Privacy policy

TWISTED THISTLE APOTHICAIRE

Primary Privacy Policy | Last Updated: August 2026

This Privacy Policy applies to all personal information collected through our in-store services, website, email communications, and SMS text message program.

1. ABOUT US

"We," "us," or "our" means Twisted Thistle Apothicaire, a botanical apothecary with its principal place of business located at 4156 Piedmont Ave, Oakland, CA 94611-5110. You may contact us at [email protected].

2. ABOUT THIS PRIVACY POLICY

Your privacy is important to us. This Privacy Policy explains how we collect, use, and share your personal information when you interact with us — including in our store, through our website, via our email newsletter, and through our SMS text message program (collectively, the "Services").

Please read this Policy carefully. By using our Services or providing us with your personal information, you acknowledge that you have read and understood this Privacy Policy.

If you have any questions, concerns, or complaints, please contact us at [email protected].

3. PERSONAL INFORMATION WE COLLECT AND HOW WE COLLECT IT

We collect the following categories of personal information:

• Information you provide directly to us:
• Contact information: When you sign up for our in-store VIP program, subscribe to our email newsletter, or opt in to receive SMS text messages, we collect your name, email address, phone number, and mailing address.
• Payment information: To purchase products, you will need to provide payment information. Your financial information is collected and stored by our third-party payment processor. Use and storage of that information is governed by the payment processor's applicable privacy policy and is handled using PCI-compliant practices.  
• Survey and form information: We may collect information when you fill in forms, respond to surveys, provide feedback, or participate in promotions.
• Communications information: We collect information from your interactions with us, including customer service inquiries, emails, and any other information you choose to share.
•  

Information collected automatically:

When you visit our website, we may automatically collect information about your device, browser, IP address, and how you interact with the site through the use of cookies and similar technologies.

4. HOW WE USE YOUR PERSONAL INFORMATION

We use your personal information to:

• Send you promotional SMS text messages, email newsletters, and other marketing communications about our products, events, and offers (with your consent)
• Respond to your questions, inquiries, and customer service requests
• Process orders and transactions
• Monitor and analyze trends and usage to improve our Services
• Facilitate contests, sweepstakes, and promotions
• Detect, investigate, and prevent fraudulent transactions and other illegal activity
• Comply with our legal obligations
• Carry out any other purpose described to you at the time your personal information was collected

5. LEGAL BASIS FOR PROCESSING

Where required by applicable law, we collect and process your personal information based on your consent, to perform a contract with you, to comply with legal obligations, or where processing is in our legitimate business interests and does not override your fundamental rights.

6. HOW WE SHARE YOUR PERSONAL INFORMATION

We do not sell your personal information. We may share your personal information in the following limited circumstances:

• Service providers: With vendors and service providers who process personal information on our behalf, including Mailchimp (our email and SMS platform), telecommunications providers, data analytics providers, and payment processors. These providers are contractually required to protect your information.
• Legal requirements: If required by law, court order, or valid legal process, or where we have a good-faith belief that disclosure is necessary to comply with applicable legal obligations, protect the rights and safety of ourselves or others, or investigate suspected illegal activity.
• Business transactions: In connection with a merger, acquisition, or sale of all or a portion of our business assets.

7. YOUR MARKETING CHOICES

You may opt out of receiving marketing messages from us at any time:

• Email: Click the unsubscribe link in any email we send.
• SMS: Reply STOP, END, CANCEL, UNSUBSCRIBE, QUIT, OPTOUT, or REVOKE to any SMS message we send.

If you opt out of marketing messages, we may still send you non-promotional communications, such as order confirmations or customer service responses.

8. RETENTION OF YOUR DATA

We retain your personal information only as long as necessary for the purposes described in this Policy, or as required by law. When determining retention periods, we consider the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use, and applicable legal requirements. You may request deletion of your personal information at any time by contacting us.

9. DATA SECURITY

We implement reasonable administrative, technical, and physical security measures to help protect your personal information. However, no security system is impenetrable and we cannot guarantee the security of information transmitted to or from our Services.

In the event of a data breach that affects your personal information, we will notify you as required by applicable law, including California Civil Code § 1798.82. Notification will be provided in the most expedient time and manner possible, and will include a description of the incident, the type of information involved, and steps we are taking in response. We will notify you via email or written notice to the address associated with your account, or by prominent posting on our website if direct notification is not practicable.

10. CHILDREN'S PRIVACY

Our Services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately so that we can promptly delete it.

11. CALIFORNIA RESIDENTS — YOUR PRIVACY RIGHTS

If you are a California resident, please see Section 2 of this document — our Supplemental California SMS Messaging Privacy Policy — for a full description of your rights under the California Consumer Privacy Act (CCPA), including your right to know, delete, correct, and opt out of the sale or sharing of your personal information.

12. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. When we make material changes, we will notify you as required by applicable law and update the "Last Updated" date at the top of this Policy. We encourage you to review this Policy periodically.

13. CONTACT US

If you have questions, concerns, or would like to exercise any of your privacy rights, please contact us:

Twisted Thistle Apothicaire

4156 Piedmont Ave

Oakland, CA 94611-5110

[email protected]

TWISTED THISTLE APOTHICAIRE

SMS Messaging Privacy Policy | Last Updated: August 2026

This SMS Messaging Privacy Policy explains how Twisted Thistle Apothicaire collects, uses, and shares your personal information in connection with our text message marketing program (the "Messaging Service"). This Policy supplements our Primary Privacy Policy above.

