Privacy

What we collect, and what we don't

We are a family apiary that sells honey. We are not in the data business, and this page is the plain-English version of that — what reaches us when you order, who else necessarily sees it, and how to get it back or get rid of it.

Last updated: August 16, 2026.

The short version

  • We collect what we need to send you honey, and nothing else.
  • We never see your card number.
  • We do not have a mailing list, and we do not sell, rent, trade, or share your details with anyone for marketing. Not ever.
  • We set no cookies and we do not track you across other websites.
  • The only email we send you is about an order you placed.

What we collect when you order

You type this in at checkout, and it is the whole list:

  • Your name and email address. Needed to confirm the order and to reach you about it.
  • A shipping address, if you are having honey shipped. Not asked for on pickup orders.
  • A phone number, only if you choose to give one. It is optional and we use it only if an order needs sorting out.
  • Any note you add to the order. Whatever you write in that box, we read.

Your card details never reach us

Payment is handled by Square. The card fields on our checkout page belong to Square, not to us — your card number goes straight from your browser to Square and is never sent to our server, so there is no copy of it here to lose. What comes back to us is a one-time token authorizing that single charge, plus the last-four and the outcome that Square shows any merchant.

We will never ask you for card details by email. If a message claiming to be from us asks you to reply with a card number, it is not from us. Forward it to us instead.

Your cart stays in your browser

What you have added to the cart is kept in your own browser's local storage on your own device. It is not a cookie, it is not sent to us as you browse, and it does not follow you anywhere. It reaches us only at the moment you check out. Clearing your browser data clears it.

Visitor statistics

We use Cloudflare Web Analytics to see roughly how many people visited and which pages they read. It is deliberately the least invasive option we could find: it sets no cookies, builds no profile of you, and cannot follow you to other sites. That is also why this site has no cookie banner — there are no tracking cookies to ask you about.

Server records

Our server writes a short line for each completed order — the order number, email address, whether it ships or is picked up, the total, and Square's payment reference — so there is a record to check against if something goes wrong. It also holds visitors' IP addresses briefly in memory, purely to stop someone hammering the checkout with stolen cards; those are discarded within minutes and are never written down or connected to an order.

We keep no customer database of our own. Your order history lives in Square, where our own records of it are.

Email we send you

Every email from us is triggered by an order you placed and paid for: a confirmation and receipt, a note when it ships or when a pickup order is ready, and any message needed to sort out a specific order. That is the complete list.

There is no newsletter, no signup form, and no marketing list on this site — buying honey does not put you on one, because there isn't one to be put on. We have never bought, rented, scraped, or imported a list of email addresses, and we do not send email on anyone else's behalf. Order email is sent for us by MailerSend.

Who else sees your information

Only the companies that have to, in order for an order to happen:

  • Square — takes the payment and holds the order record.
  • MailerSend — delivers your confirmation email.
  • Fly.io — runs the server this site is served from.
  • Cloudflare — sits in front of the site and provides the visitor statistics above.
  • The carrier — gets the shipping address on the label, for shipped orders only.

Each of them is used for that one job and nothing more. Beyond these, we share your information with no one — no advertisers, no data brokers, no partners. The only other circumstance would be a valid legal demand, and we would tell you if one arrived unless we were forbidden from doing so.

How long we keep it

Order records are kept while we may still need them — to handle a return, answer a question about an old order, or satisfy the tax and business records the State of Florida and the IRS expect us to keep. Ask us to delete yours and we will, except for anything we are legally required to hold on to.

Asking us about your information

Write to redhillshoney@gmail.com and ask for a copy of what we hold about you, a correction to it, or its deletion. A real person reads that address and will answer you. We do not charge for this and we will not make you create an account to do it.

Children

Never give honey of any kind to a child under one year old — that is a safety matter, not a privacy one, but it is important enough to repeat here.

This shop is meant for adults buying groceries. We do not knowingly collect anything from children under 13. If you believe a child has sent us their details, write to the address above and we will remove them.

Security

The whole site is served over HTTPS, card data never touches our servers, and the checkout is rate limited against card testing. No website can promise perfection, but we have kept the amount of your information sitting on our machine as close to nothing as an online shop can.

Changes to this page

If we change how any of this works, we will change this page and update the date at the top. We will not quietly start doing something this page says we don't do.

Who we are

Red Hills Honey is a family apiary in Ashville, North Florida, making Aucilla River Raw Honey. Questions about anything on this page, or about an order, go to redhillshoney@gmail.com. Shipping, pickup, and our replace-or-refund policy are set out on the shipping and pickup page.