Privacy policy

Effective and last updated: November 3, 2026

November 3 update: We added information about Klaviyo, optional SMS and rewards, Trybe measurement, and Colorado privacy choices. No one is subscribed to SMS by this update.

This Privacy Policy explains how Pelican Peaks LLC ("Pelican Peaks," "we," "us," or "our") collects, uses, discloses, and retains personal information when you visit our website, shop with us online or at markets, join our email or SMS lists, participate in available rewards programs, submit reviews, contact us, or place an order. Pelican Peaks is a small-batch gourmet mix business based in Windsor, Colorado.

1. Information we collect

Information you provide

• Accounts, email signups, and communications: when you use Shopify sign-in, we receive your account name, email address, email-marketing status, and Pelican Peaks order and product history. We also collect anything you include in a message to us.
• Shopping and checkout: the products in your cart, a ZIP code entered for a shipping estimate, and information you provide at Shopify checkout, such as your name, contact details, billing and shipping addresses, and order details.
• Payment information: payment information is collected and processed by Shopify and its payment providers. Pelican Peaks does not receive your complete card number.
• Support requests: your order number, photos, and other details you provide about a damaged, missing, incorrect, or quality-related item.

Marketing and rewards information

We collect the email address and phone number you provide, your subscription choices, consent source and time, and unsubscribe requests. When you enroll in an available rewards program, we also use your customer identifier, eligible purchases and refunds, points balance, rewards and redemption history. We use this information to identify your account, administer benefits, prevent duplicate rewards, and send messages through the channels you choose. Providing a number for a receipt, order, or rewards lookup does not by itself authorize marketing texts.

Information collected automatically

We use essential browser storage to remember your cart, Shopify sign-in, landing source, pages and product categories viewed, active time on pages, additions to your bag, and recent offer interactions. We use this first-party activity during the browser session to personalize product and offer choices. When you begin Shopify checkout, we attach a compact shopping-journey summary to the Shopify cart and any completed order. The summary can include a broad traffic-source category, landing path, page-depth and active-time measurements, product or category interest signals, account-status flags, and whether a recommendation was shown or accepted. It excludes your email address, Shopify customer ID, account tokens, exact browsing timestamps, and raw advertising campaign names. Needle 3 processes its recommendation context locally in your browser; we do not send that context to Cactus Compute. If you choose “Allow measurement,” Meta and Trybe tracking also collect information about page visits and shopping actions, such as viewing a product, adding an item to your bag, or beginning checkout. We do not send payment-card details through the pixel.

Our website and service providers also process device and connection details, such as IP address, browser, device type, and approximate location inferred from an IP address, phone country code, or address you supply. We use location information for delivery, regional availability, fraud prevention, and appropriate message timing. We do not request or collect precise GPS location through our website or SMS program. Marketing providers may record message delivery, opens, link clicks, and opt-outs to measure effectiveness and manage preferences.

Information from service providers

We may receive order, transaction, fulfillment, fraud-prevention, and delivery information from Shopify, carriers, website hosting providers, or other providers that help us operate the business.

2. How we use information

• provide the website, cart, shipping estimates, checkout, fulfillment, customer service, and refunds;
• process and communicate about orders;
• send email or SMS promotions through the channels you separately choose, administer available rewards, and process unsubscribe requests;
• combine your current shopping activity with Pelican Peaks purchase interests to select relevant products or offers before checkout;
• protect the website and business, detect fraud, and enforce our terms;
• comply with tax, accounting, food-safety, legal, and regulatory obligations; and
• improve our products, services, and customer experience.

3. How we disclose information

We disclose personal information only as reasonably needed for the purposes above, including to:

• Shopify and payment providers for ecommerce, payment, fraud prevention, checkout, and order administration;
• Klaviyo to store contact and subscription records, synchronize Shopify customer and order information, deliver opted-in email and SMS messages, and measure message engagement. For rewards communications, this may include point balances, eligible rewards, and redemption events;
• website hosting providers, including Netlify, for site delivery, security, and website functions;
• shipping carriers and fulfillment providers to deliver orders;
• professional advisers and vendors that support accounting, legal, security, or business operations; and
• government authorities or other parties when required by law, to protect rights and safety, or in connection with a business transaction.

We do not sell personal information for money. When you consent, we disclose limited website activity and device information to Meta and Trybe for advertising measurement and attribution. Depending on applicable law, this use may be considered targeted advertising, sharing, or a sale. You can decline or change this choice at any time.

4. Cookies, local storage, and advertising choices

Essential browser storage is used for the cart, Shopify account session, session-level shopping interests, and offer eligibility. Meta and Trybe tracking load only after you choose “Allow measurement.” It helps us measure visits and shopping actions associated with our advertising. Choose “Privacy choices” on any page to change your selection. We honor an enabled Global Privacy Control signal by keeping optional Meta and Trybe tracking off. See our Cookie Policy for details.

5. Email, SMS, and rewards

Email

We use Shopify and Klaviyo to manage subscriptions and send promotional email to people who opt in. Unsubscribe through the link in an email or contact us below. Necessary order or account messages may still be sent. Email and SMS choices are separate; subscribing to one does not subscribe you to the other.

Pelican Peaks SMS

When our SMS program is available and you expressly opt in, Pelican Peaks may send recurring automated promotional texts about mixes, seasonal offers, rewards available to spend, and bonus-point events. Message frequency varies; message and data rates may apply. SMS consent is not a condition of purchase or rewards membership. Reply STOP to unsubscribe or HELP for assistance, or contact us below. A confirmation of your opt-out may be sent. Our SMS service is being set up; this notice does not enroll you or authorize us to send you texts.

