Privacy Policy

This Privacy Policy explains how RETA (“we”) collects, uses, and discloses information about you when you visit reta.love or place an order.

Information we collect

• Order information: name, email, shipping address, phone number, and payment-method details (handled by Stripe; we never receive full card numbers).
• Usage data: pages viewed, referrer, device type, IP address, and analytics events.
• Marketing identifiers: Meta (Facebook) Click ID and Browser ID cookies (_fbc, _fbp) and UTM parameters from inbound links, used to attribute conversions to advertising campaigns.

How we use it

• To process and ship your orders and manage subscriptions.
• To send transactional email (order confirmations, shipping updates, billing receipts).
• To measure advertising effectiveness via Meta’s Conversions API and PostHog product analytics.
• To prevent fraud and maintain Site security.

Service providers

We share information with the following processors, only to the extent needed to deliver the service:

• Stripe — payments and subscription billing
• Supabase — order and subscription database
• Vercel — site hosting
• Meta (Facebook) — advertising attribution via the Conversions API
• PostHog — anonymized product analytics
• Sentry — error monitoring
• Shipping carriers — order fulfillment

We do not sell your personal information.

Cookies

We use cookies for: session continuity, marketing attribution (Meta Pixel), product analytics (PostHog), and UTM persistence. You can disable cookies in your browser, though some features may not work.

Your privacy rights

Depending on where you live, you may have the right to:

• Know what personal information we collect, use, share, and the business purposes for doing so.
• Access a copy of the personal information we hold about you.
• Correct inaccurate personal information.
• Delete personal information we hold about you, subject to legal exceptions (e.g., we must retain order records for tax purposes).
• Portability — receive your information in a portable, machine-readable format.
• Opt out of sale or sharing of personal information for cross-context behavioral advertising. Visit our Do Not Sell or Share My Personal Information page.
• Limit use of sensitive personal information (we do not collect sensitive personal information for purposes beyond providing the service).
• Non-discrimination — we will not discriminate against you for exercising your rights.

To exercise any of these rights, contact uswith the subject “Privacy request.” We will verify your identity (typically by confirming the email on file with an order) and respond within 45 days, with one 45-day extension available where reasonably necessary.

Global Privacy Control

Our website honors the Global Privacy Control (GPC) signal as a valid opt-out of sale and sharing under the CCPA/CPRA.

Authorized agents

California residents may use an authorized agent to submit a request. We require written permission and may verify your identity directly.

Data retention

We retain order and subscription records for as long as needed to provide the service, comply with tax and accounting laws, and resolve disputes.

Children

The Site is not directed to anyone under 21. We do not knowingly collect information from anyone under 21.

Changes

We may update this Privacy Policy. Changes are effective when posted with a revised “Last updated” date.

Contact

Questions or requests? Contact us.