Privacy Policy

Section 01

Information We Collect

We collect information you provide directly, information collected automatically as you use our site, and information from third parties who help us operate our business. The specific categories of personal information we collect include:

Information You Provide

• Identity & contact details: your name, email address, phone number, and mailing or shipping address.
• Account credentials: if and when you create a customer account through our store (powered by Shopify), the details you register with.
• Payment information: billing address and payment card details (processed by our payment processor; we do not store full card numbers on our servers).
• Purchase history: orders placed, items returned, and related transaction records.
• Communications: messages you send to our customer service team and newsletter preferences.

Information Collected Automatically

• Browsing behavior: pages viewed, products clicked, time spent on site, and referral source.
• Device & connection data: IP address, browser type, operating system, device identifiers, and approximate location derived from IP.
• Cookies & similar technologies: see Section 04 for details.

Section 02

How We Use Your Information

We use the personal information we collect for the following purposes, each with a corresponding lawful basis under the GDPR where applicable:

• Order fulfillment — processing and shipping your orders, issuing refunds, and providing customer support (performance of a contract).
• Account management — if you create one, maintaining your account and saving preferences (performance of a contract).
• Marketing communications — sending newsletters, promotions, and product recommendations where you have consented or where permitted by law (consent or legitimate interest).
• Analytics & improvement — understanding how customers use the site so we can improve navigation, fit guides, and product selection (legitimate interest).
• Fraud prevention & security — detecting fraudulent transactions, securing accounts, and enforcing our Terms of Service (legitimate interest, legal obligation).
• Legal & regulatory — complying with tax, consumer protection, and other applicable laws (legal obligation).

Section 03

Who We Share Information With

We do not sell your personal information. We share information only with trusted service providers who help us operate our business, and only to the extent necessary to perform their services. Categories of recipients include:

• Payment processors — such as Shopify Payments — to authorize and process transactions.
• Shipping carriers — such as USPS, UPS, FedEx, and DHL — to deliver your orders.
• Email & SMS marketing platforms — such as Klaviyo — to send transactional and promotional messages.
• Analytics & advertising partners — such as Google Analytics and Meta — to measure site performance and reach prospective customers.
• Customer support tools — such as our email and helpdesk tools.
• Legal & professional advisors — when required to comply with legal process or defend our rights.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to customary confidentiality obligations.

We require each of these service providers to use your information only for the purposes we specify and to protect it in accordance with applicable law.

Section 04

Cookies & Tracking Technologies

Cookies are small text files stored in your browser. We use three categories of cookies on snootco.com:

• Strictly necessary cookies — required for the site to function, including the shopping bag and fraud prevention. These cannot be disabled.
• Analytics cookies — help us understand how visitors interact with the site. These are set only with your consent where required.
• Marketing cookies — allow us and our advertising partners to show you relevant advertising on other sites. These are set only with your consent.

You can manage cookies at any time through your browser settings. Disabling certain cookies may affect site functionality.

Section 05

Your Privacy Rights

Depending on where you live, you may have the following rights with respect to your personal information:

• Right to access — request a copy of the personal information we hold about you.
• Right to correction — ask us to correct inaccurate or incomplete information.
• Right to deletion — request that we delete your personal information, subject to legal and contractual retention requirements.
• Right to portability — receive your information in a structured, machine-readable format.
• Right to opt out of sale or sharing — direct us not to sell or share your personal information for cross-context behavioral advertising.
• Right to withdraw consent — where we process your data based on consent, you may withdraw it at any time.
• Right to non-discrimination — we will not treat you differently for exercising any of these rights.

To exercise any of these rights, email hello@snootco.com or contact us. We will verify your identity before processing the request and respond within the timeframe required by law (generally 45 days under the CCPA and one month under the GDPR).

Section 06

California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• The right to know the specific categories and pieces of personal information we have collected, sold, or shared about you in the preceding 12 months.
• The right to delete personal information we have collected from you, subject to certain exceptions.
• The right to correct inaccurate personal information.
• The right to limit the use and disclosure of sensitive personal information.
• The right to opt out of the sale or sharing of personal information. Snoot & Co. does not sell personal information for monetary consideration.

Shine the Light

California Civil Code Section 1798.83 permits California residents to request, once per calendar year, information about our disclosure of personal information to third parties for their own direct marketing purposes. To make such a request, email hello@snootco.com with the subject line “Shine the Light Request.”

Authorized Agents

You may designate an authorized agent to submit a CCPA request on your behalf. We will require written proof of the agent's authority and verification of your identity.

Section 07

Children's Privacy

Snoot & Co. is a general-audience site intended for adults. We do not knowingly collect personal information from children under 13 years of age, in compliance with the Children's Online Privacy Protection Act (COPPA). We also do not knowingly collect personal information from minors under 16 without the appropriate consent required by applicable law.

If we become aware that we have collected personal information from a child under 13 without verified parental consent, we will delete that information promptly. If you believe a child has provided us with personal information, please contact hello@snootco.com.

Section 08

Data Security

We implement administrative, technical, and physical safeguards designed to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption of data in transit using industry-standard TLS.
• Encryption of sensitive data at rest, including payment credentials tokenized by our PCI-DSS compliant payment processor.
• Access to customer data limited to the two people who run the company, on devices protected by passcodes and full-disk encryption.

No method of transmission over the Internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security.

Section 09

International Data Transfers

Snoot & Co. is headquartered in the Commonwealth of Kentucky, United States. If you access our site from outside the United States, your personal information may be transferred to, stored, and processed in the United States or other countries where our service providers are located.

When we transfer personal information from the European Economic Area, the United Kingdom, or Switzerland to a country that has not received an adequacy decision, we rely on Standard Contractual Clauses or another recognized transfer mechanism to ensure that your information receives a level of protection essentially equivalent to that guaranteed within your home jurisdiction.

Section 10

Data Retention

We retain personal information only for as long as needed for the purposes described in this policy or as required by law. Typical retention periods include:

• Order & transaction records: seven years, to comply with tax and accounting regulations.
• Account information: until you request deletion or after three years of inactivity.
• Marketing preferences: until you unsubscribe, plus a short suppression-list retention to honor your opt-out.
• Customer-support correspondence: three years from the date of the last interaction.
• Analytics data: up to 26 months, typically in aggregate or pseudonymized form.

Section 11

Contact Us

For privacy questions, to exercise your rights, or to lodge a concern, please reach out to us:

If you are located in the European Economic Area or the United Kingdom and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection authority.

Section 12

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the “Last updated” date at the top of this policy and, where required by law, notify you directly by email or through a prominent notice on our site.

We encourage you to review this page periodically to stay informed about how we protect your information.