Privacy Policy

Effective Date: August 18, 2026

Botanic, LLC (“Botanic,” “we,” “us,” or “our”) is formed in Colorado and headquartered and operating in Texas. This Privacy Policy explains how Botanic collects, uses, discloses, retains, and protects personal information through the official Botanic website, Customer and Distributor accounts, TeamSpace, Cultivate, the Botanic Support Center, Company-controlled communications, events, transactions, and related services.

This Policy does not govern an independent Distributor’s unauthorized collection or use of information. Distributors may use personal information only as permitted by the Distributor Agreement, Policies and Procedures, this Policy, and applicable law. Botanic does not authorize Distributors to maintain external prospect databases, spreadsheets, contact lists, or customer-relationship systems.

1. Personal Information We Collect

Depending on how a person interacts with Botanic, we may collect:

A. Identifiers and contact information

Name, username, email address, telephone number, mailing and shipping address, account identifiers, and similar contact information.

B. Account and authentication information

Account credentials, authentication records, account status, preferences, consent choices, Sponsor or Distributor attribution, and records reasonably needed to protect and administer an account. Botanic does not ask a person to provide passwords or authentication codes through unapproved Support or communication channels.

C. Transaction and commercial information

Products and services viewed or purchased, shopping-cart information, orders, subscriptions, Membership, shipping and delivery information, returns, refunds, credits, chargebacks, transaction status, receipts, and customer-service history.

Payment credentials are processed through Company-approved payment processors. Botanic may receive transaction identifiers, payment status, payment method type, limited card information such as the last four digits, billing details, fraud indicators, and settlement, refund, void, or dispute information. Botanic does not intend to store complete payment-card numbers or security codes in its ordinary business systems.

D. Distributor and business information

Application and enrollment information, age or identity verification, tax information, Sponsor attribution, rank, qualification, organizational relationships, sales and volume information, commissions, bonuses, adjustments, payout records, compliance and training records, and information needed to administer the Distributor relationship and Compensation Plan.

E. Communications, Support, and request information

Messages, Support tickets, issue category, order number, Product or lot information, attachments, privacy or accessibility requests, language-assistance requests, complaints, and records of Botanic’s response and resolution.

F. Product-safety and incident information

When voluntarily provided or reasonably required, Botanic may collect factual information concerning a Product complaint, injury, illness, allergic reaction, exposure, property damage, packaging or labeling issue, lot or batch information, photographs, and whether emergency services, Poison Control, a healthcare professional, or another authority was contacted.

Do not submit medical records, diagnoses, government identification, complete payment credentials, passwords, authentication codes, or other unnecessary sensitive information through the Support Center. Botanic may request limited additional information through an authorized process when reasonably necessary and lawful.

G. Device, network, and usage information

Internet Protocol address, browser and device type, operating system, referring and visited pages, timestamps, session and security information, cookie identifiers, shopping-cart activity, and information about interaction with Botanic’s website and services.

H. Marketing and communication preferences

Email or text-message subscription status, consent source and date, communication channel, preferences, unsubscribe or stop-contact status, and records needed to honor a request not to receive further marketing.

I. Event, media, accessibility, and language information

Event registration and attendance information, recording or media consent, accessibility requests, preferred communication format, approved language or equivalent-path requests, and information reasonably necessary to provide the requested service. A person is not required to disclose a diagnosis or disability to request an accessible format or equivalent communication path.

2. Sources of Personal Information

We may collect personal information:

• Directly from the person;
• Through the official Botanic website, checkout, accounts, TeamSpace, Cultivate, or Support Center;
• Through a Distributor’s replicated link for attribution, without making the Distributor the seller or account controller;
• Automatically through cookies, logs, and similar technologies;
• From Company-approved payment, shipping, identity-verification, communications, hosting, security, analytics, and other service providers;
• From a Distributor, Host, Event Organizer, or other person when authorized and permitted by Company policy and law; and
• From public records, regulators, legal processes, fraud-prevention sources, or other lawful sources.

3. How We Use Personal Information

Botanic may use personal information to:

• Create, authenticate, administer, and protect accounts;
• Process orders, payments, subscriptions, Membership, shipping, returns, refunds, credits, and transaction disputes;
• Attribute a Customer or applicant to the applicable Distributor through a replicated link;
• Administer Distributor enrollment, training, compliance, qualification, rank, compensation, and payouts;
• Provide TeamSpace, Cultivate, the Support Center, and other approved services;
• Respond to questions, privacy requests, accessibility requests, language-assistance requests, complaints, and incidents;
• Investigate Product-safety matters, defects, exposures, adverse events, unauthorized activity, fraud, security incidents, and legal claims;
• Send transactional, account, service, safety, policy, and legally required communications;
• Send marketing communications when permitted and honor opt-outs and stop-contact requests;
• Maintain accurate records, audit trails, consent evidence, suppression records, and document versions;
• Improve, secure, test, troubleshoot, and measure Botanic’s systems and services;
• Enforce agreements, policies, and legal rights; and
• Comply with legal, tax, accounting, regulatory, safety, recall, reporting, and recordkeeping obligations.

