Privacy policy

Last Updated: September 19, 2026

Citrus Root is operated by Vantage Digital Group LLC ("Citrus Root," "we," "us," or "our").

This Privacy Policy describes how we collect, use, disclose, retain, and otherwise process personal information when you visit citrusroot.co, create an account, make a purchase, enroll in a subscription, interact with our advertising or communications, contact customer support, or otherwise use our services.

For purposes of applicable privacy law, Vantage Digital Group LLC is generally the business or controller responsible for the personal information described in this Privacy Policy, except where another company independently determines how it processes personal information.

  1. PERSONAL INFORMATION WE COLLECT

Depending on how you interact with us, we may collect the following categories of personal information.

Identity and Contact Information

This may include your name, email address, telephone number, billing address, shipping address, and customer or account identifiers.

Order and Transaction Information

This may include products viewed, products purchased, order history, returns, refunds, subscription status, subscription frequency, discounts, payment status, and transaction records.

Payment Information

Payment transactions are processed by Shopify and/or applicable payment providers.

We may receive information such as payment status, payment method type, billing details, transaction identifiers, and tokenized or limited payment information.

We do not ordinarily receive or store a customer's complete payment card number where the applicable payment processor handles that information directly.

Account Information

This may include login details, subscription preferences, saved preferences, and customer-account settings.

Customer Support and Communications

This may include information you voluntarily provide through emails, customer-service conversations, refund requests, subscription requests, product feedback, adverse-event reports, and other communications with us.

Device and Technical Information

This may include IP address, browser information, device type, operating system, approximate location derived from IP address, cookie identifiers, advertising identifiers, and similar technical information.

Website and Usage Information

This may include pages viewed, links clicked, products viewed, cart activity, checkout activity, referral sources, advertising interactions, and Website navigation.

Reviews and User Content

If you submit a review or other user-generated content, we may process ratings, review text, photographs, videos, your name or display name, and other information voluntarily submitted with the content.

  1. INFORMATION THAT MAY RELATE TO HEALTH

Because Citrus Root sells dietary supplements, customers may voluntarily provide information that relates to health, including information concerning supplement use, symptoms, medications, medical conditions, adverse reactions, health goals, or reasons for purchasing a product.

We do not ask customers to provide unnecessary medical information.

Where health-related information is provided to us through customer support, product-safety reporting, or similar communications, we may use that information for purposes including:

Responding to the customer Addressing safety concerns Investigating complaints Complying with adverse-event or regulatory obligations Product-quality and safety monitoring Legal and regulatory compliance

We do not intend to use identifiable health information voluntarily disclosed in a product-safety or customer-support communication for targeted advertising unless we have a lawful basis and any consent required by applicable law.

Certain U.S. state laws may impose additional requirements relating to consumer health data. Where those laws apply to our practices, we will provide the notices, rights, consents, and controls required by law.

  1. SOURCES OF PERSONAL INFORMATION

We may obtain personal information:

Directly from you Automatically from your device or browser From Shopify From payment processors From subscription-management providers From fulfillment and shipping providers From customer-support providers From fraud-prevention providers From analytics providers From advertising platforms From social networks where you interact with us From other service providers and business partners

  1. HOW WE USE PERSONAL INFORMATION

We may use personal information to provide and operate our products and services, including processing orders and payments, arranging fulfillment, shipping orders, managing subscriptions, handling cancellations, processing refunds, communicating with customers, and providing customer support.

We may also use personal information to operate and improve our business, understand Website usage, improve Website performance, evaluate customer experience, forecast demand, analyze business performance, and troubleshoot technical problems.

We may use personal information for fraud prevention and security, including verifying transactions, detecting suspicious activity, preventing abuse, securing accounts, and protecting customers and our business.

Subject to applicable law and available choices, we may also use personal information for advertising and marketing, including sending promotional communications, measuring advertising effectiveness, creating advertising audiences, personalizing advertising, measuring conversions, and displaying relevant promotions.

We may additionally process personal information to comply with legal and regulatory obligations, maintain records, respond to lawful requests, satisfy tax and accounting obligations, address product-safety and adverse-event requirements, establish or defend legal claims, and cooperate with regulators or law enforcement where legally required.

