Privacy Policy

Old Mill Country Store, Inc. (“Old Mill Country Store”, “we”, “us”, “our”) operates retail stores in Yakima and Ellensburg, Washington, together with the website at https://oldmillcountrystore.com and our mobile applications (collectively, the “Services”). We are the controller of the personal information described in this policy.

Postal: 1504 S 36th Ave, Yakima, WA 98902
Email: privacy@oldmillcountrystore.com
Phone: (509) 248-1650

This policy covers information we handle as a retailer. It does not cover protected health information created or received by our licensed pharmacy in its role as a HIPAA covered entity, which is governed by our pharmacy Notice of Privacy Practices, or consumer health data covered by the Washington My Health My Data Act, which is described in our Consumer Health Data Privacy Notice.

Information you give us.

• Account details: first and last name, email address, phone number, and password credentials managed by our authentication provider.
• Order details: items purchased, delivery or pickup location, delivery address and instructions, gift card balances, and coupon usage.
• Payment information: payments are processed by our payment providers. We receive confirmation and limited details such as the last four digits and card brand; we do not store full card numbers.
• Support and contact form submissions: name, email, phone, business name, reason for contact, and the content of your message.
• Pharmacy requests: prescription numbers, medication names, and refill requests you submit through the Services.
• Marketing preferences: subscriptions, stock alert requests, and saved shopping lists.

Information collected automatically.

• Device and connection data: IP address, browser and device type, operating system, and app version.
• Usage data: pages and products viewed, searches performed, and interactions with features, collected only where you have consented to analytics cookies.
• Local storage and cookies: see our Cookie Policy for the full inventory and your controls.
• Camera images: if you use barcode or image search, images are processed to find matching products. Camera access is requested only when you activate the feature.
• Approximate location: used only if you choose to share it, to suggest the nearest store.

Information from others. We may receive information from payment processors, delivery partners, fraud-prevention services, and suppliers, and from social or advertising platforms where you have consented to that sharing.

We do not knowingly collect personal information from children under 13. See section 11.

• To create and maintain your account, process and deliver orders, and provide customer support (performance of a contract).
• To operate, secure and troubleshoot the Services and prevent fraud or abuse (legitimate interests).
• To comply with tax, accounting, pharmacy, product safety and other legal obligations (legal obligation).
• To measure and improve the Services through analytics (consent, where required).
• To send marketing communications and measure advertising (consent, where required; you may withdraw at any time).

Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing that took place before withdrawal.

We do not sell your personal information for money. We share it only as described here:

• Service providers acting on our instructions under written contracts: hosting and database (Supabase), payment processing, delivery and routing, email and SMS delivery, and error monitoring.
• Advertising and analytics partners, only where you have given consent through our preference center.
• Professional advisors, auditors and insurers where necessary and confidential.
• Law enforcement, regulators or courts where required by law or to establish, exercise or defend legal claims.
• A successor entity in connection with a merger, acquisition, financing or sale of assets, subject to this policy.

Sharing identifiers with advertising partners for cross-context behavioral advertising may be considered a “sale” or “share” under some US state laws. You can opt out at any time using Your Privacy Choices.

We keep personal information only as long as needed for the purposes described above. In general: account records for as long as your account is active and up to 24 months afterwards; order, tax and payment records for at least 7 years as required by law; contact form submissions for 24 months; analytics data in aggregated or de-identified form. Pharmacy records are retained for the period required by Washington pharmacy law.

We use encryption in transit (HTTPS), encryption at rest at our hosting provider, row-level access controls in our database, role-based administrative permissions, audit logging of administrative actions, and least-privilege access for staff. No system is perfectly secure; if a breach affects your personal information we will notify you and the applicable regulators as required by law, including RCW 19.255 in Washington.

Depending on where you live, you may have the right to: know what personal information we hold and how we use it; obtain a copy or portable export; correct inaccurate information; delete your information; opt out of sale, sharing, targeted advertising or profiling; limit the use of sensitive personal information; withdraw consent; and not be discriminated or retaliated against for exercising these rights.

To exercise a right, email privacy@oldmillcountrystore.com or call (509) 248-1650. We will verify your identity using information already associated with your account and respond within 45 days (extendable by a further 45 days where permitted). An authorized agent may submit a request with written permission. You may appeal a denied request by replying to our response; if your appeal is denied you may contact the Washington State Attorney General or your state regulator.

If you are in the EEA or UK, you also have the right to lodge a complaint with your supervisory authority. Transfers of personal information to the United States are made using appropriate safeguards such as the EU Standard Contractual Clauses.

We use strictly necessary cookies and local storage to keep you signed in, hold your cart and remember your selected store. Optional functional, analytics and advertising technologies are used only with your consent. Full details and controls are in our Cookie Policy.

You can unsubscribe from marketing email at any time using the link in any message or by contacting us. If you opt in to text messages, message and data rates may apply; reply STOP to cancel and HELP for help. Transactional messages about your orders, deliveries and pharmacy requests are not marketing and will continue while you use the Services.

The Services are intended for adults. We do not knowingly collect personal information from children under 13, and we do not knowingly sell or share the personal information of consumers under 16. If you believe a child has provided us with personal information, contact privacy@oldmillcountrystore.com and we will delete it.

The Services may link to third-party sites and payment pages that we do not control. Their privacy practices are governed by their own policies, and we encourage you to read them.

We may update this policy from time to time. We will change the “Last updated” date above and, for material changes, provide prominent notice in the Services and, where required, ask for your consent again.

Questions or complaints about privacy can be sent to privacy@oldmillcountrystore.com, by phone at (509) 248-1650, or by mail to 1504 S 36th Ave, Yakima, WA 98902.