Welcome to Provisions — wholesale ordering for co-op communities
Order online · Pick up at your co-op
Welcome to Provisions — wholesale ordering for co-op communities

Privacy Policy

Last updated: June 7, 2026

This Privacy Policy describes how personal information collected through the online ordering service for Feather River Food Co-op, powered by Provisions Co-op Wholesale (the "Service"), is handled.

1. Who is responsible for your information

Two organizations handle information through the Service:

  • Provisions Co-op Wholesale ("Provisions") operates the technology platform. Provisions is the controller of account credentials, technical data, and platform telemetry.
  • Feather River Food Co-op is the merchant of record selling the goods you order through the Service. Feather River Food Co-op is the controller of order data — the items you ordered, the pickup location and time, your contact details for that order, and related communications.

This Policy covers both. References to "we" or "us" mean Provisions and Feather River Food Co-op together where the activity is shared, and the relevant party where it is not.

2. Information we collect

  • Account information: name, email address, phone number, and any address or pickup-location preferences you provide.
  • Order information: items ordered, pickup location and date, order history, and payment confirmation. We do not store full card numbers — payments are processed by Stripe.
  • Communications: messages you send us via the support page, and our responses.
  • Technical data: IP address, browser type, device identifiers, pages visited, and product-analytics events needed to operate and improve the Service.
  • Cookies and similar technologies: first-party cookies and local storage for session management, cart state, and analytics. You can control cookies through your browser settings; disabling them may break parts of the Service.

3. Analytics and product usage

We use PostHog, an open-source product-analytics platform, to understand how the Service is used and to diagnose and fix problems. This includes usage events such as pages viewed, features used, device and browser type, and approximate location derived from your IP address. We also use PostHog session replay to play back on-page interactions (clicks, navigation, scrolling) when diagnosing issues — text you enter into form fields (such as names, addresses, and payment details) is masked and is not captured.

PostHog data is hosted in the European Union. We honor your browser's "Do Not Track" signal, and we never sell your information or share it for cross-context behavioral advertising. We handle personal data in line with applicable data-protection laws, including the EU GDPR where it applies (see "Your choices and rights" below).

4. How we use information

  • To process and fulfill your orders
  • To communicate about your orders, account, and pickup logistics
  • To operate, secure, and improve the Service
  • To comply with legal obligations (e.g. tax and regulatory reporting, food-safety recalls)
  • To enforce our Terms of Use and prevent fraud or abuse

We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising as those terms are defined under California law.

5. Who sees your information

  • Feather River Food Co-op — sees your name, contact details, order contents, and pickup status to fulfill your order as the merchant of record.
  • Producers and suppliers fulfilling your order — when an item you ordered is fulfilled by a producer or supplier, they may see your name and the items you ordered (not your payment details or other order history) so they can pack your share.
  • Service providers — payment processing (Stripe), email delivery, hosting, and product analytics (PostHog). These vendors process information on our behalf under contract.
  • As required by law — to respond to lawful requests by public authorities or where disclosure is otherwise legally required.

We do not provide your information to advertisers or data brokers.

6. Data retention

We retain account and order information for as long as you have an account and as needed to provide the Service. After account deletion, we may retain limited records as required by law (e.g. tax records, fraud-prevention logs). Technical logs and analytics are retained on a shorter schedule.

7. Your choices and rights

  • Access and update: review and update your account information from your account page at any time.
  • Delete: request deletion of your account via the support page. Some information may be retained as required by law.
  • Washington residents have rights under the Washington My Health My Data Act for any health-related personal information; we do not knowingly collect such information through the Service.
  • California residents have the right to know, delete, correct, and limit the use of sensitive personal information under the CCPA. To exercise these rights, contact us via the support page. We do not discriminate against users who exercise their rights.
  • Other state laws: residents of states with comprehensive privacy laws (including Colorado, Connecticut, Oregon, Texas, Utah, and Virginia) have similar rights. The same support contact applies.
  • EU/EEA and UK residents (where the GDPR or UK GDPR applies) have the right to access, correct, delete, restrict, and port their personal data, and to object to certain processing. Contact us via the support page to exercise these rights.

8. Children

The Service is intended for adults (18+). We do not knowingly collect personal information from children under 13 and would delete any such information if discovered.

9. Security

We use commercially reasonable safeguards to protect personal information, including encryption in transit, access controls, and infrastructure security. No system is perfectly secure; if we become aware of a breach affecting your information, we will notify you as required by applicable law.

10. Changes

We may update this Policy. Material changes will be communicated by email or by notice on the Service.

11. Contact

Privacy questions or requests to exercise your rights? Visit our support page.

Written privacy correspondence to the platform operator:
Provisions Co-op Wholesale
1500 North Grant Street, Suite N
Denver, CO 80203