Privacy policy

 

Effective date: 10/1/2025 

Last updated: 10/1/2025. This version replaces our privacy policy dated August 6, 2019.

The short version

• We collect what we need to sell you maple syrup and talk with you about it: contact and shipping details, order history, and the usual website data (device, pages viewed, cookies).

• We use Shopify to run the store, Klaviyo for email, and Google and Meta for analytics and advertising. Those advertising tools mean some of your browsing data is shared with Google and Meta to show you ads elsewhere. You can opt out; see Your Privacy Choices below.

• We do not sell your information for money, and we never will without telling you here first.

• You can ask us what we have, ask us to fix or delete it, or opt out of targeted advertising. Email info@runamokmaple.com or call 802.849.7943.

• If any of this changes in a way that matters, we'll post a clear notice on the site, not just quietly update the date.

The rest of this page is the long version. It's written to be read, not skimmed, but we understand if you skim.

 

1. Who we are and what this covers

Runamok Maple, LLC ("Runamok," "we," "us") is a maple syrup company in Fairfax, Vermont. This policy explains what personal information we collect, how we use and share it, and the choices you have. It applies to:

• our website, runamokmaple.com, including checkout, customer accounts, subscriptions, and any wholesale ordering pages we operate;

• orders, questions, and other contact by email, phone, mail, or social media;

• information we collect in person at events, tastings, and our own retail sales; and

• our wholesale, foodservice, and partner relationships, where the contact is a person.

"Personal information" means information that identifies you or could reasonably be linked to you. It does not include information that has been de-identified or aggregated so it no longer points to anyone.

2. What we collect

Information you give us

• Contact and account details: name, email address, phone number, shipping and billing addresses, and, if you create an account, a password.

• Order details: what you bought, when, for how much, shipping choices, gift messages, and any notes you add.

• Payment details: card or payment-method information goes directly to our payment processors (see section 5). We see the last four digits and the payment method type; we never see or store full card numbers.

• Subscriptions: if you subscribe to recurring deliveries, the frequency and products you choose and the payment method kept on file for those charges.

• Gift recipients: if you send someone a gift, their name, address, and any message you write. We use that information only to deliver the gift.

• Reviews, photos, and messages: anything you post in a product review, send us by email or social media, or share in a survey, contest, or recipe submission.

• Marketing sign-ups: your email address when you join our list, including through the discount pop-up on the site, and your stated preferences.

• Back-in-stock requests: your email address when you ask to be notified about a product.

• Wholesale and foodservice: your name, role, company, and business contact details.

Information collected automatically

When you visit the site, we and the services we use collect:

• Device and connection data: IP address, browser type and version, device type, operating system, screen size, language, and the approximate location (city or region) your IP address suggests. We use that approximate location to show the right currency and shipping options and to decide which privacy controls to show you. We do not ask your device for precise GPS location.

• Activity data: pages and products you view, searches, items added to cart, purchases, how you reached the site (for example from a Google search, an email, a social post, or a partner's link), and how long you stay.

• Cookies and similar technologies: see section 4.

• Email engagement: whether you open our emails and which links you click (our email platform records this).

Information from other sources

• Shopify and Shop Pay: if you use Shop Pay or have a Shop account, Shopify shares your saved details with us to complete your order.

• Advertising and analytics platforms: Google and Meta report to us, in aggregate and sometimes at the level of a browser or ad click, how their ads and our site performed.

• Affiliate and partner links: if you reach us through an affiliate partner's link, the affiliate platform (impact.com) passes along a click identifier so the partner gets credit for the referral.

• Payment and fraud services: our payment processors and Shopify send us fraud-risk signals about transactions.

• Social media: if you tag us, message us, or interact with our pages, we see what the platform shows us under its rules.

• Wholesale and foodservice: business contact details from your company, trade shows, distributors, and public sources.

3. How we use personal information

• To fill your orders: process payment, ship, send confirmations and tracking, handle returns, answer questions, and run subscriptions.

• To run the site: keep it working, keep your cart, remember your preferences, secure it, and prevent fraud.

• To talk with you: respond to messages, send service emails (order status, subscription reminders, policy changes), and, if you've joined the list, send newsletters, recipes, and offers. You can unsubscribe any time.

• To understand and improve the business: which products sell, which pages work, where visitors come from, and what to make next. We use analytics tools for this.

• To personalize what we send you: we look at orders and customer information, sometimes with the help of software and AI tools, to understand who our customers are and, now and then, to pick out an order that deserves something extra in the box. We never use this to charge different people different prices.

• To advertise: show ads for Runamok on other websites and social platforms, including to people who have visited our site, and measure whether those ads worked. This is the use that involves "sharing" data with advertising partners (section 5).

• To credit partners: pay affiliates and partners for referrals that turn into orders.

• To meet legal and accounting obligations: tax records, consumer-protection requirements, responding to lawful requests, and enforcing our terms.

• With your consent: any other purpose we describe at the time and you agree to.

