Privacy and Cookie Policy

Dragon Herbs Privacy and Cookie Policy

Effective Date: September 19, 2025

Ron Teeguarden Enterprises, Inc. dba Dragon Herbs (“Dragon Herbs,” “we,” “our,” or “us”) respects your concerns about privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you interact with us through our websites, retail store, mobile apps, mail order services, wholesale accounts, and related online or offline offerings (collectively, the “Services”).

This Privacy Policy includes global standards and region-specific supplements for:

  • United States (including California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and others)
  • Canada (including Quebec Law 25 requirements)
  • European Union & United Kingdom (GDPR/UK GDPR)

This Privacy Policy also describes:

  • The types of personal information we collect.
  • How we use and share personal information.
  • The rights and choices available to you.
  • How we protect your information.
  • How to contact us about our privacy practices.


Information We Collect

In connection with your use of the Services, we may collect the following categories of personal information:

  • Contact Information: Name, email, phone, billing and shipping addresses.
  • Account Credentials: Email address and password for online account creation.
  • Order & Transaction Data: Purchase history, payment details (processed securely via third-party providers such as our payment processors, PayPal, Apple Pay, or Google Pay).
  • Loyalty & Rewards Information: Points earned, redemption history, and program participation.
  • Wholesale & Practitioner Accounts: Business information, licenses (if applicable), tax ID, and account activity.
  • Marketing & Communications: Preferences, survey responses, promotions, contests, and reviews.
  • Technical Data: IP address, browser type, operating system, device identifiers, geolocation, and browsing activity via cookies, pixels, and analytics tools.
  • User-Generated Content: Reviews, testimonials, Q&A submissions, and other content voluntarily shared.
  • Social Media Data: Information shared when you link or interact with our social media pages.
  • Customer Service Records: Communications via phone, chat, or email, including order inquiries or support requests.
  • Sensitive Information: payment card details, health-related preferences if voluntarily disclosed, government ID for wholesale accounts, precise geolocation if enabled.

You may choose not to provide certain information, but this may limit your ability to use certain Services.

 
How We Use Information

We use the information we collect for purposes including:

  • Order Fulfillment & Account Management: Processing and shipping orders, verifying accounts, managing subscriptions, and processing returns or claims in performance of a contract.
  • Customer Support: Responding to inquiries, managing service requests, and providing personalized assistance where there’s legitimate interest and in performance of a contract.
  • Marketing & Communications: Sending newsletters, promotions, product updates, loyalty notifications, and event invitations, consent where required.
  • Loyalty & Rewards Programs: Tracking points, redemptions, and exclusive offers, consent where required.
  • Wholesale & B2B Operations: Managing professional accounts, providing invoices, and verifying licenses.
  • Website & Service Improvements: Recorded communications with customers are only used for staff training, and enhancing user experience, conducting analytics, and optimizing functionality.
  • Fraud & Security: Detecting and preventing fraudulent transactions, unauthorized activity, or misuse of our Services.
  • Legal & Compliance: Complying with laws, regulations, and contractual obligations.


Automated Data Collection & Cookies

When you interact with our Services, we may collect information automatically through cookies, pixels, and similar technologies to:

  • Recognize you and maintain your logged-in session.
  • Track shopping cart activity and purchase preferences.
  • Deliver personalized content and targeted advertisements.
  • Conduct analytics using third-party tools such as Google Analytics.


What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They may be stored temporarily (session cookies) or longer (persistent cookies). Cookies can be set by Dragon Herbs (first-party cookies) or by third parties (third-party cookies such as analytics or advertising networks).


Types of Cookies We Use

We use the following categories of cookies:

  • Strictly Necessary Cookies
    Required for the website to function (e.g., shopping cart, account login, checkout).
    These cannot be switched off in our systems.
  • Performance & Analytics Cookies
    Help us understand how visitors use our site (e.g., Google Analytics, heatmaps, error tracking).
  • Functional Cookies
    Allow us to remember your preferences (e.g., language, region, saved cart).
  • Advertising & Targeting Cookies
    Used by us and our partners to deliver relevant ads and measure campaign performance. In some jurisdictions (e.g., California), these may be considered a “sale” or “sharing” of personal information.


