---

1. Introduction / Overview

1.1 Who We Are

PurestKratom.com ("PurestKratom," "we," "us," or "our") is a United States-based online retailer specializing in kratom products. We operate the website located at www.PurestKratom.com (the "Site"), through which we offer kratom products for purchase by consumers across the United States.

We are committed to protecting your privacy and handling your personal information with transparency, care, and respect. This Privacy Policy reflects our obligations under applicable federal and state privacy laws, including but not limited to the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Children's Online Privacy Protection Act (COPPA), the CAN-SPAM Act, the Telephone Consumer Protection Act (TCPA), and other applicable U.S. state privacy laws.

1.2 What This Policy Covers

This Privacy Policy applies to all personal information we collect, use, disclose, and retain in connection with your use of our Site, our products, our customer support services, our marketing communications, and any other interactions you have with us. It covers:

• Information you voluntarily provide to us (e.g., when placing an order or creating an account);
• Information we collect automatically when you visit our Site (e.g., device data, cookies, usage data);
• Information we receive from third parties in connection with our services (e.g., shipping carriers, payment processors); and
• How we use, share, protect, and retain all such information.

This policy does not apply to the privacy practices of third-party websites, services, or applications that may be linked to from our Site. We encourage you to review the privacy policies of any third-party sites you visit.

1.3 Agreement to This Policy

By visiting, browsing, or using the Site, creating an account, placing an order, or otherwise providing us with your personal information, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. If you do not agree with any part of this policy, you should discontinue use of the Site immediately.

Your continued use of the Site following any posted update to this policy constitutes your acceptance of such update, as further described in Section 15 (Changes to This Policy).

1.4 Effective Date

This Privacy Policy is effective as of July 20, 2026.

---

2. Information We Collect

We collect several categories of personal information, depending on how you interact with us. Below is a detailed description of each category.

2.1 Personal Identifiers

When you place an order, create an account, contact us, or subscribe to marketing communications, we may collect:

• Full name
• Email address
• Billing address and shipping/delivery address
• Phone number
• Date of birth (for age verification purposes)
• Username (if you create an account)

2.2 Payment Information

When you make a purchase, payment information (such as credit card numbers, debit card numbers, and billing details) is collected and processed directly by our third-party payment processors. We do not receive, process, or store full payment card numbers on our servers. We may retain limited transaction metadata such as the last four digits of your card, transaction confirmation numbers, and payment method type, solely for order confirmation and customer service purposes. Please refer to Section 6 (Payment Processing) for more information.

2.3 Account Credentials

If you choose to create a customer account with us, we collect:

• Username or account name
• Password (stored in encrypted/hashed form; we never store passwords in plain text)
• Account preferences and settings

2.4 Order History and Transaction Data

We maintain records of your purchases and transactions with us, including:

• Products purchased, quantities, and prices
• Order dates and order numbers
• Shipping and delivery status information
• Return, refund, or exchange history
• Promotional codes or discounts applied

2.5 Device and Technical Data

When you access our Site, we and our third-party service providers automatically collect certain technical information from your device, including:

• IP address
• Browser type and version (e.g., Chrome, Firefox, Safari)
• Operating system (e.g., Windows, macOS, iOS, Android)
• Device type (e.g., desktop, mobile, tablet) and device identifiers
• Screen resolution and language settings
• Internet service provider (ISP)
• Geolocation data (at the city or region level, derived from IP address; we do not collect precise GPS location without your explicit consent)

2.6 Usage Data

We collect information about how you use and interact with our Site, including:

• Pages visited and content viewed
• Time and duration of visits
• Click-through and navigation paths
• Search queries entered on the Site
• Referral URLs (the website or source that directed you to our Site)
• Shopping cart activity and abandoned cart data
• Products viewed, wish-listed, or compared

2.7 Communications Data

When you contact us via email, telephone, live chat, or our website contact form, we collect:

• The content of your messages and inquiries
• Your contact information provided in the communication
• Records of correspondence and customer support interactions
• Feedback, reviews, or survey responses you submit

2.8 Information Collected Automatically via Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information automatically as you navigate our Site. These technologies help us operate the Site efficiently, understand user behavior, and deliver relevant advertising. Please see Section 4 (Cookies and Tracking Technologies) for a full description of these practices and your opt-out options.

