Privacy Policy

Last updated: June 4, 2026

What information we collect
How we use your information
When we share your information
Cookies and tracking
Data retention
Your privacy rights
How we protect your data
Children's privacy
Changes to this policy
Contact us

Tendroot ("we," "us," or "our") operates the website tendroot.com (the "Site") and is the data controller for personal information collected through it. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit, browse, or make a purchase from our Site.

By accessing or using the Site, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the Site.

1. What information we collect

We collect the following categories of personal information:

Identifiers: name, postal address, email address, phone number.
Commercial information: products purchased, order history, payment method type (we never store full card numbers).
Internet activity: IP address, browser type, device type, pages visited, time on page, referring URL.
Geolocation: approximate location derived from IP (city/state level).
Inferences: shopping preferences, product interest categories.

We collect this information when you: create an account, place an order, subscribe to our newsletter, contact customer support, or browse the Site (via cookies and similar technologies).

2. How we use your information

We use the information we collect to:

Process and fulfill your orders, including shipping and returns.
Send transactional emails (order confirmation, shipping updates, warranty info).
Send marketing communications (newsletters, promotions) only if you opted in.
Improve our Site, products, and customer experience.
Detect and prevent fraud or abuse.
Comply with legal obligations and respond to lawful requests.

We do not sell or rent your personal information to third parties. We share it only with:

Service providers: Shopify (storefront + checkout), shipping carriers (USPS, UPS, FedEx), payment processors (Shopify Payments), email service providers, analytics providers (Google Analytics 4).
Legal authorities: when required by law, court order, or to protect our rights.
Business transfers: in the event of a merger, acquisition, or sale of assets.

These third parties are contractually obligated to use your information only for the services they provide to us.

4. Cookies and tracking

We use cookies, web beacons, and similar technologies to operate the Site, remember your preferences, analyze traffic, and (with your consent) personalize advertising. Categories of cookies we use:

Strictly necessary: cart contents, session, authentication — always on.
Performance: Google Analytics 4 — aggregate traffic analytics.
Marketing: Google Ads conversion tracking, Meta Pixel — only with consent.

You can manage cookie preferences via your browser settings or the consent banner shown on first visit. For details, see our Cookies Policy.

5. Data retention

We retain your personal information for as long as needed to provide our services, comply with legal obligations, resolve disputes, and enforce agreements. Order records are retained for at least 7 years for tax and accounting purposes. Marketing data is retained until you unsubscribe.

6. Your privacy rights

Depending on your state of residence, you may have the following rights:

Access: request a copy of the personal information we hold about you.
Delete: request deletion of your personal information.
Correct: request correction of inaccurate information.
Opt out of sale: we do not sell personal information, so this right is generally not applicable.
Non-discrimination: we will not penalize you for exercising your rights.

To exercise any of these rights, email us at privacy@tendroot.com with your name and order number (if applicable). We will respond within 45 days.

7. How we protect your data

We use commercially reasonable safeguards including HTTPS encryption, secure payment processing via Shopify Payments (PCI-DSS compliant), access controls, and regular security reviews. No method of transmission over the internet, however, is 100% secure.

8. Children's privacy

Our Site is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us so we can delete it.

9. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects when the most recent change was made. Material changes will be notified via email or a prominent Site notice.