Privacy policy

Last Updated: May 29, 2026

Healthwest Minerals, Inc. dba Mt. Capra Products ("Mt. Capra") operates this store and website, including all related information, content, features, tools, products, and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). Mt. Capra is the data controller responsible for processing the personal information described in this policy. Mt. Capra is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.

Privacy Summary

• We collect information necessary to process your orders, manage your account, and improve our store.
• We use trusted service providers like Shopify, Klaviyo, and Google to operate our business.
• We don't sell your personal data for money, but we do share certain data with advertising and identity resolution partners. You can opt out at any time.
• You have rights to request access, correction, or deletion of your data at any time.
• Residents of certain U.S. states may opt out of data sharing for targeted advertising, identity resolution, or similar marketing uses.
  
  

Table of Contents

1. Personal Information We Collect or Process
2. Personal Information Sources
3. How We Use Your Personal Information
4. How We Disclose Personal Information
5. Our Technology Partners
6. Cookies and Tracking Technologies
7. SMS and Text Message Marketing
8. Email Marketing
9. Loyalty Program (CapraPoints)
10. California Notice of Financial Incentive (CapraPoints Loyalty Program)
11. Subscription Orders
12. Affiliate and Referral Program
13. Relationship with Shopify
14. Third-Party Websites and Links
15. Children's Data
16. Security and Retention of Your Information
17. Your Rights and Choices
18. California Privacy Rights (CCPA/CPRA)
19. Additional U.S. State Privacy Rights
20. Nevada Privacy Rights
21. Complaints
22. International Transfers
23. Changes to This Privacy Policy
24. Contact Us
    

1. Personal Information We Collect or Process

When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been de-identified so that it cannot identify or be reasonably linked to you. We may collect or process the following categories of personal information, including inferences drawn from this personal information, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:

Contact details including your name, address, billing address, shipping address, phone number, and email address.

Financial information including transaction details, form of payment, payment confirmation, and other payment details. Payment card data (such as credit card or debit card numbers) is processed directly by our payment processors (Shopify Payments, Shop Pay, PayPal, Apple Pay, Google Pay) and is not stored on our servers.

Account information including your username, password, security questions, preferences, and settings.

Transaction information including the items you view, put in your cart, add to your wishlist, or purchase, return, exchange, or cancel, and your past transactions.

Communications with us including the information you include in communications with us, for example, when sending a customer support inquiry via email, phone, or our live chat feature.

Device information including information about your device, browser, or network connection, your IP address, and other unique identifiers.

Usage information including information regarding your interaction with the Services, including how and when you interact with or navigate the Services, pages viewed, links clicked, and referring URLs.

Marketing preferences including your opt-in or opt-out status for email marketing, SMS/text message marketing, and other promotional communications.

Loyalty program information including your CapraPoints balance, reward history, referral activity, and participation in promotional offers.

Subscription information including your subscription product selections, billing frequency, order history, and subscription management preferences.

Review and feedback information including product reviews, ratings, and comments you submit through our review platform.

Back-in-stock and wishlist information including products you have requested restock notifications for and items saved to your wishlist.

Visitor identification data including email addresses and related identifiers provided to us by third-party identity resolution services that recognize site visitors based on information, permissions, or opt-in signals maintained by those services and their publisher partner networks.

2. Personal Information Sources

We may collect personal information from the following sources:

Directly from you including when you create an account, visit or use the Services, place an order, subscribe to a product, join our loyalty program, sign up for SMS or email marketing, submit a product review, communicate with us, or otherwise provide us with your personal information.

Automatically through the Services including from your device when you use our products or services or visit our website, and through the use of cookies, pixels, web beacons, and similar tracking technologies as described in Section 6 below.

From our service providers including when we engage them to enable certain technology and when they collect or process your personal information on our behalf, such as our email and SMS marketing platform, payment processors, and shipping providers.

From our marketing and advertising partners including through advertising networks such as Meta (Facebook/Instagram) that may share information about your interactions with our advertisements on their platforms.

From identity resolution providers including OpenSend, which identifies certain anonymous website visitors and provides us with their email address and basic identifiers, based on information, permissions, or opt-in signals maintained by OpenSend and its publisher partner network.

From our affiliate partners including when a customer is referred to our store through our affiliate program, in which case our affiliate tracking provider may share referral data with us.

From our partners or other third parties as permitted by applicable law.