  1. LEGAL BASES FOR EEA AND UK PROCESSING

Where EEA or UK data-protection law applies, we may process personal information on one or more of the following legal bases:

Contract Legitimate interests Consent Legal obligation

Where we rely on consent, you may withdraw that consent as permitted by law.

  1. COOKIES AND SIMILAR TECHNOLOGIES

We and our service providers may use cookies, pixels, tags, local storage, software development kits, server-side tracking, and similar technologies.

These technologies may support Website functionality, checkout, fraud prevention, analytics, advertising, conversion measurement, and personalization.

Your available cookie controls depend on your location and applicable law.

Where consent is legally required before using non-essential cookies or similar technologies, we will seek that consent.

  1. ADVERTISING, SALE, SHARING AND TARGETED ADVERTISING

We do not operate as a data broker and do not sell personal information for money as an independent business model.

However, we use advertising, analytics, and marketing technologies.

Under certain U.S. privacy laws, disclosure of identifiers, cookie information, Internet activity, or similar information to advertising partners for cross-context behavioral advertising may legally be considered a "sale," "sharing," or "targeted advertising," even where no money is paid for the information.

Where applicable law grants you a right to opt out, you may exercise available privacy controls through our Website, through Shopify's privacy tools, through a legally recognized Global Privacy Control signal, or by contacting us.

  1. HOW WE DISCLOSE PERSONAL INFORMATION

We may disclose personal information where reasonably necessary to:

Shopify Payment processors Subscription-management platforms Fulfillment providers Shipping and logistics providers Manufacturers where necessary Customer-service providers Cloud and hosting providers Analytics providers Fraud-prevention and security vendors Advertising and marketing partners Professional advisers Insurers Regulators Courts Law enforcement Corporate affiliates Potential buyers, investors, or successors in connection with a legitimate business transaction

Recipients may independently process information under their own privacy policies where applicable.

  1. RELATIONSHIP WITH SHOPIFY

Our online store is powered by Shopify.

Shopify processes information relating to Website access, transactions, payments, accounts, and other activities necessary to provide its platform and related features.

Information provided through our Website may therefore be transmitted to Shopify and its service providers.

Shopify may also independently process certain information for services or features that operate across participating Shopify merchants.

For information regarding Shopify's independent privacy practices and consumer privacy controls, please refer to Shopify's published privacy notices and privacy portal.

  1. PAYMENT PROCESSORS

Payment providers process payment credentials subject to their own privacy, security, and legal obligations.

Citrus Root generally receives the information necessary to confirm and administer a transaction rather than unrestricted access to a customer's complete payment-card credentials.

  1. DATA RETENTION

We retain personal information only for as long as reasonably necessary for purposes including:

Providing services Administering subscriptions Maintaining transaction records Handling refunds Preventing fraud Meeting tax and accounting requirements Maintaining product-safety records Handling adverse-event information where legally required Addressing disputes Demonstrating subscription consent Complying with legal obligations Establishing or defending legal claims

Different categories of information may be subject to different retention periods.

Where applicable law requires subscription-consent, tax, safety, or other records to be maintained for a specified period, we may retain those records accordingly.

  1. DATA SECURITY

We use reasonable administrative, technical, and organizational measures designed to protect personal information under our control.

No method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

  1. YOUR PRIVACY RIGHTS

Depending on applicable law and where you reside, you may have rights including:

Access Correction Deletion Data portability Restriction of processing Objection to processing Withdrawal of consent Opt-out of targeted advertising Opt-out of certain sale or sharing Limitation of certain uses of sensitive information Appeal of certain privacy decisions Complaint to a regulator or supervisory authority

These rights are subject to applicable legal exceptions.

  1. CALIFORNIA PRIVACY RIGHTS

Where the California Consumer Privacy Act applies, eligible California residents may have rights to request access, deletion, correction, information concerning data practices, opt-out of covered sale or sharing, and limitation of certain sensitive-information uses where applicable.

Where required by law, we will honor qualifying Global Privacy Control signals.

We will not discriminate against a consumer for exercising a privacy right protected by applicable law.

  1. CONSUMER HEALTH DATA

Certain U.S. state laws may impose additional requirements concerning information that identifies or may be used to infer a person's physical or mental health status.

Where Citrus Root is subject to such a law, we will handle covered consumer health data in accordance with applicable requirements, including applicable notice, consent, security, access, deletion, and disclosure requirements.

