Privacy Policy

Last Updated: April 2, 2026

Introduction

At Fractal Forest, we believe transparency is part of wellness. This Privacy Policy describes how Fractal Forest ("Fractal Forest," "we," "us," or "our") collects, uses, shares, and protects information about you when you visit our website at fractalforest.co, make a purchase, subscribe to our communications, or otherwise interact with us (collectively, our "Services").

By using our Services, you agree to the collection and use of information as described in this Privacy Policy. If you have questions, you can reach us at hello@fractalforest.co or through our Contact page at https://fractalforest.co/pages/connect.

1. INFORMATION WE COLLECT

We collect information in three ways: directly from you, automatically when you use our site, and from third-party sources.

1.1 Information You Provide to Us

When you place an order, create an account, subscribe to a plan, sign up for marketing communications, or contact our team, you may provide:

-Personal identifiers: Name, email address, mailing address, phone number

-Account credentials: Username and password

-Commercial information: Order history, subscription details, product preferences

-Financial information: Payment card or bank account details (processed by our payment partners, we do not store full card numbers)

-Communications: Messages, reviews, survey responses, and feedback you send to us

1.2 Information Collected Automatically

When you visit fractalforest.co, we and our service providers automatically collect:

-Device and browser data: IP address, browser type and version, operating system, device type, screen resolution, language settings

-Internet activity data: Pages viewed, time spent on pages, referring website, click paths, session duration, links clicked

-Location data: General geographic location derived from your IP address

-Inferences: Preferences and interests we infer from your browsing and purchase behavior

We collect this information using cookies, pixel tags, web beacons, and similar tracking technologies. See Section 4 for more details.

1.3 Information from Third-Party Sources

We may receive information about you from:

-Ad networks and marketing partners: Including Facebook/Meta, Google, and TikTok, when you interact with our ads

-Attribution tools: Such as Hyros, which helps us understand how customers find us

-Affiliate and referral programs: Such as Superfiliate, when a partner refers you to us

-Shopify: Our e-commerce platform, which processes your transactions

2. HOW WE USE YOUR INFORMATION

We use the information we collect for the following purposes:

-Fulfilling orders: Processing and shipping your purchases, managing subscriptions, and handling returns

-Account management: Creating and maintaining your customer account

-Customer support: Responding to your inquiries and resolving issues

-Marketing and communications: Sending promotional emails, SMS messages, and personalized recommendations, where you have consented or where permitted by applicable law

-Personalization: Recommending products you may enjoy, using tools such as Rebuy

-Analytics and improvement: Understanding how our website is used so we can improve the experience

-Advertising: Delivering targeted advertisements on platforms including Facebook/Meta, Google, and TikTok

-Fraud prevention and security: Detecting and preventing unauthorized access, fraudulent transactions, and other illegal activity

-Legal compliance: Meeting our obligations under applicable laws and regulations

-Affiliate program management: Tracking referrals through Superfiliate

3. HOW WE SHARE YOUR INFORMATION

We do not sell your personal information in the traditional sense. However, as described below, we do share information with service providers and advertising partners as part of our normal business operations. Some of this sharing may constitute a "sale" or "sharing" of personal data under applicable state privacy laws such as the CCPA — see Section 11 for your rights.

3.1 Service Providers

We share your information with trusted third-party vendors who help us operate our business:

Service Provider	Purpose
Shopify	E-commerce platform, website hosting, order management
Stripe	Payment processing
Klaviyo	Email and SMS marketing
Rebuy	Personalized product recommendations
Superfiliate	Affiliate and referral program management
Hyros	Ad attribution and analytics
Facebook / Meta	Advertising, conversion tracking (Meta Pixel)
Google	Advertising, analytics (Google Ads, Google Analytics)
TikTok	Advertising and conversion tracking

These providers are authorized to use your information only as necessary to provide services to us and are subject to confidentiality obligations.

3.2 Business Transfers

If Fractal Forest is involved in a merger, acquisition, asset sale, or other business transaction, your information may be transferred as part of that transaction. We will provide notice if your information becomes subject to a materially different privacy policy.

3.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by government authorities, or if we believe disclosure is necessary to protect the rights, property, or safety of Fractal Forest, our customers, or others.

3.4 With Your Consent

We may share your information for any other purpose with your explicit consent.

4. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar technologies to enhance your experience, understand how our site is used, and deliver relevant advertising.

4.1 Types of Cookies We Use

Essential Cookies

Required for the website to function. These enable core features like your shopping cart, login sessions, and secure checkout. They cannot be disabled.

Analytics Cookies

These help us understand how visitors interact with our website — which pages are visited, how long users stay, and where they come from. We use tools including Google Analytics for this purpose.

Marketing and Advertising Cookies

These cookies are set by our advertising partners (including Facebook/Meta, Google, and TikTok) to track conversions, measure ad effectiveness, and deliver targeted advertisements based on your browsing behavior. Hyros also uses tracking technologies for ad attribution.

Functional Cookies

These enable personalization features, such as product recommendations powered by Rebuy.

4.2 Managing Cookies

You can control cookie settings through your browser preferences. Note that disabling certain cookies may affect the functionality of our website. You may also opt out of interest-based advertising through the following resources:

-Digital Advertising Alliance: https://optout.aboutads.info/

-Network Advertising Initiative: https://optout.networkadvertising.org/

-Google Analytics Opt-Out: https://tools.google.com/dlpage/gaoptout

-Facebook Ad Preferences: https://www.facebook.com/ads/preferences

California residents may also exercise opt-out rights under the CCPA. See Section 11.

4.3 Global Privacy Control

We honor Global Privacy Control (GPC) browser signals as an opt-out of data sharing for cross-context behavioral advertising where required by law.

5. SMS AND TEXT MESSAGING

This section describes how we collect and use your information in connection with our SMS/text messaging program.

5.1 What We Collect

When you opt in to receive SMS notifications, we collect your mobile phone number. We also collect data related to your interactions with our messages and website (e.g., link clicks, cart activity) to personalize the messages we send you.

5.2 How We Use It

We use your mobile number to send:

-Order confirmations and shipping updates

-Abandoned cart reminders

-Promotional offers and discounts

-Product review requests

-Other transactional and marketing communications

5.3 How to Opt Out

Reply STOP, END, CANCEL, UNSUBSCRIBE, or QUIT to any SMS message you receive from us. You will receive a one-time confirmation message. Once you opt out, we will stop sending marketing messages to your number, though we may still send transactional messages related to an active order.

5.4 Our SMS Service Provider

We use Klaviyo to send and manage SMS communications. Klaviyo is subject to its own privacy policy and data protection obligations.

5.5 Message Frequency and Costs

Message frequency varies. Standard message and data rates from your wireless carrier may apply. We do not charge for SMS communications.

5.6 Consent

By opting in, you consent to the collection and use of your information as described in this section. Consent to receive SMS messages is not a condition of purchase.

6. DATA RETENTION

We retain your personal information for as long as necessary to provide our services and fulfill the purposes described in this Privacy Policy, including:

-Maintaining your account and order history

-Complying with legal obligations (e.g., tax records, consumer protection laws)

-Resolving disputes and enforcing our agreements

-Preventing fraud and abuse

When your information is no longer needed, we will delete or anonymize it. If you request deletion of your data, we will comply subject to any legal obligations that require us to retain certain records.

7. DATA SECURITY

We implement reasonable technical and organizational security measures designed to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include encryption of financial data in transit, access controls, and secure hosting via Shopify.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. If you believe your account has been compromised, please contact us immediately at hello@fractalforest.co.

8. INTERNATIONAL DATA TRANSFERS

Fractal Forest is based in Hawaii, USA. If you are located outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where our servers and service providers are located. Data protection laws in the United States may differ from those in your country of residence.

For users in the European Economic Area (EEA), United Kingdom, or Switzerland, such transfers are conducted in accordance with applicable legal mechanisms, including Standard Contractual Clauses where required. By using our Services, you consent to the transfer of your information to the United States.

9. CHILDREN'S PRIVACY

Our website and services are intended for adults aged 18 and older. We do not knowingly collect personal information from individuals under 18 years of age. If you are a parent or guardian and believe your child has provided personal information to us, please contact us at hello@fractalforest.co and we will take steps to delete that information.

We do not knowingly sell or share the personal information of minors under 16 years of age.

10. THIRD-PARTY LINKS

Our website may contain links to third-party websites, including social media platforms and partner brands. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policy of any third-party website you visit. The inclusion of a link on our site does not imply endorsement of the linked site.

 

11. CALIFORNIA RESIDENTS: CCPA RIGHTS

This section provides additional disclosures for California residents under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).

11.1 Categories of Personal Information We Collect

Over the past 12 months, we have collected the following categories of personal information from California consumers:

Category	Examples	Collected?
Personal Identifiers	Name, email, address, phone, IP address	Yes
Commercial Information	Purchase history, subscriptions, product preferences	Yes
Financial Information	Payment card number (processed by providers)	Yes
Internet/Network Activity	Browsing history on our site, interaction with ads	Yes
Geolocation Data	General location derived from IP address	Yes
Inferences	Preferences and interests inferred from activity	Yes
Sensitive Personal Information	Not collected

11.2 Business and Commercial Purposes for Collection

We collect this information for the purposes described in Section 2, including fulfilling orders, providing customer support, marketing, analytics, fraud prevention, and legal compliance.