3. How We Use Your Personal Information

Depending on how you interact with us or which of the Services you use, we may use personal information for the following purposes:

Provide, Tailor, and Improve the Services. We use your personal information to provide you with the Services, including to perform our contract with you, to process your payments, to fulfill your orders, to remember your preferences and items you are interested in, to send notifications to you related to your account, to process purchases, returns, exchanges, or other transactions, to create, maintain, and otherwise manage your account, to arrange for shipping, to facilitate any returns and exchanges, to enable you to post reviews, to manage your subscription orders, and to create a customized shopping experience for you, such as recommending products related to your purchases. This may include using your personal information to better tailor and improve the Services.

Marketing and Advertising. We use your personal information for marketing and promotional purposes, such as to send marketing, advertising, and promotional communications by email, text message, or postal mail, and to show you online advertisements for products or services on the Services or other websites, including based on items you previously have purchased or added to your cart and other activity on the Services. This includes the use of abandoned cart reminders delivered via email and, where you have opted in, via SMS. This may also include sending promotional emails to visitors whose email addresses are provided to us by third-party identity resolution services such as OpenSend, based on information, permissions, or opt-in signals maintained by OpenSend and its publisher partner network. Recipients of any such email may unsubscribe at any time using the link in the email.

Security and Fraud Prevention. We use your personal information to authenticate your account, to provide a secure payment and shopping experience, detect, investigate, or take action regarding possible fraudulent, illegal, unsafe, or malicious activity, protect public safety, and to secure our services. If you choose to use the Services and register an account, you are responsible for keeping your account credentials safe. We highly recommend that you do not share your username, password, or other access details with anyone else.

Communicating with You. We use your personal information to provide you with customer support, to be responsive to you, to provide effective services to you, and to maintain our business relationship with you. This includes responding to inquiries submitted through our live chat feature powered by Shopify Inbox.

Loyalty and Rewards. We use your personal information to administer the CapraPoints loyalty program, including to track your points balance, process reward redemptions, and communicate program updates to you. Additional disclosures regarding the CapraPoints program are provided in Sections 9 and 10 below.

Back-in-Stock and Wishlist Notifications. We use your email address or phone number to notify you when a product you have requested a restock alert for becomes available.

Analytics and Service Improvement. We use aggregated and de-identified data, as well as analytics tools such as Google Analytics 4, to understand how customers use our Services, identify trends, and improve our website and product offerings.

Legal Reasons. We use your personal information to comply with applicable law or respond to valid legal process, including requests from law enforcement or government agencies, to investigate or participate in civil discovery, potential or actual litigation, or other adversarial legal proceedings, and to enforce or investigate potential violations of our terms or policies.

Legal Bases for Processing (GDPR). For individuals located in the European Economic Area (EEA) or the United Kingdom (UK), we process your personal data based on the following legal bases:

• Contractual necessity: To fulfill your orders and provide the Services you request.

• Legitimate interests: To improve our Services, prevent fraud, and conduct analytics.

• Consent: To send you SMS and email marketing communications, and to place non-essential cookies.

• Legal obligation: To comply with tax, accounting, and other regulatory requirements.

Business-to-Business (B2B) and Wholesale Customers. Mt. Capra serves wholesale and institutional customers in addition to retail consumers. For B2B and wholesale accounts, we collect and process business contact information (including the name, email address, phone number, and mailing address of account representatives), order history, and invoicing information in order to manage the wholesale relationship, process orders, and fulfill our contractual obligations. This data is processed through our inventory and order management system (Cin7 Core, formerly DEAR Inventory). While we may send wholesale-specific communications (such as new product announcements or catalog updates) to our B2B customers, wholesale account data is kept separate from our retail consumer marketing lists.

4. How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy. Such circumstances may include:

With Shopify and Shopify-affiliated services, including for payment processing, order fulfillment, fraud prevention, analytics, and to enable Shopify's enhanced features such as Shopify Network Intelligence. For more information on how Shopify uses your data, please see Section 13 (Relationship with Shopify) below.

With vendors and other third parties who perform services on our behalf, including IT management, payment processing, data analytics, customer support, cloud storage, fulfillment, shipping, inventory management, and marketing automation. A full list of our key service providers is provided in Section 5 below.

With business and marketing partners to provide marketing services and advertise to you. For example, we use Shopify to support personalized advertising with third-party services based on your online activity with different merchants and websites. Our business and marketing partners will use your information in accordance with their own privacy notices. Depending on where you reside, you may have a right to direct us not to share information about you to show you targeted advertisements and marketing based on your online activity with different merchants and websites. You can exercise your rights to opt-out of those uses here.

With Meta Platforms (Facebook/Instagram) through the Meta Pixel installed on our website, which may receive information about your browsing and purchase activity on our store for the purpose of measuring ad performance and delivering targeted advertising on Meta's platforms. Under applicable state privacy laws, this arrangement may constitute "sharing" of personal information for cross-context behavioral advertising or "processing for targeted advertising."

With Google through Google Analytics 4 and Google Ads, which receive information about your browsing and conversion activity on our website for analytics and advertising purposes. Under applicable state privacy laws, this arrangement may constitute "sharing" of personal information for cross-context behavioral advertising or "processing for targeted advertising."

With OpenSend, our identity resolution provider, which receives information about your visit to our website (including IP address, page activity, and device data) for the purpose of matching anonymous visitors to email addresses in OpenSend's publisher partner database, and which may send marketing emails to identified visitors on our behalf. Under applicable state privacy laws, this arrangement may constitute "sharing" of personal information or identity-resolution processing.

With our affiliate network through Refersion, which may receive information about purchases made by customers who were referred through our affiliate program in order to calculate and pay affiliate commissions.

When you direct, request, or otherwise consent to our disclosure of certain information to third parties, such as to ship you products or through your use of social media widgets or login integrations.

With our affiliates or otherwise within our corporate group.

In connection with a business transaction such as a merger or bankruptcy, to comply with any applicable legal obligations (including to respond to subpoenas, search warrants, and similar requests), to enforce any applicable terms of service or policies, and to protect or defend the Services, our rights, and the rights of our users or others.

We do not sell your personal information to third parties for monetary compensation. However, certain disclosures described above — including with Meta, Google, and OpenSend — may constitute "sharing" of personal information under applicable state privacy laws. Where required by applicable law, you may opt out of the sale of personal data, sharing for cross-context behavioral advertising, processing for targeted advertising, and identity-resolution matching by visiting our Data Sharing Opt-Out page or by enabling the Global Privacy Control (GPC) signal in your browser.

5. Our Technology Partners

Mt. Capra works with third-party applications and service providers to operate our store. Each provider processes certain personal information as described below. We encourage you to review the privacy policies of these providers for more information on their data practices.

For clarity, we have organized our partners into two categories that reflect how state privacy laws treat different vendor relationships:

• Service Providers are contractually limited to processing your data on Mt. Capra's behalf and may not use it for their own independent commercial purposes.

• Sharing Partners receive data that may also be used for cross-context behavioral advertising, audience targeting, or identity resolution beyond Mt. Capra's direct purposes. Residents of certain states may opt out of this sharing at any time.

Service Providers

Sharing Partners

The following partners receive information about your interactions with our Services that may be used for cross-context behavioral advertising, audience targeting, or visitor identification beyond Mt. Capra's direct purposes. Under applicable state privacy laws, these arrangements may constitute "sharing" of personal information. You may opt out at any time by visiting our Data Sharing Opt-Out page or by enabling the Global Privacy Control (GPC) signal in your browser.

 

6. Cookies and Tracking Technologies

Our website uses a variety of technical methods for tracking purposes, including third-party JavaScript snippets, pixel tags, and web browser cookies. We also use third-party services to send promotional emails to visitors to our website who may be interested in our products and services.

We use cookies, pixels, web beacons, and similar tracking technologies to operate our Services, understand how you use our website, and deliver relevant advertising to you. This section describes the types of tracking technologies we use and how you can manage your preferences.

What Are Cookies?

Cookies are small text files placed on your device by a website you visit. They allow the website to remember information about your visit, such as your preferred language, items in your cart, and whether you are logged in. Depending on your location and applicable privacy laws, you may be presented with a cookie consent banner allowing you to accept or manage non-essential cookies when you visit our website.

Cookies We Use

Shopify Platform Cookies (Essential)

These cookies are necessary for the store to function and cannot be disabled.

Klaviyo Cookies (Marketing/Analytics)

Klaviyo places cookies to track your browsing behavior on our site, identify you as a subscriber, and enable personalized email and SMS communications including abandoned cart recovery.

Meta Pixel (Sharing Partner)

The Meta Pixel places cookies to track your activity on our website and report conversion events (such as purchases and add-to-cart actions) to Meta Platforms. This data is used to measure the effectiveness of our Facebook and Instagram advertising and to show you relevant ads on those platforms.

