Privacy policy

Last Updated: February 6, 2026

Section 1 – What Do We Do With Your Information?

When you purchase something from our store, as part of the buying and selling process, we collect the personal information you provide such as your name, billing and shipping address, email address, and order details.

When you browse our store, we also automatically receive certain information about your device and usage, including your internet protocol (IP) address, browser type, operating system, and interactions with our site. This information helps us operate, secure, and improve our website and services.

The Totally Bamboo website uses cookies and similar technologies to keep track of items placed in your shopping cart (including abandoned carts), remember preferences and improve site functionality, measure site performance and marketing effectiveness, and to support advertising and remarketing.

Cart information may be used to send cart reminder messages via email or SMS only where you have opted in to receive such communications.

Third parties, including advertising and analytics partners such as Meta and similar platforms, may use cookies, pixels, or similar technologies to collect or receive information from our website and elsewhere on the internet to provide measurement services and targeted advertising.

We may also use service providers that monitor website performance, detect errors, analyze user interactions with our site (to maintain functionality), improve user experience, and troubleshoot technical issues.

We do not sell personal information for monetary consideration. However, certain advertising activities may be considered “sharing” of personal information for cross-context behavioral advertising under California law.

We may share personal information with trusted service providers and partners who perform services on our behalf—such as hosting, payment processing, analytics, attribution, advertising, shipping, customer support, and email/SMS delivery. These providers may combine information collected from our website, transactions, and advertising platforms to provide attribution, performance measurement, diagnostics, and business insights on our behalf. They may use personal information only as necessary to perform services for us, comply with law, or as otherwise permitted under applicable privacy laws.

EMAIL MARKETING

With your affirmative opt-in consent, we may send emails about our store, new products, and updates. You may unsubscribe at any time using the unsubscribe link included in marketing emails.

SMS MARKETING

With your express opt-in consent, we may send text messages about our store, products, and updates. You may opt out at any time by replying STOP or using other opt-out methods provided in the message. Transactional messages related to orders or account activity may still be sent where permitted by law.

Section 2 – Legal Basis and Consent

We collect and use personal information as necessary to perform a contract (such as processing orders and delivering products), to comply with legal obligations, for legitimate business purposes (such as fraud prevention, analytics, attribution, diagnostics, and service improvement), and with your consent for marketing communications and certain advertising activities.

You may withdraw consent for marketing communications at any time by using unsubscribe or STOP mechanisms, visiting our Privacy Choices page, or contacting us at Contact@TotallyBamboo.com. Withdrawal of consent does not affect prior lawful processing.

Section 3 – Disclosure of Personal Information

We may disclose personal information to service providers and partners for business operations, to analytics and advertising providers that help us measure site and marketing performance, to shipping, payment, and customer support providers to fulfill orders, and when required by law or legal process.

We do not knowingly sell or share personal information of consumers under 16 years of age.

Section 4 – Shopify and Third-Party Services

Our store is hosted on Shopify Inc., which provides the ecommerce platform we use to sell products and services.

Your data is stored through Shopify’s secure infrastructure and protected behind industry-standard safeguards. Payment information is processed through PCI-DSS compliant payment providers. We do not store full credit card numbers.

We may integrate third-party tools for analytics, attribution, diagnostics, advertising, email, SMS, and other services. These providers may collect information through cookies or similar technologies solely to perform services for us or as otherwise permitted by law.

For more insight, you may also want to read Shopify’s Terms of Service (https://www.shopify.com/legal/terms) or Privacy Statement (https://www.shopify.com/legal/privacy).

Section 5 – Categories of Personal Information we Collect

Our site collects the following personal information:

  • Identifiers – name, email, address, IP address
  • Commercial information – purchase history and order details
  • Internet or device activity – browsing behavior, device type, cookies, page interactions, errors encountered, and technical diagnostics related to site performance
  • Marketing preferences – email/SMS opt-in status
  • Customer communications – support inquiries and messages

We use this information to process and deliver orders, provide customer support, improve our website performance, conduct shop and marketing analytics, and to comply with legal obligations.

Section 6 – Data Retention

We retain personal information only for as long as reasonably necessary to fulfill orders and provide services, maintain business and financial records, comply with legal, tax, or regulatory obligations, and to resolve disputes and enforce agreements. Retention periods vary depending on the nature of the information and legal requirements.

Section 7 – Cookies and Tracking Choices

We use essential cookies (required for site operation), analytics and diagnostics cookies (to understand usage and detect issues), and advertising cookies (to support marketing and remarketing). You may control cookies through your browser settings, opt-out tools provided on our Privacy Choices page, and applicable privacy preference signals where supported.

Section 8 – Children's Privacy

Our services are not directed to children under 16, and we do not knowingly collect personal information from children. If we learn such information has been collected, we will delete it promptly.

Section 9 – California Privacy Rights (CCPA/CPRA)

California residents have the right to:

  • Know what personal information we collect, use, disclose, or share
  • Access a copy of their personal information
  • Delete personal information (subject to legal exceptions)
  • Correct inaccurate personal information
  • Opt out of the sale or sharing of personal information
  • Limit use of sensitive personal information (we do not use sensitive data in ways requiring limitation)
  • Non-discrimination for exercising privacy rights

To exercise these rights, contact us at: Contact@TotallyBamboo.com

Mailing address:
Totally Bamboo
120 W Grand Ave.
Escondido, CA 92025 USA

We may need to verify your identity before fulfilling requests and will respond within timeframes required by law.

Section 10 – Changes to This Policy

We may update this Privacy Policy periodically to reflect legal or regulatory changes, operational updates, or new services or technologies. Material changes will be posted on this page with an updated “Last Updated” date.