---

3. How We Use Your Information

We use the personal information we collect for the following purposes. We will only use your information in a manner that is consistent with the purpose for which it was collected, or as otherwise permitted by applicable law.

3.1 Order Processing and Fulfillment

The primary purpose for which we collect your personal information is to process and fulfill your orders. This includes verifying your identity and age, processing payment, arranging shipping, providing tracking information, and handling returns, refunds, or exchanges.

3.2 Account Management

If you create an account, we use your information to create and maintain your account, authenticate your identity when you log in, store your order history and preferences, and communicate with you about your account.

3.3 Customer Support

We use your information to respond to your inquiries, resolve complaints, process warranty or satisfaction claims, and provide general customer assistance. Records of communications may be retained to improve our support services and for quality assurance purposes.

3.4 Marketing and Promotional Communications

With your consent (where required by law), we may use your email address, phone number, or mailing address to send you promotional offers, newsletters, product updates, and special offers. You may opt out of such communications at any time. See Section 8 (Marketing Communications) for details.

3.5 Website Analytics and Performance Improvement

We analyze usage data and technical data to understand how visitors interact with our Site, identify areas for improvement, test new features, optimize page performance, and enhance the overall user experience.

3.6 Fraud Prevention and Security

We use personal information to detect, investigate, and prevent fraudulent transactions, unauthorized access, chargebacks, abuse of our services, and other illegal activities. This includes automated screening of orders and verification of identity.

3.7 Legal Compliance and Regulatory Obligations

We may use and disclose your information to the extent necessary to comply with applicable federal, state, and local laws and regulations, respond to lawful legal process (such as subpoenas or court orders), enforce our Terms of Service, and protect the legal rights of PurestKratom.com, our employees, and our users.

3.8 Internal Business Operations

We use information in aggregated or de-identified form for internal business purposes, including inventory management, financial reporting, business planning, auditing, and research and development. Aggregated or de-identified data does not identify you personally and is not subject to this Privacy Policy.

---

4. Cookies and Tracking Technologies

4.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember your actions and preferences over time. We also use other similar tracking technologies, including web beacons (also known as "pixel tags" or "clear GIFs"), session storage, local storage, and tracking scripts embedded in our pages.

4.2 Types of Cookies We Use

The following table describes the categories of cookies and tracking technologies used on our Site:

Category	Purpose	Examples	Can You Opt Out?
Essential / Strictly Necessary	Required for the Site to function properly. Enable shopping cart functionality, user login/sessions, and security features.	Session ID, cart cookies, authentication tokens	No — these are required for basic site operation.
Functional	Remember your preferences (e.g., language, previously viewed products) to improve your experience.	Language preference, user settings	Yes — via browser settings or cookie preference center.
Analytics / Performance	Collect data on how visitors use the Site (pages visited, time spent, errors encountered) to help us improve performance.	Google Analytics, similar tools	Yes — see opt-out options in Section 4.4.
Marketing / Advertising	Track browsing habits across websites to deliver targeted advertising relevant to your interests.	Meta Pixel, Google Ads tags, retargeting cookies	Yes — see opt-out options in Section 4.4.

4.3 Third-Party Cookies

Some cookies on our Site are placed by third parties, including but not limited to:

• Google Analytics — used for website traffic analysis and audience insights.
• Meta (Facebook) Pixel — used for tracking conversions from Facebook and Instagram advertisements and enabling retargeted advertising.
• Google Ads — used for tracking ad performance and remarketing.
• Email marketing platform providers — may place tracking pixels within our emails to measure open rates and click-through activity.

We do not control the cookies set by third parties. Each third party is governed by its own privacy policy and cookie practices. We encourage you to review the privacy policies of these third-party services directly.

