Lot. Leaf. Lore. · The Herbarium is open

LOT & LEAFBotanical Apothecary & Herbarium
ContactBag (0)
Menu

Legal & compliance center

Clear rules before
the first order.

This center documents the current pre-launch compliance program, including where Lot & Leaf intends to sell, how customer data is handled, and the conditions that must be satisfied before checkout can open.

Initial commerce boundary

United States only.

United States shipping addresses only; exact state and product eligibility is determined at checkout.

Canada, Mexico, U.S. territories, APO/FPO/DPO addresses, freight forwarders, and all other international destinations are excluded at initial launch.

Read the geographic eligibility policy
Working version
0.3-prelaunch
Updated
August 21, 2026
Publication status
Pre-launch draft

Policy library

The operating rules.

These drafts are deliberately visible for review but are not final legal advice or an attorney-approved launch package. Each policy includes the operational controls it expects the business to follow.

Commerce

TermsTerms of Service

Rules for using the website, future purchases, acceptable conduct, intellectual property, liability, and unresolved dispute terms.

PaymentsPayment Processing & Processor Eligibility

Truthful processor disclosure, approved product scope, hosted checkout, card-data boundaries, webhook finality, refunds, disputes, and restricted-category controls.

ShippingShipping & Delivery Policy

Eligible U.S. destinations, processing, address review, delivery estimates, tracking, loss, damage, and recall holds.

ReturnsReturns, Refunds & Order Problems

A safety-conscious return framework for sealed consumables, damaged goods, wrong items, refunds, and non-waivable rights.

Privacy

PrivacyPrivacy Policy

Data categories, first-party analytics, newsletter processing, future orders, service providers, retention, security, and U.S. privacy rights.

Age & eligibilityAge, Eligibility & Children’s Privacy

General-audience access, adult purchasing, children under 13, and higher future product-specific age gates.

Email marketingEmail Marketing & Subscriber Policy

Signup notice, sender identity, unsubscribe, suppression, postal-address, vendor, and transactional-message requirements.

Territory

Sales territoryU.S. Sales & Geographic Eligibility

A U.S.-only launch boundary, state eligibility controls, freight-forwarder restrictions, and the compliance work required before Canada or Mexico.

State noticesU.S. State & California Consumer Notices

A national state-law framework with focused California privacy, Proposition 65, consumer-right, and online-sale notices.

Safety

Product safetyProduct Safety, Complaints & Recalls

Identity, preparation, allergens, interactions, storage, lot codes, complaints, adverse events, and recall response.

Medical disclaimerHerbal Education & Medical Disclaimer

The boundary between botanical education, regulated claims, medical advice, and emergency care.

Inhalation disclaimerInhalation & Combustion Disclaimer

A firm no-sale boundary for initial launch and the separate evidence, age, legal, processor, and safety review required for any future inhalation product.

Claims

Sourcing & claimsSourcing, Testing & Marketing Claims

Rules for identity, supplier records, laboratory language, organic claims, traditional use, testimonials, and claim approval.

Release gate

What still blocks commerce.

Policies cannot substitute for compliant operations. The storefront remains gated until every material item below is completed, evidenced, and approved.

  1. Form the operating entity; record its exact legal name, DBA ownership, formation state, and principal mailing address.
  2. Select a monitored legal/privacy email address and a customer-support channel.
  3. Classify every SKU as conventional food, dietary supplement, non-consumable botanical, or another legally reviewed category.
  4. Complete label review for identity, net quantity, ingredients, nutrition or Supplement Facts, responsible-party address, directions, warnings, allergens, lot code, and category-specific statements.
  5. Document whether each manufacturing, packing, holding, and fulfillment location requires FDA registration and which CGMP or preventive-control rules apply.
  6. Approve a written hazard, allergen, supplier, testing, release, complaint, adverse-event, withdrawal, and recall program.
  7. Review every express and implied claim—including product names, imagery, testimonials, search snippets, articles, and links—for FDA and FTC compliance.
  8. Complete product-by-product federal and state ingredient restrictions, California Proposition 65 exposure analysis, and state shipping matrix.
  9. Bind product liability, general liability, cyber/privacy, and any required workers’ compensation or commercial coverage.
  10. Register for applicable sales tax accounts and configure destination-based collection, exemption, and recordkeeping rules.
  11. Approve carrier, fulfillment, damaged-package, return, refund, chargeback, and recall workflows.
  12. Disclose the complete catalog, intended uses, claims, fulfillment model, and website to Stripe; retain its written approval for catalog version 2026-08-21-oral-v1. Inhalation checkout requires a separate written approval reference for that exact category.
  13. Deploy a privacy-request workflow, verified-request procedure, data-retention schedule, deletion jobs, incident-response plan, and vendor agreements.
  14. Before any marketing email is sent, add a valid postal address, working unsubscribe mechanism, suppression list, and campaign compliance review.
  15. Complete keyboard, screen-reader, zoom/reflow, contrast, reduced-motion, form-error, and checkout accessibility testing; publish a monitored accessibility feedback channel and remediation process.
  16. Have U.S. food/supplement regulatory counsel and commercial counsel approve the final version and record approval as version 1.0 or later.