Tideroot Provisions is the shop name; Prim Elevate Limited, registered in Hong Kong, is the business behind it and decides how personal data from tiderootprovisions.com is handled. This notice covers the data a visit or a purchase produces, what it is for, which outside firms receive any of it and what you may ask of us.
1. Data We Gather
The list is deliberately short.
- Checkout entries: full name, email, the delivery address, a billing address when it is not the same, and a phone number only if you add one.
- Card entries: keyed in at checkout and relayed to the card processor (see Section 4).
- Correspondence: your emails and text entered in the contact or cancellation form, order numbers included.
- Request logs: IP address, browser, device type, the requested page and a timestamp, which arrive with any web request.
Visitors never log in, so no passwords exist for us to keep. No analytics script and no advertising pixel is installed.
2. Purposes
We use your name, address and email for four jobs: taking the payment, packing the parcel, posting it, and sending the receipt and tracking notice. They also let us reply to your questions and process a cancellation, return or refund.
Past orders also help us recognise payment fraud, and tax and bookkeeping law obliges us to hold certain records. Nothing is passed to advertisers, and we build no profile of you.
3. Recipients
Personal data from this shop is not sold, nor disclosed to anyone for cross-context behavioural ad targeting. A few contractors carry out parts of the job, each getting only the fields its task calls for:
- the web host and its content delivery network
- the order platform and card processor, which record orders and approve payments
- PayPal, but only when it appears at checkout and you select it
- the mail provider delivering receipts and dispatch notices
- the parcel carrier, given a name, an address and occasionally a phone number
Contractors follow our instructions; PayPal additionally applies its own privacy terms to PayPal payments. Apart from these, disclosure happens only where a law or court order compels it, to block fraud, or to whoever acquires the business, on condition that this notice continues to bind them.
4. Card Numbers
Card numbers pass from the checkout form to the payment processor, which secures them to PCI DSS. Full card numbers and CVC codes never sit on our systems. All our payment log shows is the sum, the day, the card brand and the final four digits.
5. Security
Every connection to the site is encrypted with HTTPS. Order records are restricted to staff who fulfil orders or handle support mail. Data protection weighs in how we pick contractors. Even so, no system is beyond attack; should a breach reach your data, you will be told as the law directs.
6. How Long Records Are Kept
Order and payment records stay on file for the period that tax and accounting law fixes. Support threads are kept until the matter is closed, then for a sensible period afterwards. Request logs are short-lived and serve security alone. Ask for erasure and we delete whatever no law requires us to hold.
7. Cross-Border Transfers
Prim Elevate Limited is a Hong Kong company selling to buyers in the United States, and some contractors run servers in further countries. Data you give us can accordingly be moved to and held in the United States, elsewhere, and processed and stored in Hong Kong. We deal with it in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) of the HKSAR, together with any privacy law of your home jurisdiction that applies, and contractual safeguards with our providers cover data as it crosses borders.
8. Requests You Can Make
Residents of some places, California among them under the CCPA and its CPRA amendments, can ask us to:
- disclose the personal data we hold on them and supply a copy
- fix anything inaccurate
- erase data we are not obliged to retain
- opt out of sale or sharing, which we do not engage in, as our Do Not Sell or Share My Personal Information page explains
- review a refusal
Direct requests to support@tiderootprovisions.com, or ring +1 (855) 425-7516. A detail from your order may be requested to check identity, and an authorised agent may write for you. You get a complete reply within 30 days; asking costs nothing and changes nothing about how we serve you.
9. Cookies, Browser Storage and Signals
Exactly one cookie is set: __Host-ck, an essential cookie that keeps a checkout session intact for around 90 minutes. Your cart and your banner choice are held in localStorage instead. With no analytics or ad tools present, the optional side is empty, yet if your browser broadcasts Global Privacy Control or Do Not Track, we register that as an opt-out. Every item is listed in the Cookie Policy.
10. Outside Links
Some pages point elsewhere, for instance to a carrier's tracking site. Those sites run under their own privacy notices, outside our control, so check them before handing over details.
11. Minors
Purchases are open only to adults of 18 and above. Personal data from people under 18 is never knowingly collected. If you suspect a minor has given us details, email support@tiderootprovisions.com and they will be erased.
12. Revisions
A revised notice replaces this one on this page, carrying a new effective date. Where a revision touches data already in our hands, we email you ahead of it applying.
13. Contact
Prim Elevate Limited, trading as Tideroot Provisions
Hong Kong company, Companies Registry No. 81163338
Room 701, 7/F, Lucky Centre, 165-171 Wanchai Road, Wan Chai, Hong Kong
Email: support@tiderootprovisions.com
Telephone: +1 (855) 425-7516
Support hours: Monday – Friday, 9:00 AM – 6:00 PM EST