Privacy & Data Policy
Last updated May 21, 2026
Protecting your private information is important to us. North Spore will never sell your personal data for monetary consideration. Some of our advertising and analytics integrations may constitute "sharing" of personal information under certain state privacy laws, as described in detail in this policy. You have the right to opt out of such sharing at any time.
North Spore (www.northspore.com) uses personal information for communication, purchasing and shipping products from our online store, and enhancing our site functionality. By using our store, you agree to the collection and use of this information in accordance with this policy.
Collection of Your Personal Information
In order to provide you with products and services, North Spore may collect personally identifiable information, such as your first and last name, mailing address, email address, and phone number. We do not collect any personally-identifying information about you unless you voluntarily provide it to us.
When you purchase North Spore's products and services, we collect billing and credit card information. This information is used to complete the purchase transaction. Payment information is processed by Shopify and is not stored on our servers.
You may also be required to provide personal information to us when you elect to use our products and services. These may include: (a) registering for an account; (b) sending us an email message; (c) submitting your credit card or other payment information when ordering and purchasing products and services; (d) joining our loyalty program; (e) entering a sweepstakes or contest sponsored by us or one of our partners; (f) signing up for a product subscription; (g) submitting a website review.
Use of Your Personal Information
We will use the information you provide to ship product and communicate with you in relation to the products and/or services you have requested from us. North Spore may also use your personally identifiable information to inform you of other products or services available from North Spore and its affiliates.
Sharing Information with Third Parties
North Spore shares personal information with third parties in the following categories:
Service providers. These partners process your information on our behalf to help us operate our business. We expect our service providers to protect the confidentiality of your information and to use it only for the purposes of providing services to North Spore. Service providers include: our e-commerce platform (Shopify), email and SMS marketing (Klaviyo), customer support (Reamaze), shipping carriers (FedEx, USPS), product review collection (Stamped.io), subscription management (Bold), loyalty rewards (Loyalty Lion), and pre-order management (Pre-Order Now).
Advertising and analytics partners. These partners receive information about your browsing behavior and interactions on northspore.com to help us measure site performance, deliver relevant advertisements, and understand how customers find and use our store. These partners may use this information for their own advertising and analytics purposes, including serving you ads on other websites and platforms. Advertising and analytics partners include: Google Analytics, Google Tag Manager, Google Ads, Google Merchant Center, Meta (Facebook/Instagram), TikTok, and on-site product recommendations (ReBuy).
Because these advertising and analytics partners may use your information for their own purposes, this activity may constitute "sharing" or "targeted advertising" under certain state privacy laws. You can opt out of this activity by visiting: https://northspore.com/pages/data-sharing-opt-out
Affiliate tracking. We use Impact to manage our affiliate marketing program. When you arrive at northspore.com through an affiliate link, Impact may collect information about the referring source and your resulting purchase to attribute commission to the affiliate partner.
Shopify. Our website and online store are hosted on the Shopify platform. Shopify processes your personal information on our behalf and may also use certain data in accordance with its own privacy policy, including to improve its services and for its own analytics purposes. You can review Shopify's privacy policy at https://www.shopify.com/legal/privacy.
Cookies and Tracking Technologies
North Spore and our third-party partners use cookies, pixels, and similar tracking technologies on northspore.com. These technologies collect information about your browsing activity, device, and interactions with our site.
Strictly necessary cookies are required for our website to function properly. These include cookies that enable you to browse our store, add items to your cart, and complete purchases. These cookies are set by Shopify and cannot be disabled without impairing site functionality.
Analytics cookies help us understand how visitors interact with our website, including which pages are visited most frequently and how users navigate between pages. We use Google Analytics and Google Tag Manager for this purpose. These cookies collect information in aggregate form to help us improve our site.
Advertising and remarketing cookies are used to deliver advertisements that are relevant to you and to measure the effectiveness of our advertising campaigns. These cookies are set by Meta (Facebook/Instagram), Google Ads, TikTok, and ReBuy, and may track your browsing activity across other websites and platforms. Information collected through these cookies may be used by these partners for their own advertising purposes, as described in the "Sharing Information with Third Parties" section of this policy.
Affiliate cookies are set by Impact when you arrive at our site through an affiliate link, and are used to attribute purchases to the referring affiliate partner.
Managing Your Cookie Preferences
You can opt out of analytics, advertising, and affiliate cookies by visiting our data sharing opt-out page: https://northspore.com/pages/data-sharing-opt-out
You can also manage cookies through your browser settings. Most browsers allow you to block or delete cookies, though doing so may affect your ability to use certain features of our website. If your browser sends a Global Privacy Control (GPC) signal, we will treat that as a request to opt out of advertising and analytics cookies, as described in the "Privacy Rights for Residents of Other U.S. States" section of this policy.