11.3 Sale and Sharing of Personal Information

We "share" certain personal information (including internet activity and identifiers) with third-party ad networks, including Facebook/Meta, Google, and TikTok, for purposes of cross-context behavioral advertising. This may constitute "sharing" or a "sale" under the CCPA.

We do not knowingly sell or share the personal information of consumers under 16 years of age.

To opt out of the sale or sharing of your personal information, contact us at hello@fractalforest.co or visit https://fractalforest.co/pages/connect.

We also honor Global Privacy Control (GPC) signals as an opt-out where required.

11.4 Your CCPA Rights

As a California resident, you have the following rights:

1. Right to Know / Access: You may request information about the personal information we have collected about you, including the categories, specific pieces, purposes, and third parties we share it with.
2. Right to Delete: You may request that we delete personal information we have collected from you, subject to certain exceptions (e.g., completing a transaction, legal obligations, fraud detection).
3. Right to Correct: You may request that we correct inaccurate personal information we maintain about you.
4. Right to Opt-Out of Sale/Sharing: You may direct us not to sell or share your personal information with third parties for cross-context behavioral advertising.
5. Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights. We will not charge you different prices, provide a lower quality of service, or otherwise penalize you for exercising your rights.
6. Right to Limit Use of Sensitive Personal Information: We do not use sensitive personal information for purposes beyond what is permitted under the CCPA, so this right is not currently applicable.

11.5 How to Submit a Request

To exercise your rights, contact us at:

-Email: hello@fractalforest.co

-Contact page: https://fractalforest.co/pages/connect

We will verify your identity before responding to your request. We respond to verifiable requests within 45 days, with an extension of an additional 45 days where necessary.

11.6 Authorized Agent

A California resident may designate an authorized agent to submit a privacy request on their behalf. We will still require verification of the consumer's identity for such requests.

11.7 Financial Incentives

Customers who sign up for email and/or SMS marketing communications may receive promotional discounts. Participation is voluntary, and you may opt out at any time without penalty.

12. OTHER U.S. STATE PRIVACY RIGHTS

Residents of certain U.S. states, including Colorado, Connecticut, Virginia, Texas, Montana, and others with enacted consumer data privacy laws, may have rights similar to those described in Section 11, including rights to access, delete, correct, and opt out of certain data processing activities.

To exercise your rights under your state's applicable privacy law, please contact us at hello@fractalforest.co or through https://fractalforest.co/pages/connect. We will respond in accordance with applicable law.

13. EEA, UK, AND SWISS RESIDENTS: GDPR RIGHTS

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, this section provides additional information about how we process your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable local laws.

13.1 Data Controller

Fractal Forest is the data controller responsible for your personal data processed in connection with our Services.

Contact: hello@fractalforest.co | https://fractalforest.co/pages/connect

13.2 Legal Bases for Processing

We process your personal data on the following lawful bases:

-Contract performance: To process your orders, manage your subscription, and provide customer support

-Legitimate interests: For fraud prevention, website analytics, and improving our services

-Consent: For marketing communications (email and SMS), certain cookies, and targeted advertising, where you have given us explicit consent

-Legal obligation: To comply with applicable laws

13.3 Your GDPR Rights

You have the following rights under the GDPR:

-Right of access: Request a copy of the personal data we hold about you

-Right to rectification: Request correction of inaccurate or incomplete data

-Right to erasure ("right to be forgotten"): Request deletion of your personal data where it is no longer needed or you withdraw consent

-Right to data portability: Request your data in a structured, machine-readable format

-Right to withdraw consent: Withdraw consent to marketing or other consent-based processing at any time, without affecting the lawfulness of prior processing

-Right to object: Object to our processing of your personal data for direct marketing or where we rely on legitimate interests

-Right to restrict processing: Request that we restrict processing in certain circumstances

-Right to lodge a complaint: File a complaint with a supervisory authority, such as:

-UK ICO: https://ico.org.uk/

-Swiss FDPIC: https://www.edoeb.admin.ch/

-EU DPA list: https://www.gdprregister.eu/gdpr/dpa-gdpr/

To exercise any of these rights, contact us at hello@fractalforest.co.

13.4 International Transfers

When we transfer your personal data outside the EEA, UK, or Switzerland to the United States, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

14. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable laws. When we make material changes, we will update the "Last Updated" date at the top of this page. For significant changes, we may also notify you by email or through a notice on our website. Your continued use of our Services after any changes are posted constitutes your acceptance of the updated Privacy Policy.

15. CONTACT US

If you have any questions, concerns, or requests related to this Privacy Policy or how we handle your personal data, please reach out to us:

Fractal Forest

hello@fractalforest.co

https://fractalforest.co/pages/connect