Privacy Policy

BENTLEY'S APOTHECARY PRIVACY POLICY

Effective Date: July 25, 2026

This Privacy Policy explains how Bentley's Apothecary ("Bentley's Apothecary," "we," "us," or "our") collects, uses, retains, and discloses personal information when you visit or interact with our website, purchase products, create an account, join a rewards or marketing program, communicate with us, or otherwise use services that link to this Privacy Policy (collectively, the "Services").

This Policy applies to Bentley's Apothecary's online retail operations and related customer interactions. It does not apply to a third party's website, service, or application that has its own privacy notice.

1. PERSONAL INFORMATION WE COLLECT

Depending on how you interact with us and which features are enabled, we may collect the following categories of personal information:

Identifiers and contact information. This may include yo

ur name, email address, telephone number, billing address, shipping address, and other contact details.

Order and transaction information. This may include products purchased or considered, order number, purchase date, price, discounts, rewards applied, shipping method, delivery status, returns, refunds, and limited payment-related information.

Account information. If customer accounts are available, this may include your login credentials in protected form, account settings, saved addresses, order history, and account preferences.

Payment and transaction information. When you make a purchase, payment information is submitted to the payment processor selected for the transaction. We may receive limited information such as payment status, payment method type, billing address, transaction identifier, and the last digits of a payment card. We do not intend to receive or store your complete payment card number or card security code on our own systems.

Device, usage, and internet activity information. This may include your IP address, browser type, device type, operating system, referring page, pages viewed, links selected, approximate location derived from an IP address, dates and times of visits, shopping cart activity, and information about how you interact with the Services and our electronic communications.

Cookies and similar technologies. We and service providers supporting the Services may use cookies, pixels, tags, scripts, local storage, software development kits, or similar technologies. These technologies may support essential website functions, remember preferences, maintain a shopping cart, help prevent fraud, measure traffic and performance, or support advertising if those features are enabled.

Forms and submissions. We collect information you provide through contact forms, product questions, surveys, event registrations, newsletter forms, or other website forms. Please do not submit sensitive medical, financial, government identification, or other information that is not necessary for us to respond to your request.

Reviews and other content. If reviews, testimonials, photographs, or other public-submission features are available, we collect the content you submit and information associated with that submission. Information you choose to publish may be visible to other visitors.

Rewards information. If we offer a rewards, loyalty, referral, discount, or membership program, we may collect enrollment details, points or reward balances, purchase activity, reward redemptions, and program preferences.

Customer service information. This may include messages, emails, order questions, return requests, complaints, and other information you provide when communicating with us.

Marketing preferences. This may include whether you have requested or agreed to receive promotional emails or text messages, records of consent where required, unsubscribe or opt-out requests, and communication preferences.

Information inferred from activity. We may make limited inferences about interests or product preferences based on purchases, browsing activity, or interactions with our communications. We do not ask customers to provide a medical diagnosis through the Services.

2. SOURCES OF PERSONAL INFORMATION

We may collect personal information:

- Directly from you, including when you place an order, create an account, complete a form, write a review, join a rewards program, subscribe to marketing, or contact us.

- Automatically from your browser or device through cookies, logs, and similar technologies.

- From our website, ecommerce, hosting, payment, communications, analytics, fraud-prevention, and customer-service providers.

- From shipping carriers and delivery providers, such as delivery status or address correction information.

- From social media platforms or other third parties when you interact with our pages, use an integration, or direct those parties to provide information to us.

- From publicly available sources or information you have made public.

3. HOW WE USE PERSONAL INFORMATION

We may use personal information to:

- Provide, operate, maintain, and improve the Services.

- Process orders, payments, shipments, deliveries, returns, refunds, and exchanges.

- Create and administer customer accounts.

- Respond to questions, product inquiries, reviews, complaints, and customer-service requests.

- Operate rewards, loyalty, referral, or discount programs if offered.

- Personalize content and remember customer preferences.

- Send order confirmations, shipping updates, account notices, product-recall notices, security messages, and other transactional or relationship communications.

- Send promotional email or text messages when permitted by law and consistent with your choices.

- Measure website traffic, understand use of the Services, troubleshoot problems, and improve performance.

- Maintain shopping carts and, if enabled, send abandoned-cart reminders in accordance with applicable consent and marketing requirements.

- Protect customers, our business, and the Services against fraud, abuse, security incidents, and unlawful activity.

- Enforce our policies, agreements, and legal rights.

- Comply with tax, accounting, record keeping, regulatory, and other legal obligations.

- Support a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar commercial transaction.

- Carry out another purpose disclosed when information is collected or with your consent.

