SUNLIGHT AND SAGEBRUSH – PRIVACY POLICY
Last Updated: June 16th, 2026

1. INTRODUCTION
Sunlight and Sagebrush (“we,” “us,” or “our”) values your privacy. This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you visit our website https://www.sunlightandsagebrush.com (the “Site”), make a purchase, sign up for our newsletter, or engage with our services. We are based in San Diego, California, and comply with applicable U.S. privacy laws, including the California Online Privacy Protection Act (CalOPPA) and the California Consumer Privacy Act (CCPA/CPRA).

2. INFORMATION WE COLLECT
We collect several categories of personal information, as described below:

2.1 Information You Provide Directly

  • Contact and Account Data: Name, email address, billing address, shipping address, and phone number (if provided) when you create an account, place an order, submit a contact form, or book a consultation.

  • Order Information: Details of Products purchased, order history, and any customer service communications.

  • Newsletter Subscription Data: Email address when you opt into our email list through Mailchimp forms on the Site.

  • Payment Data: Payment card details and transaction information are collected and processed exclusively by Stripe, our PCI-DSS compliant payment processor. We do not store or have access to full card numbers, CVV codes, or expiration dates on our servers.

2.2 Information Collected Automatically
When you browse the Site, certain information is automatically collected through Squarespace’s built-in tools and cookies:

  • Log and Usage Data: IP address, browser type, device type, operating system, referring/exit pages, clickstream data, date/time stamps, and pages visited. This data is collected through Squarespace’s Activity Log and analytics cookies.

  • Cookie Data: As described in our Cookie Policy, we use essential, functional, and analytics cookies. We do not currently deploy Google Analytics, Meta Pixel, or any other third-party advertising or tracking pixels.

2.3 Information from Third Parties
We may receive information from platforms that you choose to link or interact with, such as Stripe (payment confirmation) and Mailchimp (subscription status), to provide seamless service.

3. HOW WE USE YOUR INFORMATION
We use your personal information for the following specific purposes:

  • Order Fulfillment and Customer Service: Processing payments, shipping Products, sending transactional emails (order confirmation, shipping updates), and responding to inquiries or support requests.

  • Marketing Communications: Sending newsletters, educational content, and promotional emails about our Products and services — only if you have explicitly opted in. You can unsubscribe at any time via the link in each email or by contacting us.

  • Site Improvement: Analyzing aggregated, anonymized usage data through Squarespace analytics to understand how visitors interact with our Site and improve the user experience.

  • Legal and Tax Compliance: Retaining order records for tax reporting, accounting purposes, and compliance with applicable laws (e.g., California sales tax requirements).

  • Security and Fraud Prevention: Monitoring for fraudulent transactions and protecting the Site against unauthorized access or abuse.

4. SHARING AND DISCLOSURE OF INFORMATION
We do not sell, rent, or lease your personal information to third parties. We may share your data only with trusted service providers who perform functions on our behalf, and only to the extent necessary:

These providers are contractually obligated to protect your data and may not use it for independent purposes. If we are required by law, court order, or governmental regulation to disclose your information, we will do so only as necessary.

5. DATA RETENTION
We retain personal information for as long as needed to fulfill the purposes outlined in this policy, including:

  • Order records and related customer data: typically retained for a minimum of 7 years to comply with tax and accounting laws in California.

  • Marketing subscription data: until you unsubscribe or we determine the email is inactive.

  • Customer service correspondence: up to 3 years after resolution for record-keeping.

  • Automatically collected analytics data: retained by Squarespace in accordance with their retention policies (generally aggregated and anonymized).

When data is no longer required, we will delete or anonymize it securely.

6. YOUR PRIVACY RIGHTS AND CHOICES
Depending on your location (especially if you reside in California), you may have the following rights:

  • Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you.

  • Right to Delete: Request deletion of personal data, subject to legal and business exceptions (e.g., ongoing orders, tax obligations).

  • Right to Correct: Request correction of inaccurate personal information.

  • Right to Opt-Out of Sale/Sharing: We do not sell personal data, nor do we share it for cross-context behavioral advertising.

  • Right to Non-Discrimination: We will not discriminate against you for exercising these rights.

To exercise any of these rights, contact us at lindsey@sunlightandsagebrush.com. We will verify your identity before processing requests and respond within the timeframe required by law. For newsletter unsubscription, you may also use the “Unsubscribe” link in any marketing email.

7. COOKIE MANAGEMENT
You can manage or reject non-essential cookies through our cookie consent banner or your browser settings. Please see our Cookie Policy for full details.

8. CHILDREN’S PRIVACY
Our Site and Products are intended for individuals aged 18 and over. We do not knowingly collect personal information from children under 18. If we become aware that such information has been inadvertently collected, we will delete it immediately. If you believe a child has provided us with personal data, please contact us.

9. DATA SECURITY
We implement appropriate technical and organizational security measures, including SSL/TLS encryption, secure payment processing through Stripe, and access controls on our Squarespace backend. While we strive to protect your personal information, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. THIRD-PARTY LINKS
Our Site may contain links to external websites such as Fullscript, Substack, Instagram, and other resources. These sites have their own privacy policies, and we are not responsible for their content or practices. We encourage you to review the policies of any third-party site you visit.

11. INTERNATIONAL TRANSFERS
We are based in the United States and our Site is intended for a U.S. audience. If you access the Site from outside the U.S., your information may be transferred to and processed in the U.S. By using the Site, you consent to such transfer.

12. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised date. If changes are material, we may provide additional notice (e.g., via email). Continued use after changes indicates acceptance.

13. CONTACT US
For privacy inquiries or to exercise your rights:
Sunlight and Sagebrush
Attn: Lindsey O’Connor
16769 Bernardo Center Dr STE 1-108
San Diego, CA 92128
Email: lindsey@sunlightandsagebrush.com