Privacy Policy

Last Updated: May 21, 2026

Plain-language version: we collect what we need to fulfill your orders, run our refill and rewards programs, and stay in touch with you on your terms. We never sell your data. You can opt out of any marketing channel at any time.

Who we are

Exist Green is a zero-waste market and refillery at 4914 Underwood Avenue, Omaha, Nebraska 68132. Our website is existgreen.com. We run both an online store and a brick-and-mortar shop.

What we collect, and when

When you browse the site

• IP address and browser type (for security, fraud prevention, tax estimation, and shipping)
• Products and pages viewed (so we can show “recently viewed” and improve the site)
• Cookies for cart contents, login state, and screen preferences

When you create an account or check out

• Name
• Email address
• Phone number
• Billing and shipping addresses
• Payment details (handled by our payment processor, not stored on our servers)
• Order notes you add at checkout (order-wide and per-item)
• Optional account credentials (username, password)

If you participate in the Earthies™ 🌍✨ rewards program

• Your phone number, used as a quick lookup at the register and online
• Points balance and redemption history
• Tier status (Refiller, Circulator, Reuse Steward)

If you participate in the Reuse Library (reusable container program)

• Your phone number (linked to your Earthies™ 🌎✨ account)
• Container ID, checkout and return timestamps, wash and return status
• First name only is displayed publicly on kiosk and packing screens

If you opt in to SMS

• Your phone number, the opt-in source (checkout, account, or in-store kiosk), the opt-in timestamp, and your current consent status

How we use it

• To process and fulfill your orders
• To send order updates, receipts, and account notices
• To run the Earthies™ 🌏✨ rewards program and Reuse Library tracking
• To prevent fraud and protect against abuse
• To improve the site (what’s viewed, what people search for, what doesn’t work)
• To meet legal and tax obligations

Who we share it with

Payment processors

• Square processes credit and debit card payments online and in store, plus Apple Pay and Google Pay through our Square checkout. See Square’s Privacy Policy.
• PayPal processes PayPal balance, card, Apple Pay, and Google Pay payments through the PayPal checkout option. See PayPal’s Privacy Policy.

Both services receive only what they need to process the transaction (purchase amount, billing details, payment method). We do not store full card numbers on our servers.

Shipping + tax

• WooCommerce Shipping generates shipping labels and tracking numbers when an order ships.
• Shipping carriers (USPS, UPS, etc.) receive your shipping address to deliver your order.
• WooCommerce tax tools use your address to estimate sales tax at checkout.

Email + SMS

• WP Mail SMTP handles email delivery for order confirmations, password resets, and account notifications. The underlying email provider (SendGrid, Mailgun, Amazon SES, or similar) is configured behind the scenes.
• Twilio sends SMS messages: order updates, Reuse Library reminders, and (in pilot) account verification codes for Earthies members. See Twilio’s Privacy Policy.

Anti-fraud

• Google reCAPTCHA may be triggered during PayPal checkout to detect automated abuse. See Google’s Privacy Policy.

Analytics

• Google Analytics tracks aggregated page views and shopping behavior so we can improve the site. IP addresses and browser data are processed by Google. If you decline analytics cookies, no tracking data is sent.

Hosting + infrastructure

• Cloudflare serves the site through its CDN and hosts product images via R2 storage. JavaScript libraries used by the site (PDF.js for menus, Chart.js for dashboards) load from Cloudflare’s CDNJS.
• Our web host stores order records, customer accounts, and server logs.

What we don’t share

We do not sell your data. We do not share your phone number with third parties for marketing. We do not run heatmaps, session-recording tools, A/B testing services, or any tool that captures your individual on-site behavior beyond aggregated analytics.

SMS / text message notifications

Cookies + embedded content

Cookies we set

• Cart contents (so what you add stays as you browse)
• Login status, with optional “Remember Me”
• Form preferences (checkout notes, comment fields)
• Screen and display preferences

Comment cookies last one year. Login cookies last two days, or two weeks with “Remember Me.” Display preference cookies last one year.

Comments + reviews

If you leave a comment or review, we collect what you submit in the form, plus your IP address and browser user-agent for spam detection. An anonymized version of your email may be sent to Gravatar to check for a profile image. After approval, your profile image is visible alongside your comment.

Embedded content from other sites

Articles on the site may include embedded videos or images from external services. Those external sites can collect data about you, set their own cookies, and track your interaction with the embedded content as if you visited them directly.

Media uploads

If you upload images, please strip embedded location data (EXIF GPS) first. Other site visitors can download and extract that data from public images.

How long we keep it

• Order records: 7 years (tax and legal compliance)
• Account information: until you ask us to delete it
• Comments and reviews: indefinitely unless you ask us to remove them
• SMS opt-in records: while you remain opted in, plus an audit record of any opt-out
• Earthies™ 🌍✨ and Reuse Library activity: while your account is active

Who on our team has access

Store admins and shop managers can view your order history, contact details, and program activity. Front-of-store staff can look up your Earthies™ 🌎✨ balance and Reuse Library status by phone number so they can serve you at the register. We do not sell, lease, or trade customer information to anyone.

Your rights

You can:

• Request an export of your personal data
• Request that we erase your data (excluding records we’re legally required to keep)
• Update your account information any time through your account dashboard
• Opt out of SMS by replying STOP, or by updating your account preferences
• Opt out of analytics cookies via your browser’s cookie controls

To exercise any of these rights, write to [email protected].

Security

We use SSL/TLS encryption for all data transmitted between you and our website. Payment information is handled by PCI-compliant payment processors (Square, PayPal) and is not stored on our servers. Sensitive credentials (passwords, API keys) are hashed or stored in protected configuration not accessible from the public site.

Changes to this policy

If we update this policy in a meaningful way, we’ll post a new effective date at the top. Material changes will also be communicated through the site and, where relevant, by email.

Contact