Home › Privacy Policy
Privacy Policy
What we collect, why we collect it, how long we keep it, and how to make a request.
Last updated: 3 August 2026
Copper Mesa Spice Trading Co. (“Copper Mesa”, “we”, “us”) operates the website at origin.roozspices.com. This policy explains what personal information we collect, why we collect it, how long we keep it and the choices you have. We are a small owner-operated business and we do not sell personal information to anyone, ever.
1. Who is responsible for your data
The data controller is Copper Mesa Spice Trading Co., 4767 Sweetwood Drive, Golden, CO 80401, United States. The responsible person is the owner, Janice Eaton, reachable at hostmaster@origin.roozspices.com or 303-384-7649.
2. Information we collect
2.1 Information you give us
- Contact details — name, business name, email address and telephone number submitted through our contact form or given to us by phone.
- Enquiry content — the message you write, including any details about your kitchen, order history or preferences you choose to share.
- Order and billing details — where you place an order, the shipping address, items ordered and payment confirmation reference. Card numbers are handled by our payment processor and are never stored on our systems.
2.2 Information collected automatically
- Server logs — IP address, browser user agent, requested URL, referring URL and timestamp, recorded by our hosting provider for security and troubleshooting.
- Cookies — a strictly necessary cookie recording your consent choice, and, only if you accept, analytics cookies that measure aggregate page usage. See our Cookie Policy.
2.3 Information we do not collect
We do not collect special-category data (health, biometric, political or religious information), we do not knowingly collect information from children under 13, and we do not build advertising profiles or attempt to identify individual visitors from analytics data.
3. Why we use it and on what basis
| Purpose | Data used | Lawful basis | Retention |
|---|---|---|---|
| Replying to an enquiry | Contact details, message | Legitimate interest / steps prior to a contract | 24 months from last contact |
| Fulfilling an order | Contact, shipping and order details | Performance of a contract | 7 years (tax records) |
| Wholesale account management | Business contact, terms, order history | Performance of a contract | Duration of account + 7 years |
| Site security and abuse prevention | Server logs | Legitimate interest | 90 days |
| Aggregate analytics | Cookie identifiers, page views | Consent | 14 months |
| Occasional email notes (opt-in only) | Email address, first name | Consent | Until you unsubscribe |
4. Sharing
We share personal information only with service providers who need it to help us operate, and only for that purpose: our web host, our email provider, our payment processor, and the shipping carriers (USPS and UPS) that deliver your order. Each is bound by contract to protect the information. We may also disclose information where required by law, court order or a lawful request by a public authority.
We do not sell or share personal information for cross-context behavioural advertising as those terms are defined by the Colorado Privacy Act or the California Consumer Privacy Act.
5. Advertising and measurement
We may run search advertising, including on the Microsoft Advertising network. Where an advertising or measurement tag is present, it is loaded only after you accept optional cookies, and it is configured for aggregate conversion measurement rather than individual profiling. You can withdraw consent at any time by clearing cookies for this site and choosing “Decline optional” when the banner reappears.
6. Your rights
Depending on where you live, you may have the right to: request a copy of the personal information we hold about you; correct inaccurate information; request deletion; object to or restrict certain processing; withdraw consent at any time; and, in Colorado and several other states, appeal a decision we make about your request. Residents of California, Colorado, Connecticut, Virginia and Utah have specific statutory rights along these lines.
To exercise any right, email hostmaster@origin.roozspices.com with “privacy request” in the subject line, or write to the postal address above. We respond within 45 days and will tell you if we need a single 45-day extension. We will not charge you or degrade your service for making a request. If we decline a request you may appeal by replying to our response; if we deny the appeal you may contact the Colorado Attorney General.
7. Security
The site is served over HTTPS. Access to order and enquiry records is limited to the staff who need it, protected by unique accounts and multi-factor authentication. Payment card data never reaches our servers. No system is perfectly secure, and we will notify affected individuals and the relevant authority without undue delay if a breach is likely to cause harm.
8. International visitors
We operate solely in the United States and our systems are hosted in the United States. If you access the site from outside the U.S., your information will be processed in the U.S. under this policy.
9. Third-party links
Our pages may link to other websites. We are not responsible for their content or their privacy practices, and we encourage you to read their policies before providing information.
10. Changes
If we change this policy we will update the date at the top and, for material changes, post a notice on the home page for thirty days. Previous versions are available on request.
Questions about this policy? Write to Janice Eaton at hostmaster@origin.roozspices.com, call 303-384-7649, or post to Copper Mesa Spice Trading Co., 4767 Sweetwood Drive, Golden, CO 80401.