We do not use personal information to make automated decisions that have legal or similarly significant effects on you (such as decisions about credit, housing, insurance, or employment). We do not sell your personal information to anyone for the purpose of training artificial-intelligence models, and we do not use it to train models of our own. Where we use third-party AI tools, we use business accounts whose terms do not allow the provider to train on our data.

4. Cookies and similar technologies

Cookies are small files a website stores in your browser; pixels and tags are bits of code that report activity to a service. We and the services below use them. Which ones run can depend on where you are and on the choices you make in our cookie banner or on the Your Privacy Choices page.

How to control them. Use the cookie banner where it appears, the Your Privacy Choices page (runamokmaple.com/pages/data-sharing-opt-out), or your browser's cookie settings. Blocking essential cookies will break checkout. Google and Meta also offer their own controls: Google Ads Settings (adssettings.google.com), the Google Analytics opt-out add-on (tools.google.com/dlpage/gaoptout), and Meta's ad preferences (facebook.com/ads/preferences).

5. How we share personal information

We don't sell customer lists and we don't rent your information to anyone. We share it in these situations.

Service providers who work for us. Companies that process information on our behalf, under contracts that limit what they can do with it:

• Shopify (store platform, checkout, Shop Pay, customer accounts, fraud screening, analytics)

• Payment processors: Shopify Payments. PayPal. They handle your card details under their own privacy policies.

• Klaviyo (email marketing, sign-up forms, product reviews, on-site personalization)

• Recharge (subscription management and billing)

• Judge.me (product reviews; your review, first name, and any photo you add are displayed publicly on the product page)

• Restock Rocket (back-in-stock email alerts)

• Shopify Forms and the gift-message app on our cart (506)

• accessiBe (accessibility widget)

• Shipping carriers and fulfillment partners (to deliver orders)

• Customer-service, accounting, and IT providers that help us run the business

• hCaptcha, Adobe Fonts, Google Fonts (site functionality)

Advertising partners (this is the "sharing" part). When you visit our site, the Meta Pixel and Google's advertising tags send information about your visit (pages viewed, products viewed, items added to cart, purchases, and identifiers such as cookie IDs and your IP address) to Meta and Google. They use it to show you Runamok ads elsewhere, to find people like our customers, and to measure results. Under California law this is "sharing" for cross-context behavioral advertising; under other state laws it is "targeted advertising" and may be treated as a "sale" even though no money changes hands. You can opt out on the Your Privacy Choices page or by enabling Global Privacy Control in your browser. We do not knowingly share the personal information of anyone under 18 this way.

Affiliate partners. If you arrive through an affiliate's link and place an order, impact.com receives the order number, the click identifier, your browser information, and the email address used for the order, so the referral can be credited. Affiliates see that a sale occurred and what commission it earned, not your identity.

Shopify as a platform. Shopify also processes your information under its own privacy policy, including to run Shop Pay and the Shop app. If you check out with Shop Pay, Shopify creates or updates a Shop account for you under Shop's terms.

Legal and safety. We share information when the law requires it, to respond to lawful requests from public authorities, to enforce our terms, or to protect the rights, property, or safety of Runamok, our customers, or others.

Business transfers. If Runamok is acquired, merges with another company, raises money, or sells some or all of its assets, customer information may be among the things transferred or reviewed in that process. Anyone who receives it that way takes it subject to this policy.

With your direction or consent. For example, if you ask us to send a gift to someone, or enter a contest run with a partner.

6. Your choices

• Email marketing: click "unsubscribe" in any marketing email, or email us. Service emails about your orders and subscriptions continue as long as you have orders and subscriptions.

• Targeted advertising and cookies: use the Your Privacy Choices page, turn on Global Privacy Control in your browser, use the cookie banner where shown, or adjust Google and Meta settings (section 4).

• Account: log in to update your details or cancel subscriptions, or email us to delete your account.

• Reviews: email us to edit or remove a review you posted.

• Text messages: we don't send text-message marketing. If that ever changes, we'll ask for your clear consent first.

7. Your U.S. state privacy rights

Residents of California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and (beginning January 1, 2028) Vermont have rights under their state privacy laws. Whether a given law applies to Runamok depends on thresholds in that law. Rather than make you figure that out, we honor these requests from residents of any of those states:

• Know / access: what personal information we have about you, where it came from, what we use it for, and who we've shared it with.

• Portability: a copy in a usable format.

• Correct: fix inaccurate information.

• Delete: delete your information, subject to exceptions (for example, we keep order records the tax code requires us to keep, and records needed to honor your opt-out).

• Opt out of targeted advertising, "sale," and "sharing": see the Your Privacy Choices page. We treat a Global Privacy Control signal from a browser as an opt-out for that browser.

• Opt out of profiling in furtherance of decisions that produce legal or similarly significant effects: we don't do this kind of profiling.

• Limit use of sensitive personal information: we don't collect sensitive personal information as these laws define it, other than account log-in credentials (used only to run your account) and payment details that go straight to our processors.

• Appeal: if we decline a request, you can appeal by replying to our decision; we'll respond within 60 days and tell you how to contact your state's attorney general if you disagree.

