Privacy Policy

This Privacy Policy explains how Mantra Dose ("Mantra," "we," "us," or "our") collects, uses, shares, and protects information when you visit our website, place an order, or otherwise interact with us. We aim to be plain about what we gather and why, and to give you meaningful control over your data.

By using the site you agree to the practices described here. If you do not agree, please do not use the Services. This policy sits alongside our Terms of Service.

When you place an order, create an account, subscribe to our emails, or contact us, we collect the information you provide directly, which may include:

• Contact and identity details - name, email address, phone number, and shipping and billing address.
• Order information - the products you buy, order value, order history, and any notes you send us.
• Communications - the content of messages you send through our contact form, email, or support channels.
• Age confirmation - your acknowledgement that you meet the minimum age to purchase.

Our site runs a first-party analytics layer (the @braintied/tracker) that helps us understand how the site is used and improve it. Unlike many third-party trackers, the data it gathers is sent to and stored in our own company database rather than sold or handed to an advertising network. This analytics is consent-gated: it activates only after you accept via our cookie and consent banner, and you can decline or withdraw consent at any time.

When enabled, this layer may collect:

• A device fingerprint - a signature derived from your browser and device characteristics used to recognise a device across visits.
• Approximate, IP-based geolocation - your country and city, inferred from your IP address (we do not use precise GPS location).
• Returning-visitor detection - a signal indicating whether a device has visited before, so we can distinguish new from returning visitors.
• Interaction events - pages viewed, scroll depth, clicks, and similar on-site interaction and navigation events.
• Acquisition data - UTM campaign parameters and the referring URL that brought you to the site.

We use this information to measure traffic and campaign performance, understand which products and content are useful, detect abuse, and improve the experience. We do not use it to make automated decisions that produce legal or similarly significant effects about you.

We use cookies and similar storage technologies to keep the site working (for example, remembering your cart and your consent choice) and, where you allow it, to power the analytics described above. Strictly necessary cookies are always active because the site cannot function without them; analytics and other non-essential technologies run only after you opt in through the consent banner.

You can change or withdraw your consent at any time through the banner or your browser settings. Blocking some cookies may affect how parts of the site behave.

Payments are handled by Stripe, our third-party payment processor. When you check out, your payment details are submitted directly to Stripe, which processes the transaction under its own privacy policy and security standards. We receive confirmation of payment and limited details such as the last four digits and card brand for order records, but we do not store your full card number on our servers.

We use email service providers - including Resend for transactional messages (such as order and shipping confirmations) and Omnisend for marketing communications - to send you email. Transactional emails relating to your orders are part of our service to you. Marketing emails are sent only where you have opted in or where otherwise permitted by law, and every marketing email includes an unsubscribe link. Unsubscribing from marketing does not stop essential order-related messages.

• To process, fulfil, and deliver your orders and provide customer support.
• To operate, secure, and improve the site and our products.
• To measure traffic, campaign performance, and how the site is used.
• To send transactional messages and, with consent, marketing communications.
• To detect, prevent, and respond to fraud, abuse, and security incidents.
• To comply with our legal, tax, and regulatory obligations.

We do not sell your personal information. We share it only with service providers who help us run the business, and only as needed to perform their function:

• Payment processing (Stripe) to take payment.
• Shipping and fulfilment partners to deliver your order.
• Email providers (Resend, Omnisend) to send transactional and, with consent, marketing email.
• Infrastructure and hosting providers that store data on our behalf.
• Legal and regulatory authorities where we are required to disclose information by law, or to protect our rights, users, or the public.

We keep personal information only for as long as we need it for the purposes described in this policy. Order and transaction records are retained for the period required by tax, accounting, and consumer-protection law. Analytics data is retained for a limited period appropriate to the insights we need, after which it is deleted or aggregated so it no longer identifies you. Marketing contact data is kept until you unsubscribe or ask us to remove it.

Depending on where you live, you may have rights over your personal information, including the right to:

• Access the personal information we hold about you and receive a copy of it.
• Correct information that is inaccurate or incomplete.
• Delete your personal information, subject to legal retention requirements.
• Object to or restrict certain processing, and withdraw consent where processing is based on consent.
• Opt out of the sale or sharing of personal information - note that we do not sell your data.
• Data portability, where applicable, and the right not to be discriminated against for exercising your rights.

To exercise any of these rights, contact us at privacy@mantradose.com. We will verify your request and respond within the timeframe required by applicable law.

We use reasonable technical and organisational measures - including encryption in transit and access controls - to protect your information against unauthorized access, loss, or misuse. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

Our Services are intended for adults and are not directed to children. We do not knowingly collect personal information from anyone under the applicable minimum age. If you believe a minor has provided us with personal information, contact us and we will delete it.

We may update this Privacy Policy from time to time. Changes take effect when posted, and the "Last updated" date above reflects the latest revision. For questions about this policy or your data, contact us at privacy@mantradose.com.