Merrimack
Mushroom Co.

Your information

Privacy Policy

This policy explains what Merrimack Mushroom Co. collects through this website and our customer communications, why we use it, and the choices available to you.

Effective July 19, 2026

1. Scope

This policy applies to information handled through merrimackmushroom.com, customer accounts, harvest alerts, orders, support requests, and related email or SMS communications. It does not govern a third party's own website or independent privacy practices.

2. Information we collect

Depending on how you use the service, we may collect:

  • Contact details: name, email address, phone number, and support messages.
  • Account details: account identifier, authentication events, and profile preferences.
  • Order and fulfillment details: items, amounts, order status, pickup selection, delivery address, delivery quote, and instructions.
  • Communication choices: email and SMS consent, unsubscribe or STOP events, and the disclosure shown when consent was given.
  • Payment metadata: amounts, currency, payment status, and Stripe transaction identifiers.
  • Technical and security data: IP address, browser or device information, essential cookies, timestamps, and request or audit records used to operate and protect the service.

We collect information from you, from the device or browser you use, and from providers that process an action you request, such as a payment, email, text, address quote, or account sign-in.

3. How we use information

  • operate accounts, harvest alerts, reservations, payments, pickup, and delivery;
  • send receipts and order, delivery, cancellation, or refund updates;
  • answer support requests and resolve quality or fulfillment issues;
  • record and honor email and SMS choices;
  • prevent fraud, abuse, card testing, and unauthorized access;
  • reconcile payments, refunds, inventory, and business records; and
  • comply with law, enforce our terms, and protect customers, the business, and others.

4. Payment information

Card and eligible device-wallet payments are entered into Stripe's hosted Checkout. Stripe receives and processes the complete payment credentials under its own privacy terms. Merrimack Mushroom does not receive or store your complete card number or card security code. We do retain limited transaction, payment-status, dispute, and refund information needed to fulfill orders and maintain accurate records.

5. Cookies and security data

We use essential cookies and similar technical records to maintain an authenticated session, protect administrative and customer accounts, apply rate limits, and keep the site working. We do not currently use customer information from this site for targeted advertising.

6. How we share information

We share only what is reasonably needed with service providers that help us run the service. Depending on the feature, these include Stripe for payments, Supabase for application data and authentication, Vercel for website hosting, Resend for email, SignalWire for SMS, and Mapbox for delivery-address and distance services. Those providers handle information under their own terms and our arrangements with them.

We may also disclose information when reasonably necessary to comply with law, respond to valid legal process, investigate fraud or safety issues, enforce our agreements, or protect rights and property. If the business is reorganized or transferred, information may be part of that transaction subject to applicable law. We do not sell or rent personal information.

7. Your choices

  • Use the unsubscribe link in a harvest email to stop marketing email.
  • Reply STOP to a harvest-drop text to stop marketing SMS; reply HELP for help.
  • Update available profile and communication preferences through your account.
  • Contact us to ask for access to or correction or deletion of your information. We may need to verify the request and may keep records required for orders, accounting, security, consent, disputes, or law.

Opting out of marketing does not prevent necessary messages about an order or support request.

8. Retention and security

We keep information for as long as reasonably needed for the purposes described here, including order fulfillment, customer service, accounting, fraud prevention, consent records, disputes, and legal obligations. Retention periods vary by record type.

We use reasonable administrative and technical safeguards designed for the information we handle. No online system can promise absolute security, so please use unique account credentials and contact us if you suspect unauthorized account activity.

9. Children

This service is intended for adults purchasing food and is not directed to children under 13. We do not knowingly collect personal information from children under 13. Contact us if you believe a child has provided information so we can review and address it.

10. Updates and contact

We may update this policy as the service or our data practices change. The effective date above identifies the current version. Questions or privacy requests can be sent to hello@merrimackmushroom.com or through our contact form.

Back to top