4.4 How to Manage or Opt Out of Cookies

You have several options for managing cookies:

• Browser settings: Most web browsers allow you to control cookies through their settings. You may be able to block, delete, or restrict cookies. Please consult your browser's help documentation for instructions. Note that disabling essential cookies may impair the functionality of our Site.
• Google Analytics opt-out: You may install the Google Analytics Opt-out Browser Add-on, available at tools.google.com/dlpage/gaoptout, to prevent your data from being used by Google Analytics.
• Digital advertising opt-out: You may opt out of interest-based advertising through the Network Advertising Initiative (NAI) opt-out tool at optout.networkadvertising.org or the Digital Advertising Alliance (DAA) opt-out at optout.aboutads.info.
• Meta (Facebook) Pixel: You may manage your Facebook ad preferences through your Facebook account settings.

4.5 Do Not Track (DNT) Signals

Some browsers transmit "Do Not Track" (DNT) signals to websites. Because there is currently no universally accepted standard for how websites should respond to DNT signals, our Site does not currently respond to browser-initiated DNT signals. We will continue to monitor developments in DNT standards and update our practices accordingly. Your opt-out choices regarding cookies and advertising, as described in Section 4.4, remain available regardless of your browser's DNT setting.

---

5. Analytics

5.1 Use of Analytics Tools

We use Google Analytics and may use other similar analytics services to understand how users engage with our Site. These tools collect information such as how often users visit the Site, what pages they visit, and what other sites they used prior to arriving at our Site. We use this information to improve the Site and our services.

5.2 Data Anonymization

Where possible, we configure our analytics tools to anonymize IP addresses before data is collected or stored by the analytics provider. This means your full IP address is not stored by the analytics service. We also take steps to ensure that analytics data is used in aggregate form and is not used to personally identify individual users.

5.3 Analytics Opt-Out

You may opt out of Google Analytics data collection by installing the Google Analytics Opt-out Browser Add-on, available at tools.google.com/dlpage/gaoptout. This add-on instructs the Google Analytics JavaScript (ga.js, analytics.js, and dc.js) to prohibit sending information to Google Analytics. Additionally, you may manage your analytics preferences through our cookie preference tools as described in Section 4.4.

---

6. Payment Processing

6.1 Third-Party Payment Processors

All payment transactions conducted through our Site are processed by third-party payment processors. We partner with processors that maintain compliance with the Payment Card Industry Data Security Standard (PCI-DSS), an industry-wide security standard designed to protect payment card information.

6.2 We Do Not Store Payment Card Data

PurestKratom.com does not collect, receive, or store full credit card numbers, debit card numbers, CVV/CVC security codes, or other sensitive payment card authentication data on our own servers. When you enter your payment information on our Site, it is transmitted directly and securely to our payment processor. We retain only limited transactional metadata (such as the last four digits of your card number and the transaction confirmation number) for order management and customer service purposes.

6.3 High-Risk Merchant Context

Due to the nature of kratom products as a regulated specialty product, payment processing for our Site may be facilitated through specialty or high-risk payment processors. These processors are experienced in handling transactions in regulated industries and operate under the same PCI-DSS compliance requirements as standard processors. The specific processor used may vary. Each processor has its own privacy policy governing its handling of your payment information.

6.4 Processor Privacy Policies

Our payment processors collect and process your payment information subject to their own privacy policies and terms of service. We encourage you to review those policies. We are not responsible for the privacy or security practices of our payment processors beyond our contractual obligations with them.

---

7. Age Restrictions

7.1 Adult Products — 21 Years of Age or Older

Kratom products sold by PurestKratom.com are intended exclusively for adults who are 21 years of age or older. By using our Site and placing an order, you represent and warrant that you are at least 21 years of age and that you are legally permitted to purchase kratom products in your jurisdiction.

7.2 No Collection of Data from Minors

We do not knowingly collect, use, or disclose personal information from any person under the age of 18. Our Site, products, and services are not directed to children under 18. If you are under 18, you are not permitted to use our Site, create an account, or submit any personal information to us.

7.3 COPPA Compliance

We are committed to compliance with the Children's Online Privacy Protection Act (COPPA), 15 U.S.C. §§ 6501–6506, and the FTC's implementing regulations. COPPA requires operators of websites directed to children under 13 to obtain verifiable parental consent before collecting personal information. Because our Site is not directed to children and we do not knowingly collect data from anyone under 13, we have no such data collection to report. However, should we ever receive a report that we have inadvertently collected data from a child under 13, we will treat such information as described in Section 7.5.

7.4 Age Verification

We implement age verification measures at checkout, including requiring customers to confirm their age and, where technically feasible or legally required, validating date of birth against order and billing records. We reserve the right to cancel any order where we have reason to believe the purchaser does not meet the minimum age requirement.

7.5 Discovery of Minor's Data

If we discover or are notified that a person under the age of 18 (or under 21, with respect to product eligibility) has submitted personal information to us, we will take prompt steps to:

• Delete such information from our records as soon as reasonably practicable;
• Cancel any associated order if fulfillment has not occurred; and
• Notify the parent or guardian if contact information is available and if notification is appropriate.

If you are a parent or guardian and believe your child has submitted personal information to us without your consent, please contact us immediately at the information provided in Section 16 (Contact Us).

---

8. Marketing Communications

8.1 Email Marketing

With your consent, we may send you promotional emails about our products, special offers, discounts, and company news. We collect your email address for marketing purposes only when you voluntarily provide it and affirmatively opt in to receive marketing communications (e.g., by checking a consent box at checkout or subscribing to our email list).

8.2 SMS / Text Message Marketing

With your prior express written consent, we may send you promotional text messages (SMS) to the mobile phone number you provide. Standard message and data rates from your mobile carrier may apply. Message frequency may vary.

8.3 How to Opt Out

• Email: To unsubscribe from our marketing emails, click the "Unsubscribe" link located at the bottom of any marketing email we send you. You may also contact us directly at [Insert Contact Email] to request removal from our email list. Please allow up to 10 business days for your request to be processed.
• SMS: To stop receiving text messages from us, reply STOP to any SMS message you receive from us. You may also contact us at [Insert Contact Email] to request removal from our SMS marketing list.

Please note that even after you opt out of marketing communications, we may still send you transactional communications necessary to fulfill your orders or service your account, such as order confirmations, shipping notifications, and account security alerts. These are not marketing communications and cannot be opted out of while you have an active account or pending order.

8.4 CAN-SPAM Act Compliance

Our marketing email communications comply with the CAN-SPAM Act of 2003. In accordance with that law, each commercial email we send includes: (a) a clear identification that the message is an advertisement; (b) our physical postal address; (c) a clear and conspicuous opt-out mechanism; and (d) prompt processing of opt-out requests within 10 business days.

8.5 TCPA Compliance

Our SMS marketing practices are governed by the Telephone Consumer Protection Act (TCPA), 47 U.S.C. § 227, and applicable FCC regulations. We obtain prior express written consent before sending any promotional text messages and honor all opt-out requests promptly. You will not be required to consent to SMS marketing as a condition of purchase.

8.6 Transactional vs. Promotional Communications

For clarity, the following table distinguishes between the types of communications we may send:

Type	Examples	Consent Required?	Can You Opt Out?
Transactional	Order confirmations, shipping notifications, delivery updates, account security alerts, password resets	No — sent as part of service	No (while account/order is active)
Promotional	Discount offers, new product announcements, newsletters, promotional campaigns	Yes — opt-in required	Yes — at any time (see Section 8.3)

---

9. Data Sharing and Disclosure

We respect your privacy and are thoughtful about with whom we share your personal information. We do not sell your personal data to third-party data brokers in the traditional commercial sense. However, we do share personal information in the following circumstances:

9.1 Service Providers and Vendors

We share personal information with trusted third-party service providers who perform services on our behalf and require access to your information to do so. These include:

• Shipping and fulfillment carriers (e.g., UPS, FedEx, USPS, and similar) — to ship and deliver your orders;
• Payment processors — to securely process your payments;
• Email and SMS marketing platforms — to deliver our communications;
• Customer relationship management (CRM) providers — to manage our customer interactions;
• Analytics and data services — to analyze Site traffic and performance;
• IT and website hosting providers — to operate and maintain our Site and infrastructure;
• Fraud prevention and identity verification services — to protect against fraudulent transactions; and
• Legal, accounting, and compliance advisors — as needed to manage our business.

