Privacy policy

Last Updated: October 5, 2026

Section 1 – What Do We Do With Your Information?

When you purchase something from our store, as part of the buying and selling process, we collect the personal information you provide such as your name, billing and shipping address, email address, telephone number where provided, and order details.

When you browse our store, we also automatically receive certain information about your device and usage, including your internet protocol (IP) address, browser type, operating system, and interactions with our site. This information helps us operate, secure, and improve our website and services.

The Totally Bamboo website uses cookies and similar technologies to keep track of items placed in your shopping cart (including abandoned carts), remember preferences and improve site functionality, measure site performance and marketing effectiveness, and to support advertising and remarketing.

Cart information may be used to send cart reminder messages via email or SMS only where you have opted in to receive such communications or where otherwise permitted by applicable law.

Third parties, including advertising and analytics partners such as Google, Meta and similar platforms, may use cookies, pixels, APIs, or similar technologies to collect or receive information from our website and elsewhere on the internet to provide measurement services and targeted advertising.

We may also use information that you provide directly to us, including identifiers such as your email address or telephone number, purchase history, product interests, and interactions with our website or marketing, to create, match, or measure advertising audiences.

For example, we may securely provide advertising platforms or service providers with identifiers, which may be hashed or otherwise processed before transmission, so that those providers can help us:

  • match our customers or website visitors with users of their platforms;
  • create or improve advertising audiences;
  • identify audiences with characteristics similar to our customers;
  • personalize or deliver advertising where permitted by law;
  • suppress existing customers from certain advertising campaigns;
  • measure advertising effectiveness, conversions, and attribution; and
  • improve our advertising and marketing strategy.

We may also use service providers that monitor website performance, detect errors, analyze user interactions with our site (to maintain functionality), improve user experience, and troubleshoot technical issues.

We do not sell personal information for monetary consideration. However, certain advertising activities may be considered a “sale” or “sharing” of personal information, including sharing for cross-context behavioral advertising, under certain U.S. state privacy laws.

We may share personal information with trusted service providers and partners who perform services on our behalf—such as hosting, payment processing, analytics, attribution, advertising, audience matching, shipping, customer support, and email/SMS delivery. These providers may combine information collected from our website, transactions, and advertising platforms to provide audience matching, advertising delivery, attribution, performance measurement, diagnostics, and business insights on our behalf. They may use personal information only as necessary to perform services for us, comply with law, or as otherwise permitted under applicable privacy laws and our agreements with them.

EMAIL MARKETING

With your affirmative opt-in consent, we may send emails about our store, new products, promotions, and updates. You may unsubscribe at any time using the unsubscribe link included in marketing emails.

Unsubscribing from marketing emails does not automatically opt you out of all advertising or data-sharing activities. Advertising privacy choices can be exercised separately as described in this Privacy Policy.

SMS MARKETING

With your express opt-in consent, we may send text messages about our store, products, promotions, and updates. You may opt out at any time by replying STOP or using other opt-out methods provided in the message. Transactional messages related to orders or account activity may still be sent where permitted by law.

Opting out of SMS marketing does not automatically opt you out of other advertising or data-sharing activities. Advertising privacy choices can be exercised separately as described in this Privacy Policy.

Section 2 – Legal Basis and Consent

We collect and use personal information as necessary to perform a contract (such as processing orders and delivering products), to comply with legal obligations, for legitimate business purposes (such as fraud prevention, analytics, attribution, diagnostics, advertising measurement, and service improvement), and with your consent for marketing communications and certain advertising activities.

Where required by applicable law, we obtain consent before using or sharing personal information for personalized or targeted advertising.

You may withdraw consent for marketing communications at any time by using unsubscribe or STOP mechanisms or contacting us at Contact@TotallyBamboo.com.

You may separately exercise applicable advertising and data-sharing privacy choices through our Privacy Choices page, through supported browser or device privacy signals, or by contacting us at Contact@TotallyBamboo.com.

Where required by applicable law, we honor recognized opt-out preference signals, including Global Privacy Control, as a request to opt out of the sale or sharing of personal information for the browser or device from which the signal is sent.

Withdrawal of consent does not affect prior lawful processing.

Section 3 – Disclosure of Personal Information

We may disclose personal information to service providers and partners for business operations, to analytics and advertising providers that help us measure site and marketing performance, to shipping, payment, and customer support providers to fulfill orders, and when required by law or legal process.

Information shared for advertising or audience-matching purposes may include identifiers such as an email address or telephone number, customer or purchase information, website activity, marketing engagement, or information indicating that a customer belongs to a particular audience or customer segment.

Where appropriate, identifiers may be hashed or otherwise transformed before being transmitted to an advertising platform. Hashing does not necessarily make information anonymous, and we continue to treat such information in accordance with applicable privacy law.