4. PAYMENT HANDLING

Online payments are processed through the payment service or payment processor available at checkout. The processor may collect your complete payment card, bank, wallet, or other payment credentials under its own privacy notice and terms.

Bentley's Apothecary generally receives transaction confirmation and limited payment details needed to complete the order, issue a refund, reconcile transactions, prevent fraud, and maintain business records. Please review the privacy notice of the payment provider shown at checkout.

5. HOW WE DISCLOSE PERSONAL INFORMATION

We may disclose personal information to the following categories of recipients when reasonably necessary:

Service providers and contractors. These may include website hosting and ecommerce platform providers, payment processors, fraud-prevention providers, cloud storage providers, analytics providers, customer-service tools, email and text-message providers, rewards providers, accountants, professional advisers, and information technology or security providers.

Shipping and fulfillment parties. We may provide names, addresses, contact information, and order information to postal services, shipping carriers, fulfillment providers, or other parties needed to deliver an order.

Advertising and analytics parties. If advertising, pixels, or third-party analytics are enabled, certain device and usage information may be disclosed to the relevant providers. See the "Cookies, Analytics, and Privacy Controls" and "State Privacy Rights" sections below.

At your direction. We may disclose information when you ask us to do so, use an integration, submit public content, or otherwise direct the disclosure.

Legal and safety recipients. We may disclose information when we reasonably believe disclosure is required by law, legal process, or a valid government request, or is appropriate to protect rights, safety, property, customers, the public, or the integrity of the Services.

Business transaction recipients. Information may be reviewed, transferred, or disclosed as part of a proposed or completed merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, subject to appropriate protections where required.

6. COOKIES, ANALYTICS, AND PRIVACY CONTROLS

The Services may use the following types of cookies and similar technologies:

Essential technologies support functions such as page navigation, security, account login, shopping carts, checkout, load balancing, and fraud prevention.

Preference technologies remember settings and choices.

Analytics technologies help measure visits, traffic sources, page performance, and use of the Services.

Advertising technologies, if enabled, may measure campaigns or help select advertisements based on activity. Depending on how they are configured and applicable law, some advertising technologies may constitute targeted advertising, a sale, or sharing of personal information.

You may be able to manage nonessential cookies through the cookie or privacy-preference tool displayed on the Services. You can also change browser settings to delete or block cookies. Blocking essential cookies may prevent checkout, account, shopping-cart, or other website functions from working properly.

7. EMAIL COMMUNICATIONS

We may send transactional or relationship emails concerning orders, shipping, returns, accounts, security, product recalls, or customer-service matters.

If you receive promotional email from us, you may unsubscribe through the link in the message or contact us at contact@bentleysapothecary.com. We may retain limited suppression-list information so that we can honor your request. Opting out of promotional email does not prevent necessary transactional or relationship communications.

8. TEXT MESSAGES

If you affirmatively enroll in a Bentley's Apothecary text-message program, you agree to receive recurring text messages from or on behalf of Bentley's Apothecary at the number you provide. Messages may include promotions, product announcements, rewards information, or other content described at enrollment. Message frequency varies. Consent to marketing text messages is not a condition of purchasing any property, goods, or services. Message and data rates may apply.

You may opt out by replying STOP to a message. For help, reply HELP or contact contact@bentleysapothecary.com. We may send one nonpromotional message confirming an opt-out request. Delivery depends on wireless carrier and network availability and is not guaranteed. Wireless carriers are not responsible for delayed or undelivered messages.

We may use a text-message service provider to deliver and manage messages. Your mobile carrier and the service provider may process information under their own terms and privacy notices. You are responsible for ensuring that you are authorized to provide the mobile number used to enroll.

Text-message consent applies only to the program identified when you enroll. Additional disclosures and terms may be presented at the point of enrollment.

9. DATA RETENTION

We retain personal information for as long as reasonably necessary for the purposes described in this Policy. Retention periods vary depending on factors such as:

- Whether an order, account, rewards membership, or customer relationship remains active.

- The time needed to provide service, respond to requests, or complete returns and chargebacks.

- Tax, accounting, warranty, product-safety, legal, and regulatory requirements.

- Fraud prevention, security, dispute resolution, and enforcement needs.

- The nature and sensitivity of the information and the risk associated with continued retention.

- Applicable limitation periods and legal holds.

When personal information is no longer reasonably needed, we may delete it, deidentify it, or securely dispose of it. Backup copies may remain for a limited period before being overwritten or removed through normal backup processes.

10. INFORMATION SECURITY

We use reasonable administrative, technical, and physical safeguards designed to protect personal information, taking into account the nature and volume of the information and the circumstances of processing. We also rely on service providers to protect information processed through their systems.