All service providers are required by contract to use your personal information only as necessary to perform services on our behalf and to maintain appropriate confidentiality and security measures.

9.2 Business Transfers

In the event that PurestKratom.com is involved in a merger, acquisition, reorganization, sale of all or substantially all of our assets, or similar corporate transaction, your personal information may be transferred as part of that transaction. We will provide notice (via email and/or a prominent notice on our Site) before your personal information is transferred and becomes subject to a different privacy policy.

9.3 Legal Requirements and Law Enforcement

We may disclose your personal information if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, subpoena, court order, or other lawful legal process;
• Respond to a lawful request by a government authority, regulatory body, or law enforcement agency;
• Comply with applicable federal, state, or local law; or
• Fulfill reporting obligations imposed by applicable regulation.

9.4 Protection of Rights and Safety

We may disclose personal information where we reasonably believe it is necessary to:

• Protect and defend the rights, property, or safety of PurestKratom.com, our employees, customers, or the public;
• Detect, prevent, or investigate fraud, security breaches, or other illegal activity; or
• Enforce our Terms of Service or other applicable agreements.

9.5 With Your Consent

We may share your personal information with additional third parties with your express consent. In such cases, we will describe the purpose and the recipient at the time we request your consent.

---

10. "Sale" of Personal Information Under CCPA/CPRA

10.1 Definition of "Sale" Under California Law

The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), defines the "sale" of personal information broadly to include not only selling data for money, but also sharing personal information for cross-context behavioral advertising purposes — even without monetary compensation. Under this broad definition, our use of certain third-party advertising and analytics cookies (such as Meta Pixel and Google Ads) may constitute a "sale" or "sharing" of personal information.

10.2 Categories of Personal Information That May Be Sold or Shared

The following categories of personal information may be shared with advertising partners in ways that could constitute a "sale" or "sharing" under CCPA/CPRA:

• Personal identifiers (e.g., email address used for matched audiences)
• Device and technical data (e.g., IP address, device identifiers)
• Usage and browsing data (e.g., pages viewed, products clicked)
• Internet or other electronic network activity

10.3 Your Right to Opt Out

California residents have the right to opt out of the sale or sharing of their personal information. To exercise this right, please click the link below or contact us using the information in Section 16:

[Do Not Sell or Share My Personal Information]

Upon receipt of your opt-out request, we will cease sharing your personal information with third-party advertising partners for cross-context behavioral advertising purposes as soon as reasonably practicable, and no later than 15 business days from the date we receive your request. We will not discriminate against you for exercising this right.

10.4 Targeted Advertising

We may engage in targeted or interest-based advertising by sharing certain data with advertising networks and social media platforms. California residents who wish to opt out of such sharing may do so through the opt-out mechanism described in Section 10.3 above, as well as through the browser and advertising industry opt-out tools described in Section 4.4.

---

11. Data Security

11.1 Security Measures

We implement industry-standard technical, administrative, and physical safeguards designed to protect your personal information from unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• SSL/TLS encryption: All data transmitted between your browser and our Site is encrypted using Secure Sockets Layer (SSL) / Transport Layer Security (TLS) technology. Look for "https://" in your browser's address bar when using our Site.
• Secure server infrastructure: Our Site and databases are hosted on secured servers with appropriate firewall configurations and intrusion detection systems.
• Access controls: Access to personal information within our organization is restricted to employees, contractors, and agents who need the information to perform their job functions, and is governed by role-based access control policies.
• Employee training: Personnel who handle personal information are trained on our privacy and data security policies and practices.
• Password security: Account passwords are stored using one-way cryptographic hashing and salting. We do not store plaintext passwords.

11.2 No Guarantee of Absolute Security

No method of data transmission over the internet or electronic storage is 100% secure. While we strive to use commercially reasonable means to protect your personal information, we cannot guarantee its absolute security. You are responsible for maintaining the confidentiality of your account credentials and for any unauthorized access to your account that results from your failure to do so.

11.3 What to Do If You Suspect a Breach

If you believe your account has been compromised or that your personal information has been accessed without your authorization, please contact us immediately at [Insert Contact Email]. We will investigate all reported security concerns promptly.

