Privacy Policy

Last Updated: September 21, 2026

Nine Roots LLC (“Nine Roots,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information you provide to us.

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit trynineroots.com (the “Site”), purchase our products, communicate with us, sign up for email or text messages, participate in promotions, or otherwise interact with Nine Roots.

By accessing or using the Site, you acknowledge the practices described in this Privacy Policy.

1. Information We Collect

Depending on how you interact with Nine Roots, we may collect the following types of information.

Information You Provide Directly

We may collect information you voluntarily provide to us, including:

• Name
• Billing address
• Shipping address
• Email address
• Telephone number
• Account information
• Order and purchase information
• Product preferences
• Customer service communications
• Reviews, survey responses, or other content you submit
• Email and SMS marketing preferences
• Information submitted through forms on our Site
• Information provided when entering a promotion, giveaway, or similar program

If you contact us about a product, wellness question, or other matter, you may voluntarily provide additional personal information. Please do not provide Social Security numbers, complete medical records, passwords, or other highly sensitive information unless specifically necessary for us to address your request.

Nine Roots is a dietary supplement company and is not a healthcare provider. Information provided to Nine Roots is generally not protected health information subject to HIPAA.

Payment Information

When you make a purchase, payment information may be collected and processed by Shopify, Shopify Payments, Shop Pay, credit card networks, financial institutions, or other payment processors.

Nine Roots generally does not directly receive or store your complete payment card number.

Information Collected Automatically

When you visit or interact with the Site, we and companies that provide services to us may automatically collect information such as:

• IP address
• Browser type
• Device type
• Operating system
• Device identifiers
• Cookie identifiers
• Pages viewed
• Links clicked
• Products viewed
• Products added to cart
• Checkout activity
• Referring website or source
• Date and time of visits
• Approximate location derived from IP address
• Information regarding how you interact with the Site

This information may be collected through cookies, pixels, tags, software development kits, server logs, and similar technologies.

Information From Other Sources

We may receive information from third parties that assist us in operating our business, including:

• Shopify
• Payment processors
• Shipping and fulfillment providers
• Fraud-prevention providers
• Customer support providers
• Email service providers
• SMS service providers
• Analytics providers
• Advertising platforms
• Social media platforms

We may combine information received from these sources with information we collect directly.

2. How We Use Personal Information

We may use personal information for the following purposes.

Providing Products and Services

We may use information to:

• Process and fulfill orders
• Process payments
• Ship products
• Provide order confirmations
• Provide shipping and tracking information
• Manage returns, replacements, and refunds
• Maintain customer accounts
• Provide customer support
• Respond to customer inquiries

Communicating With You

We may use your contact information to:

• Respond to questions
• Provide customer service
• Send transactional communications
• Send order and shipping notifications
• Provide account or subscription information
• Send service-related communications
• Send email or SMS marketing where you have opted in

Improving Nine Roots

We may use information to:

• Operate and improve the Site
• Understand how visitors use the Site
• Improve our products and customer experience
• Troubleshoot technical issues
• Conduct analytics
• Measure website performance
• Measure advertising effectiveness
• Develop new products, features, and services

Security and Fraud Prevention

We may use information to:

• Authenticate transactions
• Detect fraudulent or suspicious activity
• Prevent unauthorized transactions
• Protect customers
• Protect our Site and systems
• Investigate suspected misuse
• Enforce our agreements and policies

Legal and Compliance Purposes

We may use information when reasonably necessary to:

• Comply with applicable laws and regulations
• Satisfy tax and accounting obligations
• Respond to valid legal process
• Protect our legal rights
• Investigate violations of our policies
• Resolve disputes
• Establish, exercise, or defend legal claims

3. Cookies and Similar Technologies

Nine Roots and service providers acting on our behalf may use cookies, pixels, tags, and similar technologies.

These technologies may be used to:

• Keep the Site functioning properly
• Remember preferences
• Maintain shopping carts
• Process checkout
• Prevent fraud
• Understand how visitors use the Site
• Measure website performance
• Measure advertising effectiveness
• Attribute purchases to marketing campaigns
• Provide relevant website content

Certain cookies are necessary for the Site to operate and cannot reasonably be disabled through our Site.

Other cookies and tracking technologies may be subject to consent or opt-out requirements depending on where you live.