1. CHANGES TO THIS MESSAGING PRIVACY POLICY

We may revise this Messaging Privacy Policy from time to time. If we make material changes, we will notify you as required by applicable law. By continuing to use the Messaging Service after any updated Policy takes effect, you are deemed to have accepted the updated terms.

2. PERSONAL INFORMATION WE COLLECT

When you sign up for our Messaging Service — including through our in-store VIP program — we collect personal information such as your name, phone number, and email address, as well as any other information you provide directly to us (for example, responses to preferences questionnaires).

When you use the Messaging Service to send or receive messages, we collect communications metadata (such as the date and time a message was sent or received) and the content of any messages you send or receive via the Messaging Service.

If you contact us with questions about the Messaging Service or for customer support, we will collect any personal information you choose to share.

3. USE OF PERSONAL INFORMATION

We use your personal information to deliver, maintain, analyze, and improve the Messaging Service. We may also use it to customize and personalize your experience, such as sending you relevant promotional offers based on your preferences or purchase history.

We may generate aggregated and/or de-identified data from personal information for analytical purposes. De-identified information is not personal information and may be shared with third parties.

4. SHARING OF PERSONAL INFORMATION

Service Providers

We may share your personal information with third parties that help us provide the Messaging Service, including Mailchimp (our messaging platform), phone carriers, and other vendors who assist with the delivery of text messages. These providers are contractually obligated to protect your information and may only use it to provide services to us.

Legal Disclosures

We may disclose your personal information if we have a good-faith belief that doing so is required or appropriate to: comply with law enforcement or legal process (such as a court order or subpoena); protect the rights, property, or safety of you, us, or others; enforce our policies; or assist with the investigation of suspected illegal activity.

5. HOW TO OPT IN TO THE MESSAGING SERVICE

You may opt in to receive SMS text messages from us by:

• Signing up for our in-store VIP program at Twisted Thistle Apothicaire, 4156 Piedmont Ave, Oakland, CA
• Subscribing through our website or any opt-in form we make available

By opting in, you consent to receive recurring automated promotional text messages from Twisted Thistle Apothicaire at the phone number you provide.

6. CHOICES AND CONTROLS — HOW TO OPT OUT

Text messages may be sent via an automatic telephone dialing system. Consent to receive automated marketing text messages is not a condition of any purchase.

You may opt out of the Messaging Service at any time by replying to any of our text messages with any of the following keywords:

STOP • END • CANCEL • UNSUBSCRIBE • QUIT • OPTOUT • REVOKE

After opting out, you will receive a single confirmation message and no further promotional texts will be sent to that number, unless you opt in again.

For additional help, reply HELP to any message, or contact us at [email protected].

Message and data rates may apply. Message frequency varies.

7. ACCURATE INFORMATION

When you provide us with your phone number or other information in connection with the Messaging Service, you agree to provide accurate, complete, and truthful information. If we determine, in our sole discretion, that information provided is false or misleading, or that you have opted in for an unauthorized purpose, we may refuse access to the Messaging Service and pursue any appropriate legal remedies.

8. SUPPLEMENTAL CALIFORNIA PRIVACY NOTICE (CCPA)

This section applies only to California residents and supplements the information above. It is provided pursuant to the California Consumer Privacy Act of 2018 ("CCPA") and its amendments, including the California Privacy Rights Act ("CPRA").

Categories of Personal Information We Collect via the Messaging Service

The categories of sources from which we collect personal information and our purposes for using it are described in this Policy and in our Primary Privacy Policy above.

Do We Sell Personal Information?

No. We do not "sell" or "share" your personal information as those terms are defined under the CCPA/CPRA for purposes of cross-context behavioral advertising. We do not have actual knowledge of any sale of personal information of individuals under 16 years of age.

Your Rights as a California Resident

Under the CCPA and CPRA, California residents have the following rights:

• Right to Know / Access: You may request access to the categories and specific pieces of personal information we have collected about you in the preceding 12 months, including the categories of sources, the business purpose for collection, and the categories of third parties with whom we share it.
• Right to Delete: You may request that we delete personal information we have collected from you, subject to certain exceptions (for example, where we are required to retain information to comply with a legal obligation).
• Right to Correct: You may request that we correct inaccurate personal information we maintain about you.
• Right to Opt Out of Sale or Sharing: You may opt out of the sale or sharing of your personal information. As stated above, we do not sell personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your rights under the CCPA. We will not deny you goods or services, charge different prices, or provide a lower quality of service because you exercised a privacy right.

How to Exercise Your California Privacy Rights

To submit a request, contact us at:

Email: [email protected]

Mail: Twisted Thistle Apothicaire, 4156 Piedmont Ave, Oakland, CA 94611-5110

We will respond to verifiable consumer requests within 45 days as required by the CCPA. We may need to verify your identity before processing your request — this may include confirming the email address or phone number associated with your account.

Authorized Agents

You may designate an authorized agent to submit privacy rights requests on your behalf. We may require written proof of the agent's authorization and may verify your identity directly with you before processing the request.

9. CUSTOMER CARE

If you have questions or are experiencing problems with the Messaging Service, please contact us:

Email: [email protected]

In person: 4156 Piedmont Ave, Oakland, CA 94611-5110

10. PRIMARY PRIVACY POLICY

By signing up to receive text messages from us, you also agree to our Primary Privacy Policy. This Messaging Privacy Policy is strictly limited to the Messaging Service and does not limit or restrict any other privacy terms that may govern the relationship between you and us in other contexts.