Privacy Policy – one-kratom.com
Legal Document

Privacy Policy

one-kratom.com
Effective Date: April 21, 2024  ·  Last Updated: April 21, 2026

01 Introduction

Welcome to one-kratom.com (“Site”, “we”, “our”, or “us”). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, make purchases, or interact with our content.

Please read this policy carefully. If you disagree with its terms, please discontinue use of the Site.

02 Information We Collect

2.1 Information You Provide Directly

When you place an order, create an account, or contact us, we may collect:

  • Full name and billing/shipping address
  • Email address and phone number
  • Payment information (credit/debit card details processed via secure third-party processors; we do not store raw card data)
  • Order history and preferences
  • Communications and correspondence you send us

2.2 Information Collected Automatically

When you browse our Site, we automatically collect:

  • IP address and approximate geographic location
  • Browser type, operating system, and device information
  • Pages visited, time spent on pages, and referring URLs
  • Cookie identifiers and similar tracking technologies
  • Clickstream and behavioral data for analytics

2.3 Information from Third Parties

We may receive information about you from advertising partners, analytics providers, payment processors, and social media platforms if you interact with our content there.

03 Cookies & Tracking Technologies

We use cookies, web beacons, pixels, and similar technologies to:

  • Keep you logged in and remember your cart
  • Analyze traffic and usage patterns (e.g., Google Analytics)
  • Deliver targeted advertising and retargeting campaigns
  • Measure the effectiveness of our marketing
Your choices: You can control cookies through your browser settings. Disabling cookies may affect Site functionality. We honor “Do Not Track” signals where technically feasible. For EU/EEA visitors, we obtain consent for non-essential cookies via our cookie consent banner.

04 How We Use Your Information

We use the information we collect to:

  • Process and fulfill orders, and send order confirmations and shipping updates
  • Create and manage your account
  • Respond to inquiries and provide customer support
  • Send transactional emails and, with your consent, marketing communications
  • Improve our Site, products, and services through analytics
  • Detect fraud, ensure security, and comply with legal obligations
  • Comply with applicable laws, regulations, and law enforcement requests

05 Legal Bases for Processing (GDPR – EU/EEA Users)

If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases:

  • Contract Performance: Processing necessary to fulfill your order or manage your account.
  • Legitimate Interests: Analytics, fraud prevention, and improving our services, where not overridden by your rights.
  • Consent: Marketing emails and non-essential cookies (you may withdraw consent at any time).
  • Legal Obligation: Compliance with applicable laws, tax, and regulatory requirements.

06 How We Share Your Information

We do not sell your personal information.

We may share it with:

  • Service Providers: Shipping carriers, payment processors, email platforms, analytics providers, and IT services that assist us in operating the Site.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred to the successor entity.
  • Legal Requirements: When required by law, court order, or government authority, or to protect the rights and safety of our users or the public.
  • Advertising Partners: Anonymized or pseudonymized data may be shared with ad networks for retargeting; we do not share your name or payment data for advertising purposes.

07 Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, including:

  • Order and transaction records: up to 7 years for tax and legal compliance.
  • Account data: until you close your account, plus a reasonable grace period.
  • Marketing preferences: until you unsubscribe or withdraw consent.
  • Analytics data: typically aggregated and anonymized after 26 months.

08 Your Privacy Rights

8.1 All Users

You have the right to opt out of marketing communications at any time by clicking “unsubscribe” in any email or contacting us directly.

8.2 EU/EEA Users (GDPR)

You have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Request deletion of your data (“right to be forgotten”)
  • Restrict or object to certain types of processing
  • Data portability – receive your data in a machine-readable format
  • Withdraw consent at any time without affecting prior lawful processing
  • Lodge a complaint with your local data protection authority

8.3 California Residents (CCPA/CPRA)

California residents have the right to:

  • Know what personal information we collect, use, disclose, or sell
  • Delete personal information we have collected (subject to exceptions)
  • Opt out of the sale or sharing of personal information
  • Non-discrimination for exercising your privacy rights
  • Correct inaccurate personal information

We do not sell personal information as defined under the CCPA. To submit a verifiable consumer request, contact us at the details below. We will respond within 45 days.

09 Data Security

We implement industry-standard technical and organizational measures to protect your personal information, including SSL/TLS encryption for data in transit, secure payment processing via PCI-DSS compliant third-party processors, and access controls limiting employee access to personal data.

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

10 International Data Transfers

one-kratom.com operates across two countries — the United States (Distribution, Research & Development) and Indonesia (Sourcing and Production). Your personal information may be transferred to, stored, and processed in either or both of these countries, as well as in countries where our service providers operate.

For transfers from the EEA or UK to the US or Indonesia, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, or other lawful transfer mechanisms, to ensure your data receives an adequate level of protection.

11 Children’s Privacy

Our Site is not directed to individuals under the age of 18. Kratom products are intended for adults only. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected data from a minor, we will delete it promptly. If you believe a minor has provided us with personal information, please contact us immediately.

12 Third-Party Links

Our Site may contain links to third-party websites, social media platforms, or embedded content. We are not responsible for the privacy practices of those third parties and encourage you to review their privacy policies before providing any personal information.

13 Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last Updated” date at the top of this page. For material changes, we will provide a more prominent notice (such as an email notification or a banner on our Site). Your continued use of the Site after any changes constitutes your acceptance of the updated policy.

14 Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out to us:

General & Privacy Inquiries

export@kratom.com
🇺🇸

United States

Distribution & Research
11106 Whisperwood Ln
Rockville, MD 20852, USA
+1 (202) 717-5299
🇮🇩

Indonesia

Sourcing & Production
Jl. Sungai Raya Dalam No. 88
Pontianak, West Borneo, Indonesia
+62 812 7777 3488

For GDPR-related requests, EU/EEA users may also lodge a complaint with their national data protection supervisory authority.