Privacy Policy

Scope and contact

This policy describes the Heart-T-Hogs website, customer accounts, order handling and promotional email program. Contact Heart-T-Hogs at (530) 708-0508 or support@heartthogs.com. Our store is at 1030 N Main St, Alturas, California. Please do not send passwords, full card numbers or EBT PINs.

Information you provide

We collect contact information such as name, email and phone; fulfillment addresses; products, quantities, weights and order history; account credentials stored as password hashes; marketing preferences; and messages you send. Guest checkout is available. Creating an account lets you save basic checkout details. In-store customer details are optional unless needed for the transaction.

Technical and payment information

The site uses session identifiers, optional remembered-login credentials, security challenge information and rate-limit records. Hosting and security services may process IP addresses, device/browser details and request logs. We store payment status and transaction references. Card entry is handled by the payment provider, not a card-entry form hosted by this store. EBT cards and PINs are handled on the authorized in-person terminal; do not enter or send a PIN to this website.

Why we use information

We use information to fulfill orders, calculate prices, reserve inventory, send service messages, save account preferences, respond to requests, prevent abuse, reconcile payments and maintain necessary business records. Promotional email is optional and separately selected. We do not require promotional consent to buy products.

Recipients and outside services

Information is disclosed as needed to website hosting, Cloudflare Turnstile for abuse prevention, the configured email service, and enabled payment or fulfillment providers. Stripe, Square, Cash App, Venmo and in-person TotilPay may be used when offered. Providers may process information under their own privacy terms. We may disclose information when legally required, to protect people or rights, or as part of a lawful business transfer subject to applicable privacy obligations.

Tracking and advertising

The current store application does not include advertising pixels, cross-site advertising or audience-list sales. It does not sell personal information or share it for cross-context behavioral advertising. Necessary service disclosures are described above. We do not use account information for automated decisions that produce legal or similarly significant effects. See the Cookie and Device Storage Policy for browser controls.

Retention and security

We keep information for the time needed for orders, support, accounting, tax, food traceability, fraud prevention and legal obligations. Different records have different needs. Remembered-login credentials expire after 30 days; temporary password reset links expire after 30 minutes. Business records and backups may remain after an account deletion request where necessary or legally required. Access controls, hashed passwords and secure transport help protect information, but no system can promise absolute security.

Your choices and requests

You can update saved contact/address details in your account and unsubscribe from promotions using the link in an email. Contact us to request access, correction or deletion, to close an account, or to ask a privacy question. We verify identity using information reasonably needed for the request and do not ask for an EBT PIN or full payment-card number. Some records must be retained. See California Privacy Disclosures for rights that may apply.

Children and changes

The store is intended for adults making household purchases, not children under 13, and we do not knowingly collect information from children under 13. Contact us if a child has provided information. We post the effective date with this policy and will provide additional notice of material changes when required. Changes do not retroactively remove rights you have under applicable law.

Stripe and Square hosted payments

When you choose an enabled card method, we provide the processor with information needed for checkout, such as your order reference, items or descriptions, amount and currency, and contact details used by the integration. You provide card and billing information directly to the hosted processor. We receive transaction identifiers, payment status and amounts for order handling, reconciliation and refunds; we do not store full card numbers or card security codes. Processors may independently collect device, network, billing and fraud-prevention information and retain financial records under their own obligations. Read Stripe’s Privacy Policy and Square’s buyer Privacy Notice. Only the processor selected for your payment handles that checkout.

Cash App and Venmo

When offered for pickup, these payment apps handle the transfer outside our website. The information visible to us may include the payer’s name or app identifier, amount, transaction reference, time and payment note. Staff use those details to verify receipt and match the payment to your order. We do not receive your app password or bank login. Review the recipient and the app’s transaction privacy settings before paying, particularly Venmo’s visibility options, and keep notes limited to the order reference. Provider account, sharing and retention practices are explained in Cash App’s Privacy Notice and Venmo’s Privacy Statement. Purchasing does not subscribe you to Heart-T-Hogs promotional email.

In-person SNAP/EBT and TotilPay Go

When enabled, SNAP payments are completed with the customer present through the authorized terminal. The terminal, payment processor and applicable benefit-program systems handle card authentication and authorization under their own obligations. Our website records the order’s payment method, approved food amount, transaction reference and verification details, plus any separately paid cash fee and refund reference. Those records can indicate that SNAP was used; we use them for fulfillment, reconciliation, required records and resolving issues, not advertising profiles. Our website does not collect EBT card numbers, PINs or benefit balances and has no online EBT processing connection. Information about the provider is available at TotilPay’s legal/privacy page; your state benefit agency provides its own notices.

Cloudflare Turnstile

Selected forms load Cloudflare Turnstile to distinguish human visitors from automated traffic. Cloudflare processes browser and network signals including IP address, TLS fingerprint, user-agent/browser information and the site key with its associated origin. We send the challenge token and visitor IP address for server-side validation and use the result to accept or reject the protected request. Cloudflare processes signals to provide bot protection and also describes separate processing to improve bot detection in its Turnstile Privacy Addendum, which supplements its Privacy Policy. This is a security service, not an advertising pixel. Turnstile use does not mean our domain’s DNS or hosting has moved to Cloudflare. Contact us for assistance if the check prevents you from using a form.

Provider choices, retention and requests

The services listed here are used only where configured or selected; listing a future payment option does not mean it is currently accepted. Outside providers may process data in the United States or other countries under their own safeguards and notices. Account settings and privacy requests concerning information a provider holds independently should also be directed to that provider; we will handle requests about our own records through the contact details above. Deleting a Heart-T-Hogs account does not delete a payment-provider account or legally required financial records. We will update this notice before introducing materially different uses, optional tracking or online EBT.