Policies

Privacy Policy

Last updated: October 16, 2026

This Privacy Policy explains how TTOOLCO, LLC (“Ttool”, “we”, “us”) collects, uses and shares personal information when you visit theTtool.com (the “Site”), buy from us or sign up for our emails, and the choices and rights you have.

Privacy at a glance
What we collect. When you order, we collect your name, email address, phone number and addresses so we can ship your Ttool. When you sign up for our emails, we collect your email address and, if you give it, your first name.
Your card number goes straight to Stripe, our payment processor. We never see or store it.
Ads. We share some information with Meta (Facebook and Instagram) and Google to measure and show our ads. Some US state laws call this a “sale” or “sharing”. You can turn it off with Your privacy choices at the bottom of every page, and we honor Global Privacy Control automatically.
Europe, the UK, Switzerland and Brazil. Analytics and advertising stay off until you say yes.
Emails. Every marketing email has an unsubscribe link.
Your rights. Email hello@theTtool.com to see, correct or delete your information.

The rest of this page explains each point in detail.

What we collect

  • When you order: your name, email address, phone number, billing and shipping addresses, and what you buy. Your order also records the IP address and browser you ordered from.
  • When you sign up for our emails, the 10% offer or a free download: your email address and, if you give it, your first name.
  • When you write a product review: the review form we email you takes your name and email address from your order and asks for your star rating, your review and the name to show with it (your full name, your first name and last initial, your first name only, or “Anonymous”; your full name is selected unless you choose another). We read each review before it goes up, and we may publish the name you chose, your rating and your review on the Site. Your email address is never published.
  • When you contact us, by email or through our contact form: your name, your email address and what you write.
  • From our old store: before we moved to this Site, our shop ran on Shopify and our emails on Klaviyo. If you ordered or signed up before the move, we moved your order history (your name, contact details, addresses and what you bought) and your email subscription here. We also moved over the product reviews customers wrote on our old store, with the name each reviewer chose to show.

Payment details. Stripe processes our payments: cards, Apple Pay, Google Pay and Link (Stripe’s service that can save your payment details for faster checkout). You enter your card details in Stripe’s secure fields and they go directly to Stripe. We never see or store your full card number. Stripe tells us whether the payment succeeded and may use your location to show prices in your currency. Stripe also uses payment and device details to prevent fraud. See Stripe’s privacy policy.

Collected automatically. When you visit, our servers record your IP address, browser type, the pages you request, the page that referred you, and the date and time. Depending on your choices and where you are, cookies and similar tools also record the pages and products you view, how you reached the Site and how you use it (see “Cookies and similar tools” below). To apply the right privacy rules, we make a rough guess of your region from your device’s time zone and, where available, the country your connection comes from. We don’t collect your precise location. Our emails contain a small image and tracked links that tell us whether an email was opened and which links were clicked.

How we use it

  • Orders: to take payment, pack and ship your order, send order and shipping emails, and handle returns, our guarantee and your questions.
  • Emails you asked for: to send the 10% code, free downloads, our newsletter and occasional offers on Ttool. Every marketing email has an unsubscribe link.
    • When you sign up, we keep a record of it: the time, the form and page you used, the wording shown next to the form, your IP address and the region our privacy settings detected.
    • If you had unsubscribed and sign up again, we first email you a link to confirm it’s you.
    • If you haven’t opened or clicked any of our emails for about six months and have never ordered from us, we send you one email asking whether you still want them. If you don’t click “Yes, keep me on the list” within 14 days, we unsubscribe you. We don’t delete your record, and you can sign up again any time.
  • After you order: a welcome email, and once your Ttool ships, a short series of emails about getting started with it. Each email has an unsubscribe link. Unsubscribing doesn’t stop order and shipping emails.
  • Asking for a review: once your Ttool has had time to arrive, usually two to three weeks after it ships (about two months for standard international shipping), we may send you one email asking you to review it. We send this email ourselves, through Amazon SES, and it has an unsubscribe link. You don’t have to answer. If you do, we keep your review on our own Site and publish it as described under “What we collect”. We don’t send this email if your shipping or billing address is in Europe (including Russia, Turkey and the European Union’s overseas regions), the UK, Switzerland or Brazil, and we don’t send it again if we already asked you in the past 12 months.
  • Cart reminders: if you enter your email address at checkout and don’t finish your order, we save your cart and the details you typed (such as your name, address and phone number), so the link in our email can restore them. We may then send you up to four emails about that order over the next few days. You can opt out with the “No thanks” link under the email field at checkout, and every reminder has an unsubscribe link. If you’re in Europe outside the UK, in Switzerland or in Brazil, we don’t save your checkout and we don’t send you cart reminders.
  • Analytics: to see which pages and campaigns help people, and to improve the Site.
  • Advertising: to measure our ads on Meta and Google and show relevant ads, following your choices below.
  • Security and the law: to prevent fraud, spam and abuse, keep the Site secure, keep tax and accounting records, and meet other legal obligations.

Health information

Ttool makes a tool and teaching for practitioners and for people who care for their own soft tissue. We don’t ask about your health, and we don’t use what you read or buy to guess anything about your health. We don’t let Meta see which Learn articles or course lessons you read, including when you sign up for our emails on one of those pages. If you tell us about an injury or health condition in a message, we use it only to answer you, and we never share it with advertisers.

Who we share it with

We never sell your personal information for money. But some US state laws count sharing information with advertising partners, such as Meta and Google, as a “sale” or “sharing”. We do share some information with them for ads, as the next section explains, and you can opt out at any time.

