Privacy Policy

Last updated: July 1, 2026

This Privacy Policy explains how Ollie Botanical Group LLC ("Dandy," "we," "us," or "our") collects, uses, and shares information when you visit this website (the "Site") or purchase our products. By using the Site, you agree to the practices described here.

1. Information we collect

Information you provide

• Order information: your name, shipping address, email address, and phone number when you place an order.
• Payment information: card details are collected and processed by our payment processor. We do not store full card numbers on our servers; we retain only the transaction record (amount, date, last four digits, and processor reference).
• Age confirmation: your confirmation that you are 21 or older, recorded when you enter the Site and when you place an order.
• Communications: the contents of messages you send us through the contact form, email, or phone, including COA (Certificate of Analysis) requests.

Information collected automatically

• Device and usage data: IP address, browser type, device type, pages viewed, referring pages, and timestamps.
• Cookies and local storage: we use browser localStorage to remember your age-gate confirmation and the contents of your shopping cart, and cookies or similar technologies for basic site analytics. We do not use cross-site advertising trackers.

2. How we use information

• To process, fulfill, and ship your orders, and to send order confirmations and tracking updates.
• To verify age and enforce our 21+ requirement and shipping restrictions.
• To respond to support requests and COA requests.
• To detect and prevent fraud, unauthorized transactions, and abuse.
• To understand how the Site is used and to improve it.
• To comply with legal obligations, including tax, accounting, and record-keeping requirements.

We do not sell your personal information, and we do not share it with third parties for their own marketing.

3. How we share information

We share personal information only with service providers who need it to operate our business, and only for the purposes described above:

• Payment processor — to authorize and settle card transactions and screen for fraud.
• Shipping carriers and fulfillment partners — to deliver your order (name, address, and contact details only).
• Analytics providers — to measure aggregate Site usage.
• Professional advisors and authorities — where required by law, subpoena, or to protect our legal rights, or in connection with a merger, acquisition, or sale of assets (in which case this Policy continues to apply to previously collected data).

4. Data retention

We keep order and transaction records for as long as needed to fulfill your order and to meet tax, accounting, chargeback, and legal requirements — generally seven (7) years. Support correspondence is kept for up to two (2) years after the matter is closed. Analytics data is retained in aggregate form. Cart contents and the age-gate flag live in your own browser's localStorage and can be cleared by you at any time through your browser settings.

5. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of the personal information we hold about you, and to object to or restrict certain processing. To exercise any of these rights, contact us using the details below; we will verify your request and respond within the time required by applicable law. We will not discriminate against you for exercising your rights. You can also:

• Clear cookies and localStorage in your browser to remove the cart and age-gate data stored on your device.
• Opt out of any marketing email by using the unsubscribe link in the message (we send transactional email regardless, such as order confirmations).

6. Security

The Site is served over HTTPS, payment details are handled by a PCI-DSS-compliant processor, and access to order data is limited to personnel who need it. No method of transmission or storage is 100% secure, but we work to protect your information with measures appropriate to its sensitivity.

7. Age of users

The Site is intended solely for adults 21 and older. We do not knowingly collect information from anyone under 21. If you believe a person under 21 has provided us personal information, contact us and we will delete it.

8. Changes to this Policy

We may update this Policy from time to time. The "Last updated" date above reflects the current version. Material changes will be posted on this page before they take effect.

9. Contact

Ollie Botanical Group LLC
[FILL IN - registered business address]
Email: [FILL IN - support email]
Phone: [FILL IN - support phone]
Support hours: Monday–Friday, 9am–5pm CT