Privacy Policy

Effective the date this site goes live. Last updated October 15, 2026.

This policy explains what personal information [Legal business name] ("we", "us") collects on tiddybearcomfortstrap.com, how we use and share it, and your choices. It describes what this site actually does.

What we collect

When you order: your name, email, phone number (optional), billing address, shipping address and what you bought. Card details go directly to Stripe, our payment processor. We never see or store your full card number.
When you join the waitlist: your email, your color preference, the date and time you agreed, and the page you signed up on (your consent record).
When you contact us: your name, email, phone (optional), topic and message, by form or email.
Automatically: our web host keeps standard server logs, including IP address, browser and device type and pages requested, to keep the site secure and working.
Cookies: only the cookies needed for the cart, checkout and site security. See Cookie Preferences for the full list.

What we do not do

We do not use analytics tools on this site.
We do not use advertising pixels or advertising cookies.
Our featured video is hosted on YouTube. Nothing loads from YouTube until you press Play; it then plays in YouTube's privacy enhanced mode, and YouTube's own privacy policy applies to it.
We do not send abandoned cart emails or track carts you do not complete.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

How we use it

To process, ship and support your order, including returns and refunds
To answer your messages
To email you when orders open, if you joined the waitlist
To prevent fraud and keep the site secure
To meet legal, tax and accounting requirements

Who we share it with

Only the service providers that run the store for us, and only what they need:

Stripe (payment processing and fraud prevention)
Kinsta (website hosting)
our shipping carrier (delivering your order: your name, shipping address and, where needed, phone or email)
our email delivery service (sending order and waitlist emails)

We may also share information if required by law, to protect our rights or safety, or as part of a sale or transfer of the business.

How long we keep it

Order records: as long as needed for tax and accounting, usually 7 years
Waitlist: until you unsubscribe or ask us to delete it
Contact messages: up to 24 months, then deleted automatically
Server logs: as kept by our web host for security

Security

The site uses HTTPS encryption. Payments are handled by Stripe, a PCI DSS compliant processor. Access to store data is limited to the people who need it. No method of transmission or storage is completely secure, but we work to protect your information.

Your choices and rights

You can ask us to access, correct, delete or get a copy of your personal information, and you can unsubscribe from emails at any time using the link in every email. Depending on where you live (for example California, Colorado, Connecticut, Virginia and other states), you may have additional rights, including the right to appeal our decision. We honor Global Privacy Control signals as a request to opt out of any sale or sharing, although we do not sell or share personal information.

To make a request, email info@tiddybearcomfortstrap.com with the subject "Privacy request". We will confirm your identity using the email address on file and respond within 45 days. You may use an authorized agent. We will not treat you differently for using your rights.

Children's privacy

This site and our store are intended for adults. We do not knowingly collect personal information from children under 13, and our forms are not directed to children. If you believe a child has given us personal information, contact us and we will delete it.

Changes

If we change this policy, we will update the dates at the top of this page. For significant changes, we will post a notice on the site.

Contact

[Legal business name]. Email info@tiddybearcomfortstrap.com.