Privacy Policy

Effective Date: May 20, 2026

Elm & Rye ("we," "us," "our") respects your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights.

1. Information We Collect

Information you provide:

Account information: name, email address, password
Order information: shipping address, billing address, payment method (processed by our payment processor, not stored on our servers)
Communications: messages you send us via email, chat, or contact forms
Survey/quiz responses: answers you provide when using our supplement-recommendation quiz

Information collected automatically:

Device info: IP address, browser type, operating system
Usage data: pages visited, products viewed, time spent on the Site
Cookies and similar technologies: see Cookies section below

2. How We Use Your Information

Fulfill orders and process payments
Send order confirmations, shipping updates, and customer-service responses
Send marketing emails (which you can unsubscribe from at any time)
Personalize product recommendations
Detect and prevent fraud
Comply with legal obligations
Improve our products and Site

3. How We Share Your Information

We share information with:

Service providers: payment processors (Shopify Payments, Stripe), shipping carriers (USPS, UPS, FedEx), email service providers, analytics tools (Google Analytics, Meta), subscription platform (SKIO), reviews platform (TrustReviews)
Legal requirements: when required by law, subpoena, or to protect our rights
Business transfers: if we are acquired or merge with another company, customer data may transfer to the new entity

We do not sell your personal information.

4. Cookies

We use cookies and similar tracking technologies to keep you logged in, remember items in your cart, analyze how the Site is used, and personalize content and ads. You can disable cookies in your browser settings, but some Site features may not work properly.

5. Your Rights

All customers:

Access the personal information we have about you
Correct inaccurate information
Request deletion of your account and data (subject to legal record-keeping requirements)
Opt out of marketing emails (use the unsubscribe link in any email)

California residents (CCPA/CPRA):

You have additional rights including the right to know what we collect, the right to delete, the right to correct, and the right to non-discrimination for exercising these rights. To submit a request, email support@elmandrye.com.

EU/UK residents (GDPR):

You have additional rights to data portability, restriction of processing, and to lodge a complaint with your local data protection authority. To submit a request, email support@elmandrye.com.

6. Data Security

We use industry-standard security measures including SSL encryption, secure payment processors, and access controls. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your data as long as your account is active or as needed to provide services. We may retain certain information longer to comply with legal obligations, resolve disputes, or enforce our agreements.

8. Children's Privacy

Our Site is not intended for anyone under 18. We do not knowingly collect information from children. If we learn we have collected information from a child, we will delete it.

9. International Users

If you access our Site from outside the United States, your information may be transferred to, stored in, and processed in the United States. By using our Site, you consent to this transfer.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Effective Date" above indicates the most recent revision. Continued use of the Site after changes constitutes acceptance.

11. Contact

Questions or requests regarding your privacy? Email support@elmandrye.com.

Sign up and save