Legal Basis for Cookies

EU/UK: We use non-essential cookies only with your consent (GDPR/ePrivacy).

Quebec (Law 25): We request your express consent for non-essential cookies.

U.S.: You may opt out of targeted advertising and “sharing” of personal information.


Managing Your Preferences

We provide a Cookie Banner and Preference Center to manage these choices.

You can manage cookie preferences in your browser settings. Most web browsers will tell you how to stop accepting new browser cookies, how to be notified when you receive a new browser cookie and how to disable existing cookies. The following external links will explain how to manage cookies for the most common browsers:

To find out how to manage cookies for other browsers, please click “help” on your browser’s menu or visit www.allaboutcookies.org.

 Please note that without cookies or other automated tools we use to collect this type of data, you may not be able to use all the features of our Services.

 
Information Sharing

We do not sell your personal information for monetary value. We do not disclose personal information we obtain about you, except as described in this Privacy Policy.  We may share personal data with:

  • Service Providers: Payment processors, shipping carriers, IT hosting, analytics, marketing, and customer support providers.
  • Business Partners: For loyalty programs, wholesale processing, or promotions (only when you opt-in).
  • Legal/Regulatory Authorities: When required by law, legal proceedings, or enforcement requests.
  • Corporate Transactions: In connection with mergers, acquisitions, restructuring, or asset transfers.

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties

We require service providers to safeguard personal information and use it only for the contracted purpose. We do not authorize our service providers to use or disclose the information except as necessary to perform services on our behalf or comply with legal requirements.

 
Data Transfers

If you access our Services outside the United States, your information may be transferred to and processed in the U.S. We use appropriate safeguards, including contractual protections, to secure international data transfers in compliance with applicable laws.

 
Your Rights & Choices

Depending on where you live, you may have the following rights:

  • Access & Portability: Request a copy of your personal data.
  • Correction: Request updates or corrections to inaccurate information.
  • Deletion: Request deletion of certain personal data.
  • Opt-Out of Marketing: Unsubscribe from marketing emails, SMS, and push notifications.
  • Cookie Management: Control cookies and advertising preferences.
  • Limit sensitive data use (CA, VA, CO, CT, UT).
  • Withdraw consent (EU/UK, Quebec).
  • Non-discrimination (U.S. laws).
  • California & Other Jurisdictions: Additional rights under the CCPA, GDPR, LGPD, and other applicable laws.

You can exercise your rights in different ways. For example, if you have created an account with us, you can change your communication preferences by logging into your account and clicking on “My Email Preferences”. To the extent provided by applicable law, you also can object to the use of your personal information for advertising or direct marketing purposes and unsubscribe from our marketing mailing lists by following the “Unsubscribe” link in our emails, texting STOP to the number from which our SMS are being sent or contacting us as specified in the Contact Us section below. We will respond within legally required timeframes (usually 30–45 days).

 
Retention of Personal Information

We retain data only as long as necessary for the purposes described above or as required by law. Specific retention periods are available upon request.

 
How We Protect Your Information

We maintain administrative, technical, and physical safeguards designed to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

 
Children’s Privacy

Our Services are not directed to children under 16 in the U.S., 13 in Canada, and 16 in the EU/UK. We do not knowingly collect personal information from children. If we learn that we have collected such data, we will promptly delete it.

 
Third-Party Services & Links

Our Services may include links to third-party websites and social media platforms. We are not responsible for the privacy practices of these third parties, and we encourage you to review their policies.

 
Updates to this Policy

We may update this Privacy Policy periodically. Changes will be posted with a revised “Effective Date.”

 
Contact Us

If you have questions or wish to exercise your privacy rights, please contact us:

Mailing Address:
Dragon Herbs
P.O. Box 361459
Los Angeles, CA 90036

Email: info@dragonherbs.com

Phone: 

 

U.S. State Privacy Rights Addendum

This section supplements the Dragon Herbs Privacy Policy and applies to residents of U.S. states with privacy laws: California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), and Oregon (OCPA).


Categories of Information Collected

We may collect: identifiers, account data, commercial data, technical/browsing data, geolocation, customer service records, professional/wholesale account details, loyalty/rewards data, and inferences about preferences.


