Last updated: [EFFECTIVE DATE]
This Privacy Policy describes how [BUSINESS LEGAL NAME] (“Tailvale”, “we”, “us”) collects, uses and shares personal information when you visit tailvale.com or buy from us.
Information we collect
Information you give us
- Contact details: name, email address, phone number.
- Order details: shipping and billing address, items ordered, order notes.
- Messages you send us, such as support requests and returns.
- Email sign-up information, if you subscribe to our newsletter.
Payment information
Payments are handled by our payment processors (for example Stripe and PayPal). Your full card number is entered on the processor’s secure form and is not stored on our servers. We receive limited information such as the last four digits of your card, card brand, billing address and payment status.
Information collected automatically
- Device and usage data: IP address, browser type, device type, pages viewed, referring page and approximate location.
- Cookies and similar technologies, described below.
How we use information
- To process and deliver orders, send order and shipping updates, and handle returns and refunds.
- To provide customer support and respond to your requests.
- To detect and prevent fraud and keep our website secure.
- To understand how the website is used and to improve it.
- To advertise our products, including showing ads on Google, and to measure advertising results.
- To send marketing emails if you opt in. You can unsubscribe at any time using the link in each email.
- To comply with legal obligations such as tax and accounting rules.
Cookies and advertising
We and our partners use cookies, pixels and similar tools to keep your cart working, remember preferences, analyze traffic and measure ads. Third-party tools we may use include Google Analytics and Google Ads. These providers may collect information about your visit and use it under their own privacy policies. You can control cookies in your browser settings, and you can learn about Google’s data practices and opt out of ad personalization at policies.google.com/technologies/partner-sites and adssettings.google.com. [CONFIRM the list of tools matches what is actually installed at launch.]
Who we share information with
We do not sell your personal information for money. We share information only as needed with:
- Payment processors to take payments and prevent fraud.
- Suppliers, fulfillment partners and shipping carriers to pick, pack and deliver your order (they receive your name, shipping address, phone and email as needed for delivery). Some of these partners are located outside the United States, so your information may be transferred and processed in other countries.
- Service providers that host our website, send email, provide analytics or help with customer support.
- Advertising and analytics partners such as Google, as described above.
- Authorities or other parties when required by law, to protect rights and safety, or in connection with a business sale or merger.
Data retention
We keep personal information for as long as needed to provide our services, meet legal, tax and accounting obligations, resolve disputes and enforce our agreements. Order records are normally kept for at least 7 years. [CONFIRM with accountant.]
Your privacy rights
Depending on where you live (for example California, Colorado, Connecticut, Virginia and other US states), you may have the right to:
- Know what personal information we collect, use and disclose.
- Access or receive a copy of your information.
- Correct inaccurate information.
- Delete your information, subject to legal exceptions.
- Opt out of the sale or sharing of personal information and of targeted advertising. We do not sell personal information. Some advertising cookies may count as “sharing” under California law; you can disable them in your cookie settings. [CONFIRM once the cookie banner is installed.]
- Not be discriminated against for exercising these rights.
To make a request, email [SUPPORT EMAIL] with the subject “Privacy request”. We may need to verify your identity before responding. We reply within 45 days. You may use an authorized agent to submit a request on your behalf.
Security
We use industry-standard safeguards, including encrypted connections (HTTPS) and limited access to personal data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Children
Our website is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided information to us, contact us and we will delete it.
Links to other sites
Our site may link to third-party websites. We are not responsible for their privacy practices.
Changes to this policy
We may update this policy from time to time. The “Last updated” date at the top shows when it last changed. Continued use of the site after an update means you accept the updated policy.
Contact us
[BUSINESS LEGAL NAME]
[BUSINESS ADDRESS]
[SUPPORT EMAIL]