• No discrimination: we won't charge you a different price or give you a different level of service because you exercised a privacy right. The email-list discount described below is a voluntary program you can leave at any time.

How to make a request. Email info@runamokmaple.com, call 802.849.7943, or use the Your Privacy Choices page (for opt-outs). Tell us what you want and the email address or phone number you've used with us. We'll confirm receipt within 10 business days and respond within 45 days; if we need longer (up to another 45), we'll tell you why.

Verification. For access, correction, and deletion requests we verify that you are who you say you are by matching the details you give us against what we already have (for example, a confirmation sent to the email address on the account). We will not ask for a copy of a government ID unless there's no other way to verify you. Opt-out requests don't require verification.

Authorized agents. Someone can make a request on your behalf if they give us your signed permission (or a power of attorney) and, for access and deletion requests, you confirm the request with us directly.

California residents: additional disclosures

Categories of personal information. In the past 12 months we collected the following categories (as defined in Cal. Civ. Code §1798.140) from the sources and for the purposes described in sections 2 and 3:

We have not sold personal information for money in the past 12 months. We have "shared" identifiers, commercial information, internet activity, and approximate location with Meta and Google for cross-context behavioral advertising, and you can opt out as described above. We do not knowingly sell or share the personal information of consumers under 16.

Retention: see section 9.

Notice of financial incentive. We offer 10% off a first or next order to people who join our email list. To provide it we collect your email address and, over time, your email engagement and purchase history. We estimate the value of that information as roughly equal to the discount, based on the expected value of an ongoing customer relationship; we don't assign it a precise dollar value. Joining is optional, and you can leave at any time by unsubscribing, after which we stop collecting engagement data tied to your email.

"Shine the Light" (Cal. Civ. Code §1798.83). We don't disclose personal information to third parties for their own direct-marketing purposes, so there is nothing to report under this law.

8. Children

Our site isn't directed to children under 13 and we don't knowingly collect personal information from them. You must be 18 or older to create an account or buy from us. We don't knowingly sell, share, or use for targeted advertising the personal information of anyone under 18 when we know their age. If you believe a child has given us personal information, email us and we'll delete it.

9. How long we keep information

We keep personal information for as long as we need it for the purposes above, and then delete or de-identify it. How long that is depends on the kind of information:

• Order, payment, and wholesale records: as long as tax and accounting rules require, which is at least seven years after the transaction.

• Account information: while your account is open, and for a short period afterward in case you come back or ask us to restore it.

• Email marketing profiles: until you unsubscribe; we keep a record of the unsubscribe itself so we can honor it.

• Customer-service correspondence: as long as it's useful for answering follow-up questions about the same order or issue.

• Website analytics: per the retention settings of the analytics tools, after which the data is aggregated or deleted.

• Privacy requests and opt-outs: at least 24 months, as California requires.

• Reviews: until you ask us to remove them or the product is retired.

10. Security

We use Shopify's PCI-DSS-compliant checkout, encrypt data in transit, limit staff access to customer data to the people who need it, and require strong authentication on the systems that hold it. No method of storage or transmission is perfectly secure, and we can't promise absolute security. If a breach affects your information we'll notify you as the law requires.

11. Visitors outside the United States

We're in Vermont and our systems (and our service providers') are in the United States. If you order from outside the U.S., your information is transferred to and processed in the U.S., where privacy laws may differ from yours.

European Economic Area and United Kingdom. Our legal bases for processing are: performing our contract with you (orders, subscriptions, support); our legitimate interests (running and securing the site, analytics, preventing fraud, business administration), balanced against your rights; your consent (marketing emails and non-essential cookies where consent is required); and legal obligations (tax, accounting). You have the right to access, correct, delete, restrict, or port your data, to object to processing based on legitimate interests, to withdraw consent at any time, and to complain to your data-protection authority (in the UK, the ICO). Transfers to the U.S. rely on standard contractual clauses maintained by our service providers. To exercise these rights, contact us at the address in section 14.

Canada. You may withdraw consent to our use of your information (subject to legal and contractual limits) and request access to it. You can complain to the Office of the Privacy Commissioner of Canada. We send marketing email to Canadian customers only with express or implied consent as defined by Canada's anti-spam law.

12. Do Not Track and Global Privacy Control

We honor Global Privacy Control signals as an opt-out of targeted advertising, "sale," and "sharing" for the browser sending the signal, in every state whose law recognizes it. We don't respond to older "Do Not Track" browser signals, because no common standard for them was ever adopted.

13. Changes to this policy

We'll update this page when our practices change and change the dates at the top. If a change is material (for example, a new way we share information), we'll post a clear notice on the site before it takes effect, and we'll email customers if the change affects information we've already collected. Earlier versions are available on request.

14. Contact

Runamok Maple, LLC 293 Fletcher Road, Fairfax, Vermont 05454 Email: info@runamokmaple.com Phone: 802.849.7943, Monday to Friday, 9:00 AM to 5:00 PM Eastern

Privacy questions and requests go to the same email address. We read everything and reply within 10 business days.