Purposes of Use

We use this information for: order fulfillment, account management, loyalty programs, marketing, analytics, fraud prevention, legal compliance, and customer support.


Consumer Rights

Residents of these states may have the following rights:

  • Right to Know/Access: Request categories and specific pieces of personal information collected.
  • Right to Correct: Request correction of inaccurate data.
  • Right to Delete: Request deletion of personal information, subject to legal exceptions.
  • Right to Portability: Obtain a copy of your data in a portable format.
  • Right to Opt-Out of Sale/Sharing: Direct us not to “sell” or “share” your data for targeted advertising or analytics.
  • Right to Limit Use of Sensitive Data: Restrict our use of sensitive information (e.g., payment card, precise geolocation, account credentials).
  • Right to Non-Discrimination: We will not discriminate against you for exercising your rights.
  • Right to Appeal (VA, CO, CT, OR): If we deny your request, you may appeal.


How to Exercise Rights

Submit requests by:

Mailing Address:
Dragon Herbs
P.O. Box 361459
Los Angeles, CA 90036

Email: info@dragonherbs.com

Phone: 

Within the US: 1-888-55-TONIC (86642)
International customers: +1 (310) 917-2288


We will verify your identity using account or transaction data. You may authorize an agent to act on your behalf with written proof of authorization.


Opt-Out Mechanisms

You may opt out of targeted advertising, sharing, or selling of personal information by:

  • Clicking the “Do Not Sell or Share My Personal Information” link on our website footer.
  • Adjusting your cookie preferences via our Cookie Banner/Preference Center.
     

 

Canada Privacy Addendum (Including Quebec Law 25)

This section supplements the Dragon Herbs Privacy Policy and applies to residents of Canada, including Quebec.


Compliance Framework

Federal Law: Personal Information Protection and Electronic Documents Act (PIPEDA).
Provincial Laws: Alberta, British Columbia, and Quebec’s Law 25.


Rights of Canadian Residents

  • Access: Obtain a copy of personal information we hold.
  • Correction: Request correction of inaccuracies.
  • Portability (Quebec Law 25): Request your data in a portable format.
  • Withdrawal of Consent: Withdraw consent for optional uses (marketing, loyalty tracking, cookies).
  • Automated Processing Transparency (Quebec Law 25): If decisions are made based on automated processing, you have the right to request details and human intervention.


Cross-Border Transfers

Your information may be processed in the United States. We use contractual safeguards and limit access to authorized personnel to protect your information.


Privacy Officer (Required under Quebec Law 25)

We have designated a Privacy Officer responsible for compliance:

Email: info@dragonherbs.com
Mail: Dragon Herbs Privacy Officer, P.O. Box 361459, Los Angeles, CA 90036
 
 

EU/UK Privacy Addendum (GDPR & UK GDPR)

This section supplements the Dragon Herbs Privacy Policy and applies to residents of the European Economic Area (EEA), Switzerland, and the United Kingdom.


Legal Bases for Processing

We process personal data only when we have a legal basis under GDPR:

  • Contract: To fulfill orders, manage accounts, and provide services.
  • Consent: For marketing, cookies, and optional features (you may withdraw consent anytime).
  • Legal Obligation: For tax, regulatory, and compliance requirements.
  • Legitimate Interests: For fraud prevention, analytics, service improvement (unless overridden by your rights).


Rights of EU/UK Residents

You have the following rights under GDPR/UK GDPR:

  • Access: Obtain confirmation and a copy of personal data.
  • Correction: Rectify inaccurate data.
  • Deletion (“Right to be Forgotten”).
  • Restriction: Limit processing under certain conditions.
  • Portability: Receive your data in a machine-readable format.
  • Objection: Object to processing based on legitimate interest or direct marketing.
  • Withdraw Consent: At any time, without affecting prior lawful processing.
  • File a Complaint: With your local Data Protection Authority (e.g., ICO in the UK, CNIL in France).


International Transfers

Data is stored in the U.S. and transferred using Standard Contractual Clauses (SCCs) or other approved safeguards under GDPR/UK GDPR.


Data Protection Officer

We have appointed a Data Protection Officer:

Email: info@dragonherbs.com
Mail: Dragon Herbs DPO, P.O. Box 361459, Los Angeles, CA 90036
 

 

List of cookies we collect

The table below lists the cookies we collect and what information they store.

