Privacy Policy

Sacred Journey ("we," "us," "our") operates sacredjourneymushrooms.com and all associated services. We collect only what we need to deliver an exceptional experience, we never sell your data, and we protect it like it's our own — because your trust is the foundation of everything we build.

We collect information in two ways:

Information You Give Us

• Account details — name, email, phone number, password
• Shipping and billing addresses
• Order history and product preferences
• Messages you send us through our contact form or email
• Wholesale application details — business name, EIN, resale certificate
• Age verification confirmation (21+)

Information Collected Automatically

• Device and browser type, IP address, operating system
• Pages visited, time spent, referring URLs
• Cookies and similar technologies for site functionality

Every piece of data serves a purpose:

• Fulfill your orders — processing, shipping, and delivery updates
• Manage your account — login, order history, subscription management
• Communicate with you — order confirmations, shipping notifications, responses to your inquiries
• Improve our products and experience — understanding what resonates and what we can do better
• Prevent fraud — protecting both you and our community
• Legal compliance — age verification and regulatory obligations

We never see, store, or have access to your full credit card number. All payment information is tokenized client-side through our PCI-compliant payment processor before it ever reaches our servers. Your card details go directly to our payment partner — we only receive a secure token to process your transaction.

In short: your financial data never touches our systems. Period.

We do not sell, rent, or trade your personal information. Full stop. We share data only with trusted partners who help us run our business:

• Shipping carriers — to deliver your orders
• Payment processor — to securely process transactions
• Email service provider — to send order confirmations and account notifications
• Hosting and infrastructure — to keep the site fast and reliable

Each partner is contractually bound to use your data only for the specific service they provide to us. No exceptions.

We use cookies to keep things running smoothly — remembering your cart, keeping you logged in, and understanding how people use our site so we can make it better.

You can manage cookie preferences in your browser settings at any time.

You're in control. Depending on your location, you have the right to:

• Access — request a copy of the data we hold about you
• Correct — update inaccurate or incomplete information
• Delete — request we erase your personal data
• Opt out — unsubscribe from marketing communications at any time
• Port — receive your data in a structured, machine-readable format

To exercise any of these rights, email us at customersupport@sacredstudiosinc.com. We'll respond within 30 days.

If you're a California resident, the California Consumer Privacy Act gives you additional rights:

• The right to know what personal information we collect and how we use it
• The right to request deletion of your personal information
• The right to opt out of the sale of personal information — though we don't sell it, ever
• The right to non-discrimination for exercising your privacy rights

We keep your data only as long as necessary to serve you and meet our legal obligations:

• Account data — retained while your account is active, deleted upon request
• Order records — retained for 7 years for tax and legal compliance
• Analytics data — aggregated and anonymized after 26 months
• Contact form messages — retained for 12 months after resolution

Sacred Journey products are intended for adults aged 21 and older. We do not knowingly collect information from anyone under 21. Our age verification gate is the first thing every visitor encounters — if we discover that someone under 21 has provided personal information, we will delete it immediately.

We implement industry-standard security measures including:

• SSL/TLS encryption on every page and every transaction
• PCI-compliant payment processing with client-side tokenization
• Encrypted database connections and secure server infrastructure
• Regular security audits and access controls
• HTTP-only signed session cookies — no sensitive data stored in the browser

We may update this policy as our business or legal requirements evolve. When we make meaningful changes, we'll notify you via email or a prominent notice on our site. The "last updated" date at the top always reflects the most recent revision.

If anything here is unclear or you have questions about your data, we want to hear from you: