Privacy Policy
Effective Date: August 13, 2026 | Last Updated: August 13, 2026
This Privacy Policy describes how Mountain Crest Gardens ("MCG," "we," "us," or "our") collects, uses, and discloses personal information when you visit mountaincrestgardens.com (the "Site"), create an account, place an order, join our rewards program or email/SMS lists, or otherwise interact with us. It also explains the privacy rights available to you — including the rights of California residents under the California Consumer Privacy Act, as amended by the California Privacy Rights Act and its regulations (together, the "CCPA") — and how to exercise them.
The section "Your California Privacy Rights" serves as our Notice at Collection for California residents.
1. Personal Information We Collect
We collect the categories of personal information described below. We have collected each of these categories in the preceding 12 months.
| Category | Examples of what we collect |
|---|---|
| Identifiers | Name, email address, phone number, shipping and billing address, account username, IP address, device and cookie identifiers. |
| Customer records | Contact details and order information associated with your account or purchases. Payment card details are collected and processed directly by our payment processors (see Section 4); we do not store full card numbers. |
| Commercial information | Products viewed and purchased, cart contents, order history, returns, rewards-program activity, gift certificate use. |
| Internet or network activity | Pages visited, searches on the Site, clicks, referring pages, browser and device type, and interactions collected through cookies and similar technologies (see Section 3). |
| Approximate geolocation | General location (city/region) inferred from your IP address. We do not collect precise geolocation. |
| Audio, visual, or similar information | Photos you choose to submit with product reviews; messages you send us through chat, text, or email. |
| Professional information | Business name and related details if you apply for or use a wholesale account. |
| Inferences | Product interests and preferences derived from your browsing and purchase activity, used to personalize the Site and our marketing. |
| Sensitive personal information | Account login credentials (username and password). We use sensitive personal information only to provide our services and as otherwise permitted by law; we do not use or disclose it to infer characteristics about you. |
Sources. We collect personal information directly from you (when you order, register, review, or contact us), automatically from your device (through cookies and similar technologies), and from our service providers and partners (such as payment processors confirming a transaction, or advertising and analytics providers).
2. How We Use Personal Information
We use personal information to: process and ship orders and returns; create and maintain your account; provide customer support by chat, email, and phone/text; operate our rewards, referral, and wholesale programs; send order updates and, with your consent where required, marketing emails and text messages (including cart reminders); personalize the Site, our product recommendations, and our advertising; run promotions and giveaways; display product reviews; analyze Site performance and improve our products and services; detect and prevent fraud, security incidents, and abuse; and comply with legal obligations. We do not use personal information for automated decisions that produce legal or similarly significant effects about you.
3. Cookies and Tracking Technologies
We and our partners use cookies, pixels, and similar technologies on the Site. They fall into four groups:
- Essential — required for the Site to function (cart, checkout, security, fraud prevention). These cannot be switched off.
- Functional — enable features such as live chat, customer reviews, our rewards widget, and remembering your preferences (services include Gorgias, Smile.io, Yotpo, Klaviyo, and Shopper Approved).
- Analytics — help us understand how the Site is used so we can improve it (for example, Google Analytics).
- Advertising — set by advertising partners (including Google Ads, Microsoft Advertising, Meta, TikTok, Pinterest, Reddit, and Criteo) to show you relevant ads on other sites and measure ad performance. These technologies involve disclosing identifiers and activity data to those partners, which is treated as "sharing" for cross-context behavioral advertising under California law.
4. How We Disclose Personal Information
Service providers and contractors. We disclose personal information to companies that provide services to us under contract, including: our e-commerce platform and hosting provider; payment processors (such as PayPal, Klarna, and other checkout options we offer); shipping and fulfillment carriers; email and SMS marketing providers; customer-support and live-chat platforms; product review and rating platforms; loyalty/rewards and referral program providers; site search and product recommendation providers; order protection and fraud-prevention services; and analytics providers. In the preceding 12 months we disclosed the following categories to service providers and contractors for business purposes: identifiers, customer records, commercial information, internet or network activity, approximate geolocation, audio/visual information, professional information, inferences, and sensitive personal information (account credentials, to our hosting platform only).
Advertising partners ("sharing"/"selling" under the CCPA). We do not sell personal information for money. However, like most online stores we allow advertising partners to collect identifiers, internet activity, commercial information, and inferences through cookies and pixels on the Site for cross-context behavioral advertising. Under the CCPA this is considered "sharing" (and may be considered a "sale"). In the preceding 12 months we shared these categories with advertising networks including Google, Microsoft, Meta, TikTok, Pinterest, Reddit, and Criteo. You can opt out at any time as described in Section 6. We do not knowingly sell or share the personal information of consumers under 16 years of age.