Cookie Name Cookie Description
NECESSARY COOKIES – Essential for site functionality
FORM_KEYProtects forms from spam or CSRF attacks.
MAGE-CACHE-STORAGE-SECTION-INVALIDATIONRefreshes stored content sections.
__CF_BMHelps detect and block bots (Cloudflare).
MAGE-BANNERS-CACHE-STORAGESaves banner/translation data in browser.
MAGE-MESSAGESShows error or notification messages.
PHPSESSIDKeeps user session active across pages.
MAGE-CACHE-STORAGEStores visitor-specific content for shopping functions.
MAGE-CACHE-SESSIDClears local cache storage when needed.
PRODUCT_DATA_STORAGEStores product settings for recently viewed/compared items.
RECENTLY_COMPARED_PRODUCTKeeps record of products recently compared.
RECENTLY_VIEWED_PRODUCTKeeps record of products recently viewed.
PERFORMANCE COOKIES – Measure site usage & improve performance
TAWKCONNECTIONTIMETracks live chat performance connection.
_SP_SES.*Checks if session is active or new.
STVIDIdentifies returning visitors.
_HJSESSION_*Holds Hotjar session data.
STUIDIdentifies unique browser sessions.
_HJSESSIONUSER_*Stores unique Hotjar user ID across visits.
_GAGoogle Analytics – tracks visitor statistics.
_GA_*Google Analytics – tracks visitor statistics.
__UTMAGoogle Analytics – tracks users and sessions.
__UTMZGoogle Analytics – tracks traffic source.
__UTMCGoogle Analytics – older session tracker.
__UTMTGoogle Analytics – limits request rate.
__UTMBGoogle Analytics – tracks sessions/visits.
HJACTIVEVIEWPORTIDSTracks Hotjar viewport usage.
KLAVIYOONSITETracks orders/notifications for Klaviyo.
FUNCTIONAL COOKIES – Improve usability & personalization
_SP_ID.*Stores visit count, session, and timestamps.
PRIVATE_CONTENT_VERSIONSpeeds up page loading with cached content.
SECTION_DATA_IDSStores shopper actions (wishlist, checkout info).
VISITOR_INFO1_LIVEYouTube – checks bandwidth usage.
YSCYouTube – tracks viewed videos.
__KLA_IDKlaviyo – tracks orders/shipping updates.
__PAYPAL_STORAGE__PayPal – supports payment features.
RC::AGoogle reCaptcha – checks if visitor is human.
CP_SESSIONIDStores session ID for site functions.
YOTPO_PIXELTracks user activity for Yotpo reviews.
IRCLICKIDTracks referral click ID for marketing.
__SECURE-YNIDYouTube – stores user ID info.
UW-ICON-LOCALESStores user interface language.
UW-UIDStores user ID for personalization.
__KL_KEYKlaviyo internal tracking key.
$LAST_REFERRERSaves last referral website.
SWELL-TEST-ITEMTesting cookie for Swell features.
APPDATAStores app-related data.
YT.INNERTUBE::NEXTIDYouTube next video ID tracking.
$REFERRERTracks referring page.
UW-TUNINGSStores UI settings.
UW-TUNINGS-CHECKSUMVerifies UI settings data.
KL-POST-IDENTIFICATION-SYNCKlaviyo sync cookie.
YT-REMOTE-DEVICE-IDTracks YouTube device ID.
YTIDB::LAST_RESULT_ENTRY_KEYStores last YouTube result entry.
ADVERTISING COOKIES – Used for marketing & ad targeting
PIXELTracks marketing conversions and ad effectiveness.
VISITOR_PRIVACY_METADATAYouTube – saves privacy settings.
TWK_IDM_KEYManages visitor connection for live chat.
YT-REMOTE-CONNECTED-DEVICESYouTube – tracks connected devices.
__KLA_VIEWEDTracks browsing for targeted newsletters.
YT.INNERTUBE::REQUESTSYouTube video requests tracking.
UNCLASSIFIED COOKIES – Currently under review
__SECURE-ROLLOUT_TOKENYouTube rollout testing cookie.
TECHNOTemporary session cookie.