Google Analytics 4 and Google Ads (Sharing Partner)

Google Analytics 4 and Google Ads use cookies to collect information about how visitors use our website. We use this information to compile reports, improve our site, and measure the effectiveness of our advertising campaigns. Google may also use this data to support advertising features such as remarketing.

OpenSend (Sharing Partner — Visitor Identification)

OpenSend uses a JavaScript pixel and cookies to identify website visitors whose email addresses are present in OpenSend's publisher partner network. If a match is found, OpenSend may share the matched email address with us and may also send marketing emails to identified visitors on our behalf. You may opt out of OpenSend's identity resolution by visiting our Data Sharing Opt-Out page or by enabling the Global Privacy Control (GPC) signal in your browser.

Judge.me (Functional)

Judge.me uses cookies to support the display of product reviews and to verify review submissions.

Refersion (Marketing)

Refersion places a tracking cookie when a visitor arrives at our store through an affiliate link. This cookie is used to attribute purchases to the correct affiliate partner.

OptiMonk (Marketing/Functional)

OptiMonk uses cookies to track whether you have already seen a particular popup or overlay and to personalize the offers shown to you.

Do Not Track Signals

Some web browsers have a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activity tracked. At this time, our website does not respond to DNT browser signals. We do, however, honor the Global Privacy Control (GPC) signal as a valid opt-out request, as described in the Managing Your Cookie Preferences section below.

Managing Your Cookie Preferences

You may manage your cookie preferences in the following ways:

• Browser settings: Most web browsers allow you to refuse or delete cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of our store, including your ability to add items to your cart or complete checkout.

• Opt-out of targeted advertising and identity resolution: You may opt out of cross-context behavioral advertising and visitor identification (including Meta, Google, and OpenSend) by visiting our Data Sharing Opt-Out page or by enabling the Global Privacy Control (GPC) signal in your browser. We honor GPC signals as a valid opt-out request in jurisdictions where required by law.

• Google Analytics opt-out: You may opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

• Meta ad preferences: You may manage your Meta advertising preferences at facebook.com/ads/preferences.

7. SMS and Text Message Marketing

Mt. Capra offers an SMS marketing program powered by Klaviyo. By opting in to our SMS program, you agree to receive recurring automated marketing text messages (including abandoned cart reminders and promotional offers) from Mt. Capra at the phone number you provide. Messages will be sent from +1 (844) 559-0893. You may opt in to our SMS program at checkout, through a signup form on our website, or through an on-site popup. Consent to receive marketing text messages is not a condition of purchase.

Message Frequency

Message frequency varies. You may receive up to 12 messages per month depending on your activity and our promotional calendar.

Message and Data Rates

Standard message and data rates may apply depending on your mobile carrier and plan.

How to Opt Out

You may opt out of SMS marketing at any time by replying STOP to any text message you receive from us. After texting STOP, you will receive a one-time confirmation message and will no longer receive marketing texts from Mt. Capra. You may re-enroll at any time by texting START or by signing up again on our website.

Help

For help, reply HELP to any text message or contact us at orders@mtcapra.com. You can also text us questions or feedback directly at any time. Our team monitors incoming messages and will respond as soon as possible. Standard message and data rates may apply to messages you send us.

Carriers

Mt. Capra's SMS program is available on all major US carriers. Carriers are not liable for delayed or undelivered messages.

Data Sharing

We do not sell, rent, or share your SMS opt-in information or phone number with third parties for their own marketing purposes. Your phone number is used solely to send you messages from Mt. Capra through our SMS service provider, Klaviyo, which processes your data in accordance with its Privacy Notice.

Abandoned Cart SMS

Mt. Capra's website uses cookies to help keep track of items you put into your shopping cart, including when you have abandoned your cart. This information is used to determine when to send cart reminder messages via SMS. If you have opted in to SMS marketing and you leave items in your cart without completing checkout, we may send you a text message reminder about your cart. You may opt out of these messages at any time by replying STOP.

8. Email Marketing

We may send you promotional emails about our products, offers, and news. You may opt out of receiving marketing emails at any time by clicking the "Unsubscribe" link in any email we send you or by contacting us at orders@mtcapra.com. If you opt out of marketing emails, we may still send you transactional emails related to your orders, account, or subscription.

Our email marketing is powered by Klaviyo, which may track whether you open our emails and click links within them. This information is used to improve our email communications and personalize the content we send you.

