California Privacy Notice
Last updated: 30 May 2026
This notice supplements our Privacy Policy and applies specifically to California residents under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).
Who we are
True Natura is operated by Harker International (Private) Limited (Registration No. PV 00338032), based in Kandy, Sri Lanka. Customer-service correspondence may be addressed to PO Box 90, Elmendorf, TX 78112, USA. For privacy inquiries, contact info@harker.international.
Categories of personal information we collect
Over the past 12 months, we have collected the following categories of personal information from California residents who interact with our site:
| Category | Examples | Sources |
|---|---|---|
| Identifiers | Name, email, postal address, phone number, IP address, account username | You provide directly at checkout, account creation, or contact form |
| Commercial information | Products purchased, order history, gift messages | Order records |
| Financial information | Card last 4 digits, authorisation token | Stripe (we do not store full card numbers) |
| Internet activity | Browser type, pages visited, referring page, time on site | Server logs, cookies, analytics |
| Geolocation (approximate) | City-level from IP address | Server logs |
| Inferences | Product preferences based on browsing history | Aggregated from the above categories |
How we use your information
- To fulfil your order and process payment
- To send transactional emails (order confirmation, shipping, refund notifications)
- To respond to customer service inquiries
- To send marketing communications — only if you opt in
- To improve the site, detect fraud, and comply with legal obligations
Do we “sell” or “share” your information?
No. True Natura does not sell personal information as that term is defined under CCPA/CPRA. We do not share personal information for cross-context behavioural advertising (also called “sharing” under CPRA).
We do disclose personal information to service providers (Stripe for payments, Hostinger for hosting, Google Analytics for aggregated traffic measurement) strictly to operate the store. These providers are contractually restricted from using your data for their own marketing or any purpose outside our service.
Global Privacy Control (GPC) signal. We recognise the GPC browser signal as a valid universal opt-out under CPRA. If your browser sends GPC, we treat it as an explicit “do not sell or share” request and, for any visit where you have not yet made a separate choice on our cookie banner, we automatically default to Essential Only — analytics cookies are not loaded. You can override this at any time by clicking the Cookie preferences link in the footer of any page.
Your rights as a California resident
Under CCPA/CPRA, you have the right to:
- Know what categories and specific pieces of personal information we collect, use, and disclose.
- Access a portable copy of the personal information we hold about you.
- Correct inaccurate personal information we hold about you.
- Delete personal information we have collected from you, subject to legal retention exceptions (e.g., we cannot delete tax records before the 7-year statutory retention period).
- Opt out of sale or sharing of your personal information — though we do not sell or share as defined above, you may still submit this request and we will confirm our practices.
- Limit use of sensitive personal information — we do not collect sensitive PI as defined (financial account numbers, precise geolocation, race/religion, biometric data, etc.) beyond what’s necessary to complete an order.
- Non-discrimination — we will not deny products, charge different prices, or provide different service quality because you exercised a CCPA right.
How to exercise your rights
Email info@harker.international with the subject line “California Privacy Request”. Include:
- The right you wish to exercise (know, access, correct, delete, opt-out)
- The email address or order number associated with your account, so we can locate your records
- Sufficient detail to allow us to verify your identity (we may ask a follow-up question matching information we already have)
We respond to verifiable requests within 45 days. If we need an extension we’ll tell you why and when to expect a response (no longer than 90 days total).
Authorised agents acting on your behalf may submit requests; we will require proof of authorisation and your direct verification of identity.
Categories disclosed to third parties (past 12 months)
| Recipient | Categories shared | Purpose |
|---|---|---|
| Stripe | Identifiers, financial info | Payment processing |
| Shipping carriers | Identifiers (name, address, phone) | Order delivery |
| Hostinger | All — server-side | Hosting infrastructure |
| Google Analytics | Internet activity, anonymised IP | Aggregated usage measurement |
Retention
We retain personal information for as long as needed to provide the requested service and to comply with legal obligations. Order and tax records are retained for at least seven (7) years as required by US and Sri Lankan tax law.
Minors
True Natura does not knowingly collect personal information from individuals under 16. We do not sell or share personal information of minors. If you believe a minor has provided us with personal information, contact us and we will delete it.
Changes to this notice
We may update this notice as our practices change or as law evolves. The “Last updated” date at the top reflects the most recent revision.
Contact
Harker International (Private) Limited
Kandy, Sri Lanka
Privacy email: info@harker.international
US correspondence: PO Box 90, Elmendorf, TX 78112, USA
California resident with a privacy request?
Email info@harker.international with the subject “California Privacy Request” and we’ll respond within 45 days.
Contact us