SMS privacy: We do not sell or share mobile numbers, SMS opt-in records, or SMS consent status with third parties or affiliates for their own marketing or advertising. We disclose those records only as needed to operate and support our messaging service, such as to Klaviyo, communications providers, and carriers, or as required by law. These restrictions apply even where another part of this policy describes broader sharing.

We do not currently send abandoned-cart SMS reminders. Before enabling them, we will update this notice to explain the actual cart-tracking technology and collect the appropriate consent. Our website stores your bag locally and sends cart and checkout information to Shopify when you begin checkout; that activity alone is not permission to text you.

Rewards and signup offers

Our first-order email offer requires Shopify sign-in and email signup. Shopify stores your contact details, consent, signup source, customer tag, and order history to check eligibility. The offer provides 20% off an eligible first order of three or more mixes, subject to the offer terms shown at signup and checkout. You may unsubscribe at any time. Advertising measurement and SMS consent are not required.

We are preparing Pelican Perks, an optional rewards program: 1 point per $1 of eligible merchandise purchased, with 100 points redeemable for $5 off. Enrollment and final offer terms will be shown when the program becomes available. We will use contact details, customer identifiers, purchases, refunds, and points and redemption records to provide and protect these benefits. Shopify, our hosting providers, and Klaviyo support account administration, storage, and communications. Pelican Peaks supplies the rewards; there are no outside reward partners or data brokers receiving program data for these benefits.

Rewards enrollment will not automatically subscribe you to email or SMS. We do not sell rewards enrollment data or use it for cross-site targeted advertising; any such future use would require separate permission. You may leave rewards or request deletion by contacting us. Deleting the identity or transaction records needed to associate points with you can prevent us from maintaining or redeeming your balance. We will explain any effect on benefits before acting and, where Colorado law applies, provide at least 24 hours' notice before ending an affected benefit. Declining advertising or unsubscribing from messages does not cancel earned rewards.

6. Retention

We retain information only as long as reasonably necessary for the purpose collected, including to provide orders and support and meet tax, accounting, legal, food-safety, dispute, and security obligations. Contact and rewards records are kept while needed to administer the relationship. After an unsubscribe or deletion request, we may retain limited consent, suppression, transaction, and compliance records so we can honor the request, prevent unwanted messages, and meet legal obligations. Unsubscribing stops marketing; it does not automatically erase purchase records. Browser-storage records remain until they are cleared or replaced.

7. Security

We use reasonable administrative, technical, and organizational safeguards appropriate to a small ecommerce business. No storage or transmission method is completely secure, so we cannot guarantee absolute security. Do not send payment-card numbers or sensitive information by email.

8. Your privacy rights and Colorado requests

Subject to applicable law and its exceptions, you may request confirmation of whether we process your personal data, access, correction, deletion, or a portable copy. You may opt out of sale or targeted advertising and of profiling used for decisions with legal or similarly significant effects. We do not use your information to make automated decisions about matters such as credit, employment, or housing.

Submit a request: email pelicanpeaksgourmet@gmail.com with the subject “Privacy Request,” or call 970-617-6192. Tell us the right you want to exercise and how we can locate your account. We may confirm your control of the email address or phone number on file or match limited order details. Do not send identification documents or payment-card information unless we arrange a secure, necessary verification method. You do not need to create an account to submit a request. Contact us for an accessible alternative format or assistance.

Opt out: use “Privacy choices” on this website and select “Essential only.” An enabled Global Privacy Control signal keeps optional advertising tracking off for that browser. Contact us to apply an opt-out to other information linked to your customer record. An authorized agent may contact us on your behalf; we may request evidence of authorization and, where needed, verify your identity. Shopify-controlled pages provide their own privacy controls, including the Shopify Privacy Portal.

Colorado timing and appeals: when the Colorado Privacy Act applies, we respond to requests within 45 days, with up to 45 additional days if reasonably necessary and with notice and reasons within the original period. To appeal a denial, reply to our response or use the same email or phone with “Privacy Appeal” and explain your concern. We respond to appeals within 45 days; where permitted and reasonably necessary, we may extend that period by up to 60 days with notice and reasons. If you disagree with the appeal result, you may contact the Colorado Attorney General. We will not unlawfully discriminate against you for exercising privacy rights.

9. Children and teens

Our website, marketing, and rewards are intended for adults, not children or teens under 18. We do not knowingly collect information from children under 13. We do not knowingly sell minors' personal data, use it for targeted advertising or significant-decision profiling, or collect their precise geolocation. If we learn a child provided information, we will take appropriate steps to delete it or otherwise handle it as required by law. A parent, guardian, or teen may contact us using the methods above for assistance.

10. Shopify and third-party sites

Account sign-in and checkout are provided by Shopify, which processes information under its own terms and privacy practices. Learn more in the Shopify Consumer Privacy Policy. Shopify may also process information for its own services and enhanced features, including information from interactions with other merchants, under its own privacy policy. Requests relating to those uses can be made through the Shopify Privacy Portal. Our SMS consent restrictions still apply to our disclosures. Links to third-party sites are governed by those sites' policies.

11. United States processing

Pelican Peaks operates in the United States. If you visit from another country, information may be processed in the United States and other locations where our providers operate, subject to applicable safeguards.

Product reviews

When you submit a review, we collect the product, rating, written feedback, display name, and your permission to publish. If you provide an email address, we use it only to follow up about your review; it is not displayed publicly and does not subscribe you to marketing emails. Reviews are stored through Netlify Forms and checked before publication. To request a correction or removal, contact Pelican Peaks.

12. Changes and contact

We may update this policy to reflect changes in our practices or the law. We will post the revised policy and update the date above. For material changes, we will provide additional notice through the website or our usual customer contact channel as required by law, and obtain consent before a new use when required. Questions or requests may be sent to Pelican Peaks LLC at pelicanpeaksgourmet@gmail.com, Windsor, Colorado, USA.