Privacy Policy
Last updated: 2026-04-29
It is important that Customers know how information about them is used and shared by GreenMatter Biotech LLC and that Customers can trust that GreenMatter Biotech LLC will do so as carefully as possible. This Privacy Notice describes how GreenMatter Biotech LLC collects and processes Customers personal information obtained through its websites, devices, products, services, online and physical stores (“GreenMatter Biotech Distribution Channels”). By using GreenMatter Biotech LLC, you are consenting to the practices described in this Privacy Notice.
What Personal Information Does GreenMatter Biotech LLC Collect?
GreenMatter Biotech collects Customers personal information in order to provide and continually improve its products and services.
Here are the types of personal information GreenMatter Biotech collects:
- Information Received from Customers: GreenMatter Biotech LLC stores any information Customers provide to it. Customers may choose not to provide certain information to the Company, but that might limit the way GreenMatter Biotech is able to service Customer requests.
- Automatic Information: GreenMatter Biotech LLC automatically collects and stores certain types of information about Customers use of the GreenMatter Biotech LLC Distribution Channels, including information about Customer interaction with content and services available through those GreenMatter Biotech LLC Distribution Channels. Like most websites, the Company uses “cookies” and other unique identifiers, and the Company obtains certain types of information when the Customer’s web browser or device accesses any GreenMatter Biotech LLC Distribution Channels and other content served by or on behalf of GreenMatter Biotech LLC on other websites.
- Information from Other Sources: GreenMatter Biotech LLC will often receive information about Customers from other sources, such as delivery and address information, which the Company uses to correct its records and deliver Customers future purchases.
What Does GreenMatter Biotech LLC Use Customer Personal Information for?
GreenMatter Biotech LLC uses Customers personal information to operate, provide, develop, and improve the products and services that it offers to its Customers. These purposes include:
- Purchase and delivery of products and services. The Company uses Customers personal information to take and handle orders, deliver products and services, process payments, and communicate with Customers about orders, products and services, and promotional offers.
- Provide, troubleshoot, and improve services. The Company uses Customer information to improve functionality, analyze performance and improve the usability of the GreenMatter Biotech LLC Distribution Channels.
- Recommendations and personalization. The Company uses Customers personal information to recommend features, products and services that may be of interest to them, identify Customer preferences, and personalize Customer experience with GreenMatter Biotech LLC Distribution Channels.
- Comply with legal obligations. The Company may collect and use Customers personal information to comply with laws.
- Communicate with Customers. The Company uses Customer personal information to communicate with them in relation to GreenMatter Biotech LLC Distribution Channels.
- Use Customer personal information to display interest-based ads for features, products, and services that might be of interest. The Company does not use information that personally identifies Customers to display interest-based ads.
- Fraud Prevention and Credit Risks. The Company uses personal information to prevent and detect fraud and abuse in order to protect the security of Customers, the Company and others.
Legal Basis for Processing Your Personal Data (EU/EEA/UK Visitors)
If you are located in the European Union, European Economic Area, or United Kingdom, we are required to tell you the legal basis we rely on for processing your personal information. We rely on the following lawful bases under Article 6 of the GDPR:
| Data Type | What We Collect | Legal Basis | Why This Applies |
|---|---|---|---|
| Account / order data | Name, email, billing address, order history | Contract (Art. 6(1)(b)) | Processing is necessary to fulfill your purchase or wholesale agreement |
| Payment processing | Payment card data, transaction records | Contract (Art. 6(1)(b)) | Required to complete your transaction; processed by Authorize.net/MX Merchant |
| Marketing emails | Email address, name, preferences | Consent (Art. 6(1)(a)) | You opted in to our mailing list via Mailchimp; you may withdraw consent at any time |
| Analytics data (basic) | IP address, browser type, pages visited, session data | Legitimate interests (Art. 6(1)(f)) | We have a legitimate interest in understanding how visitors use our website so we can improve it; mitigated by IP anonymization in Google Analytics 4 |
| Analytics data (Google Signals + remarketing) | Cross-device activity, demographics, interest categories, ad interaction data | Consent (Art. 6(1)(a)) | Google Signals enables cross-device tracking and ad personalization. This goes beyond basic analytics and requires your explicit consent, which we obtain through our cookie consent banner before enabling these features. You may withdraw consent at any time. |
| Customer relationship data | Contact records, communication history | Legitimate interests (Art. 6(1)(f)) | We have a legitimate interest in maintaining records of customer and partner relationships; balanced against your right to privacy |
| Cookies (non-essential) | Analytics cookies, preference cookies | Consent (Art. 6(1)(a)) | We request consent via our cookie banner before placing non-essential cookies |
| Legal compliance records | Transaction logs, communication records | Legal obligation (Art. 6(1)(c)) | Required to meet applicable U.S. and international legal obligations |
Withdrawing consent: Where we rely on your consent as the legal basis, you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing that occurred before you withdrew consent. To withdraw consent for marketing emails, click “unsubscribe” in any email we send or contact us directly.
