Privacy policy

Last updated: October 30, 2026

This policy explains what personal information we collect when you shop with us, why we collect it, and who we share it with. It also explains the choices you have, including how our consent banner controls analytics, advertising and session recording on naturehills.com.

Who we are

This Privacy Policy is issued by Nature Hills Nursery, Inc., which operates naturehills.com and decides how your personal information is used.

When this policy says "we," "us" or "our," it means Nature Hills Nursery. When it says "the site," it means naturehills.com, our checkout, your customer account, our emails and text messages, and our customer service. If this policy and our Terms of Service ever disagree about how we handle personal information, this policy controls.

What we collect

Personal information is anything that identifies you or can reasonably be linked to you. Information that has been made anonymous so it can no longer be linked to you is not personal information. Depending on how you use the site, we collect:

Contact details: your name, billing and shipping addresses, phone number and email address.
Payment details: the form of payment, the transaction amount and confirmation that it went through. Payments are handled by Shopify and its payment processors. We never see or store your full card number.
Account details: your login, your saved addresses, your preferences and settings, and your Good Nature Club points.
Order details: the plants and products you view, add to your cart or wishlist, buy, return, exchange or cancel, and your past orders and guarantee claims.
Messages with us: what you tell us by email, phone, text, chat or our contact forms, including photos you send us of a plant.
Device details: your browser, device type, network connection, IP address, and cookie or device identifiers.
Usage details: the pages you visit, what you search for and click, how long you stay, and, if you accept analytics cookies, a recording of how you moved through the site (see "Session recording" below).
Reviews and questions: the name, photos and text you post when you review a product or ask a question about it.
Inferences: conclusions we draw from the above, such as the plants we think you will like, the growing zone you probably garden in, or whether you are likely to buy again.

We do not ask for sensitive information such as Social Security numbers, health information or precise geolocation, and we do not use any information to infer those things about you.

Where it comes from

Directly from you: when you place an order, create an account, join our email or text lists, enter a contest, leave a review, or contact us.
Automatically from the site: from your browser and device through cookies, pixels and similar tools, subject to the choices you make in our consent banner.
From the companies we work with: for example, Shopify tells us about your order and payment status, carriers tell us where your package is, and advertising companies tell us whether an ad led to a visit or a sale.
From other sources: for example, when you interact with our posts on social media or when a friend sends you a gift from our store.

How we use it

To run the store: process your order and payment, ship your plants, handle returns, exchanges and guarantee claims, and manage your account.
To talk with you: answer questions, send order and shipping updates, and follow up on customer service requests.
To improve the site: find out which pages work, which confuse people, and what to fix.
To personalize your shopping: remember your cart and preferences and recommend plants that suit you.
To market to you: send marketing email and text messages you signed up for, and show you ads for our plants on other websites and apps, based on what you viewed, put in your cart or bought here. Ads based on your activity only run if you accept marketing cookies.
To keep things safe: verify accounts, prevent fraud, and protect our customers, our staff and the site.
To meet legal duties: comply with the law, respond to valid legal requests, keep tax and accounting records, and enforce our Terms of Service.

Cookies, the consent banner and your choices

Cookies are small files a website saves in your browser. Pixels and tags are small pieces of code that do a similar job. We use them in three groups.

When you first visit, a consent banner lets you accept or decline cookies for analytics and marketing.

Essential: keep your cart, run checkout, keep the site secure, remember your consent choice, and load our fonts and core site features. These are always on because the site does not work without them.
Analytics: tell us how the site is used, including which pages people visit and where they get stuck. This group includes session recording. These only run if you accept them.
Marketing: let us and our advertising partners measure ads, show you ads for our plants on other sites and apps, and personalize the marketing email we send you. These only run if you accept them.

If you decline, or close the banner without choosing, analytics and marketing tools stay off. You can change your choice at any time through the privacy choices option on our site. When you withdraw consent, we stop loading the tools in that group on later pages and session recording stops; tools that already loaded on the page you are viewing may finish that page.

If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of the sale or sharing of your information for that browser, and as declining analytics and marketing cookies in that browser.

You can learn more about Global Privacy Control at globalprivacycontrol.org. We do not respond to other "Do Not Track" signals, because there is no common standard for them.

Your choice is saved in the browser you used. If you clear your cookies or use a different browser or device, the banner will ask again.

