Privacy Policy

1. Overview & Data Controller

FORTERA LLC is the data controller responsible for personal information processed under this Privacy Policy. We operate with strict data minimization principles, ensuring that data is only gathered where necessary to fulfill orders, maintain protocol delivery integrity, enhance user experience, and satisfy regulatory record-keeping obligations.

2. Information We Collect

When you visit the Website, we collect certain information about your device, your interaction with the Website, and details necessary to fulfill your orders:

• Order & Customer Information: Name, billing address, shipping address, payment transaction tokens, email address, and telephone number (utilized for shipment tracking and order confirmations). We do not store raw credit card numbers; all transactions are processed via PCI-DSS Level 1 certified gateways (Shopify Payments, Stripe, Apple Pay, PayPal).
• Device & Telemetry Information: IP address, browser type and version, time zone setting, operating system, and browsing actions gathered via secure telemetry tags to optimize storefront performance and prevent fraud.
• Concierge & Support Communications: Inquiries, feedback, and correspondence sent to our concierge desk, enabling our botanical care team to assist with protocol guidance and order tracking.

3. California Consumer Privacy Act (CCPA / CPRA) Rights

If you are a resident of California, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants you specific rights regarding your personal information:

• Right to Know & Access: You may request disclosure of the specific categories and pieces of personal information we have collected about you over the preceding 12 months.
• Right to Deletion: You may request that we delete personal information collected from you, subject to legal and regulatory retention exceptions (e.g., tax records and fraud prevention).
• Right to Correction: You may request the correction of inaccurate personal information maintained in our active systems.
• Right to Non-Discrimination: We will never discriminate against you, alter pricing, or degrade service quality for exercising your privacy rights.

Do Not Sell or Share My Personal Information: We do not sell your personal information in exchange for monetary compensation. However, under California law, sharing data with digital advertising networks (such as Meta Ads or Google) may constitute a "sale" or "share". You have the absolute right to opt out at any time by visiting our dedicated Your Privacy Choices Portal or emailing privacy@kakicura.com.

4. Cookies & Tracking Technologies

We utilize first-party and third-party cookies, web beacons, and analytical tags to remember your shopping cart items, preserve your session across browsing tabs, and analyze customer engagement trends.

For a detailed breakdown of each cookie category, its operational purpose, retention duration, and instructions on how to manage or disable tracking mechanisms, please review our official Cookie Policy.

5. Third-Party Service Providers

We partner with trusted third-party service providers who assist in operating our e-commerce platform and fulfilling our commitments to you:

• E-Commerce Infrastructure: Shopify Inc. hosts our online storefront and provides secure checkout architecture.
• Logistics & Fulfillment: Verified 3PL warehousing and domestic delivery carriers (USPS, UPS, FedEx) receive recipient delivery credentials strictly to execute package transit.
• Payment Gateways: Encrypted payment processors verify financial authorizations under strict PCI-DSS standards.
• Analytics & Optimization: Anonymous operational telemetry tools assist our engineering desk in identifying storefront performance bottlenecks.

6. Data Security & Retention

We implement enterprise-grade physical, electronic, and administrative safeguards designed to protect personal data from unauthorized access, accidental destruction, alteration, or disclosure. All web traffic is encrypted using 256-bit Transport Layer Security (TLS).

Personal information is retained only as long as necessary to fulfill the purposes outlined in this Privacy Policy, satisfy active customer service relationships, comply with legal and tax accounting mandates, and resolve disputes.

7. Your Rights & How to Exercise Them

Regardless of your geographic location, you may update your account details, request a copy of your records, or unsubscribe from marketing newsletters at any time by utilizing the "Unsubscribe" link in any promotional email, or by contacting our Data Governance Desk directly.

8. Contact Our Privacy Desk

If you have any questions, complaints, or requests regarding this Privacy Policy or wish to exercise your legal consumer privacy rights, please reach out to us: