Privacy Policy

Weird Too Company LLC ("Weird Too," "we," "us," or "our") operates weirdtoocompany.com (the "Site") and the products and services offered through it. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and the rights you have over it.

If you have questions, contact us at contact@weirdtoocompany.com.

1. Information We Collect

We collect the following categories of personal information:

• Identifiers — name, email address, postal address (when you place an order), phone number (optional).
• Commercial information — products purchased, order history, payment status. Payment card details are collected and processed directly by our payment processor (Stripe) and are not stored on our servers.
• Internet/network activity — IP address, browser type, device type, referring URL, pages viewed, timestamps, and similar analytics data collected via cookies and tracking pixels on the Site.
• Communications — content of emails, support tickets, and newsletter subscription preferences when you contact us or sign up.
• Inferences — segments and preferences derived from your activity for marketing personalization.

We do not knowingly collect personal information from children under 13. We do not sell personal information. We do not collect biometric, precise geolocation, or sensitive personal information as defined under CPRA.

2. How We Use Your Information

We use personal information to:

• Fulfill orders, deliver products, and provide customer support.
• Send transactional messages (order confirmations, shipping updates, support replies).
• Send marketing emails and newsletters where you have opted in (you can unsubscribe at any time).
• Operate, secure, and improve the Site, including analytics and fraud prevention.
• Comply with legal obligations and enforce our terms.

3. Legal Basis for Processing (GDPR / UK GDPR)

If you are in the European Economic Area, the United Kingdom, or Switzerland, we process your personal information under the following lawful bases:

• Contract — to fulfill orders and provide services you request.
• Consent — for marketing emails, non-essential cookies, and any other processing where consent is required. You may withdraw consent at any time.
• Legitimate interests — to operate and secure the Site, prevent fraud, and improve our products, balanced against your rights.
• Legal obligation — to comply with tax, accounting, and other applicable laws.

4. Third-Party Processors

We share personal information with the following service providers, who process it on our behalf under written agreements:

We may also disclose information to professional advisors (accountants, lawyers), to comply with legal process, or in connection with a business transfer (merger, acquisition, asset sale).

5. International Data Transfers

Our processors are located in the United States and other jurisdictions. Where personal information is transferred from the EEA, UK, or Switzerland to a country without an adequacy decision, we rely on Standard Contractual Clauses or other approved transfer mechanisms maintained by the receiving processor.

6. Retention

We retain personal information only as long as necessary for the purposes described above:

• Order records — 7 years after the order, for tax and accounting compliance.
• Support tickets — 3 years after the ticket is closed.
• Newsletter subscriptions — until you unsubscribe, then up to 30 days for suppression-list purposes.
• Analytics data — up to 26 months in aggregated form.

When the retention period ends, we delete or de-identify the information.

7. Your Rights

California residents (CCPA / CPRA)

If you are a California resident, you have the right to:

• Know what categories and specific pieces of personal information we have collected, the sources, the business purposes, and the categories of third parties with whom we share it.
• Delete personal information we have collected, subject to legal exceptions.
• Correct inaccurate personal information.
• Opt out of "sharing" for cross-context behavioral advertising. We do not sell personal information for monetary value; if our practices change we will update this policy and provide an opt-out mechanism.
• Limit use of sensitive personal information — we do not collect sensitive personal information as defined under CPRA, so no limitation request is necessary.
• Non-discrimination — we will not deny you service, charge different prices, or provide a different quality of service because you exercised your rights.

To exercise these rights, email contact@weirdtoocompany.com with the subject line "CCPA Request." We will verify your identity using information already on file (name, email associated with your account or order). Authorized agents may submit requests with written authorization.

EEA, UK, and Swiss residents (GDPR / UK GDPR)

You have the right to:

• Access your personal information.
• Rectify inaccurate or incomplete information.
• Eraseyour information ("right to be forgotten"), subject to legal exceptions.
• Restrict or object to processing, including direct marketing.
• Data portability — receive your information in a structured, machine-readable format.
• Withdraw consent at any time where processing is based on consent.
• Lodge a complaint with your local data protection authority.

To exercise these rights, email contact@weirdtoocompany.com. We respond within 30 days (extendable by 60 days for complex requests, with notice).

8. Cookies and Tracking

The Site uses cookies and similar technologies for essential functionality (cart, login), analytics, and marketing. You can control cookies through your browser settings or, where required, through our cookie banner. Disabling cookies may affect Site functionality.

9. Security

We use commercially reasonable administrative, technical, and physical safeguards to protect personal information. Payment transactions are handled exclusively by Stripe using TLS encryption and PCI-DSS compliant infrastructure. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

10. Children

The Site is not directed to children under 13 (or under 16 in the EEA/UK). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent version. Material changes will be communicated by email or a notice on the Site.

12. Contact