Other disclosures. We may disclose personal information to comply with law or legal process; to protect the rights, safety, and property of MCG, our customers, or others; in connection with a merger, acquisition, financing, or sale of assets; or with your direction or consent.
5. How Long We Keep Personal Information
We keep personal information only as long as reasonably necessary for the purposes described in this policy: account and order records for as long as your account is active and thereafter as needed for tax, accounting, warranty, and legal purposes; marketing data until you unsubscribe or ask us to delete it; and cookie data for the lifespan of the applicable cookie. When information is no longer needed, we delete or de-identify it.
6. Your California Privacy Rights (Notice at Collection)
If you are a California resident, you have the following rights, subject to certain exceptions:
- Right to Know/Access. Request the categories and specific pieces of personal information we have collected about you, the sources, our purposes, and the categories of third parties to whom we disclosed it, and receive a portable copy.
- Right to Delete. Request deletion of personal information we collected from you.
- Right to Correct. Request correction of inaccurate personal information.
- Right to Opt Out of Sale/Sharing. Opt out of the "sale" or "sharing" of your personal information (as described in Section 4) at any time.
- Right to Limit Use of Sensitive Personal Information. We use sensitive personal information only for purposes permitted by the CCPA (such as providing our services and maintaining security), so we do not offer a separate "Limit" option because none is required.
- Right to Non-Discrimination. We will not discriminate against you for exercising any of these rights.
The categories of personal information we collect, our purposes, and our retention practices are described in Sections 1, 2, and 5. The categories we sell/share and disclose for business purposes are described in Section 4.
7. How to Exercise Your Rights
- Opt out of sale/sharing: click "Manage Website Data Collection Preferences" in the footer of any page and turn off Advertising/Targeting.
- Know, delete, or correct: email us at info@mountaincrestgardens.com with the subject "Privacy Request," or call/text us at (877) 656-4035 / (888) 270-3439. You may also write to: Mountain Crest Gardens, PO Box 1023, Fort Jones, CA 96032.
Verification. For know, delete, and correct requests we will verify your identity by matching information you provide (such as the email address and name on your account or recent order) against our records; we may ask for additional information if needed. We do not require verification for opt-out requests. We will respond within 45 days, and may extend once by an additional 45 days with notice.
Authorized agents. You may use an authorized agent to submit a request on your behalf. We will ask the agent for proof of your signed permission, and may ask you to verify your identity or confirm the authorization directly.
8. Notice of Financial Incentive
Our MCG Rewards program and our email/SMS sign-up offers provide benefits — such as points on purchases, birthday rewards, and discount offers — in exchange for information like your email address, phone number, and purchase history. Participation is optional and requires your opt-in; you can withdraw at any time by closing your rewards account or unsubscribing from our emails or texts, and withdrawal will not affect your ability to shop with us. We do not assign a precise dollar value to this information, but we reasonably estimate its value to us as equal to the value of the discounts and rewards provided, based on the expense to us of offering the program.
9. Children's Privacy
The Site is intended for general audiences and is not directed to children under 13. We do not knowingly collect personal information from children under 13, and we do not knowingly sell or share the personal information of anyone under 16. If you believe a child has provided us personal information, contact us and we will delete it.
10. Residents of Other States
If you live in another state with a comprehensive privacy law (including Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and others), you may have similar rights of access, deletion, correction, portability, and opt-out of targeted advertising, and the right to appeal a denied request. You can exercise these rights using the same methods listed in Section 7; if we decline a request, we will explain how to appeal.
11. Do Not Track and Global Privacy Control
We honor the Global Privacy Control signal as a valid opt-out of sale/sharing, as described above. Because there is no common industry standard for legacy "Do Not Track" browser settings, the Site does not respond to DNT signals other than GPC.
12. Security
We use reasonable administrative, technical, and physical safeguards designed to protect personal information, including encryption of data in transit (HTTPS) and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the revised policy on this page with an updated "Last Updated" date, and, for material changes, provide additional notice on the Site.
14. Contact Us
Mountain Crest Gardens
PO Box 1023, Fort Jones, CA 96032
Email: info@mountaincrestgardens.com
Phone: (877) 656-4035 (voicemail) | Text: (888) 270-3439
Hours: Monday–Friday, 8 AM–3 PM Pacific
If you have a disability and need this policy in an alternative format, contact us using the information above and we will provide it.