Privacy Policy
Last updated: October 6, 2026
This Privacy Policy describes how AJ Growth Ventures LLC, trading as Kotanical ("we", "us", "our"), collects, uses, shares, and protects your personal information when you visit or purchase from www.kotanical.com, in accordance with applicable United States federal and state privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA) and comparable state privacy laws.
1. Who We Are
Kotanical is operated by AJ Growth Ventures LLC, a California limited liability company, of 8054 E Garvey Ave, Ste 101, Rosemead, CA 91770. We are the business responsible for your personal information.
For any questions about this policy or how we handle your information, contact us at team@kotanical.com.
2. Personal Information We Collect
We collect personal information that you provide to us, and limited information collected automatically when you use our site. In the past 12 months we have collected the following categories:
| Category | Examples | Source |
| Identifiers | Name, billing and delivery address, email address, phone number | You |
| Commercial information | Products purchased, order history, communications with customer service | You / our systems |
| Internet or network activity | Browser type, device, operating system, pages viewed, referring site, cookie identifiers | Collected automatically |
| Approximate location | City/state inferred from your IP address | Collected automatically |
| Marketing preferences | Newsletter and social media subscriptions, opt-in status | You |
We do not collect or store your payment card details; these are handled entirely by our payment processors (see Section 5). We do not knowingly collect "sensitive personal information" as defined by US state privacy laws (such as precise geolocation, health data, or government identifiers).
3. How We Use Your Information
We use your personal information to:
- Process and fulfil your orders, including arranging delivery and collecting applicable sales tax
- Communicate with you about your order (confirmations, dispatch, delivery issues, returns)
- Respond to customer service enquiries
- Send you marketing communications about our products, news, and offers, in accordance with the CAN-SPAM Act and always with the option to opt out
- Show you and measure advertising for our products on other platforms
- Improve our website and services, including through analytics
- Detect and prevent fraud and security incidents
- Comply with our legal, tax, and accounting obligations
4. Marketing Communications
If you have purchased from Kotanical or subscribed to our newsletter or social media, we may contact you with updates on our products, news, and special offers by email or social media.
You can opt out of marketing emails at any time by clicking the "unsubscribe" link at the bottom of any marketing email, or by contacting us at team@kotanical.com. Opting out of marketing does not affect order-related communications (for example dispatch and delivery updates), which we need to send to fulfil your order.
5. How We Share Your Information
We do not sell your personal information for money, and we do not knowingly sell or share the personal information of anyone under 18. We disclose information to service providers who help us operate our business, including:
- Shopify — our e-commerce platform and hosting provider, which processes data on our behalf to operate the store.
- Stripe and Shopify Payments — payment processing.
- PayPal — payment processing, where selected as a payment method.
- USPS (United States Postal Service) — delivery of your order, using the name, address, and contact details necessary to deliver it.
- Klaviyo — email marketing, using your email address and purchase activity.
- Google (Analytics and Google Ads) — website analytics and advertising measurement.
- Meta (Facebook and Instagram) — advertising pixel used to measure and target our advertising.
- The Trade Desk — advertising pixel used to measure and target our advertising across other websites and apps.
We may also disclose information where required by law, subpoena, or legal process, to protect our rights, property, or safety, or in connection with a merger, acquisition, or sale of our business.
"Sale" and "sharing" under state law. We use advertising pixels from Meta, Google, and The Trade Desk. These collect identifiers and browsing activity on our site (such as pages viewed, products added to cart, and purchases, together with cookie or device identifiers and, in some cases, hashed email addresses) and allow ads to be targeted to you on other sites and apps. Under California and other state privacy laws this is likely to be a "sale" or "sharing" of personal information for cross-context behavioral advertising. In the past 12 months we have shared the categories "Identifiers" and "Internet or network activity" (and "Commercial information" such as items viewed or purchased) with these advertising partners for that purpose. You can opt out as described in Section 10. We honor the Global Privacy Control (GPC) browser signal as a valid opt-out request. We do not knowingly sell or share the personal information of anyone under 16.