11.4 Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and any applicable regulatory authorities in accordance with applicable federal and state data breach notification laws (including, without limitation, applicable state breach notification statutes). Notification will be provided via email to the address associated with your account and/or via a prominent notice posted on our Site, as required by law.

---

12. Data Retention

12.1 Retention Periods by Data Category

We retain different categories of personal information for different periods depending on the nature of the data and the purpose for which it was collected. The following table summarizes our general retention practices:

Category of Data	Retention Period	Basis
Order and transaction records	7 years from the date of transaction	Tax and financial record-keeping obligations
Account information (active accounts)	Duration of account, plus 2 years after closure	Service provision and legal compliance
Customer support communications	3 years from last interaction	Quality assurance and dispute resolution
Marketing data (email/SMS lists)	Until opt-out or 3 years of inactivity	Consent-based retention
Website usage and analytics data	26 months (Google Analytics default), up to 3 years	Site performance analysis
Device and technical data (logs)	Up to 12 months	Security and fraud prevention
Age verification records	5 years from date of verification	Legal compliance and regulatory obligation

12.2 Criteria for Determining Retention Periods

We determine appropriate retention periods by considering:

• The nature and sensitivity of the information;
• The purpose for which the data was collected and whether that purpose has been achieved;
• Our legal, regulatory, or contractual obligations to retain data for minimum periods;
• The potential risk of harm from unauthorized use or disclosure; and
• Applicable statutes of limitations that may require us to retain records for dispute resolution or legal defense.

12.3 Deletion Upon Request

Upon receipt of a verified deletion request (as described in Section 13), we will delete or de-identify your personal information from our active records within the time periods required by applicable law. Please note that certain information may be retained where deletion is not required by law due to overriding legal obligations, active legal proceedings, fraud prevention needs, or other lawful bases for retention.

---

13. Your Privacy Rights

13.1 Rights for All U.S. Users

Regardless of your state of residence, you may have the following general rights with respect to your personal information:

• Right to Access: You may request a copy of the personal information we hold about you.
• Right to Correction: You may ask us to correct inaccurate or incomplete personal information.
• Right to Deletion: You may request that we delete your personal information, subject to applicable exceptions.
• Right to Opt Out of Marketing: You may opt out of receiving promotional communications at any time. See Section 8.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.

To submit a general privacy request, contact us at: [Insert Contact Email] or [Insert Mailing Address]. We will respond to all verified requests within a reasonable time and in accordance with applicable law.

13.2 California Residents — CCPA/CPRA Rights

If you are a resident of California, you have additional rights under the California Consumer Privacy Act (Cal. Civ. Code § 1798.100 et seq.), as amended by the California Privacy Rights Act (CPRA). These include:

13.2.1 Right to Know

You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which your information was collected, the business or commercial purpose for collecting or selling it, and the categories of third parties with whom we share it.

13.2.2 Right to Delete

You have the right to request deletion of personal information we have collected from you, subject to certain exceptions (e.g., where retention is required by law or necessary to complete your transaction).

13.2.3 Right to Correct

You have the right to request correction of inaccurate personal information we maintain about you.

13.2.4 Right to Opt Out of Sale or Sharing

You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising. See Section 10.3 and the opt-out link: [Do Not Sell or Share My Personal Information].

13.2.5 Right to Limit Use of Sensitive Personal Information

To the extent we collect "sensitive personal information" as defined under CPRA (such as precise geolocation or health-related data), you have the right to limit our use of such data to what is reasonably necessary to provide the services you requested.

13.2.6 Right to Non-Discrimination

We will not deny you goods or services, charge you a different price, provide a different level or quality of service, or retaliate against you for exercising any of your CCPA/CPRA rights.

13.2.7 How to Submit a Request

To exercise your California privacy rights, please contact us by:

• Email: [Insert Contact Email]
• Mailing Address: [Insert Mailing Address]
• Web Form: [Insert CCPA Request Web Form URL, if applicable]

13.2.8 Authorized Agent

You may designate an authorized agent to submit a request on your behalf. To do so, you must provide the authorized agent with written permission to make a request on your behalf, and we may require verification of your identity directly from you or verification of the agent's authority. We may deny a request from an agent who does not submit sufficient proof of authority.