No method of transmission, storage, or security control is completely secure. We therefore cannot guarantee absolute security. You should use a unique password where accounts are available and notify us if you suspect unauthorized activity involving your account or communications with us.

11. CHILDREN'S PRIVACY

The Services are intended for a general audience and are not directed to children under 13. We do not knowingly collect personal information online from children under 13. If you believe a child under 13 has provided personal information through the Services, please contact us so we can review the matter and take appropriate action.

12. NEBRASKA AND OTHER U.S. STATE PRIVACY RIGHTS

The Nebraska Data Privacy Act became effective January 1, 2025. It generally applies to a person that conducts business in Nebraska or provides products or services consumed by Nebraska residents, processes or sells personal data, and is not a small business as determined under the federal Small Business Act. Certain entities and information are exempt. A limited Nebraska restriction concerning the sale of sensitive data may also apply to a qualifying small business.

Depending on where you reside, the law that applies to Bentley's Apothecary, and relevant legal exceptions, you may have the right to:

- Confirm whether we process your personal information and access that information.

- Correct inaccuracies in your personal information.

- Delete personal information provided by or obtained about you.

- Obtain a portable copy of certain personal information you previously provided to us.

- Opt out of covered targeted advertising.

- Opt out of the sale of personal information.

- Opt out of profiling used to make decisions that produce legal or similarly significant effects.

- Withdraw consent for certain processing where applicable.

- Appeal our refusal to act on a privacy request.

- Exercise privacy rights without unlawful discrimination.

These rights are not absolute. For example, we may retain information needed to complete transactions, comply with law, prevent fraud, maintain security, establish or defend legal claims, or honor an opt-out request.

How to submit a request

You may submit a privacy request using any of the following methods:

- Email contact@bentleysapothecary.com with the subject "Privacy Request."

- Mail a written request to Bentley's Apothecary, 339 N Broad St., Fremont, NE 68025.

Describe the right you want to exercise and provide enough information for us to locate the relevant records. You do not need to create a new account solely to make a request.

Authentication

We will use commercially reasonable methods to authenticate your identity and request. The information requested for authentication will depend on the nature of the request and the sensitivity of the records. We may ask you to confirm control of an email address, provide order information, use an existing account, or provide other reasonably necessary information. If we cannot authenticate a request, we may ask for additional information or decline the request as permitted by law.

Authorized agents

Where applicable law permits, you may authorize another person to submit a request for you. For Nebraska residents, an authorized agent may act on a consumer's behalf for certain opt-out requests, subject to statutory conditions. We may request evidence of the agent's authority and may verify your identity or residency before processing the request. A legally recognized universal opt-out mechanism may serve as an authorized-agent request for covered opt-out rights where required and technically supported.

Responses and appeals

We will respond within the period required by applicable law. Under the Nebraska Data Privacy Act, an authenticated request generally must receive a response without undue delay and within 45 days, subject to one reasonably necessary 45-day extension with notice.

If we decline to act, we will provide an explanation and appeal instructions where required. To appeal, reply to our decision or send an email to contact@bentleysapothecary.com with the subject "Privacy Appeal." You may also mail the appeal to the address above. We will respond to a Nebraska appeal in writing within 60 days as required by Nebraska law. If a Nebraska appeal is denied, we will provide information about submitting a complaint to the Nebraska Attorney General.

Fees

Privacy requests are generally processed without charge. Applicable law may permit a reasonable fee or refusal when a request is manifestly unfounded, excessive, technically infeasible, or repetitive.

13. THIRD-PARTY LINKS AND SERVICES

The Services may link to social media platforms, payment services, maps, embedded content, shipping tools, or other third-party websites and services. We do not control those parties' privacy, security, or data-handling practices. Review their privacy notices before providing information or using their services.

14. INTERNATIONAL VISITORS

Bentley's Apothecary operates in the United States, and the Services are directed primarily to customers in the United States. If you access the Services from another country, your information may be transferred to, processed in, and stored in the United States, where privacy laws may differ from those in your location.

Availability of the Services in another country does not necessarily mean that Bentley's Apothecary markets or offers products there. Where non-U.S. privacy law applies to our activities, we will handle personal information as required by that law.

15. CHANGES TO THIS POLICY

We may update this Privacy Policy as our Services, providers, or legal obligations change. We will post the revised Policy and update its effective date. If required by law, we will provide additional notice or obtain consent before applying a material change to information already collected.

16. CONTACT US

Questions, privacy requests, and appeals may be sent to:

Bentley's Apothecary

339 N Broad St.

Fremont, NE 68025

Email: contact@bentleysapothecary.com