Privacy policy
PRIVACY POLICY
Effective Date: July 10, 2025
Pure Spectrum CBD, LLC ("Pure Spectrum," "we," "our," or "us") respects your privacy. This Privacy Policy explains what information we collect when you visit purespectrumcbd.com or purchase our products (the "Service"), how we use and disclose it, who receives it, and the choices and rights you have — including specific rights if you are a California resident.
This policy covers our website, our online store, and our email and SMS communications. It does not cover third-party websites we link to.
This site is intended only for individuals 21 years of age or older.
1. Quick Summary
- We collect information you give us (name, email, phone, addresses, order details) and information
collected automatically when you browse (IP address, device and browser details, pages viewed, and how you interact with pages).
- We use session-recording technology that records mouse movement, scrolling, clicks, and the
pages and content you view. See Section 3.
- We work with advertising, analytics, affiliate, and attribution partners. Some of these
disclosures are treated as a "sale" or "sharing" of personal information under California law. See Section 6.
- You can control non-essential cookies through our Cookie preferences banner, opt out of sale
and sharing, and exercise data rights described in Section 8.
- We do not knowingly collect information from anyone under 21.
2. Information We Collect
2.1 Information you provide
- Identity and contact: name, email address, phone number, shipping and billing address
- Account: username, password, order history, saved preferences
- Transactions: items purchased, order value, subscription status, discount and referral codes
- Communications: messages you send us through chat, email, forms, surveys, or product reviews
- Age confirmation: your response to our 21+ age verification prompt
We do not store full payment card numbers. Payments are processed by Shopify and our payment providers, who handle card data under their own policies and PCI-DSS obligations.
2.2 Information collected automatically
- IP address and approximate location derived from it
- Device type, operating system, browser type and version, screen size, language
- Referring URL, pages and products viewed, search terms used on our site
- Date, time, and duration of visits; scroll depth, clicks, and mouse movement
- Cookie and device identifiers, including persistent advertising identifiers
2.3 Information from third parties
- Social and platform login: if you sign in through Google or Facebook, we receive the profile
information you authorize (typically name and email address)
- Advertising and affiliate partners: campaign, click, and attribution data indicating how you
arrived at our site
- Fraud prevention providers: device and transaction risk signals
2.4 California statutory categories
Under the CCPA we collect these categories: Identifiers; customer records information (Cal. Civ. Code § 1798.80); commercial information (purchases and purchasing tendencies); internet or other electronic network activity information (browsing and interaction data); geolocation data (approximate, from IP); and inferences drawn from the above (such as inferred product preferences).
Note on sensitive information: we do not intentionally collect sensitive personal information as defined by the CCPA. Because our products are wellness products, your purchase history could be interpreted as relating to health. We do not use or disclose purchase data to infer health conditions, and we do not use it for any purpose requiring a right-to-limit notice. See Section 8.5.
3. Session Recording and Analytics Technologies
We use third-party tools that record how visitors interact with our website. These tools capture mouse movement, scrolling, clicks and taps, the pages and content displayed on your screen, and the time spent on each page, and reconstruct that activity as a session replay we can review to diagnose problems and improve the site.
The providers we use for this are Microsoft Clarity and Hotjar.
These tools are configured to mask password fields and payment inputs. They are not used to read the contents of your private communications with third parties, and we do not use them to identify you personally. Recordings are retained by the providers under their own retention schedules.
You can prevent session recording by declining the Analytics category in our Cookie preferences banner, or by enabling a Global Privacy Control signal in your browser.
4. Cookies and Tracking Technologies
We use cookies, pixels, tags, software development kits, and similar technologies. We group them into four categories, matching the choices in our Cookie preferences banner:
| Category | What it does | Can you decline? |
|---|---|---|
| Required | Site functionality: logging in, cart, checkout, age verification, fraud prevention, security | No — the site cannot operate without these |
| Personalization | Remembers your preferences and settings between visits | Yes |
| Analytics | Measures site usage and performance, including session recording | Yes |
| Marketing | Advertising, retargeting, affiliate attribution, and measurement | Yes |
Managing your choices. When you first visit from a covered region you are shown a Cookie preferences banner where you can Accept all, Decline all, or choose by category.
Global Privacy Control. We honor the Global Privacy Control (GPC) browser signal as a valid request to opt out of the sale and sharing of personal information.
Browser controls. You can also block or delete cookies through your browser settings, though doing so may limit site functionality.
5. Who We Share Information With
We disclose personal information to the following categories of recipients. Vendors are named so you know exactly who receives data.
| Purpose | Providers |
|---|---|
| E-commerce platform, hosting, payments | Shopify, Shop Pay, Sezzle |
| Analytics and session recording | Microsoft Clarity, Hotjar, Google Analytics, Google Tag Manager, Mixpanel |
| Advertising, attribution, and affiliates | Meta (Facebook) Pixel, Google Ads, Microsoft Advertising, The Trade Desk, SiteScout, Klickly, Triple Whale, RevOffers, Impact.com |
| Email and SMS marketing | Klaviyo, OneText, SidePanda |
| Reviews and user-generated content | Okendo |
| Customer support and live chat | Re:amaze |
| Fraud prevention and security | NoFraud, Blockify |
| Site functionality | Navidium (shipping protection), Accessibly (accessibility), Replo, Synctrack, Bugsnag (error monitoring) |
We also disclose information:
- To professional advisors — lawyers, accountants, auditors
- In a business transfer — merger, acquisition, financing, or sale of assets
- For legal reasons — to comply with law, respond to lawful requests, enforce our terms, or
protect the rights, safety, or property of Pure Spectrum, our customers, or the public
- With your consent — where you direct us to
We do not disclose your personal information to third parties for their own independent marketing purposes without your consent.