Advertising partners may use information we provide to match customers with users of their platforms, create or improve advertising audiences, measure conversions, provide attribution and reporting, suppress audiences, and support personalized or targeted advertising where permitted by law.

We do not knowingly sell or share personal information of consumers under 16 years of age.

Section 4 – Shopify and Third-Party Services

Our store is hosted on Shopify Inc., which provides the ecommerce platform we use to sell products and services.

Your data is stored through Shopify’s secure infrastructure and protected behind industry-standard safeguards. Payment information is processed through PCI-DSS compliant payment providers. We do not store full credit card numbers.

We may integrate third-party tools for analytics, attribution, diagnostics, advertising, audience matching, customer relationship management, email, SMS, and other services. These providers may collect information through cookies or similar technologies or receive information through APIs, secure data transfers, customer-list integrations, or other technologies to perform services for us or as otherwise permitted by law.

For more insight, you may also want to read Shopify’s Terms of Service or Privacy Statement.

Section 5 – Categories of Personal Information we Collect

Our site collects the following personal information:

  • Identifiers – name, email, address, telephone number, IP address
  • Commercial information – purchase history and order details
  • Internet or device activity – browsing behavior, device type, cookies, page interactions, errors encountered, and technical diagnostics related to site performance
  • Marketing preferences – email/SMS opt-in status
  • Marketing and advertising information – campaign engagement, advertising interactions, audience or customer-segment membership, and information used for advertising measurement or audience matching
  • Customer communications – support inquiries and messages

We use this information to process and deliver orders, provide customer support, improve our website performance, conduct shop and marketing analytics, measure and optimize advertising, create or match advertising audiences, and to comply with legal obligations.

Section 6 – Data Retention

We retain personal information only for as long as reasonably necessary to fulfill orders and provide services, maintain business and financial records, comply with legal, tax, or regulatory obligations, and to resolve disputes and enforce agreements.

We may also retain information for reasonable periods needed to operate customer and marketing systems and measure advertising effectiveness.

Retention periods vary depending on the nature of the information and legal requirements.

Section 7 – Cookies and Tracking Choices

We use essential cookies (required for site operation), analytics and diagnostics cookies (to understand usage and detect issues), and advertising cookies (to support marketing and remarketing).

Advertising technologies may also be used to measure advertising performance, create or match advertising audiences, support remarketing or personalized advertising, and understand how advertising contributes to purchases and other customer activity.

You may control cookies through your browser settings, opt-out tools provided on our Privacy Choices page, and applicable privacy preference signals where supported.

Depending on your location and applicable law, you may also be able to control targeted advertising or data-sharing activities through:

  • cookie or consent controls presented on our website;
  • our Privacy Choices page;
  • recognized opt-out preference signals such as Global Privacy Control; or
  • opt-out mechanisms offered by advertising platforms.

Section 8 – Children's Privacy

Our services are not directed to children under 16, and we do not knowingly collect personal information from children.

We do not knowingly use personal information from children under 16 for advertising or marketing purposes.

If we learn such information has been collected, we will delete it promptly or otherwise handle it as required by applicable law.

Section 9 – California Privacy Rights (CCPA/CPRA)

Depending on where you live, applicable privacy law may provide rights regarding your personal information. California residents and residents of certain other U.S. states may have rights to:

  • Know what personal information we collect, use, disclose, or share
  • Access a copy of their personal information
  • Delete personal information (subject to legal exceptions)
  • Correct inaccurate personal information
  • Opt out of the sale or sharing of personal information
  • Opt out of targeted advertising where applicable
  • Limit use of sensitive personal information (we do not use sensitive data in ways requiring limitation)
  • Non-discrimination for exercising privacy rights

We do not sell personal information for monetary consideration.

Certain disclosures to advertising platforms and partners, including disclosures for personalized advertising, audience matching, or advertising measurement, may constitute “sharing,” “targeted advertising,” or a “sale” under certain state privacy laws even when no money is exchanged.

To exercise these rights, contact us at: Contact@TotallyBamboo.com

You may also exercise applicable advertising and data-sharing opt-out rights through our Privacy Choices page.

Mailing address:
Totally Bamboo
120 W Grand Ave.
Escondido, CA 92025 USA

We may need to verify your identity before fulfilling requests and will respond within timeframes required by law.

Where required by law, you may also have the right to appeal our response to a privacy request.

Section 10 – Changes to This Policy

We may update this Privacy Policy periodically to reflect legal or regulatory changes, operational updates, or new services or technologies.

This may include changes to our advertising practices, service providers, or methods of using personal information for audience matching or measurement.

Material changes will be posted on this page with an updated “Last Updated” date.

Where required by law, we may provide additional notice or obtain additional consent before materially changing how we use personal information.