Skip to content

Privacy policy

Privacy Policy

LAST UPDATED: August 29, 2026

Pine Street Clinic, LLC ("Pine Street Clinic", "we", "us") operates the website at www.PineStreetClinic.com (the "Website"). This Privacy Policy describes the personal information we collect from Website visitors and customers, how we use and share it, and the choices you have. By using the Website, you accept this Privacy Policy.

This policy covers our online store and Website only. Pine Street Clinic LLC does not provide clinical services; the acupuncture practice of Michael Broffman, LAC, PC is a separate company (michaelbroffman.com). For how we handle consumer health data under Washington and Nevada law, see our Consumer Health Data Privacy Notice.

WHAT WE COLLECT

  • Contact and account information: name, email address, postal address, phone number, and account username and password
  • Order information: products purchased, order history, and billing details; payment card information is processed by our payment providers, and we do not directly store full payment card numbers
  • Communications: records of phone calls, voicemail messages, text messages, emails, and chats with us
  • Age verification: for some orders, AgeChecker.net collects information such as your date of birth to verify your age and identity on our behalf (privacy policy); our store receives the verification result
  • Device and usage information, collected automatically: IP address, browser and device type, pages viewed, time on site, referring page, and interactions with our ads, collected through cookies and similar technologies. Some of this is personal information under certain privacy laws.

HOW WE USE IT

We use personal information to fulfill and deliver orders; provide customer support; send order and shipping updates; send marketing emails if you have signed up (unsubscribe anytime); advertise our own store and measure those ads; verify age and identity where required; improve the Website; prevent fraud and secure our services; and comply with legal obligations.

COOKIES AND ADVERTISING

We and third-party vendors use cookies and similar technologies for site functionality, analytics (Google Analytics), and advertising. For a list of the cookies we use and their purposes, see our Cookies Declaration. We advertise through Google Ads and Microsoft Advertising, which involves:

  • Remarketing: showing you ads for our store on other sites and apps based on your visits to our Website
  • Ad measurement (Enhanced Conversions): sharing customer data such as email addresses, transformed with a one-way hashing function, together with conversion information, with Google and Microsoft to measure the performance of our ads
  • Ad audiences (Customer Match): sharing hashed customer email addresses with Google so our own ads can reach our customers across Google services

We do not sell personal information for money. However, certain disclosures to advertising and analytics providers described above may be considered a "sale," "sharing," or use for "targeted advertising" under some U.S. state privacy laws even though no money changes hands, which is why we offer the opt-out described in "Your Choices and Rights" below.

Third parties that serve ads may collect information about your visits to this and other websites over time. To limit interest-based advertising generally, visit the DAA opt-out page, Google's Ads Settings, or Microsoft's personalized ads page, or use your mobile device's ad privacy settings.

Do Not Track and Global Privacy Control: We do not respond to "Do Not Track" browser signals. We treat a valid Global Privacy Control (GPC) signal as an opt-out of ad-related sharing for that browser or device, and we apply it to your account where we can associate the browser or device with your account.

Google Customer Reviews: When you place an order, we may enroll your order in the Google Customer Reviews program and share your email address and order information with Google so it can send you a delivery-timed survey inviting you to rate your purchase and can display seller ratings. Responding to the survey is optional, and you can opt out of this sharing using the methods described in "Your Choices and Rights" below. Google's handling of that information is described in Google's Privacy Policy.

reCAPTCHA: We use Google's invisible reCAPTCHA to protect our forms; it may collect device information for security purposes under Google's Privacy Policy.

WHO WE SHARE PERSONAL INFORMATION WITH

  • Service providers that run our store on our behalf: Shopify (e-commerce platform), payment processors, shipping and fulfillment carriers, email providers (Klaviyo for marketing, Aftership for shipment notifications), and customer support tools. When acting as our service providers they are limited by contract to providing services to us; Shopify additionally processes some information for its own purposes, described in the "Shopify" section below.
  • Product vendors: when you order certain vendor-supplied products (for example, Standard Process products offered through that vendor's integration on our site), the vendor receives the order information needed to fulfill and support your order, as described in our Terms of Service.
  • Advertising and analytics platforms (currently Google and Microsoft), as described above.
  • Legal recipients when required by subpoena, court order, or law, or to investigate fraud, or protect safety and our rights.
  • Business transfers: if we are involved in a sale, merger, acquisition, financing, reorganization, or transfer of some or all of our assets, personal information may be transferred as one of the business assets, subject to any notice or choices required by applicable law.
  • Affiliated clinical practice: if you contact us seeking clinical services or an appointment, we route your message to Michael Broffman, LAC, PC so it can respond to your request.
  • Prescribing practitioners: if you order a custom formula that a practitioner created for you, we coordinate with that practitioner as needed to fulfill your order.

We do not provide your contact information to unaffiliated third parties for those third parties to independently market their own products or services to you. If our practices materially change, we will update this policy and provide any notice and choices required by applicable law.

SHOPIFY

Our store is hosted by Shopify, which processes customer information to operate the platform and provide Enhanced Services (personalization, performance, fraud prevention, and advertising powered by Shopify Network Intelligence, drawing on your interactions with Shopify merchants). No other merchant accesses your data through these services. See the Shopify Consumer Privacy Policy, and exercise privacy rights with Shopify (including opting out of Shopify Audiences) at privacy.shopify.com. Information we share with Shopify and other providers may be stored or processed in the United States, Canada, or other countries.

