1. Introduction

Thrive Market ("we," "us," "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website thrivetemarket.com or use our services.

By using our site, you consent to the practices described here. If you do not agree, please do not use our services.

2. Information We Collect

We collect the following categories of personal information:

Identifiers — name, email address, postal address, phone number, IP address, device identifiers, account username.
Commercial information — purchase history, order details, payment method (tokenized; full card numbers never stored on our servers).
Internet activity — browsing history, search history on our site, interaction with pages, ads, and emails.
Geolocation data — approximate location derived from IP address.
Inferences — preferences, characteristics, and dietary/lifestyle profile derived from your activity.
Sensitive information — only where necessary (e.g., dietary restrictions you voluntarily disclose).

3. How We Collect Information

Directly from you when you create an account, place an order, subscribe to marketing, complete a quiz, or contact support.
Automatically through cookies, pixels, web beacons, and similar tracking technologies.
From third parties such as payment processors, shipping carriers, analytics providers, and advertising partners.

4. How We Use Your Information

We use personal information to:

Process and fulfill orders, arrange shipping, and provide customer support.
Personalize your experience and recommend products based on your preferences.
Send transactional emails (order confirmations, shipping notifications, receipts).
Send marketing communications where you have consented (opt-out link in every email).
Detect, prevent, and address fraud, abuse, security incidents, and illegal activity.
Comply with legal obligations, tax reporting, and enforce our Terms of Use.
Improve our website, products, and services through analytics.

5. Cookies and Tracking Technologies

We use cookies and similar technologies for essential site functionality, analytics, personalization, and advertising. Categories include:

Strictly necessary — cart, checkout, login (always on).
Performance/Analytics — Google Analytics 4 (GA4) to understand site usage.
Advertising — Google Ads, Meta (Facebook) Pixel for retargeting and conversion measurement.
Functional — remembers your preferences and settings.

You can manage cookies via your browser settings or our Cookie Preferences link. See our Cookie Policy for details.

6. How We Share Information

We do not sell personal information for monetary consideration. We share information only with:

Service providers — payment processors (Stripe, PayPal), shipping carriers (USPS, UPS, FedEx), email platforms, hosting (BigCommerce, Cloudflare), analytics (Google), advertising (Google, Meta).
Legal authorities — when required by law, subpoena, or to protect our rights, users, or the public.
Business transfers — in connection with a merger, acquisition, or sale of assets.
With your consent — when you explicitly authorize sharing.

7. Data Retention

We retain personal information as long as your account is active and as needed to provide services, comply with legal obligations, resolve disputes, and enforce agreements. Order records are retained for 7 years for tax and audit purposes.

8. Data Security

We implement industry-standard technical and organizational measures: TLS/SSL encryption in transit, encryption at rest for sensitive data, PCI-DSS-compliant payment processing, access controls, and regular security audits. No system is 100% secure — we cannot guarantee absolute security.

9. Your Privacy Rights

Depending on your jurisdiction, you may have the right to:

Access the personal information we hold about you.
Correct inaccurate information.
Delete your personal information ("right to be forgotten").
Port your data to another service.
Opt out of the sale or sharing of personal information (see our Do Not Sell page).
Restrict or object to certain processing.
Withdraw consent at any time.

To exercise these rights, email privacy@thrivetemarket.com. We will respond within 30 days (or 45 days under CCPA).

10. California Residents (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act and CPRA. See our California Privacy Rights notice for full disclosures on categories collected, sources, purposes, and third parties.

11. European Residents (GDPR)

If you are in the EEA, UK, or Switzerland, we process your data under one of these legal bases: performance of a contract, legitimate interests, consent, or compliance with legal obligations. You have the right to lodge a complaint with your local supervisory authority.

12. Children's Privacy

Our services are not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us information, contact us and we will delete it promptly.

13. International Data Transfers

We are based in the United States. If you access our services from outside the U.S., your information will be transferred to and processed in the U.S. under Standard Contractual Clauses or equivalent safeguards where required.

14. Third-Party Links

Our site may contain links to third-party websites. We are not responsible for their privacy practices. Review their policies before providing information.

15. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be posted here with a revised "Last updated" date. Continued use of our services after changes constitutes acceptance.

Questions about this policy? Reach us at support@thrivetemarket.com or via our Contact page.