1. Overview and Commitment to Privacy

Northwoods Sugarworks LLC ("Northwoods Sugarworks", "we", "our", or "us"), operating out of Cambridge, Vermont, USA, is committed to safeguarding the privacy and personal data of our customers, website visitors, and culinary partners. This Privacy Policy details the types of information we collect when you visit our website, place orders for our artisan maple syrups and provisions, subscribe to our newsletter, or communicate with our sugarmaker team.

2. Information We Collect

We collect information you directly provide when you interact with our platform:

• Contact and Identity Data: First and last name, billing address, shipping address, email address, and phone number.
• Order and Transactional Information: Details regarding products purchased, quantities, pricing, order identifiers, tracking numbers, and delivery instructions.
• Payment Details: Tokenized payment authorization tokens, card brand, and the last four digits of the payment method handled securely by Stripe.
• Device and Technical Information: IP address, browser type, operating system version, time zone settings, referring URLs, and page navigation history collected via standard secure log files and essential cookies.

3. How We Use Your Information

We process your personal information strictly for legitimate commercial and operational purposes:

• Fulfilling and dispatching your orders of maple syrups and provisions.
• Generating order confirmations, automated tracking updates, and invoices.
• Processing secure payment authorizations and fraud prevention screenings via Stripe.
• Providing dedicated customer care and responding to tasting or product inquiries.
• Sending optional promotional newsletters and seasonal harvest alerts (only with your explicit opt-in consent; you may unsubscribe at any time).
• Complying with applicable state, federal, tax, and consumer protection laws in the United States.

4. Third-Party Service Providers and Data Sharing

We never sell, rent, or lease your personal information to third parties or marketing brokers. We share data only with trusted service partners strictly necessary to operate our e-commerce business:

• Payment Gateway: Stripe, Inc. (San Francisco, CA) for tokenized, secure PCI-compliant transaction processing.
• Shipping and Logistics: USPS, UPS, and FedEx for printing shipping labels and delivering packages to your address.
• Hosting and Infrastructure: Secure cloud web hosting servers located within the continental United States.

5. Cookies and Tracking Technologies

Our website utilizes essential functional cookies necessary to remember the items in your shopping cart, store your session state, and maintain user preferences. We do not use intrusive cross-site behavioral tracking cookies. You may disable cookies in your web browser settings; however, certain e-commerce functions such as the checkout drawer may be impacted.

6. Data Security and Retention

We implement comprehensive technical and organizational safeguards including HTTPS/TLS 1.3 encryption, network firewalls, restricted access protocols, and regular security reviews. We retain transaction data only as long as required to satisfy accounting, legal, and warranty obligations under Vermont and US federal law.

7. Your Privacy Rights (CCPA & International Standards)

Depending on your jurisdiction, including California (under the California Consumer Privacy Act) and other US states, you hold the following rights:

• The right to know what personal information we have collected about you.
• The right to request deletion of your personal records, subject to statutory record-keeping exceptions.
• The right to opt out of any future marketing communications at any time.
• The right to non-discrimination for exercising your statutory privacy rights.

8. Contact Us Regarding Your Privacy

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or need assistance regarding an order, please contact our privacy compliance officer: