We don’t intentionally collect sensitive categories like health conditions, precise geolocation, or government ID. If you volunteer health information in a support message, we use it only to answer you.

2. Where it comes from

• Directly from you — checkout, account signup, newsletter, quizzes, support, social messages.
• Automatically — cookies and similar technology when you browse the site.
• From partners — our ecommerce platform, payment processor, shipping carriers, ad and analytics platforms, and retailers where we sell.

3. How we use it

• Take and fulfill your order, process payment, and handle shipping and returns.
• Run subscriptions, including billing you on schedule and letting you skip or cancel.
• Answer support requests and communicate about orders.
• Send marketing you’ve opted into, and measure whether it worked.
• Improve the site and our products, including analytics and A/B testing.
• Prevent fraud, abuse of promotions, and unauthorized reselling.
• Meet legal, tax, food-safety, and recall obligations.

We use automated tools to flag risky orders. We don’t make decisions with legal effects about you purely by automation.

4. Legal bases (EEA/UK)

If you’re in the EEA or UK, we rely on: performance of a contract (fulfilling your order), legitimate interests (site security, fraud prevention, improving our products), consent (marketing email and text, non-essential cookies — withdrawable any time), and legal obligation (tax and product-safety records).

5. Who we share it with

We share personal information with service providers who need it to do work for us, under contracts that limit what they can do with it:

We also share when the law requires it, to protect our rights or someone’s safety, and with an acquirer if the business is sold or merged.

6. Selling and sharing for ads

We don’t sell personal information for money. But some US state privacy laws define “sell” and “share” broadly enough to include letting ad platforms set cookies on our site for targeted advertising. Under those definitions, we do share identifiers and browsing activity with advertising partners.

To opt out: use the “Your Privacy Choices” link in the site footer, turn off advertising cookies in our cookie banner, or send a Global Privacy Control signal from your browser — we honor it. We don’t knowingly sell or share the information of anyone under 16.

7. Cookies and tracking

Cookies are small files stored by your browser. We use four kinds:

• Strictly necessary — your cart, login, and checkout security. These can’t be turned off.
• Functional — remembering your preferences and region.
• Analytics — how many people visit and which pages they use.
• Advertising — showing you Jetty ads elsewhere and measuring whether they led to a purchase.

Manage them through our cookie banner in your browser settings. Blocking necessary cookies will break checkout. We also use pixels in email to tell whether a message was opened.

8. Email and text

Marketing email and texts are opt-in. Unsubscribe from email with the link at the bottom of any message; reply STOP to any text. We’ll still send messages about orders you’ve placed. Carriers aren’t liable for delayed or undelivered messages. Your mobile number is never shared or sold to third parties for their own marketing.

9. How long we keep it

Order and tax records: 7 years, as required by law. Account data: while your account is open, then 24 months. Marketing contacts: until you unsubscribe, then a suppression record so we don’t contact you again. Analytics data: 14–26 months depending on the tool.

10. How we protect it

We use TLS encryption in transit, restrict internal access to people who need it, and rely on PCI-compliant processors for payment. No system is perfectly secure, so we can’t guarantee absolute security. If a breach affects your information, we’ll notify you as the law requires.

11. Your rights and choices

Depending on where you live, you may have the right to: know what we hold about you, get a copy of it, correct it, delete it, opt out of targeted advertising and of “sale” or “sharing,” limit use of sensitive information, and not be discriminated against for exercising any of this.

To make a request, email hello@drinkjetty.com. We’ll verify your identity by matching details against your order history, and respond within 45 days. An authorized agent can act for you with written permission.

If we deny a request, you can appeal by replying to our response with “appeal” and your reasoning.

12. US state privacy notices

California

Under the CCPA/CPRA, California residents have the rights listed above, including the right to opt out of sale and sharing, and the right to limit sensitive personal information. We disclosed the categories we collect, the sources, our purposes, and the categories of third parties above. We don’t offer financial incentives beyond standard discounts available to all subscribers. Shine the Light requests: email hello@drinkjetty.com.

Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and other states

Residents of states with comprehensive privacy laws have access, correction, deletion, portability, and opt-out rights, exercised the same way. Virginia and Colorado residents may appeal a denial as described above.

Nevada

Nevada residents may opt out of the sale of covered information by emailing hello@drinkjetty.com.

13. Canada

We handle personal information in line with PIPEDA and, for Quebec residents, Law 25. Marketing email follows CASL — we send it with your express consent and every message identifies us and includes an unsubscribe link. You can ask for access to your information or complain to the Office of the Privacy Commissioner of Canada.

14. International transfers

We operate in the United States and our providers may process data there and elsewhere. Where we move data out of the EEA, UK, or Canada, we rely on Standard Contractual Clauses or another approved safeguard. Contact us for details.

15. Children

The site isn’t directed at children under 13, and we don’t knowingly collect their personal information. If you believe a child gave us information, email hello@drinkjetty.com and we’ll delete it.

16. Changes to this policy

We’ll post updates here with a new “last updated” date. If a change materially affects how we use your information, we’ll email you or show a notice on the site before it takes effect.

17. Contact us