Privacy Policy
Last updated: [PLACEHOLDER: effective date]
This policy explains what The Titanium Company collects when you visit thetitanium.co or buy from us, why we collect it, and what you can do about it. We sell to customers in the United States only.
The site is operated by [PLACEHOLDER: registered legal business name and entity type], of [PLACEHOLDER: registered physical business address].
What we collect
You give us directly:
- Name, email address, shipping address, billing address and phone number when you place an order.
- Email address when you sign up for our list or enter a giveaway.
- Whatever you write to us in a support email.
Collected automatically when you use the site:
- IP address, browser type and version, operating system, device type and screen size.
- Pages you view, links you click, how long you stay, and the site or ad that sent you.
- Cart contents, including items you add and do not buy.
Payment information: card numbers and bank details go straight to our payment processors. We never see or store your full card number. We do receive the last four digits, the card brand, and whether the payment succeeded.
Why we use it
- To take payment, pick, pack and ship your order, and tell you where it is.
- To answer support emails and handle returns.
- To send marketing email if you opted in, and to send abandoned cart reminders.
- To measure which ads and pages bring in orders.
- To spot fraudulent orders and chargebacks.
- To meet tax, accounting and other legal obligations.
Cookies and tracking
We use cookies and similar technologies. Some are necessary for the site to work: they keep your cart intact and keep you logged in. Others are optional and are described below.
Meta Pixel. Sends Meta (Facebook and Instagram) events such as page views, add to cart, and completed purchases. It lets us measure ad performance and show ads to people who visited the site. Some of this involves sharing identifiers with Meta, which counts as "sharing" for cross-context behavioral advertising under California law.
Google Analytics. Reports how many people visit, which pages they read, and where they came from. Data goes to Google.
Klaviyo. Runs our email marketing. Tracks whether you opened an email, what you clicked, and what you browsed on the site so we can send relevant messages.
Shopify. Our store platform. Sets cookies for cart, checkout, session security and fraud screening.
You can block or delete cookies in your browser settings. Blocking necessary cookies will break checkout. You can also opt out of Google Analytics with Google's browser add-on, and adjust ad settings in your Meta and Google accounts.
Do Not Track and Global Privacy Control
We honor the Global Privacy Control signal. If your browser or extension sends GPC, we treat it as a request to opt out of the sale and sharing of your personal information for that browser.
Who we share data with
We do not sell your personal information for money. We do share it with the companies that make the store run, and with advertising platforms as described above. Categories of recipients:
- Store platform and hosting: Shopify.
- Payments: [PLACEHOLDER: list payment processors, e.g. Shopify Payments, PayPal, Shop Pay].
- Fulfillment and shipping: our third party fulfillment partner and the carriers who deliver your order, [PLACEHOLDER: name the fulfillment partner and main carriers if you disclose them].
- Email and SMS marketing: Klaviyo.
- Analytics and advertising: Google, Meta.
- Support tools: [PLACEHOLDER: helpdesk or inbox provider, e.g. Google Workspace, Gorgias].
We also disclose information where the law requires it, in response to a valid legal request, to enforce our terms, or as part of a merger or sale of the business.
Where data is held
Our processors store data in the United States and, in some cases, on servers outside it. [PLACEHOLDER: confirm with each processor whether data leaves the U.S. and reflect that here.]
How long we keep it
- Order records, including name, address and order contents: 7 years, for tax and accounting.
- Support emails: 3 years from the last message.
- Marketing list data: until you unsubscribe, then 12 months in a suppression list so we do not email you again by mistake.
- Analytics and advertising data: as set by each platform. Google Analytics is set to [PLACEHOLDER: your GA4 data retention setting, e.g. 14 months].
Your California privacy rights
If you live in California, the California Consumer Privacy Act as amended by the CPRA gives you the following rights.
- Know. Ask what categories and specific pieces of personal information we have collected about you, where it came from, why we collected it, and who we disclosed it to.
- Delete. Ask us to delete personal information we hold about you, subject to exceptions such as completing your order or keeping records the law requires.
- Correct. Ask us to fix inaccurate personal information.
- Opt out of sale or sharing. We share identifiers and browsing activity with advertising partners for cross-context behavioral advertising. You can tell us to stop. Use the "Do Not Sell or Share My Personal Information" link in the site footer, send a Global Privacy Control signal, or email support@thetitanium.co.
- Limit use of sensitive personal information. We do not collect sensitive personal information as the CPRA defines it, and we do not use any for inferring characteristics.
- No retaliation. We will not charge you a different price, give you a lower quality product, or refuse to serve you because you exercised these rights.
To make a request, email support@thetitanium.co with the subject line "California Privacy Request" and tell us which right you want to exercise. We will confirm receipt within 10 business days and respond within 45 calendar days. If we need longer we will tell you and take up to another 45 days.
We verify requests by matching the details you give us against our records, usually the email address and order number you used. For deletion requests we may ask for a second piece of matching information.
An authorized agent can act for you. Send written permission signed by you, and we may still contact you to confirm.
Categories collected in the last 12 months: identifiers (name, email, postal address, phone, IP address), commercial information (orders and returns), internet activity (browsing and interaction with the site and our emails), geolocation inferred from IP at city level, and inferences drawn from the above for advertising. Every category listed is disclosed to the service providers named above, and identifiers plus internet activity are shared with Meta and Google for advertising.
Marketing email
Every marketing email has an unsubscribe link. Click it and you come off the list within 24 hours. We will still send transactional email about orders you have placed.
Children
The site is for adults. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, email support@thetitanium.co and we will delete it.
Security
We use HTTPS across the site and rely on Shopify and our payment processors for card security and PCI compliance. No method of transmission over the internet is completely secure, and we cannot promise absolute security.
[PLACEHOLDER: state whether you have a written data breach notification procedure and how customers will be told, per applicable state breach notification laws.]
Changes
We update this policy when our practices change. The date at the top shows the last revision. Material changes will be announced on the site [PLACEHOLDER: state whether you will also email subscribers about material changes].
Contact
support@thetitanium.co
[PLACEHOLDER: registered legal business name and physical mailing address for privacy correspondence.]