Visitor Identification Emails. Some marketing emails you receive from Mt. Capra may be sent to you because your email address was identified to us by a third-party identity resolution service (OpenSend) based on information, permissions, or opt-in signals maintained by that service's publisher partner network. You may unsubscribe from these emails at any time using the unsubscribe link in any email or by contacting us at orders@mtcapra.com. To opt out of OpenSend's identity resolution entirely so that your visits to our website are not matched in the future, visit our Data Sharing Opt-Out page or enable the Global Privacy Control (GPC) signal in your browser.

9. Loyalty Program (CapraPoints)

Mt. Capra operates the CapraPoints loyalty rewards program (the "Program"), powered by Appstle Loyalty. When you participate in the CapraPoints program, we collect and process information about your purchases, reward redemptions, referral activity, and program engagement in order to administer the program and communicate your points balance and available rewards to you. This information may be shared with Appstle Loyalty as our service provider. Your participation in the CapraPoints program is voluntary, and you may request deletion of your loyalty account data by contacting us at orders@mtcapra.com.

For California residents, additional disclosures regarding the CapraPoints program — including its status as a "financial incentive" under the California Consumer Privacy Act — are provided in Section 10 (California Notice of Financial Incentive) below.

10. California Notice of Financial Incentive (CapraPoints Loyalty Program)

This section provides the notice required by the California Consumer Privacy Act (CCPA/CPRA) for financial incentive programs. Mt. Capra's CapraPoints loyalty rewards program (the "Program") may constitute a "financial incentive" under California law because it offers benefits in connection with the collection, retention, sale, or sharing of personal information.

Summary of the Financial Incentive

The Program allows you to earn points for qualifying activities — including purchases, account creation, birthday recognition, product reviews, referrals, and certain social engagement — that may be redeemed for discounts, free products, or other rewards as described in the Program's published terms.

Material Terms of the Program

• Earning points: Points are earned at rates and for activities described in the Program's published terms, which may be updated from time to time.

• Redeeming rewards: Points may be redeemed for discounts, free products, or other rewards in accordance with the Program's published terms. Reward availability may vary.

• Program modifications: Mt. Capra reserves the right to modify or discontinue the Program at any time, with reasonable notice as required by law.

• Expiration: Unused points may expire after a period of inactivity as described in the Program terms.

Categories of Personal Information Implicated by the Program

Participation in the CapraPoints Program involves the processing of the following categories of personal information:

• Identifiers (name, email address, customer account ID)

• Commercial information (purchase history, redemption activity, referral activity)

• Internet or electronic network activity (interactions with our website, emails, and Program interface)

• Inferences drawn from your purchase history regarding product preferences and engagement

How to Opt In

You may opt in to the CapraPoints Program by creating a customer account at mtcapra.com and enrolling through your account dashboard, or by signing up through our website's loyalty program page. By enrolling, you affirmatively agree to participate in the Program and to the collection and processing of your personal information for Program purposes as described in this Privacy Policy.

How to Withdraw

You may withdraw from the CapraPoints Program at any time by:

• Contacting us at orders@mtcapra.com and requesting Program cancellation, or

• Following the opt-out instructions in your account dashboard

Upon withdrawal, you may forfeit any unredeemed points, subject to applicable law. Withdrawal from the Program does not affect your other rights under this Privacy Policy or applicable state privacy laws.

Why the Financial Incentive Is Permitted

Mt. Capra has determined in good faith that the Program is reasonably related to the value of your personal information to Mt. Capra. The Program is designed to reward existing customers, build long-term customer relationships, and reduce customer acquisition costs. The financial value of the discounts and rewards provided to Program members is reasonably commensurate with the marketing, retention, and engagement value Mt. Capra derives from Program participation.

Good-Faith Estimate of Value and Calculation Method

Mt. Capra has determined in good faith that the value of personal information processed under the CapraPoints Program is approximately equal to the value of the rewards and benefits provided to participating members. Reward value varies by member based on participation level, redemption frequency, and length of engagement.

Mt. Capra calculates the value of personal information under the Program as follows: CapraPoints redemption data is sourced from the Appstle Loyalty app dashboard for a representative 12-month period. Redemptions are identified as discount codes bearing the "AL_" prefix, which are programmatically generated by Appstle Loyalty at the time of point redemption and are distinct from promotional, affiliate, and manually applied discount codes used in the same period. Total redemption value represents the sum of fixed-dollar discounts applied at checkout via CapraPoints redemption codes. Unique redeeming members represent distinct customer accounts with at least one qualifying redemption during the period. The good-faith value figure is calculated as total redemption value divided by unique redeeming members.

