Skip to content

Free Carbon Neutral Shipping with Orders $125+

Privacy Policy

Last Updated: January 1, 2026 

Underthecanopy.com (“Under The Canopy,” “Company,” “we,” “our,” or “us”) respects the privacy of individuals who access or interact with the Under The Canopy website located at www.underthecanopy.com (the “Site”). This Privacy Policy describes how Under The Canopy collects, uses, processes, stores, and discloses information obtained through the Site and related ecommerce services. This Privacy Policy also describes certain rights that individuals may have regarding their personal information under applicable United States privacy laws.

By accessing or using the Site, users acknowledge that they have read and understand the practices described in this Privacy Policy.

1. Scope of This Privacy Policy
This Privacy Policy applies to information collected through the Site and through ecommerce transactions conducted with Under The Canopy. The policy applies to information collected directly from users, information automatically collected when users interact with the Site, and information obtained from third-party service providers that support Under The Canopy’s ecommerce operations. This Privacy Policy applies only to information collected through Under The Canopy’s digital platforms and does not apply to information collected through other channels unless otherwise indicated.

2. Categories of Information Collected
Under The Canopy may collect certain categories of information when individuals interact with the Site, create accounts, place orders, communicate with the Company, or otherwise use the Site. Such information may include identifiers such as names, email addresses, shipping addresses, billing addresses, telephone numbers, and account credentials. The Company may also collect commercial information related to ecommerce transactions, including order history, product purchases, payment verification information, and customer service interactions. In addition, Under The Canopy may collect internet or electronic activity information associated with interactions with the Site, including device information, browser type, operating system, IP address, referring URLs, pages viewed, interaction with Site features, and approximate geographic location derived from internet protocol addresses. Payment card information used to complete transactions is processed through secure third-party payment service providers and is generally not stored directly by Under The Canopy except where maintained through systems designed to support compliance with applicable payment security standards.

3. Methods of Information Collection
Information may be collected directly from individuals when they create accounts, place orders, subscribe to communications, contact customer support, participate in promotions, or otherwise interact with the Site. Information may also be collected automatically through technologies used to support the functionality and operation of the Site. These technologies may include cookies, device identifiers, analytics technologies, and similar tools used to measure website performance, maintain secure sessions, analyze user interactions, detect fraudulent activity, and improve website functionality. Under The Canopy may also receive certain information from third-party service providers that support ecommerce operations, including providers of payment processing services, ecommerce platform technologies, analytics services, fraud detection services, marketing systems, shipping and logistics services, and website hosting services.

4. Choice Regarding the Provision of Personal Information
Individuals may choose whether to provide certain categories of personal information to Under The Canopy when interacting with the Site. However, certain information may be necessary in order to create an account, process transactions, fulfill orders, provide customer support, or enable certain features of the Site. If a user chooses not to provide information required for these functions, Under The Canopy may not be able to complete transactions, provide requested products or services, or allow access to certain portions of the Site.

5. Use of Personal Information
Under The Canopy may use personal information for legitimate business purposes associated with operating its ecommerce services. Such purposes may include processing transactions, fulfilling orders, verifying payment information, managing accounts, providing customer service, communicating with customers regarding purchases, detecting fraudulent activity, protecting the security of the Site, improving website functionality, conducting analytics, complying with legal obligations, enforcing contractual rights, and supporting business operations.
Personal information may also be used to provide marketing or promotional communications regarding products, services, or promotions where permitted by applicable law. Individuals may opt out of receiving marketing communications by following the unsubscribe instructions included in those communications.

6. Aggregated and De-Identified Information
Under The Canopy may generate or use aggregated, anonymized, or de-identified information derived from personal information collected through the Site. Such information does not identify individual users and cannot reasonably be used to identify a specific individual. Aggregated or de-identified information may be used for purposes including website analytics, research and development, operational improvements, marketing analysis, product development, and other legitimate business purposes. Under The Canopy may share aggregated or de-identified information with service providers, partners, or other third parties where such information does not reasonably identify any individual.

7. Fraud Prevention and Risk Management
Under The Canopy may process and disclose certain categories of personal information as reasonably necessary to detect, prevent, and investigate fraudulent transactions, payment abuse, security incidents, or other unlawful activity. In connection with these efforts, Under The Canopy may share limited information with payment processors, financial institutions, fraud detection providers, risk management services, logistics partners, or other organizations that assist with fraud prevention or transaction security.

8. Disclosure of Personal Information
Under The Canopy may disclose personal information to service providers or contractors that assist the Company in operating its ecommerce platform. These may include providers of ecommerce platform technologies, website hosting services, payment processors, shipping carriers, marketing providers, analytics providers, fraud detection services, customer communication platforms, and cloud infrastructure providers.
Personal information may also be disclosed when necessary to comply with applicable laws, legal processes, government requests, or regulatory requirements. Under The Canopy may disclose information where necessary to enforce contractual rights, investigate fraud or security incidents, or protect the rights, property, or safety of the Company, its users, or the public.
In the event of a merger, acquisition, restructuring, financing transaction, or sale of assets, personal information may be transferred as part of that transaction subject to applicable legal obligations.