4. Cookies and Similar Technologies

Botanic may use cookies and similar technologies that are necessary for account login, security, fraud prevention, shopping-cart operation, checkout, preferences, site functionality, and service delivery.

Botanic may also use analytics or measurement technologies to understand service performance and improve the website when configured and permitted by applicable law. Botanic will not represent that a particular analytics, advertising, preference, or cookie-control feature exists unless it has been verified and adopted.

Browser controls may allow a person to limit cookies, but disabling necessary cookies may prevent account, cart, checkout, or other features from working correctly.

Botanic does not rely on a general browser “Do Not Track” signal as a universal instruction because no single standard governs all such signals. Botanic will recognize legally required opt-out preference signals, including Global Privacy Control when applicable to the relevant processing.

Botanic does not sell personal information. Botanic will not use personal information for cross-context behavioral advertising or other targeted advertising as defined by applicable state privacy law unless Botanic first provides the notice, consent, and opt-out rights required by law.

5. Marketing, Email, and Text Messages

Botanic may send marketing email or text messages only when permitted by the person’s consent, request, relationship with Botanic, and applicable law.

A person may use the unsubscribe link in an email or reply STOP to an eligible text-message program. Transactional, safety, legal, account, or Support communications may still be sent when permitted or required after a marketing opt-out.

Mobile opt-in information and consent will not be sold, rented, or disclosed to third parties for their independent marketing or promotional purposes. Service providers may process mobile information only as needed to provide Botanic’s communication service or comply with law.

Company-controlled email suppression may be administered through Botanic’s approved communication platform. A Distributor’s personal call, text, email, or direct-message outreach remains subject to the immediate stop-contact requirements in the Policies and Procedures. Botanic does not authorize a Distributor to upload prospect lists to an external spreadsheet, CRM, mailing platform, or shared repository.

6. How We Disclose Personal Information

Botanic may disclose personal information to:

A. Service providers and processors

Providers supporting payment processing, fraud prevention, identity or age verification, shipping, hosting, cloud services, website operation, email and text delivery, analytics, security, Support, learning systems, accounting, tax, legal, insurance, and other approved business functions. These providers may use information only as permitted by their agreement with Botanic and applicable law.

B. Distributors

Botanic may provide a Distributor with limited Customer, attribution, organizational, transaction, or business information when reasonably necessary to administer the replicated-link relationship, provide authorized Customer service, calculate compensation, or operate the Distributor program. Distributors receive information on a need-to-know basis and may not use it for an unrelated purpose or place it in an unauthorized system.

C. Business and professional parties

Auditors, insurers, attorneys, accountants, consultants, financial institutions, and other professional advisers when reasonably necessary and subject to appropriate confidentiality or legal obligations.

D. Legal, safety, and regulatory recipients

Courts, regulators, law enforcement, emergency personnel, Poison Control, healthcare or safety authorities, payment networks, financial institutions, or other parties when reasonably necessary to comply with law, protect a person, investigate a Product or security incident, prevent fraud, enforce an agreement, or establish, exercise, or defend legal rights.

E. Business transactions

A prospective or actual buyer, successor, lender, investor, or transaction adviser in connection with a merger, financing, sale, reorganization, bankruptcy, or transfer of all or part of Botanic’s business, subject to applicable law and appropriate protections.

F. At the person’s direction

Other parties when the person directs or affirmatively consents to the disclosure.

Botanic does not sell personal information for money. Botanic does not disclose personal information to third parties for their independent direct marketing without the notice and choice required by law.

7. Distributor Responsibilities

A Distributor may collect, use, store, or transmit personal information only through an approved Botanic process and only for an authorized purpose.

Botanic currently does not authorize Distributors to maintain a prospect database. Distributors must not create or use external prospect spreadsheets, CRMs, shared documents, purchased lists, scraped lists, or other repositories. Person-to-person outreach, permission, follow-up, stop-contact, and prospect-record rules are governed by Sections 5.2.1 through 5.2.3 of the Policies and Procedures.

A Distributor must not request or retain complete payment-card information, banking credentials, passwords, authentication codes, government identification, medical records, or other unnecessary sensitive information. A suspected privacy or security incident must be reported through the Botanic Support Center.

8. Data Retention

Botanic retains personal information only for as long as reasonably necessary for the purpose for which it was collected and for legitimate business, legal, tax, accounting, safety, fraud-prevention, dispute, audit, compliance, and recordkeeping requirements.