California residents may request additional information about Mt. Capra's value calculation, including current figures, by contacting us at orders@mtcapra.com.

Non-Discrimination

Mt. Capra does not discriminate against consumers for exercising their privacy rights under the CCPA/CPRA or any other applicable privacy law. Any differences in price, level, or quality of goods or services that result from a consumer's voluntary participation in the CapraPoints Program are reasonably related to the value provided to Mt. Capra by the consumer's personal information, as described above.

11. Subscription Orders

Mt. Capra offers recurring subscription orders for select products, powered by Appstle Subscriptions. When you enroll in a subscription, we collect and store your payment information, shipping address, and subscription preferences in order to process your recurring orders. You may manage, pause, or cancel your subscription at any time through your account portal or by contacting us at orders@mtcapra.com. Your subscription data is processed by Appstle Subscriptions in accordance with their Privacy Policy.

12. Affiliate and Referral Program

Mt. Capra operates an affiliate and referral program powered by Refersion. If you participate in our affiliate program, Refersion will collect information about your referral activity, including the customers you refer and the commissions you earn. Refersion may place a tracking cookie on the browsers of customers who arrive at our store through your affiliate link. This data is used solely to calculate and pay affiliate commissions and is processed in accordance with Refersion's Privacy Policy.

13. Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for you. Information you submit to the Services will be transmitted to and shared with Shopify as well as third parties that may be located in countries other than where you reside, in order to provide and improve the Services for you.

In addition, to help protect, grow, and improve our business, we use certain Shopify enhanced features that incorporate data and information obtained from your interactions with our store, along with other merchants and with Shopify. Shopify Network Intelligence is enabled on our store, which means Shopify may use anonymized, aggregated data from interactions across its merchant network to improve features such as Shopify Audiences, Shop Channel, Shopify Email, Shopify Collabs, and Shopify Search and Discovery. To provide these enhanced features, Shopify may make use of personal information collected about your interactions with our store, along with other merchants, and with Shopify. In these circumstances, Shopify is responsible for the processing of your personal information, including for responding to your requests to exercise your rights over use of your personal information for these purposes.

To learn more about how Shopify uses your personal information and any rights you may have, you can visit the Shopify Consumer Privacy Policy. Depending on where you live, you may exercise certain rights with respect to your personal information, including rights related to data processed through Shopify Network Intelligence, at the Shopify Privacy Portal.

14. Third-Party Websites and Links

The Services may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites. Information you provide on public or semi-public venues, including information you share on third-party social networking platforms, may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use by us or by a third party. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Services.

15. Children's Data

The Services are not intended to be used by children, and we do not knowingly collect any personal information about children under 13 in the United States (in accordance with COPPA) or under 16 in certain other jurisdictions (in accordance with GDPR). If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the contact details set out below to request that it be deleted. As of the effective date of this Privacy Policy, we do not have actual knowledge that we "share" or "sell" (as those terms are defined in applicable law) personal information of individuals under 16 years of age.

16. Security and Retention of Your Information

Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee "perfect security." In addition, any information you send to us may not be secure while in transit. We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us.

How long we retain your personal information depends on different factors, such as whether we need the information to maintain your account, to provide you with Services, comply with legal obligations, resolve disputes, or enforce other applicable contracts and policies. In general:

• Order and transaction records are retained for a minimum of seven (7) years to comply with tax and accounting obligations.

• Account information is retained for as long as your account remains active. If you request deletion of your account, we will delete or anonymize your personal information within a reasonable timeframe, subject to legal retention requirements.

• Marketing data (email and SMS opt-in records) are retained for as long as you remain subscribed, plus a reasonable period thereafter to document consent history as required by applicable law. SMS opt-in records, including the date, time, and method of consent, are retained for a minimum of four (4) years in accordance with TCPA requirements.

• Analytics data collected through Google Analytics is retained for up to 14 months in accordance with our configured retention settings.

17. Your Rights and Choices

Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. However, these rights are not absolute, may apply only in certain circumstances, and in certain cases, we may decline your request as permitted by law.

Right to Access / Know. You may have a right to request access to personal information that we hold about you, including the categories of personal information collected, the purposes for which it is used, and the third parties with whom it is shared.