Where a separate Consumer Health Data Privacy Policy is legally required based on our actual practices, that policy may be provided separately from this general Privacy Policy.

  1. MARKETING COMMUNICATIONS

You may unsubscribe from promotional email communications using the unsubscribe mechanism included in those communications.

Unsubscribing from marketing does not prevent us from sending non-promotional communications such as order confirmations, shipping information, subscription notices, cancellation confirmations, security notices, and customer-service communications.

  1. SMS / MMS TEXT MESSAGE MARKETING PROGRAM PRIVACY

Your privacy is extremely important to us. We will only use the information you provide through the Program to transmit your mobile messages and respond to you, if necessary. This includes but is not limited to, sharing information with platform providers, phone companies (carriers), and other vendors who assist us in the delivery of mobile messages.

Text messaging originator opt-in data and consent will not be shared with any third parties, excluding aggregators and providers of the Text Message services.

WE DO NOT SELL, RENT, LOAN, TRADE, LEASE, OR OTHERWISE TRANSFER FOR PROFIT ANY PHONE NUMBERS OR CUSTOMER INFORMATION COLLECTED THROUGH THE PROGRAM TO ANY THIRD PARTY. YOUR MOBILE INFORMATION AND SMS OPT-IN DATA WILL NOT BE SHARED WITH OR SOLD TO THIRD PARTIES OR AFFILIATES FOR THEIR OWN MARKETING OR PROMOTIONAL PURPOSES.

How We Protect Your Information. We maintain administrative, technical, and physical safeguards designed to protect the information collected through the Program against unauthorized access, disclosure, alteration, and destruction. Information is transmitted using secure, encrypted connections, and access to it is limited to personnel and service providers who need it to operate the Program. While no method of transmission or storage is completely secure, we take commercially reasonable measures to protect your information.

Nonetheless, We reserve the right at all times to disclose any information as necessary to satisfy any law, regulation, or governmental request, to avoid liability, or to protect our rights or property. When you complete forms online or otherwise provide us with information in connection with the program, you agree to provide accurate, complete, and true information. You agree not to use a false or misleading name or a name that you are not authorized to use. If, in Our sole discretion, We believe that any such information is untrue, inaccurate, or incomplete, or you have opted into the Program for an ulterior purpose, We may refuse you access to the program and pursue any appropriate legal remedies.

California Civil Code Section 1798.83, the California Consumer Privacy Act as amended by the California Privacy Rights Act (California Civil Code Section 1798.100 et seq.), and the General Data Protection Regulation 2016/679 (GDPR) allow users of the Program who are California or European Union residents to request certain information regarding our disclosure of the information you provide through the Program to third parties for their direct marketing purposes and, where applicable, to request access to, correction of, or deletion of their personal information.

Contact us at the following address to make a request:

Citrus Root 1309 Coffeen Ave, STE 19251, Sheridan, Wyoming 82801, US info@citrusroot.co

  1. CHILDREN

Our Website and products are intended for adults.

We do not knowingly seek to collect personal information from children under 13 or knowingly sell or share personal information of minors in violation of applicable law.

If you believe a child has provided personal information to us unlawfully, please contact us.

  1. INTERNATIONAL DATA TRANSFERS

Our business and service providers operate internationally.

Your information may therefore be processed outside your country of residence, including in the United States.

Where EEA or UK law requires a lawful transfer mechanism, we may rely on an applicable mechanism such as an adequacy decision, Standard Contractual Clauses, a UK-approved transfer mechanism, or another legally permitted transfer basis.

  1. THIRD-PARTY LINKS

Our Website may contain links to third-party websites or services.

We are not responsible for the independent privacy practices of websites or services that are not controlled by Citrus Root.

You should review the privacy notices of relevant third parties.

  1. BUSINESS TRANSFERS

If Citrus Root or Vantage Digital Group LLC undergoes a merger, financing, reorganization, acquisition, sale of assets, or similar transaction, personal information may be disclosed or transferred as permitted by applicable law.

  1. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in law, technology, service providers, or our business practices.

We will update the "Last Updated" date and provide any additional notice required by applicable law.

  1. CONTACT AND PRIVACY REQUESTS

Citrus Root Operated by Vantage Digital Group LLC

1309 Coffeen Ave, STE 19251 Sheridan, WY 82801 United States

Email: info@citrusroot.co Website: https://citrusroot.co