Legal

Privacy Policy

Last updated: July 14, 2026

GoodOnes™ is operated by Flore Inc. ("we," "us," "our"). This policy explains what personal information we collect, how we use it, and your rights. We do not sell your personal information for money. We do share limited hashed identifiers with advertising partners to match marketing audiences, and you can opt out at any time — see “Do Not Sell or Share My Personal Information” below.

Information We Collect

Information you provide

• Order information — name, email address, shipping address, and payment information when you purchase through our Shopify-powered checkout (floreclinical.myshopify.com). Payment data is processed by Shopify and Stripe; we do not store full card numbers.
• Quiz responses — symptom and health preference answers submitted through our product recommendation quiz. These are used solely to recommend formulas and are not tied to your identity unless you place an order.
• Support communications — emails sent to [email protected].

Information collected automatically

• Analytics — we use Google Tag Manager (GTM-5X5GR4BT) to collect anonymised page view, session, and event data via Google Analytics. This includes browser type, device, pages visited, and general location (city/region level). No health data is transmitted.
• Cookies — session cookies are used for cart state and quiz progress. We use localStorage (not cross-site cookies) for discount code persistence and exit-intent suppression.
• Server logs — standard web server logs including IP address, request path, and timestamp. Retained for up to 30 days for security purposes.

How We Use Your Information

• To fulfil and ship your order
• To send order confirmations and shipping updates
• To respond to support requests
• To improve our product recommendations and website (aggregated, anonymised analytics)
• To send marketing emails if you opt in (you may unsubscribe at any time)

Sharing Your Information

We share your information only with:

• Shopify — our e-commerce and checkout platform
• Stripe — payment processing
• Google — analytics, tag management, and advertising audience matching
• Meta Platforms, Inc. (Facebook and Instagram) — advertising measurement and marketing audience matching
• Klaviyo — email marketing, if you opt in
• Shipping carriers (UPS, USPS) — name and address for delivery

We do not sell your personal information for money, and we do not rent or trade your personal information to unrelated third parties for their own marketing. To help our own advertising reach the right people, we do share a limited set of identifiers — such as your email address and phone number, in a hashed (cryptographically obscured) form — with advertising and analytics partners, including Meta and Google, so they can match you to your existing accounts and help us build and target marketing audiences (for example, Custom Audiences and lookalike audiences). We do not share your quiz responses, symptom answers, or health information with advertising partners. Under some privacy laws, including California’s CCPA/CPRA, this kind of sharing may be considered a “sale” or “sharing” of personal information, and you have the right to opt out — see “Do Not Sell or Share My Personal Information” below.

Data Retention

Order data is retained for 7 years for tax and legal compliance. Analytics data is retained per Google Analytics' standard retention settings (26 months). You may request deletion of your personal data at any time by emailing [email protected].

Your Rights

Depending on your location, you may have rights under CCPA (California), GDPR (EU/UK), or other applicable law, including:

• Right to access the personal data we hold about you
• Right to deletion ("right to be forgotten")
• Right to opt out of marketing communications
• Right to data portability

To exercise any of these rights, email [email protected].

Do Not Sell or Share My Personal Information

If you are a California resident — or live in a state with similar rights — you may opt out of the sharing of your hashed identifiers with advertising partners for audience matching, which the CCPA/CPRA may treat as a “sale” or “sharing.” To opt out, email [email protected] with the subject line “Do Not Sell or Share” and the email address and/or phone number you would like us to exclude. We will remove your identifiers from our advertising audiences. This choice does not affect your order confirmations, shipping updates, or support emails.

Children's Privacy

realgoodones.com is not directed at children under 13. We do not knowingly collect personal data from children under 13.

Changes to This Policy

We may update this policy from time to time. Material changes will be posted here with an updated date. Continued use of the site after changes constitutes acceptance.

Contact

Privacy questions: [email protected]
Flore Inc. · a licensed practitioner