Right to Delete. You may have a right to request that we delete personal information we maintain about you, subject to certain exceptions.

Right to Correct. You may have a right to request that we correct inaccurate personal information we maintain about you.

Right of Portability. You may have a right to receive a copy of the personal information we hold about you and to request that we transfer it to a third party, in certain circumstances and with certain exceptions.

Right to Opt Out of Sale, Sharing, Targeted Advertising, and Identity Resolution. Where required by applicable law, you may opt out of (1) the sale of personal data, (2) sharing of personal data for cross-context behavioral advertising, (3) processing of personal data for targeted advertising, and (4) identity-resolution matching. You can exercise these rights by visiting our Data Sharing Opt-Out page. If you visit our website with the Global Privacy Control (GPC) opt-out preference signal enabled, we will automatically treat this as a request to opt out for the device and browser you use to visit the website, in jurisdictions where required by law. To learn more about GPC, visit globalprivacycontrol.org.

Right to Opt Out of Profiling. Some state privacy laws give consumers the right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects (such as decisions regarding credit, employment, housing, insurance, or essential goods and services). Mt. Capra does not engage in profiling that produces legal or similarly significant effects within the meaning of these laws. Our use of personal information for marketing personalization, product recommendations, and customer segmentation does not produce such effects.

Managing Communication Preferences. We may send you promotional emails, and you may opt out of receiving these at any time by using the unsubscribe option displayed in our emails to you. You may opt out of SMS marketing at any time by replying STOP to any text message from us. If you opt out of marketing communications, we may still send you non-promotional messages, such as those about your account, orders, or subscription.

Notice at Collection

Mt. Capra provides notice of its personal information practices at or before the point of collection through this Privacy Policy, which is linked from the footer of our website and is referenced at relevant collection points, including account creation, checkout, email signup, SMS signup, loyalty enrollment, subscription enrollment, product reviews, and back-in-stock notification signup.

How to Submit a Privacy Request

You may exercise any of the rights described above by:

• Emailing us at orders@mtcapra.com

• Visiting our Data Sharing Opt-Out page

• Writing to us at the address listed in Section 24 (Contact Us) below

To learn more about how Shopify uses your personal information and any rights you may have, including rights related to data processed by Shopify, you can visit https://privacy.shopify.com/en.

Appealing a Privacy Rights Decision

If we decline to act on your privacy request, you may appeal our decision by emailing us at orders@mtcapra.com with the subject line "Privacy Request Appeal." Please include the date of your original request and the reason you believe our decision should be reconsidered. We will review and respond to your appeal within the time required by applicable law. If your appeal is denied, we will provide information about how to contact the appropriate state regulator where required.

Verification and Authorized Agents

We will not discriminate against you for exercising any of these rights. We may need to verify your identity before we can process your requests, as permitted or required under applicable law. In accordance with applicable laws, you may designate an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof you have authorized them to act on your behalf, and we may need you to verify your identity directly with us. We will respond to your request in a timely manner as required under applicable law.

18. California Privacy Rights (CCPA/CPRA)

This section applies to residents of California and supplements the information provided elsewhere in this Privacy Policy.

Your California Privacy Rights

Under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and the California Online Privacy Protection Act (CalOPPA), California residents have the following rights:

• Right to Know: The right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which it was collected, the business or commercial purpose for collecting it, and the categories of third parties with whom we share it.

• Right to Delete: The right to request deletion of personal information we have collected from you, subject to certain exceptions.

• Right to Correct: The right to request correction of inaccurate personal information we maintain about you.

• Right to Opt Out of Sale or Sharing: The right to opt out of the "sale" or "sharing" of your personal information for cross-context behavioral advertising or visitor identification. To exercise this right, visit our Data Sharing Opt-Out page.

• Right to Limit Use of Sensitive Personal Information: The right to limit our use and disclosure of sensitive personal information to only what is necessary to perform the Services.

• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

Categories of Personal Information Collected

In the preceding twelve (12) months, we have collected the following categories of personal information from California consumers:

Do Not Sell or Share My Personal Information

Mt. Capra does not "sell" personal information for monetary compensation. However, we do "share" personal information with advertising and identity resolution partners — including Meta Platforms, Google, and OpenSend — for purposes that include cross-context behavioral advertising and anonymous visitor identification. Under California law, these arrangements constitute "sharing" of personal information.