Automatically Collected Information
In addition to the cookies and tracking technologies described above, our servers automatically collect certain technical information when you visit northspore.com, including your browser type, operating system, access times, and referring website addresses. This information is used to maintain site functionality, ensure security, and provide general usage statistics.
Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with our legal obligations, resolve disputes, and enforce our agreements. The following outlines our general retention practices by data category:
Purchase and order data (name, shipping address, order history, transaction records) is retained for as long as necessary to support our business operations, comply with tax and accounting requirements, and fulfill our legal obligations.
Account information (name, email address, account preferences) is retained for as long as your account remains active. If you request account deletion, we will acknowledge your request within 10 business days and complete the deletion or anonymization of your information within a reasonable timeframe, not to exceed 90 days from receipt of your verified request, except where retention is required by law.
Email marketing data (email address, engagement history, preferences) is retained until you unsubscribe or request deletion. Upon unsubscribing, your email address is suppressed from future marketing communications but may be retained in our suppression list to ensure we honor your opt-out.
SMS marketing data (phone number, opt-in status, communication preferences) is retained until you opt out by replying STOP or request deletion. Upon opting out, your phone number is added to our suppression list.
Browsing and analytics data (pages visited, interactions, device and browser information) is collected through third-party tools, primarily Google Analytics, and is retained according to those platforms' retention settings. Google Analytics data is retained for 14 months by default.
Payment information (credit card numbers, billing details) is processed by Shopify and is not stored on North Spore's servers. Shopify retains this information in accordance with its own privacy policy and PCI-DSS requirements.
Customer support records (support tickets, email correspondence) are retained for as long as necessary to provide consistent service and resolve recurring issues.
When personal information is no longer needed for any of the above purposes, we will delete, anonymize, or securely dispose of it in accordance with industry-standard practices.
Your Privacy Rights Under California Law (CCPA/CPRA)
If you are a California resident, you have the following rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act:
Right to Know
You have the right to request that we disclose the following information about our collection and use of your personal information over the past 12 months:
- The categories of personal information we have collected about you
- The categories of sources from which we collected that information
- The business or commercial purpose for collecting or sharing that information
- The categories of third parties with whom we share that information
- The specific pieces of personal information we have collected about you
Categories of personal information we collect: Identifiers (name, email address, mailing address, phone number); commercial information (purchase history, products or services purchased); internet or electronic network activity (browsing history on northspore.com, interactions with our site and advertisements); and payment information (billing address, credit card number — processed by Shopify and not stored on our servers).
Categories of sources: Directly from you (account registration, purchases, email sign-ups, SMS opt-ins, product reviews, customer support inquiries); automatically from your device (browsing behavior, cookies, and tracking technologies when you visit northspore.com).
Business purposes for collection: Fulfilling and shipping orders; communicating with you about your purchases; sending marketing and promotional communications you have opted into; improving our website and product offerings; preventing fraud and securing our site.
Categories of third parties with whom we share personal information: Service providers (Klaviyo, Reamaze, FedEx, USPS, Stamped.io, Bold, Loyalty Lion, Pre-Order Now); advertising and analytics partners (Google Analytics, Google Tag Manager, Google Ads, Google Merchant Center, Meta, TikTok, ReBuy); affiliate tracking (Impact); e-commerce platform (Shopify). For more detail on what each category of partner receives and how they may use your data, see the "Sharing Information with Third Parties" section above.
Right to Delete
You have the right to request that we delete the personal information we have collected from you, subject to certain exceptions permitted by law (for example, where the information is needed to complete a transaction, detect security incidents, or comply with a legal obligation). Upon receiving a verifiable request, we will delete your personal information from our records and direct our service providers to do the same.
Right to Correct
You have the right to request that we correct inaccurate personal information that we maintain about you. Upon receiving a verifiable request, we will use commercially reasonable efforts to correct the information as directed.
Right to Opt Out of Sale or Sharing
North Spore does not sell your personal information in exchange for monetary consideration. However, some of our use of third-party advertising and analytics tools — including Google Analytics, Google Ads, Meta, TikTok, and ReBuy — may constitute "sharing" of personal information for cross-context behavioral advertising as defined under the CPRA. You have the right to opt out of this sharing.
