Privacy Policy

Last Updated: January 1, 2025

BlackStrap Resources, LLC and its subsidiaries and affiliates (“BlackStrap,” “we,” “us,” or “our”) respect your privacy and are committed to protecting your personal information.

This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you visit www.blackstrap.com (the “Website”), make a purchase, sign up for communications, submit reviews or user-generated content, or otherwise interact with us.

This policy applies to information collected online through our Website and related services. It does not apply to information collected offline or through third-party websites or services not controlled by BlackStrap.

1. Personal Information We Collect

A. Information You Provide Directly

We collect personal information that you voluntarily provide, including:

• Identifiers: name, email address, postal address, phone number

• Account & order information: order history, sizing preferences, returns, exchanges

• Payment information: processed securely by third-party payment processors (we do not store full payment card numbers)

• Communications: emails, SMS messages, chat interactions, customer support requests

• Reviews & UGC: ratings, reviews, photos, videos, and related metadata

• Marketing preferences: email and SMS subscriptions, contest or promotion participation

B. Information Collected Automatically

When you interact with our Website, we automatically collect information using cookies, pixels, SDKs, and similar technologies, including:

• IP address and approximate location

• Device identifiers, browser type, operating system

• Pages viewed, interactions, time spent, referral URLs

• Shopping behavior (product views, cart activity, checkout events)

This information supports Website functionality, analytics, personalization, advertising, and fraud prevention.

C. Information from Third Parties

We receive information from third-party partners, including:

• Shopify (e-commerce platform and order management)

• Klaviyo (email and SMS communications)

• LiveRecover (cart recovery via SMS and email)

• Remark (post-purchase and customer experience communications)

• Meta Platforms, Inc. (Facebook & Instagram advertising)

• Google LLC (Google Analytics, Google Ads, YouTube)

• Microsoft / Bing Ads

• AppLovin (advertising, measurement, and optimization)

• AvantLink (affiliate marketing and attribution)

• Opensend (identity resolution and marketing attribution)

• Triple Whale (marketing attribution and analytics)

• RetentionX (customer analytics and retention insights)

• Heatmap & CRO tools (on-site behavior analysis)

• Redo (returns and exchanges)

• Junip & Bazaarvoice (product reviews and user-generated content)

• Angle (customer loyalty platform)

• Shipping carriers and fulfillment partners

Some partners may provide us with identifiers or attribution data (such as hashed email addresses or device-level signals) to help measure, personalize, and improve marketing and customer experiences, where permitted by law.

D. Sensitive Personal Information

We do not use or disclose sensitive personal information for purposes other than those permitted by applicable law, such as providing requested services, processing transactions, and ensuring security.

2. How We Use Personal Information

We use personal information to:

• Process and fulfill orders

• Manage returns, exchanges, and warranties

• Provide customer service and support

• Send transactional communications (order confirmations, shipping updates)

• Send marketing communications via email and SMS (where permitted)

• Recover abandoned carts and incomplete checkouts

• Personalize content, offers, and product recommendations

• Measure and optimize advertising performance

• Conduct analytics, reporting, and forecasting

• Improve Website usability and customer experience

• Prevent fraud and secure our systems

• Comply with legal obligations and enforce our terms

3. Email & SMS Communications

We use Klaviyo, LiveRecover, and Remark to manage email and SMS communications.

• Marketing emails comply with CAN-SPAM requirements.

• SMS messages are sent only to individuals who have provided prior express consent, as required by law.

• You may unsubscribe from emails using the link in any message.

• You may opt out of SMS messages by replying STOP.

Transactional messages related to orders or account activity may still be sent even if you opt out of marketing communications.

4. Cookies, Analytics & Targeted Advertising

We and our partners use cookies and similar technologies for:

• Essential Website functionality

• Analytics and performance measurement

• Attribution and marketing effectiveness

• Targeted advertising and personalization

Advertising, Analytics & Attribution Partners

Our partners include:

• Meta

• Google

• Microsoft / Bing

• AppLovin

• AvantLink

• Opensend

• Triple Whale

• RetentionX

• Heatmap and CRO tools

• Mountain TV

These partners may collect or receive information about your interactions with our Website to provide and measure advertisements and improve performance.

You may change or withdraw your cookie preferences at any time through our cookie settings or see our Cookie Policy.

Global Privacy Control (GPC)

We recognize Global Privacy Control (GPC) signals where required by applicable law and treat them as a valid request to opt out of the sale or sharing of personal information for targeted advertising.

Do Not Sell or Share My Personal Information

We do not sell personal information for monetary consideration. However, certain data sharing for targeted advertising or analytics may be considered a “sale” or “sharing” under applicable privacy laws.

You may opt out at any time by:

• Adjusting cookie preferences on our Website

• Enabling GPC in your browser

• Contacting us using the information below

5. How We Share Personal Information

We may share personal information with:

• Service providers and processors (Shopify, Klaviyo, LiveRecover, Remark, Angle, analytics and CRO tools)

• Advertising and marketing partners (Meta, Google, Microsoft/Bing, AppLovin, AvantLink, Opensend, Mountain TV)

• Review and UGC platforms (Junip, Bazaarvoice)

• Affiliates and subsidiaries

• Legal authorities when required by law

• Business successors in the event of a merger, acquisition, or asset sale

All service providers are contractually required to process personal information only on our behalf and in accordance with applicable law.

6. Legal Bases for Processing (EEA / GDPR)

For individuals located in the EEA, United Kingdom, or Switzerland, we process personal information under the following lawful bases:

• Contractual necessity (order fulfillment, returns, customer support)

• Consent (marketing communications, non-essential cookies)

• Legitimate interests (analytics, Website optimization, fraud prevention, advertising)

• Legal obligation

You may withdraw consent at any time where processing is based on consent.

We do not engage in automated decision-making that produces legal or similarly significant effects on individuals.

7. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes described in this policy, including:

• Order and transaction data: retained for accounting, tax, and legal compliance

• Marketing and communications data: retained until you opt out or request deletion

• Analytics and attribution data: retained in aggregated or de-identified form where possible

• Reviews and UGC: retained unless removal is requested and permitted by law

8. Your Privacy Rights (United States)

Depending on your state of residence, you may have the right to:

• Access personal information we hold about you

• Request correction or deletion

• Opt out of targeted advertising or data sharing

• Limit the use of sensitive personal information (where applicable)

• Not be discriminated against for exercising privacy rights

Requests may be submitted by contacting support@blackstrap.com. We may verify your identity before responding.

9. Your Privacy Rights (EEA / UK / Switzerland)

You have the right to:

• Access, correct, or delete your personal information

• Restrict or object to processing

• Request data portability

• Withdraw consent at any time

• Lodge a complaint with your local data protection authority

10. International Data Transfers

We are based in the United States. Personal information may be transferred to and processed in the United States or other countries.

Where required, we rely on Standard Contractual Clauses or other lawful safeguards to protect international data transfers.

11. Security

We implement reasonable administrative, technical, and physical safeguards to protect personal information. Our Website is hosted on Shopify, which complies with industry security standards, including PCI-DSS for payment processing.

No system is completely secure.

12. Children’s Privacy

Our Website is not intended for children under 13 years of age, and we do not knowingly collect personal information from children under 13.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last Updated” date reflects the most recent revision. Continued use of the Website constitutes acceptance of the updated policy.

14. Contact Us

BlackStrap Resources, LLC
Attn: Privacy Compliance
565 SE 9th Street, Suite 200
Bend, OR 97702
United States
support@blackstrap.com

If you are located in the EU or UK and believe your concerns have not been adequately addressed, you have the right to lodge a complaint with your local data protection authority.