Retention periods vary by record type and may consider:

• Whether an account, subscription, Distributor relationship, transaction, request, dispute, investigation, or legal obligation remains active;
• Applicable statutes of limitation and legal, tax, accounting, regulatory, recall, safety, and payment-network requirements;
• The need to maintain consent, version, suppression, compliance, compensation, and audit evidence;
• Whether information is subject to a legal hold; and
• Technical backup, restoration, and security requirements.

Botanic may retain the minimum information reasonably needed to honor a stop-contact request, prevent fraud, document compliance, or satisfy law even after other information is deleted. When retention is no longer required, Botanic will delete, deidentify, or securely dispose of the information through an approved process.

9. Security

Botanic uses administrative, technical, and physical safeguards designed to protect personal information, including access controls, authentication, encryption in transit where appropriate, logging, backups, least-privilege access, and service-provider controls.

No system or transmission method is completely secure. A person should protect account credentials, use trusted Botanic links, and report suspected phishing, account takeover, unauthorized access, payment-data exposure, or other security concerns through the Botanic Support Center.

If a security incident requires notice, Botanic will provide notice to affected persons, regulators, or other parties in the manner and time required by applicable law. Botanic does not promise a fixed notification period when a different legal standard applies.

10. Privacy Rights and Choices

Depending on the person’s location and applicable law, a person may have the right to:

• Confirm whether Botanic processes their personal information;
• Access or obtain a copy of personal information;
• Correct inaccurate personal information;
• Delete personal information, subject to lawful exceptions;
• Obtain a portable copy of certain information;
• Opt out of certain targeted advertising, sale, sharing, or profiling activities if Botanic engages in them;
• Withdraw consent for future processing when consent is the applicable basis;
• Appeal Botanic’s decision concerning a privacy request; and
• Receive equal service and not be unlawfully discriminated against for exercising a privacy right.

To exercise a privacy right, submit a request through the Botanic Support Center at:

https://shopbotanic.co/my-account/support-helpdesk/

Select the applicable privacy issue category. Botanic may request information reasonably necessary to verify identity, authority, residency, account, and the scope of the request. Do not submit passwords, authentication codes, complete payment credentials, or unnecessary identity documents through the general ticket description.

An authorized agent may submit a request when permitted by law. Botanic may require proof of the agent’s authority and may verify the request directly with the person.

Botanic will respond within the period required by applicable law. If Botanic denies a request in whole or in part, Botanic will provide the explanation and appeal information required by law.

11. Accessibility and Language Assistance

A person may request an approved accessible format or equivalent communication path without disclosing a diagnosis or disability. Privacy, accessibility, and language-assistance requests must be submitted through the Botanic Support Center.

Translation and accessibility are related but distinct. An unofficial translation must not be treated as an authoritative Privacy Policy or consent record. Unless applicable law or an official translated version expressly provides otherwise, the controlling English-language version governs Botanic’s interpretation.

12. Children’s Privacy and Age-Restricted Services

Botanic’s services are not directed to children under 13, and Botanic does not knowingly collect personal information from a child under 13 through a service directed to that child.

Distributor enrollment is limited to eligible adults. Certain Products or transactions may require age or identity verification. Botanic may decline, restrict, or cancel an account or transaction that cannot lawfully be completed.

If a parent or legal guardian believes a child provided personal information to Botanic improperly, the parent or guardian should submit a request through the Botanic Support Center.

13. Third-Party Services and Links

Botanic’s services may link to or use independent payment processors, carriers, identity-verification providers, social networks, video providers, analytics services, or other third-party services. Their own privacy notices may govern information they collect independently.

Botanic is not responsible for an independent third party’s privacy practices, but this Section does not release Botanic from its own obligations or from a responsibility imposed by applicable law.

14. United States Operations

Botanic’s services are operated from the United States and are presently intended for eligible United States users and transactions. Information may be processed in the United States and in other locations where approved service providers operate, subject to applicable law and contractual protections.

15. Changes to This Policy

Botanic may update this Policy prospectively. The current Policy will identify its effective date.

Botanic will provide notice and obtain additional consent when required by law. A change will not retroactively authorize a materially different use of previously collected personal information when additional notice or consent is legally required.

Superseded versions and material consent evidence may be retained as reasonably necessary for legal, audit, compliance, and transaction purposes.

16. Contact

The Support Center is the single public route for privacy questions, requests, complaints, accessibility issues, language assistance, security reports, product-safety matters, and Customer or Distributor support:

https://shopbotanic.co/my-account/support-helpdesk/

For an immediate medical emergency, call 911 or the applicable local emergency-service number. For a suspected poisoning or exposure in the United States, contact Poison Control at 1-800-222-1222 or https://www.poison.org/. The Support Center is not an emergency or poison-response service.