6. Where Your Information Is Processed
We and our service providers (including Shopify and Google) process and store information in the United States and may do so in other countries. By using our site you understand that your information may be processed in those locations. This site is intended for residents of the United States.
7. Data Retention
We retain your personal information only for as long as necessary to fulfil the purposes described in this policy, including to satisfy legal, tax, accounting, or reporting requirements. Our typical retention periods are:
| Category | Retention Period |
| Order and transaction records (name, addresses, items purchased, payment confirmations) | 7 years from the date of the order, to meet tax, accounting, and legal requirements |
| Customer service communications | 3 years after the enquiry is closed |
| Website analytics and advertising cookie data | As set by the relevant provider (generally no more than 14 months for analytics) |
| Marketing email subscription data | Until you unsubscribe or ask us to delete it. After you unsubscribe we keep only your email address on a suppression list so we do not contact you again |
If you ask us to delete your information, we will do so subject to the legal exceptions described in Section 10, and we may retain records we are legally required to keep (such as tax records) for the periods above.
8. Security
Data you submit to our website is held on secure servers hosted by Shopify. While no method of transmission over the internet or electronic storage is 100% secure, we take reasonable administrative, technical, and physical measures to protect your personal information against unauthorized access, loss, or misuse.
9. Cookies & Tracking Technology
Our site uses cookies and similar tracking technologies to operate certain features, understand how visitors use the site, measure traffic, and measure advertising. This may include information such as browser type, operating system, and browsing behavior on our site.
Cookie data may be linked to personal information you have previously provided to us. Aggregated cookie and analytics data may be shared with third parties, including our analytics partner, Google Analytics.
You can control or disable cookies through your browser settings; note that some parts of our site may not function correctly if cookies are disabled. We respond to Global Privacy Control signals. Because there is no uniform industry standard for "Do Not Track" browser signals, we do not respond to those signals.
10. Your US Privacy Rights
Depending on your state of residence (including California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and others with comprehensive privacy laws), you may have the right to:
- Know / Access the categories and specific pieces of personal information we have collected about you, and the categories of sources, purposes, and recipients
- Delete personal information we have collected from you, subject to legal exceptions
- Correct inaccurate personal information
- Opt out of the "sale" or "sharing" of your personal information, and of targeted advertising
- Limit the use of sensitive personal information (we do not use it beyond what is permitted without a right to limit)
- Data portability — receive your data in a portable format
- Non-discrimination — we will not deny you service, charge different prices, or provide a different quality of service because you exercised your rights
How to exercise your rights. Email us at team@kotanical.com with the subject line "Privacy Request". To opt out of sale/sharing, you can use the "Do Not Sell or Share My Personal Information" link in our website footer, email us, or enable the Global Privacy Control in your browser. We will verify your request by matching information you provide to information we hold, and we will respond within 45 days (we may extend once by a further 45 days where permitted, and will tell you if so).
Authorized agents. You may use an authorized agent to submit a request on your behalf. We may require proof of the agent's authority and verification of your identity.
Appeals. If we decline your request, you may appeal by replying to our decision email or writing to team@kotanical.com with the subject "Privacy Appeal". If your appeal is denied, residents of states that provide this right may contact their state Attorney General.
California "Shine the Light." California residents may request information about disclosures of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes.
Nevada. Nevada residents may submit a request to opt out of the sale of covered information by emailing team@kotanical.com. We do not sell covered information as defined under Nevada law.
11. Children's Privacy
This website is intended for use by individuals aged 18 and over. We do not knowingly collect personal information from anyone under 18, and in no event from anyone under 13 in violation of the Children's Online Privacy Protection Act (COPPA). If you believe a child has provided us with personal information, contact us and we will delete it.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal or regulatory reasons. Changes will be posted on this page with a new "Last updated" date. Your continued use of our site after changes are posted constitutes acceptance of the updated policy.
13. Contact Us
Questions or requests about this Privacy Policy or your personal information should be sent to:
AJ Growth Ventures LLC
8054 E Garvey Ave, Ste 101, Rosemead, CA 91770, United States
Email: team@kotanical.com