What About Cookies and Other Identifiers?
To enable the Company’s systems to recognize the Customers browser or device and to provide information and improve GreenMatter Biotech LLC, the Company uses cookies and other identifiers. For full details on the cookies we use and how to manage your cookie preferences, see our Cookie Policy.
Does GreenMatter Biotech LLC Share Customers Personal Information?
Information about the Company’s customers is an important part of the GreenMatter Biotech LLC business, and the Company is not in the business of selling its customers’ personal information to others. The Company shares Customers’ personal information only as described below and with subsidiaries the Company controls that either are subject to this Privacy Notice or follow practices at least as protective as those described in this Privacy Notice.
- Transactions involving Third Parties: GreenMatter Biotech LLC on occasions makes available to its Customers products and services provided by third parties.
- Third-Party Service Providers: GreenMatter Biotech LLC employs other companies and individuals to perform functions on its behalf. This includes the fulfilling of orders for products or services, delivering packages, sending postal mail and e-mail, analyzing data, providing marketing assistance, processing payments, scoring, assessing and managing credit risk, and providing customer service. These third-party service providers have access to personal information needed to perform their functions, but may not use it for other purposes. Current third-party service providers include: Google (Google Analytics 4), Intuit (Mailchimp), Authorize.net / MX Merchant (payment processing), Cloudflare (CDN/security), and Copper CRM (customer relationship management).
- Business Transfers: As GreenMatter Biotech LLC continues to develop its business, the Company might sell or buy other businesses or services. In such transactions, Customer information generally is one of the transferred business assets but remains subject to the promises made in any pre-existing Privacy Notice. Also, in the event that the Company is acquired, Customer information will be one of the transferred assets.
- Protection of GreenMatter Biotech LLC and Others: The Company releases account and other personal information when it believes release is appropriate to comply with the law; enforce or apply other agreements; or protect the rights, property, or safety of GreenMatter Biotech LLC, the Company’s Customers users, or others. This includes exchanging information with other companies and organizations for fraud protection and credit risk reduction.
Other than as set out above, Customers will receive notice when personal information about them might be shared with third parties, and Customers will have an opportunity to choose not to share the information.
International Data Transfers
GreenMatter Biotech LLC is headquartered in Arizona, United States. When you visit our website from the EU, EEA, or UK, your personal data is transferred to and processed in the United States.
The United States does not have an EU adequacy decision for all transfers. To ensure your data receives an appropriate level of protection when transferred internationally, we rely on the following mechanisms:
- Standard Contractual Clauses (SCCs): Where we transfer data to third-party service providers outside the EEA (including Google, Mailchimp/Intuit, and Authorize.net), we use Standard Contractual Clauses approved by the European Commission, or we work with processors who have implemented equivalent safeguards under their own data transfer frameworks.
- EU-U.S. Data Privacy Framework: Where applicable, we rely on service providers certified under the EU-U.S. Data Privacy Framework.