To opt out, visit: https://northspore.com/pages/data-sharing-opt-out
Right to Limit Use of Sensitive Personal Information
North Spore does not use or disclose sensitive personal information for purposes beyond those authorized by CPRA Section 1798.121, including fulfilling your orders, providing our services, ensuring security, and other purposes that do not require an opt-out right.
How to Exercise Your Rights
You or your authorized agent may submit a request by emailing us at info@northspore.com or by writing to us at:
North Spore, 921 Riverside Street, Portland, ME 04103
Please include "California Privacy Request" in the subject line and specify which right you are exercising. We will need to verify your identity before processing your request, which may require you to confirm information associated with your account or recent orders.
Response timing: We will acknowledge your request within 10 business days and provide a substantive response within 45 calendar days of receiving your verifiable request. If we require additional time (up to an additional 45 days), we will notify you in writing of the reason and the expected completion date.
Authorized agents: You may designate an authorized agent to submit a request on your behalf by providing the agent with written, signed permission to act for you. We may still require you to verify your own identity directly with us before we process the agent's request.
Non-Discrimination
We will not discriminate against you for exercising any of your privacy rights. We will not deny you goods or services, charge you different prices, provide a different level of quality, or suggest that you will receive any of the above as a consequence of exercising your rights.
Notice of Financial Incentive
North Spore offers the Spore Rewards loyalty program, which provides financial incentives such as points, discounts, and other benefits in exchange for the collection of personal information.
Personal information collected through the program: When you enroll in Spore Rewards, we collect your name, email address, and purchase history. We also collect information about your engagement with the program, including points earned, redeemed, and referral activity.
Benefits offered: Members earn points on qualifying purchases and activities (such as account creation, referrals, and social media engagement) that can be redeemed for discounts on future purchases. Specific earning rates and redemption values are described on our Spore Rewards page.
How to opt in and opt out: Participation in Spore Rewards is voluntary. You can enroll through our website. You may opt out at any time by contacting us at info@northspore.com and requesting that your loyalty account be closed and your associated data deleted. Opting out will forfeit any unredeemed points.
Value of your data: We estimate the value of the personal information we collect through the loyalty program by calculating the cost of administering the program (including the value of discounts provided to members) relative to the number of program participants. This value is reasonably related to the overall value of the discounts and benefits provided to you as a member.
We do not offer the financial incentive to any consumer in exchange for the retention or sale of personal information. The loyalty program is designed to reward repeat customers, and the personal information collected is used to administer the program and improve your experience with North Spore.
Privacy Rights for Residents of Other U.S. States
Residents of Virginia, Colorado, Connecticut, Texas, Oregon, Montana, and other states with comprehensive privacy legislation may have additional rights regarding their personal information. These rights may include:
Right to Access and Portability. You may request a copy of the personal information we have collected about you in a portable, readily usable format (where technically feasible).
Right to Delete. You may request that we delete the personal information we have collected from you, subject to certain legal exceptions.
Right to Correct. You may request that we correct inaccurate personal information we maintain about you.
Right to Opt Out of Targeted Advertising. You may opt out of the processing of your personal information for the purpose of targeted advertising. Some of our third-party integrations, including Google Analytics, Google Ads, Meta, TikTok, and ReBuy, may use your information for targeted advertising purposes. To opt out, visit: https://northspore.com/pages/data-sharing-opt-out
Right to Opt Out of Profiling. You may opt out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. North Spore does not currently engage in profiling that produces such effects.
Universal Opt-Out Signals. We honor Global Privacy Control (GPC) signals sent by your browser as a valid opt-out request for targeted advertising and the sharing of personal information. No further action is needed on your part if you have GPC enabled. To learn more about GPC, visit https://globalprivacycontrol.org.
How to Exercise Your Rights
Submit a request by emailing us at info@northspore.com or writing to us at:
North Spore, 921 Riverside Street, Portland, ME 04103
Please include "Privacy Rights Request" in the subject line, specify which right you are exercising, and identify your state of residence. We will verify your identity before processing your request, which may require you to confirm information associated with your account or recent orders. We will respond to your request within the timeframe required by your state's applicable law (typically 45 days, with the possibility of a limited extension upon notice to you).
Appeals
If we deny your privacy request in whole or in part, you have the right to appeal that decision. To submit an appeal, email us at info@northspore.com with the subject line "Privacy Rights Appeal." We will respond to your appeal within 60 days. If you are not satisfied with the outcome of your appeal, you may contact your state's attorney general.
Non-Discrimination
We will not discriminate against you for exercising any of your privacy rights. We will not deny you goods or services, charge you different prices, or provide a different level of service as a consequence of exercising your rights.
