Privacy Policy
Summary: We collect information to process your orders, provide our Karma program, and improve our services. We do not sell your personal information. You have rights to access, correct, and delete your data.
1. Overview
Only Do Good ("Only Do Good, LLC," "Company," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our website at shop.onlydogood.co (the "Site") or make purchases from us.
By using the Site, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our practices, please do not use the Site.
2. Information We Collect
2.1 Information You Provide
We collect information that you voluntarily provide to us, including:
Account Information:
- Email address (required for account creation)
- First and last name
- Phone number (optional)
Shipping and Billing Information:
- Shipping address (street, city, state, ZIP code)
- Billing address (if different from shipping)
- Phone number for delivery notifications
Purchase and Program Information:
- Order history and transaction details
- Karma points balance and allocation preferences
- Charity and personal goal selections
- Discount codes used
Communications:
- Customer service inquiries
- Feedback and survey responses
2.2 Information Collected Automatically
When you visit the Site, we automatically collect certain information, including:
Device and Browser Information:
- IP address
- Browser type and version
- Operating system
- Device type (desktop, mobile, tablet)
Usage Information:
- Pages viewed and links clicked
- Date and time of visits
- Referring website or source
- Time spent on pages
2.3 Information from Third Parties
We may receive limited information from our service providers:
- Stripe: Transaction confirmation and fraud prevention data (we do not receive or store your full payment card number)
- Shipping carriers: Delivery status and tracking updates
3. How We Use Your Information
We use your information for the following purposes:
| Purpose | Examples |
|---|---|
| Order Fulfillment | Processing purchases, shipping products, sending order confirmations |
| Account Management | Creating and maintaining your account, authenticating logins |
| Karma Program | Tracking points, processing allocations, displaying impact |
| Customer Support | Responding to inquiries, resolving issues, processing returns |
| Service Improvement | Analyzing usage patterns, fixing bugs, improving site experience |
| Security | Preventing fraud, protecting against unauthorized access |
| Legal Compliance | Meeting legal obligations, responding to lawful requests |
| Communications | Sending transactional emails (order updates, account notices) |
We will not use your information for purposes materially different from those described above without providing you notice and, where required, obtaining your consent.
6. Your Privacy Rights
Depending on your location, you may have the following rights regarding your personal information:
6.1 Access
You can request a copy of the personal information we hold about you.
6.2 Correction
You can request that we correct inaccurate or incomplete information. You can also update your account information directly in your Account Settings.
6.3 Deletion
You can request that we delete your personal information. Note that we may retain certain information as required by law or for legitimate business purposes (such as fraud prevention or tax records).
6.4 Opt-Out of Marketing
You can opt out of marketing communications by clicking the "unsubscribe" link in any marketing email or by contacting us at privacy@onlydogood.co.
6.5 How to Exercise Your Rights
To exercise any of these rights, please contact us at:
- Email: privacy@onlydogood.co
We will respond to your request within 45 days. We may need to verify your identity before processing your request.
7. California Privacy Rights
This section applies to California residents under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).
7.1 Categories of Personal Information
In the past 12 months, we have collected the following categories of personal information:
| Category | Examples | Collected? |
|---|---|---|
| Identifiers | Name, email address, IP address | Yes |
| Customer Records | Address, phone number | Yes |
| Commercial Information | Purchase history, Karma points | Yes |
| Internet Activity | Browsing history on our Site | Yes |
| Geolocation | General location from IP address | Yes |
| Inferences | Preferences based on activity | Yes |
| Sensitive Personal Information | N/A | No |
7.2 How We Use and Disclose Information
We collect and use personal information for the business purposes described in Section 3 above. We disclose personal information to service providers as described in Section 4.
7.3 Sale and Sharing
We do not sell your personal information. We do not share personal information for cross-context behavioral advertising.
7.4 Your California Rights
As a California resident, you have the following rights:
| Right | Description |
|---|---|
| Right to Know | Request what personal information we collect, use, and disclose |
| Right to Delete | Request deletion of your personal information |
| Right to Correct | Request correction of inaccurate information |
| Right to Opt-Out | Opt out of sale/sharing (not applicable—we don't sell or share) |
| Right to Non-Discrimination | We will not discriminate against you for exercising your rights |
7.5 How to Submit a Request
To exercise your California privacy rights:
- Email: privacy@onlydogood.co
Verification:
To protect your privacy, we will verify your identity before processing your request. We may ask you to confirm your email address or provide additional information to match against our records.
Authorized Agents:
You may designate an authorized agent to submit requests on your behalf. We may require written authorization and identity verification from both you and the agent.
Response Time:
We will respond to verified requests within 45 days. If we need additional time (up to 90 days total), we will notify you of the extension and the reason for it.
7.6 Notice of Financial Incentive
Our Karma Points program may be considered a "financial incentive" under California law because it provides benefits in connection with the collection of your personal information.
Program Description: You earn 10 Karma points per $1 spent on qualifying purchases. Points can be allocated to charitable causes or personal goals through your account.
Personal Information Collected: To participate in the Karma program, we collect your email address, name, and purchase history.
Value of Data: We estimate the value of your data in connection with the Karma program based on the cost of administering the program divided by the number of participants.
Opt-In/Opt-Out: You opt into the Karma program by creating an account. You may opt out by deleting your account, though you will forfeit any accumulated Karma points.
8. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
| Data Type | Retention Period | Reason |
|---|---|---|
| Account Information | Until account deletion + 30 days | Account recovery period |
| Order History | 7 years | Tax and legal requirements |
| Customer Service Records | 3 years | Quality assurance and dispute resolution |
| Error Logs (Sentry) | 90 days | Technical troubleshooting |
After the applicable retention period, we will securely delete or anonymize your information.
9. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption in transit using HTTPS/TLS
- Secure password hashing
- Access controls limiting who can access your data
- Regular security assessments
- PCI-DSS compliant payment processing through Stripe
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
If you become aware of any unauthorized access to your account, please contact us immediately at privacy@onlydogood.co.
10. Children's Privacy
The Site is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe we have collected information from a child under 13, please contact us at privacy@onlydogood.co, and we will promptly delete such information.
If you are between 13 and 18 years old, you may use the Site only with the involvement and consent of a parent or guardian.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors.
When we make changes, we will:
- Update the "Last Updated" date at the top of this page
- For material changes, provide notice through the Site or by email
Your continued use of the Site after any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically for the latest information.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
Only Do Good, LLC
Attn: Privacy
Email: privacy@onlydogood.co
For general inquiries: hello@onlydogood.co
We will respond to privacy-related inquiries within 10 business days.