Session recording

We use Microsoft Clarity to record how visitors use our site. A recording captures the pages you visit, how far you scroll, where you tap or click, your mouse movements, and the path you take from page to page. We can replay a visit afterward, and Clarity also combines many visits into heatmaps that show where people tend to tap and scroll.

Clarity masks what you type into forms, so a recording does not show your name, address, email, password or payment details.

We use recordings for one reason: to find the pages and steps that confuse people or break, so we can fix them. We do not use recordings to identify you or to decide what you see or pay.

Session recording starts only after you accept analytics cookies in the consent banner, and it stops for that browser as soon as you withdraw that choice. If you decline analytics cookies, or your browser sends a Global Privacy Control signal, your visit is not recorded.

Recordings are kept for 30 days, and heatmaps, which combine many visits without showing any one visitor, for up to 13 months. After that they are deleted. You can read how Microsoft handles this information in the Microsoft Privacy Statement at privacy.microsoft.com.

The companies we work with

We rely on outside companies to run the store, measure the site and market our plants. Each one below gets only what it needs for its job. "Essential" means it runs whenever you use that part of the site. "Analytics" or "marketing" means it runs only after you accept that group in the consent banner.

Shopify: hosts our store, checkout, payments and Shop Pay. It receives what you give us at checkout and how you browse the store. It also runs our consent banner. Essential.
Meta: runs our advertising on Facebook and Instagram through the Meta Pixel. It receives device identifiers, the pages and products you view, cart and purchase events, and your email address and phone number in hashed (scrambled) form so it can match them to Meta accounts. Marketing consent only.
Google: provides Google Analytics, Google Ads, Google Tag Manager, Google Fonts and YouTube. Analytics receives how you use the site and runs only with analytics consent. Ads receives conversion events so we can measure our ads, and runs only with marketing consent. We also upload customer lists to Google Ads, with email addresses and phone numbers in hashed form, so we can show our ads to existing customers or leave them out. Yotpo shares Good Nature Club member status with Google so member offers can appear on Google. Tag Manager loads the tags allowed by your choice. Fonts receives your IP address and the page so it can serve the typeface, and is essential. YouTube videos on our pages load only when you press play.
Klaviyo: sends our marketing email and text messages. It receives your email address, phone number, name and order history, and, if you accept marketing cookies, your browsing and cart activity on the site. It shares lists of hashed email addresses and phone numbers with advertising companies such as Google and Meta so we can reach customers or leave them out of ads. Our emails and texts are sent only if you opted in to them, whatever you chose in the banner.
Microsoft Clarity: records sessions and builds heatmaps, as described in "Session recording" above. Analytics consent only. Microsoft Advertising tags may also run after you accept marketing cookies, to measure our ads on Bing.
Yotpo: runs the Good Nature Club, our rewards program. It receives your account email, your orders and your points activity. Essential for Good Nature Club members.
Judge.me: collects and shows product reviews and questions. It receives your name, email address and order when you leave a review or ask a question. Essential for the review and question features.
Adobe Fonts (Typekit): serves some of the fonts on the site. It receives your IP address and the page. Essential.
Analyzify: a Shopify app that installs and manages our Google tags.
Reddit: measures our advertising on Reddit through the Reddit Pixel. It receives device identifiers, page events and your email address in hashed form. Marketing consent only.
Pinterest: measures our advertising on Pinterest through the Pinterest Tag. It receives device identifiers, page events and your email address in hashed form. Marketing consent only.
OpenAI: provides a product discovery and shopping integration. It runs only after you accept marketing cookies.
Awin: runs our affiliate program, which pays partner websites when a visitor they send us places an order. Its tracking script receives device identifiers, the pages you visit and order details (order number and value), so the right partner gets credit.
Shopify Audiences: a Shopify advertising tool. It uses information about shoppers across Shopify stores to build ad audiences that are sent to our advertising accounts at companies such as Google and Meta. Shopify is responsible for that processing, as described below.
STOQ: sends back-in-stock and pre-order notices. When you join a waitlist, it receives your email address and the product you asked about. Essential for that feature.
Dynasort: a product-sorting tool on our collection pages. It receives page and product interaction data. It runs only after you accept marketing cookies.

We also share information with carriers and fulfillment partners (your name, address and phone number, so they can deliver your plants), with payment processors (to complete your payment), and with the customer service and email tools we use to answer you.

About Shopify: Shopify hosts the site and processes personal information to provide and improve it. To help us grow and improve our business, we use certain Shopify enhanced features that combine information about your visits to our store with information from your visits to other Shopify merchants. When Shopify does that, Shopify is responsible for that processing, including answering requests about it. You can read the Shopify Consumer Privacy Policy at privacy.shopify.com.

We may also share information when the law requires it, to protect our rights or our customers, or as part of a sale or reorganization of our business, in which case this policy continues to apply to your information.

We do not sell your personal information for money. Sharing device identifiers, browsing activity and hashed contact details with the advertising companies above may count as a "sale" or "sharing" under some state laws; you can opt out through the consent banner, our Your Privacy Choices page, or Global Privacy Control. When you opt out, we also remove you from the hashed customer lists we share with advertising companies, within 15 business days.

Text messages

Nature Hills Nursery operates two separate text message programs. You may join one or both. Joining either program is voluntary and is never a condition of any purchase.

Program 1: Marketing and Notifications (short code 82651)

What you get: promotional messages, exclusive offers, seasonal gardening tips, product recommendations, cart reminders, order confirmations, shipping updates and delivery notices, sent from our short code 82651.
How you join: through our website forms and popups, at checkout, or by texting the keyword shown in our sign-up prompts to 82651.
How to stop: text STOP to 82651 at any time. You will receive one confirmation message and no further messages from this program unless you re-enroll. If you text us after opting out, we may reply, and a reply is not re-enrollment.
How to get help: text HELP to 82651 or email support@naturehills.com.

Program 2: Customer Care (toll-free 888-477-9062)

What you get: conversational customer care that you start. When you text our toll-free line at 888-477-9062, we reply to your messages and may send order, shipping and delivery notifications for orders you placed.
How you join: by texting our toll-free number at 888-477-9062 after viewing the text message consent notice on our Contact Us page at naturehills.com/policies/contact-information.
How to stop: text STOP to 888-477-9062 at any time. You will receive one confirmation message and no further messages from this program unless you re-enroll. If you text us after opting out, we may reply, and a reply is not re-enrollment.
How to get help: text HELP to 888-477-9062 or email support@naturehills.com. Customer care hours are Monday through Friday, 9:00 AM to 4:00 PM Eastern.

Both programs

Message frequency varies with your orders, your customer service requests and the season. Marketing and Notifications messages are more frequent in the spring and fall planting seasons. Customer Care messages only relate to orders you placed or requests you started.
We do not charge for text messages. Message and data rates may apply under your mobile plan. Contact your wireless provider for details.
Your consent to receive text messages is not a condition of any purchase. If you joined both programs, opt out of each one separately by texting STOP to its number.
Carriers are not liable for delayed or undelivered messages.
We do not share mobile contact information with third parties or affiliates for their marketing or promotional purposes. Text message opt-in data and consent are never shared with any third party, except the platform providers, phone companies and other vendors that help us deliver the messages for the program you joined.

How long we keep it

We keep personal information only as long as we need it for the reason we collected it:

Orders, guarantee claims and customer service records: kept as business records for as long as we need them to honor our Plant Guarantee, meet tax and accounting rules, and resolve disputes.
Marketing contacts: kept until you unsubscribe. After that we keep a short suppression record (your email address or phone number and the date you opted out) so we do not contact you again by mistake.
Account details: kept while your account is open, and then as part of your order records.
Analytics data and session recordings: kept for the period set in each vendor's retention settings, and then deleted.

Children

The site is not meant for children under 13, and we do not knowingly collect personal information from them. We do not knowingly sell or share the personal information of anyone under 16. If you are a parent or guardian and think your child has given us personal information, contact us at support@naturehills.com and we will delete it.

Security

We use reasonable safeguards to protect your information, and payments run through Shopify's secure checkout. No system is perfect, though, and we cannot promise that information will never be lost or misused. Please do not send sensitive information, such as a full card number, by email or text.

Your privacy rights by state

Ohio, where we are based, has not enacted a comprehensive consumer privacy law as of the date of this policy; Ohio residents still get the choices in this policy. Wherever you live, you can unsubscribe from marketing email, stop text messages, change your cookie choice, and ask us questions about your information.

California

If you live in California, the California Consumer Privacy Act gives you the rights below. This section also serves as our notice at collection.

