Privacy Policy

​

Effective date: September 23, 2026

​

This Privacy Policy describes how Spectra Therapy (“we,” “us,” or “our”) collects, uses, shares, and protects personal information when you visit our website, make a purchase through our Shopify store, contact us, or otherwise interact with our products and services.

We sell only to residents of the United States and ship only to U.S. addresses. We do not accept orders for delivery outside the United States.

Our store sales are hosted on Shopify. Shopify processes certain customer data on our behalf. Shopify’s consumer privacy information is at https://www.shopify.com/legal/privacy/customers.

​

1. Who We Are

Business name: Spectra Therapy

Website: Spectra-Therapy.com

Email: support@spectra-therapy.com

​

2. Information We Collect

Information you provide

• Name, email address, phone number

• Billing and shipping addresses (U.S. only)

• Order details, account credentials, and customer-service messages

• Payment details are collected by our payment processors. We do not store full card numbers in our Shopify admin.

Information collected automatically

• IP address, browser type, device type, operating system

• Pages viewed, referring URL, time on site, cart and checkout events

• Cookie and pixel identifiers, approximate location derived from IP

Information from third parties

• Payment processors (success/failure, last four digits, card brand)

• Shipping carriers (tracking and delivery status)

• Advertising and analytics partners, if those tools are enabled

​

3. How We Use Information

• Confirm you are a U.S. resident and can receive shipment at a U.S. address

• Fulfill and ship orders, process payments and refunds, and provide customer support

• Create an order history

• Send transactional emails (order confirmation, shipping, returns)

• Detect fraud, abuse, and security incidents

• Improve the site, products, and shopping experience

• Comply with tax, accounting, and legal obligations

​

4. Who We Share Information With

We share personal information with service providers who help us run the store, only as needed for their role:

• Shopify Inc. and its subprocessors (store hosting, checkout, analytics)

• Payment processors (Shopify Payments / Stripe, PayPal, Shop Pay, or other gateways you enable)

• U.S. shipping and fulfillment partners (e.g., USPS, UPS, FedEx, or a 3PL)

• Email / SMS platforms you connect (e.g., Shopify Email, Klaviyo, Mailchimp)

• Analytics and advertising tools you enable (e.g., Google Analytics, Meta Pixel)

• Professional advisers (accountant, attorney) under confidentiality

• Authorities when required by law or to protect rights and safety

We do not sell personal information for money. Some advertising and analytics tools may be treated as a “sale” or “share” under California and similar state laws. See Section 8.

5. Cookies and Tracking

Our store uses cookies and similar technologies:

• Essential: cart, checkout, login, security, fraud prevention

• Functional: preference cookies

• Analytics: store performance and traffic measurement

• Advertising: remarketing and ad measurement, if enabled

Shopify sets platform cookies. Third-party apps and pixels you install may set additional cookies. Use Shopify’s customer privacy / cookie banner (Settings → Customer privacy). If you add extra pixels, use a consent tool that honors opt-out and Global Privacy Control (GPC) where required by state law.

You can control cookies in your browser. Blocking essential cookies may prevent checkout from working.

6. How Long We Keep Information

• Order and invoice records: generally 7 years for tax and accounting

• Customer accounts: until you request deletion, then we retain what law requires

• Marketing lists: until you unsubscribe or we delete inactive contacts

• Support tickets: typically up to 3 years after the last message

• Server and security logs: typically 12–24 months

When data is no longer needed, we delete or de-identify it.

7. Your Privacy Rights (United States)

Depending on the state where you live (including California, Colorado, Connecticut, Virginia, Utah, and others with consumer privacy laws), you may have the right to:

• Know what personal information we collect and how we use and share it

• Access a copy of the personal information we hold about you

• Correct inaccurate information

• Delete information, subject to legal retention duties (for example, tax records)

• Opt out of sale or sharing of personal information and targeted advertising

• Opt out of marketing emails or SMS at any time

• Appeal a denied request where your state law provides that right

To exercise these rights, email [privacy@yourdomain.com] and include the email used on the order plus an order number if you have one so we can verify you. We will respond within the time required by applicable law (generally 45 days). We will not discriminate against you for exercising privacy rights.

8. California and Other State Disclosures

In the past 12 months we may have collected these categories: identifiers (name, email, address, phone, IP); commercial information (orders, cart activity); internet/activity data; and inferences drawn from that activity. We collect them from you, your device, and service providers.

We use them for the purposes in Section 3. We disclose them to the categories of recipients in Section 4.

We do not sell personal information for cash. If we use advertising cookies or similar sharing, California and other state laws may treat that as a “sale” or “share.” You may opt out by using our cookie banner, a “Do Not Sell or Share My Personal Information” / “Your Privacy Choices” link in the store footer, and Global Privacy Control (GPC) signals where supported.

We do not knowingly use sensitive personal information for purposes that require a separate limit-use right beyond what is needed to operate the store. We do not use automated decision-making that produces legal or similarly significant effects about shoppers.

9. Children

Our store is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child provided information, contact us and we will delete it.

10. Where Data Is Processed

We operate in the United States. Shopify and some service providers may process data on servers in the United States and other countries as part of running the platform. We still sell and ship only to U.S. residents.

11. Security

We use Shopify’s platform security (HTTPS, PCI-compliant checkout via payment partners) and limit staff access to order data. No method of transmission or storage is 100% secure. Do not send full payment card numbers or government ID numbers by email.

12. Third-Party Links

The site may link to third-party sites. Their privacy practices are their own. Review their policies before providing information.

13. Changes

We may update this policy. The “Effective date” or “Last updated” date will change. Material changes will be posted on this page. Continued use of the store after an update means you accept the revised policy.

What to include in the Privacy Policy