Third-party processors and their transfer mechanisms:
| Processor | Service | Transfer Mechanism |
|---|---|---|
| Google LLC (Google Analytics 4) | Website analytics | SCCs / EU-U.S. DPF |
| Intuit Inc. (Mailchimp) | Email marketing | SCCs / EU-U.S. DPF |
| Authorize.net / MX Merchant | Payment processing | SCCs / PCI DSS compliance |
| Cloudflare, Inc. | CDN and security | SCCs / EU-U.S. DPF |
| Copper CRM | Customer relationship management | Not currently in use; will document if/when integrated |
You may request a copy of the relevant Standard Contractual Clauses by contacting us at [email protected].
Data Retention
We retain your personal data only for as long as necessary to fulfill the purpose for which it was collected, or as required by law. The following retention periods apply:
| Data Category | Retention Period | Basis for Retention |
|---|---|---|
| Customer order records | Indefinite | Legal / tax compliance and ongoing customer relationship |
| Marketing email subscribers | Indefinite (until you unsubscribe) | Consent |
| Website analytics data (GA4) | Indefinite | Legitimate interests |
| Contact form inquiries | Indefinite | Legitimate interests / contract pre-assessment |
| Wholesale partner records | Indefinite | Contract / legal obligation |
| Payment records | Indefinite | Legal / tax compliance |
| CRM records | Indefinite | Legitimate interests |
| Cookie consent logs | Custom mu-plugin stores consent choice in gmb_consent cookie (365 days, SameSite=Lax, Secure) | Legal compliance (consent proof) |
When data reaches the end of its retention period, or upon your valid request for erasure (subject to legal exceptions), we securely delete or anonymize it.
How Secure Is Information About the Company’s Customers?
GreenMatter Biotech LLC designs its systems with Customers’ security and privacy in mind.
- GreenMatter Biotech LLC aims to protect the security of Customers personal information during transmission by using encryption protocols and software.
- The Company follows the Payment Card Industry Data Security Standard (PCI DSS) when handling credit card data.
- GreenMatter Biotech LLC maintains physical, electronic, and procedural safeguards in connection with the collection, storage, and disclosure of personal Customer information. The Company’s security procedures mean that it may occasionally request proof of identity before it discloses personal information to Customers.
- The Company’s devices offer security features to protect them against unauthorized access and loss of data. Customers can control these features and configure them based on their needs.
- It is important for Customers to protect themselves against unauthorized access to their password and to their computers, devices, and applications. Customers should sign off when finished using a shared computer.
What About Advertising?
- Third-Party Advertisers and Links to Other Websites: GreenMatter Biotech LLC may include third-party advertising and links to other websites. Third-party advertising partners may collect information about Customers when they interact with their content, advertising, and services.
- Use of Third-Party Advertising Services: GreenMatter Biotech LLC provides advertising companies with information that allows them to serve Customers with more useful and relevant ads and to measure their effectiveness. GreenMatter Biotech LLC will never share Customer names or other information that directly identifies Customers. Instead, GreenMatter Biotech LLC uses an advertising identifier like a cookie or other device identifier.
What Information Can Customers Access?
Customers can access their information, including their name, address, payment options, profile information and purchase history.
Your Rights — EU/EEA/UK Visitors
If you are located in the EU, EEA, or UK, you have the following rights regarding your personal data. These rights are not absolute — there are limited exceptions — but we will respond to every valid request promptly.
Right to Access — You can ask us for a copy of the personal data we hold about you, along with information about how and why we use it.
Right to Rectification — If any of your personal data is inaccurate or incomplete, you have the right to ask us to correct it.
Right to Erasure (“Right to Be Forgotten”) — You can ask us to delete your personal data. We will comply unless we have a legal obligation to keep it (for example, transaction records required by law) or a legitimate overriding reason.
Right to Restriction of Processing — You can ask us to pause processing your data — for example, while we verify its accuracy or while you contest whether we have a legitimate interest in using it.
