Privacy Policy

Privacy Policy — Rapha Maya, LLC

Effective date: July 6, 2016

Last updated: November 15, 2025

This Privacy Policy explains how Rapha Maya, LLC (“Rapha Maya,” “we,” “us,” or “our”) collects, uses, and shares information when you visit or purchase from www.raphamaya.com. We are a Michigan, USA business selling non‑alcoholic beverages and confectionery shipped direct‑to‑consumer within the United States.

1) Who we are & scope

• Company: Rapha Maya, LLC

• Registered jurisdiction: Saginaw County, Michigan, USA

• Contact for privacy requests: service@raphamaya.com

• Postal address for privacy requests: Saginaw, MI 48602, USA

• Contact form: https://raphamaya.com/contact-us

• Properties covered: www.raphamaya.com (no mobile apps)

This Policy covers our website, checkout and support flows, marketing channels (including email and push, if used), and customer support interactions.

2) Information we collect

You provide: name, email, phone, shipping/billing addresses; order details; messages/support requests; (if you create an account via a third party) limited account data.

Automatic: IP address, device/OS/browser, pages viewed, clicks, referrer URL, and other usage/analytics data (via our host’s basic analytics).

From service providers: payment status and limited card details (type/last 4) from our payment processor; delivery events/confirmations from carriers.

We do not collect user‑generated content and we do not collect precise location beyond what is needed to ship orders.

3) Cookies & similar tech

We (and our host) use essential cookies and basic analytics to operate the site and understand usage. We do not use advertising/retargeting cookies. You can control cookies through your browser settings; disabling some cookies may affect site functionality. We do not presently display a cookie banner.

4) How we use information

• Process orders and payments; provide receipts and customer support

• Ship and track packages; send transactional updates (e.g., tracking)

• Communicate temperature‑sensitive shipping measures (insulation/ice packs, temporary weather holds for heat or freezing, or paid expedited service) and record your consent where a fee or upgrade applies

• Send product safety notices/recalls or handling instructions (e.g., guidance for glass‑bottled liquids)

• Issue and manage gift cards (digital and physical) and prepaid vouchers, including tracking balances/redemption history and preventing fraud. For physical gift cards, we process recipient postal details to mail within the U.S. (street addresses only; no P.O. boxes).

• Operate, maintain, and improve the site and our services

• Send marketing communications only if you opt in (email and, if enabled, SMS)

• Prevent fraud and investigate chargebacks

• Comply with legal, tax, and accounting obligations

We may aggregate or de‑identify information and use it for any lawful purpose.

5) Sharing & disclosure

We do not sell your personal information for money and we do not “share” it for cross‑context behavioral advertising.

We share information with:

• Hosting/CDN & site analytics: GoDaddy

• Payments: Square (we don’t store full card numbers/CVV)

• Email service: Microsoft

• Carriers/fulfillment: UPS and USPS (name, address, phone/email, order & tracking info)

• Security & logging: GoDaddy (platform logging)

• Legal/safety: to comply with law, enforce terms, or protect rights

• Business transfers: in connection with a merger, sale, or financing

6) Payments

Payments are processed by Square. Square handles your payment data per its own policies. We receive limited payment details (e.g., billing address, card type/last 4, status) for receipts, support, and fraud prevention.

7) Shipping & fulfillment

We ship within the United States (incl. AK/HI); no P.O. boxes. To deliver your order, we share necessary information with UPS and USPS and any fulfillment partners we use: name, shipping address, email, phone number, and package details required for labels and tracking. We may contact you about optional insulation/ice packs, temporary hot‑ or cold‑weather holds, or expedited service upgrades before shipment.

8) Text Messaging (Order Alerts & “Hot Drops”)

We offer two‑way SMS/MMS texting via GoDaddy Conversations at 989-279-0400. If you provide your mobile number and ask us to text you—or place an order that includes phone‑based updates—we may send order and shipping alerts (e.g., address confirmation, tracking updates, temperature‑sensitive options). We may also send optional limited‑time offer (“Hot Drops”) messages only if you opt in to marketing texts.

• Consent: Consent is not a condition of purchase. Msg & data rates may apply. Reply STOP to cancel, HELP for help. Carriers are not liable for delayed or undelivered messages.

• Data for texting: your mobile number, message content, and delivery/reply metadata (timestamps, carrier, status). We keep these records to operate the program and maintain compliance logs.

• Frequency: Order/Shipping Alerts: as needed per order. Hot Drops (marketing): msg frequency varies (typically up to 4/mo).

• Retention: kept only as long as needed for support/compliance, then deleted or de‑identified.

• Number type/provider: 10DLC (local US number) delivered through GoDaddy Conversations. Registration/verification may be required by carriers before A2P messaging.

9) U.S. state privacy rights

Depending on your state, you may have rights to access, correct, delete, or obtain a copy of your information and to opt out of certain processing. To submit a request:

• Email us at service@raphamaya.com or use our contact form at https://raphamaya.com/contact-us and describe your request.

• We may need to verify your identity (e.g., email confirmation or order information).

• You may authorize an agent where allowed by law.

Because we do not engage in targeted advertising or “share” personal information, those opt‑outs are not currently applicable to our practices.

10) Data retention

• Transactions and related contact information: retained for up to 7 years to satisfy tax, accounting, and legal obligations.

• All other personal information: retained only as long as needed to fulfill orders, provide support, and secure the service, then deleted. Certain short‑lived platform logs may be maintained by our host according to their standard policies.

11) Security

We use administrative, technical, and physical safeguards appropriate to the nature of the data. No method of transmission or storage is 100% secure.

12) International use

We sell and ship within the United States. If you access the site from outside the U.S., you understand your information may be processed in the U.S.

13) Changes to this Policy

If we make material changes, we will post a notice on the website (“Website Public Notice”). The “Last updated” date will reflect the latest version.

14) Contact us

• Email: service@raphamaya.com

• Contact form: https://raphamaya.com/contact-us

• Postal: Saginaw, MI 48602, USA