13.2.9 Response Timeline

We will acknowledge receipt of your request within 10 business days. We will respond to a verifiable consumer request within 45 calendar days of receipt. If we require additional time, we will notify you within the initial 45-day period and may extend our response by up to an additional 45 calendar days (for a maximum of 90 calendar days total), with an explanation of the reason for the extension.

13.3 Nevada Residents

Nevada Senate Bill 220 (NRS § 603A) provides Nevada residents the right to opt out of the "sale" of certain covered information to third parties. We do not currently sell your covered information as defined under Nevada law. However, you may submit an opt-out request in connection with our data practices by contacting us at [Insert Contact Email].

13.4 Virginia, Colorado, Connecticut, and Other State Laws

Consumers in certain states have privacy rights under recently enacted state privacy laws, including:

• Virginia: Consumer Data Protection Act (VCDPA), Va. Code Ann. § 59.1-575 et seq.
• Colorado: Colorado Privacy Act (CPA), C.R.S. § 6-1-1301 et seq.
• Connecticut: Connecticut Data Privacy Act (CTDPA), Conn. Gen. Stat. § 42-515 et seq.
• Texas, Montana, Oregon, and other states with enacted or pending consumer privacy legislation.

Rights under these laws may include the right to access, correct, delete, or obtain a portable copy of your personal data, the right to opt out of targeted advertising and profiling, and the right to appeal our response to a privacy request. To exercise any of these rights, please contact us at [Insert Contact Email]. We will respond to all verified requests in accordance with the requirements of your applicable state law.

---

14. Third-Party Links

14.1 Links to External Websites

Our Site may contain hyperlinks to third-party websites, social media platforms, blogs, or other online services that are not operated or controlled by PurestKratom.com. These links are provided for your convenience and informational purposes only.

14.2 No Responsibility for Third-Party Practices

We are not responsible for the privacy practices, content, or security of any third-party website. The inclusion of a link to a third-party website on our Site does not imply our endorsement of that website or its privacy practices. When you click on a link to a third-party site, you leave our Site and are subject to the privacy policy and terms of service of that third party.

14.3 Review Third-Party Policies

We strongly encourage you to read the privacy policy of every website you visit, especially before submitting any personal information. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites or services.

---

15. Changes to This Policy

15.1 Periodic Updates

We reserve the right to update, modify, or replace this Privacy Policy at any time in our sole discretion, including to reflect changes in our data practices, respond to new legal or regulatory requirements, or address changes in the way we operate our business. All changes are effective as of the "Last Updated" date posted at the top of this policy.

15.2 Notification of Material Changes

If we make material changes to this Privacy Policy — that is, changes that meaningfully affect your rights or how we handle your personal information — we will notify you by:

• Sending an email to the address associated with your account (if you have provided one); and/or
• Posting a prominent notice on our Site's homepage or at the point of data collection for a reasonable period following the change.

15.3 Acceptance Through Continued Use

Your continued use of our Site after the effective date of any updated Privacy Policy constitutes your acceptance of the revised policy. If you do not agree to the updated terms, you must discontinue your use of the Site and, if applicable, close your account and request deletion of your information.

---

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us using any of the methods below. We are committed to addressing your inquiries promptly and transparently.

16.1 General Privacy Inquiries

Company: PurestKratom.com

Email: [Insert Contact Email]

Mailing Address:
PurestKratom.com
[Insert Mailing Address]
[City, State, ZIP Code]
United States

16.2 California Privacy Rights Requests (CCPA/CPRA)

To submit a request to know, delete, correct, or opt out under the CCPA/CPRA, please contact us at:

Email: [Insert Contact Email]

Web Form: [Insert CCPA Request Web Form URL]

Mailing Address:
Attn: Privacy Rights Request
PurestKratom.com
[Insert Mailing Address]
[City, State, ZIP Code]
United States

16.3 Response Commitment

We strive to respond to all general privacy inquiries within 5–7 business days. Statutory rights requests (such as CCPA requests) will be acknowledged within 10 business days and fully responded to within the applicable legal timeframe, as described in Section 13.

---