Privacy Policy – Simple & Secure

Last updated: August 31, 2025

This privacy policy explains how Trinktopia collects, uses, and protects your personal information when you visit https://trinktopia.com or place an order. For questions, please use our Contact page.

Who We Are

Trinktopia is a small-batch candle business based in Sussex County, Delaware. Our website address is https://trinktopia.com. Trinktopia is the data controller of your personal information.

We take care of your personal data and are committed to ensuring its confidentiality and security.

Information We Collect

  • Device Information: web browser, IP address, time zone, and cookies.
  • Usage Data: pages or products viewed, referring sites/search terms, and how you interact with our site.
  • Order Information (WooCommerce): name, billing and shipping address, email, phone number, and payment details (processed securely by our payment processors; we do not store full card details).
  • Account Information (optional): login details, saved addresses, order history.
  • Marketing Information (Mailmunch): when you subscribe, we collect your email and related consent preferences.
  • Support & Contact: information you submit via forms or email.

Why We Process Your Data

  • To process and deliver orders and provide customer support.
  • To communicate with you about orders, accounts, or inquiries.
  • To send newsletters or promotions if you opt in (you can unsubscribe anytime).
  • To improve site performance and understand usage via analytics.
  • To prevent fraud, spam, and abuse of our services.
  • To comply with legal, tax, and accounting obligations.

Cookies

We use cookies to improve your browsing and shopping experience. These include:

  • Functional cookies (e.g., cart, login, preferences).
  • Analytics cookies (Google Analytics).
  • Marketing cookies (related to email signup or embedded third-party tools).

You can disable cookies in your browser. Some features may not function properly without them.

Google provides an opt-out for Analytics: Analytics Opt-Out Add-on.

Reviews & Comments

When visitors leave a product review or comment, we collect the data shown in the form along with the visitor’s IP address and browser information to help detect spam.

Reviews may be displayed publicly once approved. Your name (as entered) will be shown; your email address will not be published.

Embedded Content & Links

Pages on this site may include embedded content (e.g., videos, images, or articles). Embedded content from other websites behaves as if you visited the other website directly. Those sites may collect data, use cookies, or track your interactions. Trinktopia is not responsible for third-party privacy practices.

Who We Share Your Data With

We do not sell or rent your personal data. We share information only with trusted third-party providers as necessary to operate our business, including:

  • Payment processors (e.g., PayPal, Stripe).
  • Email marketing (Mailmunch).
  • Analytics (Google Analytics).
  • Shipping carriers (e.g., USPS/UPS/FedEx, if applicable).
  • Anti-spam/anti-fraud services used to protect our site and customers.
CPRA/CCPA “Do Not Sell or Share”: We do not sell or share personal information as defined by California law. You may still contact us to exercise your rights (see below).

Data Retention

  • Orders: retained as required for tax, accounting, and legal obligations.
  • Accounts: retained until you request deletion or the account is closed.
  • Reviews: retained indefinitely unless you request removal.

Your Rights (EU/EEA & California)

If you are a resident of the EU/EEA or California, you may have rights to:

  • Access the personal data we hold about you.
  • Request correction or deletion of your data.
  • Object to or restrict certain processing.
  • Receive your data in a portable format.
  • Opt out of marketing communications.

To exercise these rights, email us at admin@trinktopia.com. We may request information to verify your identity.

For EU/EEA residents: your data may be transferred outside the EEA (e.g., to the U.S.). Where applicable, we rely on contractual safeguards and provider commitments.

Data Security

We maintain reasonable administrative, technical, and physical safeguards to protect your data against unauthorized access, alteration, or disclosure. However, no method of transmission over the Internet or electronic storage is 100% secure.

Children’s Privacy

Our website is not intended for children under 13. We do not knowingly collect personal information from children.

Updates to This Policy

We may update this Privacy Policy to reflect changes in our practices, technology, or legal requirements. We will post the updated policy here and revise the “Last updated” date above.