Categories we collected in the past 12 months: identifiers (name, postal address, email address, phone number, IP address, cookie and device identifiers); customer records (billing and shipping details and payment confirmation); commercial information (products viewed, bought, returned and claimed under the guarantee); internet activity (pages viewed, searches, clicks and, with analytics consent, session recordings); approximate location drawn from your IP address or shipping address; visual information (photos you send us); and inferences (the plants and growing zone we think suit you). We collected them from the sources in "Where it comes from" and used them for the purposes in "How we use it."

Categories we disclosed for a business purpose: all of the categories above, to the service providers that run our store, payments, shipping, customer service, email and text messages, as described in "The companies we work with."

In the past 12 months we have "sold" or "shared" these categories: identifiers (device identifiers, cookie IDs, hashed email and phone) and internet activity (pages and products viewed, cart and purchase events), with the advertising companies listed above, for cross-context behavioral advertising.

We do not use sensitive personal information to infer things about you.

Your rights:

Know: ask what personal information we have about you, where it came from, why we use it and who we share it with, and get a copy.
Delete: ask us to delete it, subject to exceptions such as order and tax records we must keep.
Correct: ask us to fix information that is wrong.
Opt out of sale or sharing: tell us not to sell or share your information for cross-context behavioral advertising.
Limit sensitive use: ask us to limit how we use any sensitive personal information.
No discrimination: we will not charge you more, give you worse service, or deny you anything because you used these rights.

How to use your rights: email support@naturehills.com or call us at 888-477-9062. To opt out of sale or sharing, use our Your Privacy Choices page, decline marketing cookies in the consent banner, or turn on Global Privacy Control.

Verification: before we act on a request to know, delete or correct, we confirm it is you by matching the details you give us with what we already have, such as your email address and a recent order. Opt-out requests do not need verification.

Authorized agents: someone you authorize may make a request for you. We will ask the agent for proof that you authorized them, and we may ask you to confirm your identity with us directly.

Response time: we respond within 45 days. If we need more time, we will tell you why and may take up to 45 more days.

Notice of financial incentive

The Good Nature Club, our rewards program, is a financial incentive under California law, because members give us personal information in exchange for rewards.

What you give: your email address and your purchase history, which Yotpo tracks to award points.
What you get: 1 point for every $1 you spend, more at higher tiers, plus points for other activity. Every 100 points can be redeemed for $5 off. Points expire 12 months after you earn them.
How to join: create an account on naturehills.com and opt in at the Rewards Portal. Joining is voluntary.
How to leave: you may leave at any time by emailing support@naturehills.com and asking us to remove you from the Good Nature Club. When you leave, any unredeemed points are forfeited.

We estimate the value of the personal information you provide through the Good Nature Club as roughly equal to the value of the rewards you receive: about 5% of eligible purchases, up to 10% at the highest tier. We calculated this from the cost of the program's rewards relative to member spending.

Other states

If you live in a state with a comprehensive consumer privacy law, you may have the right to access your information, correct it, delete it, get a portable copy, and opt out of targeted advertising, the sale of your information, and profiling that has legal or similar effects on you. These states include Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky and Rhode Island.

Use the same email address or phone number listed in the California section. If we turn down your request, you may appeal by replying to our decision or emailing support@naturehills.com with "Privacy appeal" in the subject line. We will answer your appeal in writing within the time your state's law allows. If you are not satisfied with the result, you may contact your state attorney general.

Where your information is processed

We are based in the United States, and we and the companies we work with store and process your information in the United States. If you visit the site from another country, your information will be moved to and handled in the United States, where privacy laws may differ from those where you live.

Links to other sites

The site links to other websites and social media platforms. Their own privacy policies apply when you visit them, so please read those. Anything you post publicly on social media can be seen by others.

Changes to this policy

We may update this policy when our practices, our vendors or the law change. When we do, we will post the new version here and change the "Last updated" date. If the change is significant, we will tell you in a clear way, such as a notice on the site or an email.

Contact

If you have a question about this policy or your information, or want to use any of your rights, contact us:

Email: support@naturehills.com
Phone: 888-477-9062
Mail: Nature Hills Nursery, PO Box 299, Avon, OH 44011

If you have a complaint, tell us first and we will try to put it right. Depending on where you live, you may also contact your state attorney general or local data protection authority.