Right to Data Portability — Where we process your data based on consent or to perform a contract, you can ask us to provide your data in a structured, machine-readable format, or to transfer it directly to another service provider where technically feasible.
Right to Object — You have the right to object to processing we carry out based on legitimate interests. We will stop unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms — or unless we need the data to establish, exercise, or defend legal claims.
Rights Related to Automated Decision-Making — We do not currently make decisions about you using automated processing or profiling that produce legal or similarly significant effects. If this changes, we will update this policy and provide appropriate opt-out mechanisms.
How to Exercise Your Rights
To submit a rights request, contact us at:
- Email: [email protected]
- Subject line: “GDPR Rights Request — [Your Name]”
We will acknowledge your request within 72 hours and respond within 30 days. Complex requests may take up to 3 months — we will notify you if additional time is needed and explain why. We may need to verify your identity before fulfilling a request. We will not charge a fee unless your request is manifestly unfounded or excessive.
Right to Lodge a Complaint
If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with your local data protection supervisory authority. You do not need to contact us first before making a complaint, though we encourage you to reach out to us so we can attempt to resolve your concern directly.
EU/EEA residents: Contact the data protection authority in your country of residence. A full list of EU supervisory authorities is available at: https://edpb.europa.eu/about-edpb/about-edpb/members_en
UK residents: Contact the Information Commissioner’s Office (ICO) at https://ico.org.uk/ or by phone at 0303 123 1113.
Your California Privacy Rights
If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) gives you specific rights regarding your personal information. GreenMatter Biotech LLC is committed to honoring these rights.
Right to Know (Right to Access) — You have the right to request that we disclose:
- The categories of personal information we have collected about you
- The specific pieces of personal information we hold about you
- The categories of sources from which we collected your information
- The business or commercial purpose for collecting, selling, or sharing your information
- The categories of third parties to whom we have disclosed your information
Right to Delete — You have the right to request that we delete personal information we have collected from you. We will comply unless an exception applies — for example, if we need the information to complete a transaction, detect fraud, comply with a legal obligation, or exercise other rights.
Right to Opt Out of Sale or Sharing — You have the right to opt out of the “sale” or “sharing” of your personal information. California law defines “sharing” broadly to include disclosures for cross-context behavioral advertising — which may include sending data to Google Analytics for advertising purposes. See “Do Not Sell or Share My Personal Information” below for details and how to opt out.
Right to Non-Discrimination — We will not discriminate against you for exercising any of your California privacy rights. We will not deny you goods or services, charge you different prices, or provide a different quality of service because you exercised your rights.
Right to Correct — You have the right to request that we correct inaccurate personal information we maintain about you.
Right to Limit Use of Sensitive Personal Information — If we collect sensitive personal information (such as payment card data or precise geolocation), you have the right to direct us to limit its use to what is necessary to provide the service. We do not use sensitive personal information for purposes beyond the transaction or service delivery.
Categories of Personal Information We Collect (CCPA)
The following table describes the categories of personal information GreenMatter Biotech LLC collects, consistent with CCPA categories:
| CCPA Category | Examples of Information We Collect | Collected? | Sold? | Shared for Advertising? |
|---|---|---|---|---|
| Identifiers | Name, email address, IP address, username, shipping address | Yes | No | Limited — IP address transmitted to Google Analytics |
| Customer records (Cal. Civ. Code §1798.80) | Name, billing address, credit/debit card type (not full number — handled by Authorize.net) | Yes | No | No |
| Commercial information | Products purchased, order history, transaction amounts | Yes | No | No |
| Internet / network activity | Pages visited, time on site, browser type, referring URL | Yes | No | Limited — transmitted to Google Analytics |
| Geolocation data | Approximate location derived from IP address (city/country level) | Yes | No | Limited — transmitted to Google Analytics |
| Inferences | Website usage patterns, product interest categories | Limited — GA4 may infer | No | Limited |
| Sensitive personal information — payment data | Card type and last 4 digits (full payment card data processed directly by Authorize.net, not stored by us) | Partial | No | No |
| Protected characteristics | None collected | No | No | No |
| Biometric information | None | No | No | No |
| Professional / employment info | Job title, company name (wholesale inquiry forms) | Yes (wholesale only) | No | No |
| Sensory data | None | No | No | No |
| Communications | Email inquiry content (contact form submissions, support emails) | Yes | No | No |
Note: “Sold” means exchanged for monetary consideration. GreenMatter Biotech LLC does not sell personal information for money. “Shared” in the CCPA sense means disclosing for cross-context behavioral advertising purposes, which may apply to GA4 analytics data sent to Google.