You may opt out of this sharing at any time by:

• Visiting our Data Sharing Opt-Out page

• Enabling the Global Privacy Control (GPC) signal in your browser

• Contacting us directly at orders@mtcapra.com

We do not sell or share SMS opt-in data or the phone numbers of SMS subscribers with any third party for their own marketing purposes.

Financial Incentive Notice

Mt. Capra's CapraPoints loyalty program may constitute a "financial incentive" under California law. The required Notice of Financial Incentive is provided in Section 10 above.

How to Submit a California Privacy Request

To exercise your California privacy rights, please contact us at:

• Email: orders@mtcapra.com

• Mailing Address: Mt. Capra, 279 SW 9th St, Chehalis, WA 98532

We will verify your identity before processing your request and will respond within 45 days, with an extension of up to an additional 45 days if necessary.

19. Additional U.S. State Privacy Rights

Residents of certain U.S. states — including but not limited to Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Tennessee, Indiana, Delaware, New Jersey, New Hampshire, Minnesota, and Maryland — may have additional privacy rights under applicable state privacy laws. Depending on your state of residence, these rights may include:

• The right to confirm whether we process personal information about you and to access that information

• The right to correct inaccurate personal information we maintain about you

• The right to request deletion of personal information we have collected from you

• The right to obtain a portable copy of your personal information

• The right to opt out of the sale of personal information

• The right to opt out of targeted advertising

• The right to opt out of sharing for cross-context behavioral advertising

• The right to opt out of identity-resolution matching

• The right to opt out of profiling in furtherance of decisions producing legal or similarly significant effects

• The right to limit the use of sensitive personal information

• The right to appeal a decision we make regarding your privacy request

• The right to non-discrimination for exercising your privacy rights

Universal Opt-Out Signals

Mt. Capra honors legally recognized universal opt-out preference signals, including Global Privacy Control (GPC), where required by applicable state law. This includes jurisdictions that currently require recognition of universal opt-out mechanisms for sale or processing for targeted advertising, such as California, Colorado, Connecticut, New Jersey, Oregon, and Texas. When you visit our website with GPC enabled, we will treat that signal as a valid opt-out request for the applicable device and browser.

Profiling

Mt. Capra does not engage in profiling that produces legal or similarly significant effects within the meaning of applicable state privacy laws.

How to Exercise Your Rights

You may exercise these rights by:

• Emailing us at orders@mtcapra.com

• Visiting our Data Sharing Opt-Out page

• Writing to us at the address listed in Section 24 (Contact Us) below

Appealing a Decision

If we deny your privacy request, you may appeal our decision by emailing us at orders@mtcapra.com with the subject line "Privacy Request Appeal." Please include the date of your original request and the reason you believe our decision should be reconsidered. We will respond to your appeal within the timeframe required by your state's privacy law. If your appeal is denied, we will provide information about how to contact the appropriate state regulator where required by law.

20. Nevada Privacy Rights

Residents of the State of Nevada have the right to opt out of the sale of certain pieces of their personal information to third parties who will sell or license the information to others. Mt. Capra does not currently sell personal information as defined under Nevada Revised Statutes Chapter 603A. If you are a Nevada resident and have questions about our data practices, you may contact us at the address listed in Section 24 below.

21. Complaints

If you have complaints about how we process your personal information, please contact us using the contact details provided below. Depending on where you live, you may have the right to appeal our decision by contacting us using the contact details set out below, or lodge your complaint with your local data protection or consumer protection authority. For U.S. residents, the Federal Trade Commission (FTC) accepts complaints at ftc.gov/complaint. For EU or UK residents, you may contact your national data protection authority.

22. International Transfers

Please note that we may transfer, store, and process your personal information outside the country you live in. Our store is operated from the United States, and the third-party service providers we use are primarily located in the United States. If you are located outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country.

If we transfer your personal information out of the European Economic Area or the United Kingdom, we will rely on recognized transfer mechanisms like the European Commission's Standard Contractual Clauses, or any equivalent contracts issued by the relevant competent authority of the UK, as relevant, unless the data transfer is to a country that has been determined to provide an adequate level of protection.

23. Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on this website, update the "Last Updated" date at the top of this page, and provide notice as required by applicable law. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

24. Contact Us

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please contact us:

Healthwest Minerals, Inc. dba Mt. Capra Products 279 SW 9th St Chehalis, WA 98532 United States

Email: orders@mtcapra.com Website: mtcapra.com Phone: 877-682-2772 (toll free)