This Privacy Policy describes how Archer Networks LLC, a Montana limited liability company doing business as Ivy Ham Herbalist and IvyHerbal ("Company," "we," "us," or "our"), collects, uses, shares, and protects information when you visit ivyherbal.com and its subdomains (the "Site"), purchase from our shop, subscribe to our newsletter, enroll in a course, book a consultation, or otherwise interact with us (collectively, the "Services"). It forms part of our Terms of Service.

By using the Services you agree to the practices described here. If you do not agree, do not use the Services.

1. Who We Are

Archer Networks LLC operates the Services from Missoula, Montana, United States. We are the data controller for personal information collected through the Services. Contact details are in Section 15.

This policy covers the Site and the Services listed above. It does not cover any third-party website linked from the Site.

2. Information We Collect

A. Information You Provide

Contact and identity information. Name, email address, telephone number, billing address, and shipping address, collected when you place an order, create an account, subscribe to the newsletter, book a consultation, enroll in a course, or contact us.

Account information. Username, password, and account preferences.

Order information. Products purchased, order history, gift card details, delivery instructions, and communications about your order.

Payment information. Payment card details, PayPal account details, and billing information. This information is collected and processed by our payment providers (Squarespace Payments, Stripe, and PayPal). We receive confirmation of payment, the last four digits of a card, and transaction records. We do not receive or store full card numbers.

Consultation information. When you book a consultation you may provide information about your health, medications, supplements, allergies, diet, pregnancy or lactation status, and health goals. After each session we send you a written summary by email; that summary is the only record we keep of the session. This is sensitive information and is collected only with your consent and only for the purpose of conducting the consultation. See Section 6.

Course information. Enrollment records, progress, completion status, and any questions or assignments you submit.

Communications. The content of emails, contact form submissions, reviews, comments, testimonials, and other messages you send us.

Newsletter preferences. Email address, subscription status, and engagement data such as opens and clicks.

B. Information Collected Automatically

When you visit the Site, our hosting provider and analytics tools automatically collect:

Device and connection data. IP address, browser type and version, operating system, device type, screen size, language settings, and time zone.

Usage data. Pages viewed, time on page, referring URL, search terms used on the Site, links clicked, products viewed, cart activity, and the date and time of each visit.

Cookie data. Identifiers stored by cookies and similar technologies, described in Section 4.

C. Information from Third Parties

We may receive information from payment providers (transaction confirmations and fraud signals), shipping carriers (delivery status), our email service provider (delivery and engagement data), and video platforms used for consultations (scheduling confirmations). We do not purchase personal information from data brokers.

3. How We Use Information

We use personal information to:

(a) process, fulfill, ship, and provide customer support for orders; (b) deliver digital products and course access; (c) schedule, conduct, and follow up on consultations; (d) send the newsletter, one to two times per month, to subscribers who have opted in; (e) send transactional messages such as order confirmations, shipping notices, booking confirmations, receipts, and account notices; (f) respond to questions, requests, and complaints; (g) detect, prevent, and investigate fraud, unauthorized access, and violations of our Terms of Service; (h) understand how the Site is used and improve its content, layout, and performance; (i) comply with legal obligations, including tax and accounting requirements; (j) establish, exercise, or defend legal claims; and (k) with your permission, publish reviews or testimonials.

Where the law of your location requires a legal basis for processing, we rely on performance of a contract (orders, courses, consultations), your consent (newsletter, consultation health information, non-essential cookies), our legitimate interests (site security, analytics, fraud prevention, improving the Services), and compliance with legal obligations.

We do not use personal information for automated decision-making that produces legal or similarly significant effects.

4. Cookies and Tracking Technologies

Cookies are small text files placed on your device. The Site uses the following categories:

Strictly necessary cookies. Set by Squarespace to operate the shopping cart, checkout, account login, and site security. These cannot be disabled without breaking core functions.

Analytics cookies. Used to measure traffic, page views, and visitor behavior in aggregate through Squarespace Analytics. Analytics data is used to understand which content and products visitors find useful.

Search performance tools. We use Google Search Console and Semrush to understand how the Site appears in search results. These tools receive aggregated search query data from Google and crawl the public pages of the Site. They do not place cookies on your device or receive information that identifies you personally.

Functional cookies. Remember preferences such as a dismissed announcement bar or newsletter popup.

Affiliate tracking. When you click an affiliate or referral link on the Site, the destination site (for example, Amazon or Heart and Soil) may set its own cookie to attribute a purchase to us. Those cookies are governed by the destination site's privacy policy.

We do not use third-party advertising cookies and do not serve targeted advertising on the Site.

You can control cookies through your browser settings, and most browsers allow you to block or delete them. The Site displays a cookie banner on your first visit where you may decline non-essential cookies.

5. How We Share Information

We do not sell personal information and do not share it for cross-context behavioral advertising. We share information only as follows:

Service providers. Companies that process information on our behalf to run the Services, including Squarespace (website hosting, e-commerce platform, newsletter delivery, and analytics), Stripe and PayPal (payment processing), shipping carriers and postage services (order delivery), the video conferencing platform used for consultations, the platform through which courses are delivered, and the email provider through which we send consultation summaries and correspondence. These providers may access personal information only to perform services for us and are bound by contractual confidentiality obligations.

Professional advisers. Accountants, attorneys, and insurers, where necessary for tax, legal, or insurance purposes.

Legal requirements. When required by law, subpoena, court order, or governmental request, or where disclosure is necessary to protect the rights, property, or safety of the Company, our customers, or the public, or to enforce our Terms of Service.

Business transfers. If the Company or substantially all of its assets are sold, merged, or transferred, personal information may be transferred to the successor, who will be bound by this policy until it is updated.

With your consent. For any other purpose you authorize, including published testimonials.

6. Consultation and Health Information

Information you share for a consultation is handled with additional care.

Purpose limitation. Health information is used only to prepare for and conduct your consultation, to write your session summary, to inform any follow-up session you book, and to respond to your questions. It is never used for marketing and is never shared with third parties except as required by law.

Session summaries. We do not keep separate consultation notes or a client file. After each session, Ivy Ham writes a summary of what was discussed and emails it to you. The sent email, held in the Company's password-protected email account, is the only record the Company retains of your session. You should keep your own copy.

HIPAA. The Company is not a healthcare provider, health plan, or healthcare clearinghouse and is not a covered entity under the Health Insurance Portability and Accountability Act. HIPAA protections do not apply to consultation information. We nevertheless treat that information as confidential under this policy.

Retention. Session summary emails are retained in the Company's email account until you ask us to delete them or until the Company closes that account, whichever comes first.

Your control. You may ask us at any time to review, correct, or delete your session summaries by emailing hello@ivyherbal.com.

7. Data Retention

We keep personal information for as long as it is needed for the purposes described in this policy, as long as your account or subscription remains active, and as long as required by law.

Order and payment records are retained on our e-commerce platform for at least 7 years to satisfy tax and accounting obligations. Account information is retained while your account is active. Newsletter subscription data is retained until you unsubscribe, after which your address is kept on a suppression list so that you are not re-added. Course enrollment records are retained while your course access remains active. Consultation summaries are retained as described in Section 6. Analytics data is retained by our hosting platform according to that platform's own retention practices, which we do not control.

We do not delete records on a fixed schedule. Information is removed when you ask us to delete it, when it is no longer needed, or when the platform that holds it deletes it under its own policies, whichever comes first. Deletion requests are handled as described in Section 9.

8. Data Security

We use reasonable administrative, technical, and physical safeguards to protect personal information, including TLS encryption on the Site, password-protected accounts with access restricted to the sole operator of the business, and reliance on payment providers that are PCI DSS compliant so that card data never touches our systems.

No method of transmission or storage is completely secure. We cannot guarantee absolute security and are not liable for unauthorized access resulting from circumstances beyond our reasonable control. If we become aware of a breach affecting your personal information, we will notify you and any applicable regulator as required by law.

9. Your Rights and Choices

Depending on where you live, you may have the right to:

(a) know what personal information we hold about you and receive a copy; (b) correct inaccurate or incomplete information; (c) delete your personal information, subject to legal retention obligations; (d) restrict or object to certain processing; (e) receive your information in a portable format; (f) withdraw consent where processing is based on consent, without affecting processing that occurred before withdrawal; (g) opt out of marketing communications; (h) opt out of any sale or sharing of personal information (we do not sell or share personal information for advertising, so no opt-out is required); and (i) not be discriminated against for exercising these rights.

To exercise any right, email hello@ivyherbal.com with the subject line "Privacy Request." We may ask you to verify your identity before acting. We will respond within 45 days, and may extend that period once by a further 45 days where permitted by law, with notice to you. If we decline a request, you may appeal by replying to our response, and we will reply to the appeal within 45 days.

Newsletter. Unsubscribe using the link at the bottom of any newsletter or by emailing us. Transactional emails related to orders, bookings, and accounts will continue.

Cookies. See Section 4.

Accounts. You may update or delete account information by logging in or contacting us.

Residents of Montana, California, and Other U.S. States

The Montana Consumer Data Privacy Act, the California Consumer Privacy Act as amended, and comparable laws in other states give residents the rights listed above where those laws apply. We do not sell personal information, do not process it for targeted advertising, and do not engage in profiling that produces legal or similarly significant effects. California residents may designate an authorized agent to submit requests on their behalf. We have not sold or shared personal information in the preceding 12 months.

Residents of the European Economic Area, United Kingdom, and Switzerland

You have the rights listed above under the General Data Protection Regulation and UK GDPR. You also have the right to lodge a complaint with your local supervisory authority. Our legal bases for processing are described in Section 3. We do not have a representative in the EEA or UK.

10. International Data Transfers

The Services are operated from the United States, and information is stored and processed on servers in the United States operated by Squarespace and our other providers. If you access the Services from outside the United States, you consent to the transfer of your information to the United States, which may not provide the same level of data protection as your home jurisdiction. Where required, we rely on standard contractual clauses or equivalent safeguards provided by our service providers.

11. Children's Privacy

The Services are directed to adults. We do not knowingly collect personal information from children under 13, and we do not sell to or consult with anyone under 18. If you believe a child under 13 has provided us with personal information, contact hello@ivyherbal.com and we will delete it.

12. Third-Party Websites and Links

The Site links to third-party websites, including suppliers, research repositories, affiliate merchants, and social media platforms. We do not control those sites and are not responsible for their privacy practices. Review the privacy policy of any site you visit from a link on the Site. Affiliate and referral links are identified in accordance with our Terms of Service.

13. Do Not Track

Some browsers send Do Not Track signals. There is no industry standard for responding to them, and the Site does not change its behavior in response to a Do Not Track or Global Privacy Control signal. Use the cookie banner or your browser settings to limit cookies as described in Section 4.

14. Changes to This Policy

We may update this policy to reflect changes in our practices, technology, or legal requirements. The updated version will be posted on this page with a revised Last Updated date. For material changes we will provide notice on the Site or by email to subscribers at least 14 days before the change takes effect. Continued use of the Services after that date constitutes acceptance of the updated policy.

15. Contact

Questions, requests, or complaints about this policy or our handling of personal information may be sent to:

Ivy Ham
400 W Broadway St, Ste 101-317
Missoula, MT 59802, USA
Email: hello@ivyherbal.com