Do Not Sell or Share My Personal Information
Do we “sell” personal information? No. GreenMatter Biotech LLC does not sell your personal information to third parties for monetary consideration.
Do we “share” personal information for advertising purposes? Potentially yes — and we want to be transparent about it.
California’s CPRA defines “sharing” to include disclosing personal information to a third party for cross-context behavioral advertising, even without payment. We use Google Analytics 4 with Google Signals and remarketing features enabled. This means that when you visit our website with analytics cookies enabled, Google receives data including your IP address, browsing behavior, device information, cross-device activity, and demographic/interest data. Google uses this data for advertising personalization and cross-context behavioral targeting. This qualifies as “sharing” under California law, and you have the right to opt out.
How to opt out:
- Cookie consent banner: When you first visit our site, our cookie consent tool allows you to decline analytics and advertising cookies. Opting out of analytics cookies stops GA4 from receiving your data.
- Google Analytics opt-out browser add-on: Install the Google Analytics Opt-Out Add-on to prevent Google Analytics from collecting your data across all websites.
- Submit a “Do Not Sell or Share” request: Contact us using the methods below. We will apply a server-side analytics opt-out and suppress your data from any third-party sharing.
- Global Privacy Control (GPC): Our website is configured to honor Global Privacy Control signals. If your browser or browser extension sends a GPC signal, we will treat it as a valid opt-out of sharing under CPRA.
After you opt out, we will not share your information for cross-context behavioral advertising purposes. We may still share information with our payment processor, shipping providers, and other service providers strictly necessary to fulfill your order — this is not considered “selling or sharing” under CCPA.
How to Submit a California Privacy Request
To exercise any of your rights described above, you may submit a request through one of these methods:
- Email: Send your request to [email protected] with the subject line “California Privacy Request — [Request Type]”
- Web form: Use the contact form at greenmatterbiotech.com/contact-us/
- Phone: (520) 245-6821
What to include in your request:
- Your full name
- Email address associated with your account or subscription
- Type of request (Know / Delete / Opt-Out / Correct)
- Any additional context that helps us locate your information
We will acknowledge your request within 10 business days of receipt and respond to verified California privacy requests within 45 calendar days of receipt. If we need additional time due to the complexity or volume of requests, we may extend this period by an additional 45 days (90 days total) and will notify you in writing before the initial 45-day period expires.
We do not charge a fee to process your request unless it is excessive, repetitive, or manifestly unfounded. If a fee applies, we will explain why and give you an estimate before proceeding. We may need to verify your identity before fulfilling a request to protect against fraud. You may designate an authorized agent to make a request on your behalf; we will require written proof of the agent’s authorization and may verify your identity directly with you.
Global Privacy Control (GPC)
Our website is configured to recognize and honor Global Privacy Control (GPC) signals. GPC is a technical specification that allows you to communicate a “do not sell or share” preference automatically to websites through your browser or browser extension. If your browser sends a GPC signal when you visit our website, we will treat it as a valid opt-out request under the CPRA. Our custom cookie consent system handles GPC signal detection automatically.
Data Protection Contact
GreenMatter Biotech LLC does not currently meet the threshold requiring a formal Data Protection Officer (DPO) under GDPR Article 37. However, we have designated a privacy contact responsible for data protection matters.
Privacy Contact:
Rhonda Peoples
GreenMatter Biotech LLC
Email: [email protected]
Phone: (520) 245-6821
If you have questions about how we handle your personal data, or wish to exercise any of your rights described above, please contact our privacy contact directly.