9. Cookie and Tracking Technology Policy
The Site may utilize cookies and similar technologies to operate and improve the functionality of the Site and to support ecommerce transactions. Cookies are small data files stored on a user’s device that allow websites to recognize returning users and maintain information related to browsing sessions.
Cookies and similar technologies may be used to maintain shopping cart contents, remember user preferences, enable secure login sessions, analyze website traffic, measure the effectiveness of marketing campaigns, detect fraud, and improve overall website performance. The Site may also use technologies such as pixels, web beacons, analytics tools, or advertising identifiers that assist with measuring website usage and supporting ecommerce operations.
Users may configure browser settings to block or delete cookies; however, disabling cookies may affect the functionality of certain features of the Site.

10. Sensitive Personal Information
Certain privacy laws, including the California Privacy Rights Act, define “sensitive personal information” to include categories of data such as government identification numbers, financial account information, precise geolocation data, and other information requiring enhanced protection. Under The Canopy generally limits the collection of sensitive personal information to what is reasonably necessary to process transactions, verify payments, detect fraud, comply with legal obligations, or provide services requested by customers. Sensitive personal information collected for these purposes is used only for legitimate business functions and is not used in ways that would require additional consumer consent under applicable law.

11. Data Retention
Under The Canopy may retain personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy. This may include maintaining transaction records, complying with legal or regulatory obligations, fulfilling tax or accounting requirements, resolving disputes, detecting fraud, enforcing agreements, and supporting business operations. When personal information is no longer required for these purposes, Under The Canopy may delete, anonymize, or otherwise dispose of such information in accordance with applicable legal requirements.

12. Data Security
Under The Canopy implements administrative, technical, and organizational safeguards designed to protect personal information collected through the Site. These safeguards may include access controls, encryption technologies, monitoring procedures, and internal policies designed to reduce the risk of unauthorized access, disclosure, or misuse of personal information. Although Under The Canopy takes commercially reasonable steps to protect personal information, no security system can be guaranteed to be completely secure. Security practices relating to ecommerce transactions are also described in the Company’s Ecommerce and Website Security Policy.

13. Sale or Sharing of Personal Information
Certain privacy laws, including the California Consumer Privacy Act and the California Privacy Rights Act, define the “sale” or “sharing” of personal information broadly to include certain disclosures to third parties for advertising or marketing analytics purposes.
Under The Canopy does not sell personal information for monetary compensation. However, certain disclosures to analytics providers, advertising technologies, or marketing platforms may be considered a “sale” or “sharing” of personal information under applicable privacy laws. Where required by law, individuals may request that Under The Canopy not sell or share their personal information, and Under The Canopy will honor verified consumer requests in accordance with applicable legal requirements.

14. Global Privacy Control Signals
Certain web browsers or privacy tools may transmit signals indicating a user’s preference that their personal information not be sold or shared. One such signal is known as the Global Privacy Control (“GPC”). Where Under The Canopy receives a valid Global Privacy Control signal indicating a preference to opt out of the sale or sharing of personal information, Under The Canopy will process such signal as a request to opt out of certain disclosures of personal information that may be considered a sale or sharing under applicable law. Because Global Privacy Control operates at the browser or device level, users who wish to apply the preference across multiple devices or browsers may need to enable the setting separately on each device.

15. Consumer Privacy Rights
Depending on the jurisdiction in which an individual resides, users may have certain rights regarding their personal information under applicable privacy laws such as the California Consumer Privacy Act, the Virginia Consumer Data Protection Act, and the Colorado Privacy Act. These rights may include the right to request access to personal information collected about them, request correction of inaccurate information, request deletion of certain personal information, obtain information about categories of personal information disclosed to third parties, or request limitations on certain uses of personal information.
Under The Canopy will respond to verified consumer requests in accordance with applicable legal requirements.

16. “Do Not Track” Signals
Certain web browsers transmit “Do Not Track” signals indicating a preference regarding tracking activities. Because there is not currently a universally accepted standard for interpreting such signals, Under The Canopy may not respond to all browser-based “Do Not Track” signals.

17. Children's Privacy
The Site is not directed to children under the age of thirteen and Under The Canopy does not knowingly collect personal information from children under thirteen in accordance with the Children's Online Privacy Protection Act. If the Company becomes aware that personal information has been collected from a child under thirteen without appropriate parental consent, Under The Canopy will take reasonable steps to delete such information.

18. External Links
The Site may contain links to third-party websites or services that are not operated or controlled by Under The Canopy . This Privacy Policy does not apply to the privacy practices of such third parties. Users are encouraged to review the privacy policies of any external websites they visit.

19. Changes to This Privacy Policy
Under The Canopy reserves the right to modify or update this Privacy Policy at any time. Updates will be posted on the Site and will become effective upon posting unless otherwise indicated. Continued use of the Site following the posting of updates constitutes acceptance of the updated policy.

20. Contact Information
Questions regarding this Privacy Policy or requests relating to personal information may be directed to Under The Canopy through the contact information provided on the Site.