This policy describes how TrueBac Water handles personal information collected through truebacwater.com.
1. Information we collect
- Account: name, email address, password (stored only as a salted hash), and security settings.
- Orders: shipping address, phone number, order history, the research-use attestation you provide, and lot numbers shipped.
- Payments: processed by Stripe. We receive limited details (such as card brand and last four digits), never the full card number.
- Technical: IP address and browser information in security logs, and essential cookies needed for sign-in and checkout.
- Correspondence: messages you send us.
2. How we use it
To create and secure your account, process and ship orders, provide tracking, manage standing orders, respond to you, maintain lot traceability and recall capability, prevent fraud and misuse, and meet legal and tax obligations.
3. Who we share it with
Service providers acting for us: Stripe (payments), EasyPost and USPS (shipping labels and tracking), Resend (transactional email) and Fly.io (hosting). We do not sell personal information and do not use advertising trackers.
4. Cookies
We use only essential cookies: a session cookie when you sign in, and a cookie recording your research-use acknowledgement. We do not use advertising or cross-site tracking cookies.
5. Retention
Order and lot-traceability records are retained as long as needed for tax, legal and quality purposes. If you delete your account, we remove your account data and keep order records with only the details required for those purposes.
6. Your choices and rights
You can update your details and delete your account from your account settings. Depending on where you live, you may have rights to access, correct, delete or obtain a copy of your information. Contact truebacwater@gmail.com, and we will respond within the time required by law.
7. Security
We use encryption in transit, hashed passwords, optional two-factor authentication, and role-restricted staff access with an audit log.
8. Changes
We will post changes here with a new revision and effective date.