What Choices Do Customers Have?
If Customers have any questions as to how GreenMatter Biotech LLC collects and uses Customers personal information, please contact our Customer Service department.
If you do not want to receive e-mail or other communications from us, please adjust your Customer Communication Settings. If you don’t want to receive notifications from the Company, please adjust your notification settings.
In addition, to the extent required by applicable law, Customers may have the right to request access to or delete their personal data. If Customers wish to do any of these things, please contact Customer Services.
Are Children Allowed to Use GreenMatter Biotech LLC?
Our Site is not directed to children. We do not knowingly collect personal information from children under the age of 13. If we learn that we have collected personal information from a child under 13 without verifiable parental consent, we will delete it. If you believe a child under 13 has provided us with personal information, please contact us at [email protected].
Conditions of Use, Notices, and Revisions
If Customers use GreenMatter Biotech LLC, their use and any dispute over privacy is subject to this Notice and the Company’s, including limitations on damages, resolution of disputes, and application of the law of the state of Arizona. If Customers have any concern about privacy at GreenMatter Biotech LLC, please contact the Company with a thorough description, and the Company will try to resolve it. The GreenMatter Biotech LLC business changes constantly, and its Privacy Notice may change from time to time. Customers should check the Company’s website to see recent changes. Unless stated otherwise, the GreenMatter Biotech LLC current Privacy Notice applies to all information that the Company has about its Customers and their account. GreenMatter Biotech LLC stands behind the promises it makes, however, and will never materially change its policies and practices to make them less protective of customer information collected in the past without the consent of affected customers.
Examples of Information Collected
Information You Give Us When You Use GreenMatter Biotech LLC
You provide information to us when you:
- search or shop for products or services in our store;
- add or remove an item from your cart, or place an order through or use GreenMatter Biotech;
- provide information including e-mail addresses or mobile numbers when shopping with us;
- upload your contacts;
- communicate with the Company by phone, e-mail, or otherwise;
- complete a questionnaire, a support ticket, or a contest entry form;
- participate in Discussion Boards or other community features;
- provide and rate products or services.
As a result of those actions, Customers might supply GreenMatter Biotech LLC with such information as:
- identifying information such as names, addresses, and phone numbers;
- payment information;
- age;
- location information;
- IP address;
- content of reviews and e-mails;
- information and documents regarding identity, including Social Security and driver’s license numbers;
- corporate and financial information;
- credit history information.
Automatic Information
Examples of the information GreenMatter Biotech LLC collects and analyzes include:
- the internet protocol (IP) address used to connect the Customers computer to the internet;
- login, e-mail address, and password;
- the location of the Customer device or computer;
- content interaction information;
- version and time zone settings;
- purchase and content use history;
- the full Uniform Resource Locator (URL) clickstream;
- phone numbers used to call our customer service number.
GreenMatter Biotech LLC may also use device identifiers, cookies, and other technologies on devices, applications, and the Company’s web pages to collect browsing, usage, or other technical information.
Information from Other Sources
Examples of information GreenMatter Biotech LLC may receive from other sources include:
- updated delivery and address information from its carriers or other third parties, which the Company will use to correct its records and deliver the next purchase or make communication more easy;
- account information, purchase or redemption information, and page-view information;
- information about Customer interactions with products and services offered.
Information Customers Can Access
Information Customers can access through GreenMatter Biotech LLC include:
- status of recent orders;
- complete order history;
- personally identifiable information (including name, e-mail, password, and address book);
- payment settings (including payment card information, promotional certificate and gift card balances);
- e-mail notification settings (including Product Availability Alerts, Delivers, Special Occasion Reminders and newsletters);
- recommendations and the products recently viewed that are the basis for recommendations;
- shopping lists;
- content, devices, services, and related settings, and communications and personalized advertising preferences;
- Customer Profile (including product Reviews, Recommendations, Reminders and personal profile).