You may be able to control cookies using your browser settings or privacy controls available through our Site. Disabling cookies may affect certain Site functionality.

Advertising Technologies

We may use advertising and analytics technologies provided by platforms such as social media networks, search engines, and analytics providers to understand how our advertising performs.

Depending on applicable law and the configuration of those services, certain disclosures of browser, device, or Site-interaction information may be legally considered “sharing,” “sale,” or “targeted advertising,” even when Nine Roots does not receive money in exchange for that information.

Where required by law, we provide appropriate privacy choices to opt out of those activities.

Global Privacy Control

Where required by applicable law, Nine Roots recognizes supported browser-based universal opt-out mechanisms, including Global Privacy Control (“GPC”), as a request to opt out of applicable sale, sharing, or targeted-advertising activities.

You may also use any “Your Privacy Choices,” “Do Not Sell or Share My Personal Information,” data-sharing opt-out page, or similar privacy control made available through the Site.

4. How We Disclose Personal Information

Nine Roots may disclose personal information to service providers and other parties as reasonably necessary to operate our business.

Shopify

Our online store is hosted through Shopify.

Shopify may process personal information in connection with ecommerce functionality, checkout, payments, fraud prevention, analytics, and related services.

Payment Providers

We may disclose transaction information to payment processors, banks, card networks, and financial institutions as necessary to process purchases and refunds.

Fulfillment and Shipping Providers

We may disclose information such as your name, shipping address, email address, telephone number, and order information to companies that warehouse, fulfill, ship, and deliver Nine Roots products.

Service Providers

We may use service providers for functions including:

• Website hosting
• Ecommerce operations
• Email delivery
• SMS delivery
• Customer support
• Fraud prevention
• Analytics
• Data hosting
• Website development
• Cybersecurity
• Accounting
• Legal services
• Shipping and fulfillment

These providers may process personal information only as permitted by their agreements with us and applicable law.

Legal and Safety Disclosures

We may disclose information where we reasonably believe disclosure is necessary to:

• Comply with applicable law
• Respond to subpoenas, court orders, or other valid legal process
• Investigate fraud or unlawful activity
• Protect Nine Roots, our customers, or others
• Enforce our agreements or policies

Business Transactions

If Nine Roots is involved in a merger, financing, acquisition, reorganization, bankruptcy, sale of assets, or similar business transaction, information may be transferred as part of that transaction subject to applicable law.

5. Data Sharing

Customer data is not shared with 3rd parties for promotional or marketing purposes.

Mobile opt-in and consent are never shared with anyone for any purpose. Any information sharing that may be mentioned elsewhere in this policy excludes mobile opt-in data.

For purposes of these commitments, service providers that process information solely on behalf of Nine Roots to provide operational services, such as an SMS platform used to deliver messages requested by a customer, do not receive such information for their own independent promotional or marketing purposes.

Nine Roots does not sell mobile opt-in information or SMS consent.

For purposes of certain state privacy laws, some activities involving cookies, pixels, browser identifiers, or advertising technologies may nevertheless be legally defined as “sharing,” “sale,” or “targeted advertising.” These activities are addressed separately in the Cookies and Similar Technologies section of this Policy and are subject to applicable privacy choices.

6. Email Marketing

If you voluntarily subscribe to marketing emails, Nine Roots may send you communications including:

• Product announcements
• Educational content
• Special offers
• Promotions
• Discount codes
• New-product announcements
• Other Nine Roots marketing communications

You may unsubscribe from promotional email communications at any time by clicking the unsubscribe link contained in the applicable email.

Unsubscribing from promotional emails does not necessarily prevent Nine Roots from sending transactional or service-related communications regarding your orders, customer service requests, account, or other transactions.

7. Messaging Program Terms and Conditions

The following terms apply to Nine Roots SMS and text messaging programs.

1. Program Description

The messaging program may consist of general customer care messaging to answer questions and provide support to customers, and/or marketing messaging that include discount codes, special deals or texts promoting our products/services, depending on which program(s) you opt in to.

We will only send content you have explicitly signed up to receive via our opt-in process.

Messages will be sent from:

(516) 908-4084

Marketing consent is voluntary and is not a condition of purchasing goods or services from Nine Roots.

Where applicable, by opting in you authorize Nine Roots to send recurring text messages using automated technology to the telephone number you provided.

2. Cancelling SMS Service

You can cancel the SMS service at any time.

Just text:

STOP

to the phone number from which you received messages.

After you send the SMS message “STOP” to us, we will send you an SMS message to confirm that you have been unsubscribed.

After this, you will no longer receive SMS messages from us covered by that opt-out request.

If you want to join again, just sign up as you did the first time and we will start sending SMS messages to you again.

We will also honor other reasonable methods of revoking consent where required by applicable law.

3. Help

If you are experiencing issues with the messaging program, you can reply with the keyword:

HELP

for more assistance.

You can also get help directly at:

contact@trynineroots.com

4. Carrier Responsibility

Carriers are not liable for delayed or undelivered messages.

5. Message and Data Rates

As always, message and data rates may apply for any messages sent to you from us and to us from you.

Message frequency will vary based on communication needs.

If you have any questions about your text plan or data plan, it is best to contact your wireless provider.

6. SMS Privacy

If you have any questions regarding privacy, please read our privacy policy details contained in the rest of this page or contact us at:

contact@trynineroots.com

Mobile opt-in data and consent are excluded from other data-sharing provisions in this Privacy Policy as stated above.

8. Data Retention

Nine Roots retains personal information only for as long as reasonably necessary for the purposes for which it was collected and as necessary to satisfy legal, tax, accounting, fraud-prevention, security, contractual, and regulatory obligations.

Factors considered when determining retention periods may include:

• How long you maintain a relationship with Nine Roots
• The amount of time necessary to fulfill and support an order
• Customer support requirements
• Financial, accounting, and tax requirements
• Fraud and chargeback prevention
• Legal limitation periods
• Regulatory requirements
• The need to establish, exercise, or defend legal claims

Certain purchase and transaction records may be retained after an order has been completed for accounting, tax, dispute-resolution, fraud-prevention, or legal purposes.

Marketing information may be retained until you unsubscribe or request deletion, subject to our ability to maintain limited suppression records so that we can honor your request not to receive future marketing communications.

9. Information Security

Nine Roots uses reasonable administrative, technical, and organizational safeguards intended to protect personal information.

However, no website, database, internet transmission, or electronic storage system can be guaranteed to be completely secure.

You are responsible for protecting any account credentials associated with your use of the Site.

If you believe information you provided to Nine Roots has been compromised, please contact us at:

contact@trynineroots.com

10. Your Privacy Rights and Choices

Depending on where you live, and subject to applicable law, you may have rights concerning your personal information.

These may include the right to:

• Confirm whether we process personal information about you
• Access personal information we maintain about you
• Obtain copies of certain personal information
• Correct inaccurate personal information
• Request deletion of personal information
• Obtain certain information in a portable format
• Opt out of certain sales of personal information
• Opt out of certain sharing of personal information
• Opt out of targeted advertising
• Limit certain uses of sensitive personal information
• Withdraw consent where processing is based on consent
• Appeal certain decisions regarding privacy requests
• Exercise privacy rights without unlawful discrimination

These rights are not absolute and may be subject to exceptions under applicable law.

For example, we may retain information reasonably necessary to:

• Complete transactions
• Prevent fraud
• Maintain security
• Comply with legal obligations
• Maintain required tax or financial records
• Exercise or defend legal claims

Submitting a Privacy Request

You may submit a privacy request by emailing:

contact@trynineroots.com

You may also use our website contact form or privacy controls where available.

Please include “Privacy Request” in the subject line where practical.

We may need to verify your identity before fulfilling certain requests.

Information provided for verification will be used only as reasonably necessary to verify and process your request.

Authorized Agents

Where permitted by law, you may designate an authorized agent to submit certain privacy requests on your behalf.

We may request evidence that the agent has authority to act for you and may separately verify your identity where permitted.

Appeals

If applicable law provides a right to appeal our response to a privacy request, you may submit an appeal by emailing:

contact@trynineroots.com

with the subject line:

Privacy Request Appeal

11. California Privacy Notice

This section supplements the rest of this Privacy Policy for California residents where the California Consumer Privacy Act (“CCPA”), as amended, applies to Nine Roots.

