Privacy policy
Last updated: July 2026
Who is responsible for your data
Wexford Botanical Group, LLC of 1140 Nixon Ridge Drive, Suite 210, Ann Arbor, MI 48105 operates buyphytomemone.com and decides how information collected here is used. Questions about any of it go to [email protected].
What we collect, and when
When you order. Name, delivery address, email address and telephone number. Payment is handled by our payment processor; full card numbers never reach our systems and we cannot see them.
When you write to us. Whatever you put in the email or say on the phone, kept with your order record so the next person you speak to does not make you start again.
When you browse. Standard server logs: IP address, browser type, pages requested, timestamps. These are retained for 30 days and used to keep the site working and to spot abuse.
Cookies
This store sets no advertising cookies and runs no third-party tracking pixel. The only cookies present are the ones required for the site and the checkout to function. Blocking cookies in your browser will not stop you reading anything here.
What we do with it
Fulfil and deliver orders. Answer support messages. Process refunds. Meet accounting and tax obligations. Detect fraud. Nothing else.
What we never do
We do not sell customer data, rent it, trade it or hand it to a marketing broker. We do not add you to a mailing list because you bought something; email marketing requires you to opt in and every message carries an unsubscribe link that works immediately.
Who else sees it
Only the parties needed to complete the job: the payment processor, the shipping carrier, the fulfilment warehouse and our accountant. Each receives the minimum required and is bound by contract to use it for nothing else.
How long we keep it
Order records for seven years, because tax law requires it. Support correspondence for three years. Server logs for 30 days. Anything else is deleted when it stops being needed.
Your rights
Write to [email protected] and you can ask for a copy of what we hold, ask for a correction, ask for deletion where no legal obligation requires us to keep it, or ask us to stop using it for marketing. We answer within 30 days. California residents have additional rights under the CCPA, including the right to know and the right to delete; the same address handles those requests.
Children
This store is not intended for anyone under 18 and we do not knowingly collect information from minors. If you believe a child has given us data, tell us and we will remove it.
Security
The site is served over TLS, administrative access is limited to named staff, and payment data is handled entirely by a PCI-compliant processor. No system is perfect; if a breach ever affects your data we will tell you and the relevant authorities without delay.
Changes
Material changes to this policy are published on this page with a new revision date at the top. Continuing to use the store after that date means the revised version applies.