Do Not Track Signals
Some browsers offer a "Do Not Track" (DNT) setting. There is currently no industry standard for how companies should respond to DNT signals, and we do not currently respond to them. We do, however, honor Global Privacy Control (GPC) signals as described above.
Children's Privacy
North Spore's website, online store, and purchasing services are intended for use by adults. We do not knowingly collect, use, or disclose personally identifiable information from children under the age of thirteen without verified parental consent, as required by the Children's Online Privacy Protection Act (COPPA).
If you are under the age of thirteen, please do not submit any personal information through our website. If you are a parent or guardian and believe that your child under thirteen has provided personal information to us, please contact us at info@northspore.com. Upon verification, we will promptly delete that information from our records.
Educational and Classroom Use
North Spore products are used in educational settings, including K-12 classrooms, homeschool programs, and school garden initiatives. In all such cases, purchases and account interactions are conducted by adults — teachers, administrators, or parents — and not by students. North Spore does not collect personal information directly from students through its website or educational programs. Any collection of student information in the classroom context (such as grow logs, photos, or project submissions) is managed by the educator or school and is subject to that institution's own privacy policies and applicable laws. North Spore does not request, require, or receive student-level data from educational partners.
International Visitors
North Spore is based in the United States and our website, products, and services are directed to consumers within the United States. We do not currently market to, target, or ship to consumers outside of the United States.
If you are visiting northspore.com from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States, where our servers are located and our central database is operated. Data protection laws in the United States may differ from those in your country of residence.
If you are located in the European Economic Area, United Kingdom, or another jurisdiction with data protection laws that provide specific individual rights, and you wish to exercise any rights you may have under those laws — including rights of access, correction, deletion, or data portability — please contact us at info@northspore.com. We will make reasonable efforts to respond to your request in accordance with applicable law.
Security of Your Information
North Spore takes reasonable measures to protect your personal information from unauthorized access, use, alteration, and disclosure. Our website uses SSL/TLS encryption to secure data transmitted between your browser and our servers. Payment information is processed by Shopify, which maintains PCI-DSS compliance for the handling of credit card data.
We restrict access to personal information to employees and service providers who need that information to operate, develop, or improve our services. Our third-party service providers are required to maintain appropriate security measures to protect your information.
While we strive to protect your personal information, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee the absolute security of your data.
External Data Storage
NorthSpore.com is powered by the Shopify platform and we use its services as well as Shopify-approved third-party apps to power our online business. We may store your data on servers provided by third party hosting vendors with whom we have contracted.
E-mail and SMS Communications
From time to time, North Spore may contact you via email or phone for the purpose of providing announcements, promotional offers, alerts, confirmations, surveys, and/or other general communication. If you would like to stop receiving marketing or promotional communications via email from North Spore, you may opt out by clicking the unsubscribe link included in every marketing email, or by contacting us at info@northspore.com.
SMS Marketing & Text Messaging
By providing your phone number and opting in to receive SMS messages from North Spore, you agree to receive recurring text messages, including promotional offers, order updates, abandoned cart reminders, and other marketing communications. Message frequency may vary. Consent is not a condition of any purchase.
Message and data rates may apply. You can unsubscribe at any time by replying STOP, END, CANCEL, QUIT, or UNSUBSCRIBE to any message. After opting out, you will no longer receive SMS messages from us.
We collect and store your phone number, opt-in status, and any communication preferences you provide. Your information may be shared with trusted third-party platforms, such as our SMS service provider, solely for the purpose of delivering messages on our behalf. We do not sell or rent your phone number.
All SMS data is transmitted securely and retained in accordance with the Data Retention section of this policy, or until you opt out or request deletion.
For questions about our SMS program or to request data deletion, contact us at info@northspore.com.
Links
NorthSpore.com contains links to other sites. Please be aware that we are not responsible for the content or privacy practices of such other sites. We encourage our users to be aware when they leave our site and to read the privacy statements of any other site that collects personally identifiable information.
Changes to this Policy
North Spore reserves the right to change this Privacy & Data Policy from time to time. We will notify you about significant changes in the way we treat personal information by sending a notice to the primary email address specified in your account, by placing a prominent notice on our website, and/or by updating any privacy information. Your continued use of the website and/or services available after such modifications will constitute your: (a) acknowledgment of the modified policy; and (b) agreement to abide and be bound by that policy.
Contact Information
North Spore welcomes your questions or comments regarding this Privacy & Data Policy. If you believe that North Spore has not adhered to this policy, please contact North Spore at:
North Spore, 921 Riverside Street, Portland, ME 04103
Email Address: info@northspore.com
Effective as of May 21, 2026