6. Sale and Sharing of Personal Information
California law defines "sale" and "sharing" broadly. When our advertising and analytics partners receive online identifiers and browsing activity through cookies and pixels on our site, those disclosures may qualify as a sale or as sharing for cross-context behavioral advertising.
We treat them as such, and we disclose them here rather than rely on a narrow reading.
- Categories sold or shared: identifiers (cookie IDs, device identifiers, IP address), internet
or electronic network activity information (pages viewed, interactions), and commercial information (products viewed or purchased)
- Categories of recipients: advertising networks, demand-side platforms, attribution providers,
affiliate networks, and analytics providers — named in Section 5
- We do not sell or share the personal information of consumers we know to be under 16.
How to opt out
- Select Decline or turn off the Marketing category in our Cookie preferences banner
- Enable Global Privacy Control in your browser — we treat this as a valid opt-out
- Email support@purespectrumcbd.com with the subject "Do Not Sell or Share"
Opt-out choices are stored in your browser. If you clear cookies, use a different browser, or use a different device, you will need to opt out again.
7. How We Use Information
- Provide, operate, and maintain the Service
- Process orders, payments, subscriptions, shipping, and returns
- Create and manage your account
- Verify that you are 21 or older
- Provide customer support and respond to inquiries
- Send transactional messages (order confirmations, shipping notices)
- Send marketing emails and texts where you have opted in, and manage referral and loyalty programs
- Measure and improve site performance, diagnose technical problems, and understand how the site is
used — including through session recording
- Personalize content and product recommendations
- Deliver, measure, and attribute advertising
- Detect, investigate, and prevent fraud, abuse, and security incidents
- Comply with legal obligations and enforce our terms
8. Your Privacy Rights
8.1 California residents (CCPA/CPRA)
You have the right to:
- Know what personal information we collect, use, disclose, sell, and share, and to request a
copy in a portable format
- Delete personal information we have collected, subject to legal exceptions
- Correct inaccurate personal information
- Opt out of the sale and sharing of your personal information (Section 6)
- Limit the use and disclosure of sensitive personal information (Section 8.5)
- Non-discrimination — we will not deny service, charge different prices, or provide a different
quality of service because you exercised a privacy right
8.2 Other US state residents
If you live in Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, or another state with a comprehensive privacy law, you have comparable rights to access, correct, delete, and obtain a copy of your personal data, and to opt out of targeted advertising, sale, and certain profiling. Residents of some states may appeal a denied request by replying to our response. We will honor these rights regardless of your state of residence.
8.3 How to submit a request
- Email support@purespectrumcbd.com with the subject "Privacy Request"
- Write to: Pure Spectrum CBD, LLC, 30403 Kings Valley Dr., Suite 111, Conifer, CO 80433
We will verify your identity before responding, typically by confirming information already associated with your account or orders. We respond within 45 days and may extend once by a further 45 days with notice.
Authorized agents. You may use an authorized agent to submit a request. We will require written authorization from you and may ask you to verify your identity directly.
8.4 Marketing communications
Unsubscribe using the link in any marketing email, reply STOP to any marketing text, or email us. Transactional messages about your orders will continue.
8.5 Sensitive personal information
We do not use or disclose sensitive personal information for purposes that trigger the right to limit under the CCPA. If this changes, we will update this policy and provide a "Limit the Use of My Sensitive Personal Information" link.
9. Financial Incentives
We offer programs that provide a price or service difference in exchange for personal information — including Subscribe & Save, our referral program, our Heroes Discount, and email/SMS signup offers.
- What we collect: contact information and, for referrals, the contact information you provide
- How we calculate value: the value of your information is reasonably related to the value your
participation generates for us — measured by expected incremental order value net of the discount
- Terms: participation is voluntary, you may withdraw at any time by unsubscribing or contacting
us, and withdrawing ends the associated discount going forward
10. Data Retention
We keep personal information only as long as necessary for the purposes described here.
- Account information: for as long as your account is active
- Marketing contact data: until you unsubscribe, then suppression-list only
- Analytics and session recordings: per each provider's retention schedule
We may retain information longer where required by law or to resolve disputes.
11. Security
We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and vendor due diligence. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
12. Where Your Information Is Processed
We are based in the United States and process information here. Our service providers may process information in other countries. Where we transfer data internationally we use appropriate safeguards.
13. Age Restriction
Our products and this Service are intended only for individuals 21 years of age or older. We use an age verification prompt on entry. We do not knowingly collect personal information from anyone under 21, and we do not knowingly sell or share the personal information of anyone under 16. If you believe someone under 21 has provided us information, contact support@purespectrumcbd.com and we will delete it.
14. Third-Party Links
Our site may link to third-party websites and services. We are not responsible for their privacy practices. Review their policies before providing information.
15. Changes to This Policy
We may update this policy. We will post the revised version here with a new Effective Date, and for material changes we will provide additional notice — such as a banner on the site or an email to account holders. Your continued use after the Effective Date means you accept the updated policy.
16. Contact Us
Pure Spectrum CBD, LLC
30403 Kings Valley Dr., Suite 111
Conifer, CO 80433
support@purespectrumcbd.com
For privacy requests, use the subject line "Privacy Request."