Privacy Policy

1. Introduction

Vitality LLC, a Tennessee limited liability company doing business as E+ROSE ("E+ROSE," "we," "us," or "our"), headquartered in Nashville, Tennessee, is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you visit our website at eandrosewellness.com, use our mobile application, place orders through our online ordering platform, or visit any of our cafe locations in Tennessee and Georgia.

Please read this policy carefully. By accessing or using our services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree, please do not use our services.

2. Information We Collect

Information you provide directly:

• Identifiers such as your name, email address, phone number, and mailing address when you create an account, contact us, or sign up for communications
• Order and transaction information, including items ordered, order history, and payment method details (note: full payment card data is processed and stored by our third-party payment processor, Toast, and is not stored on our servers)
• Loyalty and rewards program information, including points balances and redemption history
• Communications and correspondence, including customer service inquiries and feedback submitted through our contact form
• Catering and wholesale inquiry information when you submit a business inquiry

Information collected automatically:

• Device and usage information, including IP address, browser type and version, operating system, referring URLs, and pages visited on our website
• Cookie and tracking data as described in Section 7 below
• Approximate location data derived from IP address for analytics purposes
• Precise location data from our mobile application only if you grant permission through your device settings

Information from third parties: We may receive information from Toast (our ordering platform), social media platforms if you connect those accounts, and analytics providers such as Google Analytics.

3. How We Use Your Information

We use the information we collect for the following purposes, each of which constitutes a legitimate basis for processing:

• Order fulfillment: To process, confirm, and fulfill your orders, process payments, and send receipts and order status updates
• Customer service: To respond to your inquiries, resolve complaints, and provide support
• Loyalty program: To administer our rewards program, track points, and process redemptions
• Marketing communications: To send you promotional emails, offers, and updates about E+ROSE products and services, subject to your opt-in or opt-out preferences
• Service improvement: To analyze usage patterns, improve our website and mobile application, and develop new products and services
• Legal compliance: To comply with applicable laws, regulations, and legal processes, and to enforce our terms of service
• Security and fraud prevention: To detect, investigate, and prevent fraudulent transactions and other illegal activities

4. Sharing and Disclosure of Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Service providers: We share information with trusted third-party vendors who perform services on our behalf, including Toast (online ordering and payments), email marketing platforms, app hosting and cloud storage providers, and website analytics providers. These parties are contractually obligated to use your information only as directed by us and to maintain appropriate security measures.
• Business transfers: If E+ROSE is involved in a merger, acquisition, financing, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email or prominent notice on our website of any change in ownership or use of your personal information.
• Legal requirements: We may disclose your information if required to do so by law, court order, or governmental authority, or when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, or investigate fraud.
• With your consent: We may share your information for any other purpose with your explicit consent.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Order records are generally retained for a minimum of seven (7) years in accordance with applicable tax and business record requirements. You may request deletion of your personal information at any time, subject to our legal retention obligations, by contacting us at info@eandrose.com.

6. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: You may request a copy of the personal information we hold about you.
• Correction: You may request that we correct inaccurate or incomplete information.
• Deletion: You may request that we delete your personal information, subject to certain exceptions required by law.
• Opt-out of marketing: You may opt out of receiving promotional communications from us at any time by clicking the "unsubscribe" link in any marketing email or by contacting us at info@eandrose.com. Note that you may still receive transactional emails related to your orders.
• California residents: If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to know, the right to delete, and the right to opt out of the sale or sharing of personal information. To exercise these rights, please contact us at info@eandrose.com.
• Georgia residents: Georgia residents may have rights under applicable state law. Please contact us for more information.

To exercise any of these rights, please contact us at info@eandrose.com. We will respond to verifiable requests within 45 days, or as otherwise required by applicable law.

7. Cookies and Tracking Technologies

Our website uses cookies, web beacons, and similar tracking technologies to enhance your browsing experience, analyze website traffic, and serve relevant content. We use:

• Essential cookies: Required for the website to function properly. These cannot be disabled.
• Analytics cookies: Used to understand how visitors interact with our website (e.g., Google Analytics). The data collected is aggregated and anonymized.
• Marketing cookies: Used to deliver relevant advertisements and track campaign effectiveness.

You can control or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website. You may also opt out of Google Analytics tracking by visiting tools.google.com/dlpage/gaoptout.

8. Security

We implement commercially reasonable administrative, technical, and physical safeguards to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

9. Children's Privacy

Our website and services are not directed to individuals under the age of 13, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe we have inadvertently collected information from your child, please contact us immediately at info@eandrose.com and we will take steps to delete such information promptly.

10. Third-Party Links

Our website may contain links to third-party websites, including our ordering platform (Toast) and social media profiles. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party services you use.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes by posting the updated policy on our website with a revised "Last updated" date, and where required by law, by sending you an email notification. Your continued use of our services after any changes constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Vitality LLC (doing business as E+ROSE)
Email: info@eandrose.com
Nashville, Tennessee
Or use our contact form.

13. Online Ordering, Loyalty & Rewards (Powered by Open)

We are moving our online ordering, loyalty, and rewards programs from Toast to Acelerate, Inc., which operates under the Open brand. Until that switch is complete, online orders continue to be processed by Toast as described above. When you order online or take part in our loyalty and rewards programs through an Open-powered website or app, Acelerate’s privacy policy below applies to the information collected through that experience, in addition to this Privacy Policy.