Privacy Policy

This website (“website”) is operated by New Country Organics Inc. and New Country Organics Limited (together “New Country Organics,” “we,” “our,” or “us”). This privacy policy only covers information collected at this website. Last Updated: June 8, 2026

1. Introduction and Data Controllers

New Country Organics Inc. is a for-profit corporation incorporated in the United States, with its principal place of business at 801 2nd Street, Waynesboro, VA 22980. It is the data controller for personal information collected from visitors and customers in the United States.

New Country Organics Limited (NCO Ltd) is a private limited company registered in Scotland (Companies House registration number: SC844414), with its registered address at The Ink Building 7th Floor, 26 Douglas Street, Glasgow G2 7NQ, United Kingdom. NCO Ltd is the data controller for personal information processed in connection with its UK activities and for personal information collected from individuals in the United Kingdom.

Questions or requests regarding this Privacy Policy may be directed to:

• US inquiries: info@newcountryorganics.com | 1-844-933-3337 | 801 2nd Street, Waynesboro, VA 22980
• UK inquiries: info@newcountryorganics.co.uk | New Country Organics Limited, The Ink Building 7th Floor, 26 Douglas Street, Glasgow G2 7NQ

2. Personal Information We Collect

We collect the following categories of personal information:

• Contact information – name, postal address, telephone number, and email address.
• Transactional information – details of items purchased and payment method. Note: payment card transactions are processed by our payment vendor; we do not retain full card numbers.
• Interests and preferences – information about the types of products that interest you and your preferences regarding products and services.
• Network and technical information – your IP address, browser type and version, device information, and the pages you visit on our website.

3. How We Collect Personal Information

We collect personal information in the following ways:

• Directly from you – when you ask a question, make a request, create an account, or transact business with us. This usually involves a sign-up or order form.
• From our records – our systems record what you purchased and when.
• Passively through our website – we automatically collect network and technical information when you visit our website. Our website also uses cookies and similar tracking technologies (see Section 9 below).
• Aggregated analytics – we use website analytics tools and social media remarketing. Aggregated analytics data does not identify individual users.

4. Why We Collect Personal Information

We collect and use personal information for the following purposes:

• To respond to your questions and requests, including “Find a Dealer Near You” inquiries.
• To process and fulfill your orders and transactions.
• To offer products and services we think may interest you, including marketing communications (where you have consented or where we have a legitimate interest, as applicable).
• To improve your overall shopping experience with us.
• To protect our network, systems, and data, including personal information.
• To comply with our legal obligations.

5. Lawful Basis for Processing (UK Residents)

For individuals in the United Kingdom, UK GDPR requires us to identify a lawful basis for each processing activity. Our lawful bases are as follows:

• Contract performance – processing your contact and transactional information to fulfill orders, process payments, arrange delivery, and respond to order-related queries.
• Legitimate interests – processing network and technical information to protect the security of our systems; using aggregated analytics to improve our website and services; and sending marketing communications to existing customers about similar products and services. Our legitimate interests do not override your rights and freedoms.
• Consent – placing non-essential cookies and similar tracking technologies on your device; and sending direct marketing to new contacts who have opted in. You may withdraw your consent at any time (see Section 8 and Section 9).
• Legal obligation – retaining transaction and financial records as required by applicable law.

6. When We Share Personal Information

We will never sell your personal information.

We may share your personal information only in the following limited circumstances:

• Service providers and vendors – we share information with third-party vendors who assist in operating our business, including shipping carriers (to fulfill delivery), payment processors (to process transactions), email service providers (to send communications), and website analytics providers. These vendors are contractually obligated to use your information only as directed by us and not for their own purposes.
• Legal requirements – we may disclose personal information if required to do so by law or in response to a valid legal process (such as a court order or government request).
• Business transfers – in the event of a merger, acquisition, or sale of all or part of our business, personal information may be transferred as part of that transaction. We will notify you of any such change via a prominent notice on our website.

We do not share your personal information for any other purpose without your consent.

For UK residents: Where we share personal information with service providers, we do so under written data processing agreements that comply with UK GDPR Article 28 requirements.

7. International Data Transfers (UK Residents)

New Country Organics Inc. is based in the United States. When personal information collected from UK residents is processed by or on behalf of New Country Organics Inc., this constitutes a transfer of personal data to a country outside the United Kingdom.

We rely on the UK International Data Transfer Agreement (IDTA) as the legal mechanism for transfers of personal data from the United Kingdom to the United States. The IDTA is a contract approved by the UK Information Commissioner’s Office (ICO) that legally requires the recipient of the data to protect it to UK GDPR standards. Where we transfer personal data to third-party processors located outside the United Kingdom, we ensure that equivalent safeguards are in place, whether through the IDTA, a processor’s own ICO-approved transfer mechanism, or other appropriate safeguards permitted under UK GDPR.

You may request further information about the safeguards in place for international transfers by contacting us at the UK address above.

8. Your Privacy Rights

8.1 Rights for All Users

Regardless of your location, you have the right to:

• Request access to the personal information we hold about you.
• Request that we correct inaccurate or incomplete personal information.
• Request deletion of personal information we are not legally required to retain.

To exercise these rights, please submit a request to info@newcountryorganics.com or use the contact information in Section 1. We will respond within 45 days of receipt. We may need to verify your identity before processing your request.

8.2 Additional Rights for Virginia Residents (VCDPA)

If you are a resident of Virginia, you have the following additional rights under the Virginia Consumer Data Protection Act (VCDPA):

• Right to access – to confirm whether we are processing your personal data and to obtain a copy.
• Right to correction – to correct inaccuracies in your personal data.
• Right to deletion – to delete personal data we have collected from you.
• Right to data portability – to obtain a portable copy of your personal data in a readily usable format.
• Right to opt out – to opt out of the processing of your personal data for purposes of (i) targeted advertising, (ii) the sale of personal data, or (iii) profiling in furtherance of solely automated decisions that produce legal or similarly significant effects. We do not sell personal data. To opt out of targeted advertising (including social media remarketing), please contact us at info@newcountryorganics.com.

How to submit a request: Email info@newcountryorganics.com with the subject line “Virginia Privacy Request.” We will respond within 45 days, with a possible one-time 45-day extension if reasonably necessary.

Appeals process: If we decline to act on your request, we will inform you of the reason. You may appeal our decision by emailing info@newcountryorganics.com with the subject line “Virginia Privacy Appeal.” We will respond to your appeal within 60 days. If your appeal is denied, you may submit a complaint to the Virginia Attorney General at https://www.oag.state.va.us.

8.3 California Residents

New Country Organics Inc. does not currently meet the applicability thresholds of the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). As of 2026, the CCPA applies to for-profit businesses that do business in California and meet at least one of the following thresholds: (i) annual gross revenue exceeding $26,625,000; (ii) buying, selling, or sharing the personal information of 100,000 or more California residents or households annually; or (iii) deriving 50% or more of annual revenue from selling or sharing California residents’ personal information. We do not meet any of these thresholds. We reassess our compliance obligations annually. If our circumstances change, we will update this policy accordingly.

8.4 Additional Rights for UK Residents (UK GDPR)

If you are located in the United Kingdom, you have the following rights under UK GDPR:

• Right of access – to obtain confirmation of whether we process your personal data and to receive a copy (a “Data Subject Access Request” or DSAR).
• Right to rectification – to have inaccurate or incomplete personal data corrected.
• Right to erasure (“right to be forgotten”) – to have your personal data deleted in certain circumstances, such as where it is no longer necessary for the purpose for which it was collected.
• Right to restriction of processing – to request that we limit how we use your personal data in certain circumstances.
• Right to data portability – where processing is based on your consent or on a contract, to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object – to object to processing based on legitimate interests, or to processing for direct marketing purposes (which is an absolute right).
• Right to withdraw consent – where processing is based on your consent, to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Rights related to automated decision-making – not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects, except in limited circumstances.

