1. Overview
Factory Hollow Apothecary ("we," "us," "our") operates www.factory-hollow.com (the "Site"). This Privacy Policy explains what personal information we collect, why we collect it, and what choices you have. It's incorporated by reference into our Terms and Conditions.
2. Information We Collect
When you place an order or contact us, we may collect:
Order and contact information: name, shipping address, billing address, email address, and phone number (if provided).
Payment information: we do not directly store your card details. Payments are processed by Square or Venmo, which collects and processes payment data under their own privacy policies — see their sites for details.
Communications: any information you send us by email (e.g., ingredient questions, order inquiries).
Marketing sign-up information: email address, if you opt in to a newsletter or promotional list.
Site usage data: the Site uses cookies and Squarespace built-in analytics, so we may collect information like IP address, browser type, and pages visited.
We do not knowingly collect more information than we need to fulfill orders, respond to inquiries, and (where you've opted in) send marketing communications.
3. How We Use Your Information
We use the information we collect to:
Process and fulfill your orders, including shipping and customer service
Respond to questions you send us (e.g., ingredient or allergen inquiries)
Send order-related communications (confirmations, shipping updates)
Send marketing communications, only if you've opted in, and you can unsubscribe at any time
Maintain records for accounting, tax, and legal compliance purposes
Improve the Site and our products, in an aggregated or anonymized form where possible
We do not sell your personal information to third parties.
4. Who We Share Information With
We share information only as needed to run the business:
Square or Venmo, to process payments
Shipping carriers (e.g., USPS, UPS, Canada Post), to deliver your order — this requires sharing your name and shipping address with the carrier
Email/marketing platform, if you've opted into marketing communications
Law enforcement or regulators, only if required by law (e.g., in response to a valid subpoena)
We do not share your information with third parties for their own independent marketing purposes.
5. Cookies and Similar Technologies
This Site is built on Squarespace, which sets cookies on our behalf as part of running the Site. Based on Squarespace's own published cookie policy, these generally fall into a few categories:
Authentication, security, and functional cookies — used for things like checkout, remembering your cart, and preventing fraudulent use of login credentials.
Performance and analytics cookies — Squarespace's built-in analytics, used to measure how visitors use the Site (e.g., which pages are viewed).
We do not currently add our own third-party analytics (like Google Analytics) beyond what Squarespace provides by default.
For the full, current list of cookies Squarespace uses, see Squarespace's cookie policy at squarespace.com/cookie-policy, which we're incorporating by reference rather than reproducing here, since it changes independently of anything we control.
6. Data Retention
We retain order and contact information for as long as needed to fulfill orders, comply with tax/accounting recordkeeping obligations, and resolve any disputes. Marketing list data is retained until you unsubscribe.
7. Your Rights and Choices
Email preferences: you can unsubscribe from marketing emails at any time using the unsubscribe link, or by emailing us directly.
Access, correction, or deletion: you can email us at factoryhollow@pm.me to ask what information we hold about you, to correct it, or to request deletion, subject to our need to retain certain records (e.g., for completed transactions, tax purposes).
8. Children's Privacy
The Site is not directed at children, and we do not knowingly collect personal information from anyone under 13 (or under 16, in jurisdictions where that's the relevant age). If you believe a child has provided us information, contact us and we'll delete it.
9. Data Security
We take reasonable steps to protect the information we hold, including relying on Square's and Venmo’s PCI-compliant payment processing so we never handle raw card data ourselves. No method of transmission or storage is completely secure, and we can't guarantee absolute security.
If you're a Massachusetts resident, note that Massachusetts has its own data breach notification law (M.G.L. c. 93H) requiring notice to affected individuals and the Attorney General's office in the event of a breach involving personal information — this applies to us as a Massachusetts-based business, not just to your customers who live here.
10. International Data
We currently ship only within the United States and Canada, and this Privacy Policy is written with that scope in mind. If we begin shipping to or actively marketing toward other regions (including the EU/UK), this policy — along with our Terms and Conditions — will need to be updated to reflect any additional obligations (e.g., GDPR) that would come with that.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The version posted on this page at the time of your order or Site visit applies. Material changes will be reflected in an updated "Last updated" date above.
12. Contact
Questions about this Privacy Policy or your personal information: factoryhollow@pm.me