Legal

Privacy Policy

Plain English, no surprises. Here's what we collect, why, and your rights. Last updated August 2026.

What we collect

When you order or subscribe we collect your name, contact details, delivery address, and order history. Payment is handled by our payment processor, we never see or store your full card details.

How we use it

Cookies & analytics

We use essential cookies to run the store and your cart. With your OK (the banner you see on first visit), we also run our own first-party analytics, which pages you view, what you add to your cart, whether you check out. This data goes to our own systems, not to a third-party analytics company, and you can decline it without affecting your ability to shop.

Email engagement

When we email you, our email provider tells us whether the email was delivered, opened, or a link was clicked. We use this to send fewer, better emails, and to stop emailing addresses that bounce. Marketing emails always include a one-click unsubscribe link; order and delivery emails are separate and keep arriving.

How you found us

If you arrive via a link that carries campaign tags (things like utm_source, or a TikTok/Meta click ID), we keep that first visit's source with your session so we know which of our posts or ads actually work. This stays in our own systems.

Ads measurement

Only if we're running ads: when you buy or start checkout, we may tell Meta or TikTok that their ad led to a sale so we're not charged for ads that don't work. If we do, your email is scrambled (hashed) first, we never send them your readable email, address, or what you bought beyond the order value. If we're not running ads with them, nothing is shared at all.

Your rights

You can access, correct, or delete your data, or ask us to stop using it for marketing, at any time. If you live in California, the CCPA/CPRA gives you these rights explicitly, and we extend the same choices to every US customer. Email kacper@tilthair.com and we'll action it within 30 days.

Sharing

We share data only with the partners needed to run the business, payment processing, fulfilment, and email delivery. We never sell your data.

Questions about your data? Contact us →