CHILDREN

The Website is for adults. You must be at least 18 to use it or purchase from us. We do not knowingly collect, sell, or share personal information of anyone under 18, and we do not have actual knowledge of selling or sharing the personal information of consumers under 16 years of age. If you believe someone under 18 has provided us personal information, contact hello@pinestreetclinic.com and we will delete it.

SECURITY AND RETENTION

We use commercially reasonable safeguards to protect personal information, though no internet transmission or storage method is 100% secure. We keep personal information only as long as reasonably necessary for the purposes above: order and transaction records for as long as tax, accounting, and audit rules require; account and support records (including voicemails and call records) while your relationship with us is active plus a reasonable period; analytics and marketing data for limited periods; and security logs as needed to protect the business. We may keep de-identified or aggregated data for statistics.

YOUR CHOICES AND RIGHTS

  • Marketing emails: unsubscribe using the link in any marketing email. We process unsubscribes within 10 business days; transactional emails about your orders continue.
  • Opt out of ad-related sharing / targeted advertising: use our Do Not Sell or Share My Personal Information page, send a GPC signal, or email us. Where we can associate your browser or device with your account, the opt-out is applied to your profile. Opt-outs do not affect processing necessary for security and fraud prevention.
  • Access, correction, and deletion: depending on where you live, applicable law may give you the right to request a copy of the personal information we hold about you, to have it corrected, or to have it deleted, subject to that law's conditions and exceptions (such as completing your transactions, fraud prevention, and legal retention requirements). Where such a law applies to us, we will honor these requests as it requires, including any right to appeal and any protection against discrimination it provides. Submit requests through our Data Requests page or to hello@pinestreetclinic.com.

We will verify your identity using information associated with your account or orders before acting on a request, and we cannot act on requests we cannot verify. We will respond within the timeframe required by the applicable law. An authorized agent may submit a request on your behalf with proof of authorization.

CALIFORNIA PRIVACY RIGHTS (CCPA/CPRA)

This section applies to California residents and provides the disclosures required by the California Consumer Privacy Act, as amended (CCPA).

Categories of personal information collected in the last 12 months, described in plain terms in "What We Collect" above, correspond to these CCPA categories: identifiers (name, email address, postal address, phone number, account name, IP address); customer records (name, address, phone, payment information processed by our payment providers); characteristics of protected classifications (age and date of birth for age verification); commercial information (orders and purchase history); internet or other network activity (browsing and ad interactions on our Website); approximate geolocation (from IP address); audio information (voicemail messages and call records); inferences (shopping preferences); and sensitive personal information (account login credentials). We do not collect biometric information, precise geolocation, or education or employment information through the store.

Sources: directly from you; automatically from your browser or device; and from service providers such as our e-commerce platform, payment processors, and age-verification and fraud-prevention services. Purposes for collection and use are described in "How We Use It" above, and retention criteria in "Security and Retention" above.

Disclosure, sale, and sharing: in the last 12 months we disclosed the categories above to service providers for the business purposes described in this policy, and we "shared" (as the CCPA defines it, for cross-context behavioral advertising) identifiers, internet activity, and commercial information with advertising and analytics platforms, currently Google and Microsoft, and with Shopify in connection with Enhanced Services. We also disclosed identifiers and commercial information to Google in connection with the Google Customer Reviews program described above. We do not sell personal information for money.

Your rights: subject to the CCPA's conditions and exceptions, you have the right to know and access the personal information we have collected about you; to correct inaccurate information; to delete personal information; to opt out of the sale or sharing of personal information; and not to receive discriminatory treatment for exercising these rights. We collect and use sensitive personal information (account credentials) only for purposes the CCPA permits without a right to limit, so a separate limit request is not offered.

How to exercise these rights: use our Data Requests page, our Do Not Sell or Share My Personal Information page, email hello@pinestreetclinic.com, or call (800) 456-9654. We respond to verifiable requests within 45 days, extendable once by a further 45 days with notice. Identity verification and authorized-agent requirements are described above.

OTHER JURISDICTIONS

Nevada residents: you may submit a request directing us not to sell covered information to hello@pinestreetclinic.com. We do not sell covered information as defined by Nevada law.

Washington and Nevada consumer health data: see our Consumer Health Data Privacy Notice.

Visitors outside the United States: the Website is operated from the United States and your information is processed here. Where the law of your country grants you rights over your personal information, you may exercise them by contacting us.

THIRD-PARTY LINKS

The Website may link to other websites. We are not responsible for their privacy practices; this policy applies only to information collected through our Website.

CHANGES TO THIS POLICY

We may update this Privacy Policy at any time as our practices, our services, or the law change. Updates are posted on this page with a new "Last Updated" date, and your continued use of the Website after an update constitutes acceptance of it. If a change requires notice or consent under applicable law, we will provide it.

HOW TO CONTACT US

Email: hello@pinestreetclinic.com
Toll Free: (800) 456-9654
Local: (415) 485-0484
Online Contact Form: Click here
Mail: Pine Street Clinic, 124 Pine St, San Anselmo, CA, 94960