MamaCare

Privacy Policy

Last updated: July 2026

1. Who we are

MamaCare ("we", "us", "our") operates the website mamacare.us. We are a curated dropshipping retailer. Questions about this policy can be directed to mamaacaree@gmail.com.

2. What data we collect and why — our data map

  • Order data — name, email, shipping address, phone (optional). Collected to fulfill your purchase and send tracking updates. Stored in our order database (Vercel Postgres) and our fulfillment partner (CJ Dropshipping).
  • Payment data — processed entirely by Stripe or PayPal. We never see, receive, or store your card number, CVV, or bank details.
  • Email address (newsletter) — collected only if you explicitly subscribe. Used to send product updates and your discount code. Stored in our database. Never sold or shared with advertisers.
  • Contact form submissions — name, email, and message. Used only to respond to your inquiry. Sent to our inbox via Resend and not stored long-term.
  • Usage analytics — anonymous traffic data (pages visited, device type, country) via Google Analytics 4. No personally-identifiable data is sent to Google. You can opt out via browser settings or a GA opt-out extension.
  • Session cookies — a minimal cookie keeps your shopping cart between page loads. No advertising cookies are used.

3. How we use your data

We use your data only for the purpose it was collected: fulfilling orders, sending tracking and transactional emails, responding to support requests, and (with your consent) sending marketing emails. We do not sell, rent, or share your personal data with third parties for their marketing purposes.

4. Who we share data with

  • CJ Dropshipping — your name and shipping address are shared to fulfill your order.
  • Stripe / PayPal — payment processors who handle your card data under their own PCI-DSS certified infrastructure.
  • Resend — transactional email delivery service. Receives your email address to deliver order confirmations and support replies.
  • Google Analytics — receives anonymized traffic data. No names, emails, or order details are shared.
  • Vercel — our hosting provider. Function logs may temporarily contain request data.

No other third parties receive your personal data.

5. Your rights (GDPR — EU/UK residents)

If you are located in the European Union or United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR):

  • Right of access — request a copy of the personal data we hold about you.
  • Right to rectification — request correction of inaccurate data.
  • Right to erasure — request deletion of your personal data ("right to be forgotten").
  • Right to restrict processing — request that we limit how we use your data.
  • Right to data portability — request your data in a machine-readable format.
  • Right to object — object to processing based on legitimate interests or for direct marketing.
  • Right to withdraw consent — unsubscribe from marketing emails at any time using the link in any email, or by contacting us.

To exercise any of these rights, email mamaacaree@gmail.com. We will respond within 30 days.

6. Your rights (CCPA — California residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) gives you the following rights:

  • Right to know — request disclosure of the categories and specific pieces of personal information we have collected about you in the past 12 months.
  • Right to delete — request deletion of personal information we have collected about you, subject to certain exceptions.
  • Right to opt out of sale — we do not sell personal information. You do not need to opt out.
  • Right to non-discrimination — we will not discriminate against you for exercising your CCPA rights.

To submit a verifiable consumer request, email mamaacaree@gmail.com with "CCPA Request" in the subject line.

7. Data retention

Order data is retained for 7 years to comply with financial record-keeping requirements. Newsletter email addresses are retained until you unsubscribe or request deletion. Contact form messages are retained in our email inbox for up to 2 years.

8. Security

We use HTTPS (TLS) on all connections, enforce HTTP security headers (including Content-Security-Policy and HSTS), apply rate limiting on form submissions, and use timing-safe authentication for administrative access. Passwords are never stored in plain text.

9. Children's privacy

Our site is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us data, please contact us and we will delete it promptly.

10. Changes to this policy

We may update this policy. The "last updated" date above will reflect any changes. Continued use of the site after changes constitutes acceptance.

11. Contact

Privacy questions, data requests, or concerns: mamaacaree@gmail.com