This policy explains what Oregon Vinegar Co., LLC collects when you use pomevinegar.com, why we collect it, and what you can ask us to do about it.
Last updated 13 August 2026.
Who we are
POME Heritage Vinegars is made and sold by Oregon Vinegar Co., LLC, 2225 Cedar Street, Forest Grove, Oregon 97116, United States. We are the controller of the personal information described here. To reach us about anything in this policy, use our contact page.
What we collect
When you place an order
Your name, shipping address, billing address, email address and, if you give one, a phone number for delivery problems. We keep a record of what you ordered, what you paid and when it shipped.
When you pay
Card payments are handled by Stripe. The card fields on our checkout are hosted by Stripe, not by us — your full card number never reaches our servers and we cannot see it. We receive only what Stripe returns to us: whether the payment succeeded, the card brand, the last four digits and the billing details you entered. Stripe processes this information under its own privacy policy.
When you create an account
Your email address, a password we store only as a hash, and your saved addresses and order history. You can shop without an account — guest checkout is always available.
When you join the email list or a waitlist
Your email address, and the fact that you asked to hear from us. Our email is sent through MailPoet, which stores your address in order to deliver the messages. We do not add you to marketing email because you placed an order — you have to ask.
When you write to us or leave a review
Whatever you choose to send, plus your email address so we can reply. Product reviews are published with the name you supply and are limited to verified purchasers.
Cookies and analytics
Some cookies are strictly necessary: they keep your cart, keep you signed in, and let checkout work at all. These are set whatever you choose, because the site cannot function without them.
Anything beyond that — including any analytics — is set only after you consent. You can change or withdraw your choice at any time using the cookie settings link in the footer. Declining non-essential cookies does not restrict any part of the shop.
Who else sees your information
We share personal information only with the services that make the shop work, and only with what they need to do their job:
- Stripe — payment and billing details, to take payment and to handle refunds and chargebacks.
- MailPoet — your email address, to deliver email you have asked for.
- Shipping carriers — your name and delivery address, to deliver the parcel.
- Our web host — which stores the site and its database on our behalf.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We may disclose information if the law requires it, or to protect our rights in a dispute.
How long we keep it
Order and payment records are kept for as long as tax and accounting law requires us to keep them. Account information is kept until you ask us to close the account. Email subscriptions are kept until you unsubscribe, which you can do from the footer of any message we send.
Your choices
Wherever you live, you can ask us to give you a copy of the personal information we hold about you, correct it if it is wrong, or delete it. You can unsubscribe from email at any time. To make a request, use our contact page. We may need to confirm who you are before we act, and we will not treat you differently for asking.
If you are a California resident, the California Consumer Privacy Act gives you the rights above, together with the right to know what we collect and disclose and the right not to be discriminated against for exercising them. As stated above, we do not sell personal information or share it for cross-context behavioural advertising, so there is nothing for you to opt out of.
Children
This shop is meant for adults and is not directed at children under 13. We do not knowingly collect personal information from them. If you believe a child has given us information, contact us and we will delete it.
Security
The site is served over HTTPS, payment details are handled by Stripe rather than stored by us, and passwords are stored hashed. No system is perfectly secure, and we will not claim otherwise — but we keep the amount of sensitive information we hold deliberately small.
Changes
If this policy changes, the revised version appears here with a new date at the top. Material changes to how we handle personal information will be announced on the site.