How to submit a request: Email info@newcountryorganics.co.uk with the subject line “UK Data Subject Request.” We will respond within one calendar month. We may extend this by a further two months for complex or numerous requests, in which case we will notify you.

Right to complain: You have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) if you believe we have not handled your personal data in accordance with UK GDPR. The ICO can be contacted at: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF | Tel: 0303 123 1113 | www.ico.org.uk. We would, however, appreciate the opportunity to address your concerns before you contact the ICO, and ask that you contact us first.

9. Cookies and Similar Technologies

Our website uses cookies and similar tracking technologies. Cookies are small text files placed on your device that help us operate and improve our website.

We use the following categories of cookies:

• Strictly necessary cookies – required for the website to function (e.g., maintaining your shopping cart and session). These cannot be disabled.
• Analytics and performance cookies – help us understand how visitors use our website so we can improve it. These are only set with your consent.
• Marketing and targeting cookies – used to deliver relevant advertising and social media remarketing. These are only set with your consent.

When you first visit our website, you will be presented with a cookie consent banner that allows you to accept, decline, or customize your cookie preferences. You can also update your preferences at any time by clicking the “Cookie Settings” link in the footer of our website. You may also control cookies through your browser settings; however, disabling certain cookies may affect the functionality of our website.

For UK residents: We obtain your consent for non-essential cookies in accordance with the UK Privacy and Electronic Communications Regulations (PECR) and ICO guidance.

10. How Long We Keep Personal Information

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are:

• Transaction and financial records – seven (7) years from the date of the transaction, in compliance with US and UK tax and accounting requirements.
• Customer account and contact information – for the duration of your customer relationship with us, and for up to three (3) years after the last interaction, unless you request deletion earlier.
• Marketing contact data – until you opt out or unsubscribe, or after three (3) years of inactivity, whichever is earlier.
• Website analytics and technical data – up to twenty-six (26) months in aggregated or pseudonymized form.

When personal information is no longer required, we securely delete or anonymize it.

11. How We Protect Personal Information

New Country Organics has established and maintains reasonable administrative, technical, and physical security measures to protect personal information, including:

• Encryption of data in transit using TLS/SSL protocols.
• Access controls restricting personal data access to authorized personnel only.
• Regular review of our data security practices and vendor agreements.
• Contractual data security obligations imposed on third-party service providers.

No method of data transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals and relevant authorities as required by law.

12. Personal Information of Children

Our website and services are not directed at children. We do not knowingly collect personal information from children under the age of 13. If we learn that we have collected personal information from a child under 13, we will delete it promptly in accordance with the Children’s Online Privacy Protection Act (COPPA) and other applicable law.

If you are a parent or guardian and believe we have collected personal information from your child in a manner not permitted by law, please contact us at info@newcountryorganics.com.

13. Updates to This Policy

This Privacy Policy was last updated June 8, 2026. We review and update this policy periodically to reflect changes in our practices or applicable law. All changes are effective immediately upon posting to our website. We will provide more prominent notice of material changes (for example, by email or by a notice on our homepage) where required by law. We encourage you to review this policy regularly.

14. Contact Us

If you have questions, requests, or concerns about this Privacy Policy or our data practices, please contact us:

United States:
New Country Organics Inc.
801 2nd Street, Waynesboro, VA 22980
Tel: 1-844-933-3337
Email: info@newcountryorganics.com

United Kingdom:
New Country Organics Limited
The Ink Building, 26 Douglas Street, Glasgow G2 7NQ
Email: info@newcountryorganics.co.uk

UK Supervisory Authority:
Information Commissioner’s Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Tel: 0303 123 1113
Website: www.ico.org.uk