Subject to applicable requirements and exceptions, California residents may have rights including the right to:

• Know what categories of personal information a business collects
• Know the sources from which personal information is collected
• Know the purposes for collecting, using, selling, or sharing personal information
• Know the categories of third parties to whom personal information is disclosed
• Access specific pieces of personal information
• Request deletion of personal information
• Request correction of inaccurate information
• Opt out of the sale or sharing of personal information
• Limit certain uses or disclosures of sensitive personal information where applicable
• Exercise their rights without unlawful discrimination

Nine Roots does not sell customer personal information for money.

If any activity conducted through the Site is legally considered a “sale” or “sharing” under California law, eligible California residents may exercise applicable opt-out rights through privacy controls provided on the Site or through a recognized Global Privacy Control signal where required by law.

We do not knowingly sell or share personal information of consumers under 16 years of age.

Categories of Personal Information We May Collect

Depending on how you interact with Nine Roots, categories of information may include:

• Identifiers, such as name, mailing address, email address, telephone number, IP address, and account identifiers
• Commercial information, such as products purchased, shopping-cart activity, product preferences, and transaction history
• Internet or electronic network activity, such as browsing and Site interaction information
• Approximate geolocation information derived from IP address
• Payment and transaction information
• Communications and customer service information
• Marketing and communication preferences
• Inferences reasonably derived from Site or shopping activity
• Other information voluntarily provided by you

Sources of Personal Information

We may collect personal information:

• Directly from you
• Automatically from your browser or device
• From Shopify
• From payment processors
• From fulfillment and shipping providers
• From security and fraud-prevention providers
• From analytics providers
• From communications providers
• From other service providers acting on our behalf

Business and Commercial Purposes

We may use these categories of information for purposes including:

• Providing products and services
• Processing transactions
• Fulfilling orders
• Providing customer support
• Maintaining security
• Preventing fraud
• Conducting analytics
• Improving the Site
• Communicating with customers
• Marketing with appropriate consent
• Measuring advertising effectiveness
• Complying with legal requirements

Retention

We retain each category of personal information only for as long as reasonably necessary for the purposes for which it was collected or to comply with applicable legal, accounting, security, fraud-prevention, contractual, or regulatory requirements.

12. Other U.S. State Privacy Rights

Residents of certain U.S. states may have additional privacy rights under applicable state privacy laws.

Depending on where you live and whether the applicable law applies to Nine Roots, these rights may include the right to:

• Access personal information
• Correct personal information
• Delete personal information
• Obtain a portable copy of personal information
• Opt out of targeted advertising
• Opt out of certain sales of personal information
• Opt out of certain sharing of personal information
• Opt out of certain profiling
• Appeal certain privacy-request decisions

Nine Roots will respond to qualifying requests in accordance with applicable law.

13. Children's Privacy

The Site and Nine Roots products are intended for adults and are not directed toward children under 13 years of age.

We do not knowingly collect personal information from children under 13.

If we learn that personal information has been collected from a child under 13 without legally valid authorization, we will take reasonable steps to delete the information.

If you believe a child has provided personal information to Nine Roots, please contact:

contact@trynineroots.com

14. Third-Party Websites and Services

The Site may contain links to websites, applications, social media platforms, or other services operated by third parties.

Nine Roots does not control and is not responsible for the privacy practices, security, or content of third-party websites and services.

We encourage you to review the privacy policy of any third-party service you choose to use.

15. Social Media

If you interact with Nine Roots through Instagram, Facebook, TikTok, or another social media platform, those platforms may independently collect and process information pursuant to their own privacy policies.

Information you choose to make publicly available through social media may be visible to other users.

16. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes to:

• Our business practices
• Our Site or services
• Technologies we use
• Applicable laws or regulations

When we update this Privacy Policy, we will revise the Last Updated date at the top of the page.

Where required by law, we may provide additional notice or obtain consent for material changes.

We encourage you to review this Privacy Policy periodically.

17. Contact Us

If you have questions about this Privacy Policy, Nine Roots' privacy practices, your personal information, or a privacy request, please contact us:

Nine Roots LLC

Email:
contact@trynineroots.com

Website:
trynineroots.com

SMS Program:
(516) 908-4084

Mailing Address:
Nine Roots LLC
54 State Street, Ste 804
Albany, NY 12207
USA