CompanyWhat it does for usWhat it receives
Service providers: they may use your information only to work for us
SiteGroundHosts our websiteEverything the website stores, including orders and our email list
Amazon Web Services (Amazon SES)Delivers our emailsYour email address, your name and the emails we send you
Google WorkspaceRuns our inbox, hello@theTtool.comWhat you write to us, including contact form messages
Fulfyld, our warehouse (using ShipEdge software)Packs and ships your orderYour order as our store records it: your name, email address, phone number, billing and shipping addresses, what you ordered, and the IP address and browser the order came from
Companies that also use it under their own privacy policies
StripeTakes payments: cards, Apple Pay, Google Pay and LinkYour name, email address, billing address, card details, IP address and device details. Stripe also uses them to prevent fraud and, if you choose Link, to save your details.
Shipping carriers chosen by our warehouseDeliver your orderYour name, shipping address and phone number
Google PlacesSuggests addresses as you type at checkoutThe address text you type, sent from our server rather than your browser
Google MapsShows a map on the order confirmation page, only if you press “Show map”Your shipping address and your IP address
Vimeo and YouTubePlay the videos on our SiteYour IP address and browser details, as explained under “Video players” below
Meta and GoogleMeasure and show our ads; website statisticsSee “What Meta and Google receive” below
Shopify and KlaviyoOur previous store and email service, until we close those accountsOrders and email sign-ups from before we moved to this Site
Government bodies
Washington State Department of RevenueTells us the sales tax rate for deliveries in WashingtonThe street address, city and ZIP code of the delivery (not your name or email address)
Customs authorities, for orders shipped outside the USClear your parcel through customsYour name, address, phone number, what you ordered and its value

Customer lists. We give Meta a list of our customers’ and email subscribers’ email addresses, scrambled with a one-way code (SHA-256 hashing), so that we can show them our ads or leave them out of ads, and so that Meta can find other people who may be interested in the Ttool. We leave out anyone in Europe (including the UK and Switzerland) or Brazil, anyone whose country we don’t know, and anyone who has unsubscribed from our emails. Meta uses the scrambled addresses only to find matching accounts. We don’t give customer lists to Google or anyone else. To be left off our customer lists, email hello@theTtool.com.

Others when required. We also share information when the law requires it, to protect our rights or safety, or as part of a sale or reorganization of our business.

Our email list is kept on our own Site, not with an outside email marketing company. Review requests and the reviews you write are also handled on our own Site, not by an outside review company. Fonts on the Site are served from our own server, not from Google.

What Meta and Google receive

From your browser. The Meta Pixel sends Meta the address of the page you’re on and the page that sent you there. It doesn’t run on our Learn articles or course lessons. If you’re logged in to Facebook or Instagram in the same browser, Meta can connect this to your account. We’ve turned off the Pixel’s automatic features, so it doesn’t record which buttons you click or read what you type into forms.

From our server. Our server also tells Meta when someone adds a product to the cart, starts checkout, signs up for our emails or places an order, and tells Google Analytics about sign-ups and orders. (The technical names are the Meta Conversions API and the Google Analytics 4 Measurement Protocol.) These reports follow your privacy choices exactly as the code in your browser does. If your choice, your browser’s Global Privacy Control signal or the rules for your region stop the browser code from sending something, our server doesn’t send it either. A payment can be confirmed after you’ve left the Site, so we save the privacy choice you had at checkout with your order and follow it for that order.

Your details, scrambled. So that Meta can match these reports to its users, we scramble some of your details with a one-way code (SHA-256 hashing) before sending them. For an order, that’s your email address, first and last name, phone number, and billing city, state, ZIP code and country. For a sign-up, it’s your email address and, if you gave it, your first name. Scrambling hides the readable values on the way, but it doesn’t make them anonymous: Meta scrambles its users’ details the same way so it can match them. With every report, Meta also receives your IP address, your browser type and version, and the Meta cookie IDs listed below. Meta uses this to measure our ads and, unless you have opted out, to show you our ads.

Google Analytics receives a random ID for your browser, the pages you visit and what happened (for example, an order’s value and the product), but never your email address or name. We use it for statistics about our Site. Our Google Analytics account isn’t linked to a Google Ads account.

Meta and Google may collect information about your activity over time and across different websites, including ours. We don’t use session-recording tools: nothing on the Site records your screen, mouse movements or keystrokes.

Cookies and similar tools

A cookie is a small file a website saves in your browser. Here is every cookie our Site sets, and what each one is for.

NameWhat it doesHow long it lasts
Needed for the shop to work (always on)
woocommerce_cart_hash, woocommerce_items_in_cart, wp_woocommerce_session_*Keep your cart and checkout workingUntil you close your browser; the session cookie lasts 2 days
__stripe_mid, __stripe_sid (set by Stripe on product, cart and checkout pages)Make payments work and help prevent fraud. Stripe also sets its own fraud-prevention cookie on stripe.com.1 year; 30 minutes
tt_consentRemembers your privacy choice12 months
tt_geoRemembers which region’s privacy rules apply to you1 day
tt_gpcNotes that your browser sent a Global Privacy Control signalUntil you close your browser
fc_hash_secure (only when you confirm or manage your email subscription)Lets our email preference pages recognize you90 days
Cart reminders (set only after you type your email address at checkout)
fc_ab_cart_tokenLinks this browser to the checkout you started, so we can keep the saved cart up to date and stop the reminders when you order30 days
fc_ab_cart_skip_trackRemembers that you clicked “No thanks”, so we don’t save your cart7 days
Remembering our sign-up offer (no personal details inside)
tt_pop_seenStops the 10% pop-up from opening again by itself7 days
tt_subscribedRemembers that you signed up, so we don’t ask again1 year
tt_customerRemembers that you bought a Ttool, so we don’t show you the sign-up offer2 years
Analytics (in Europe, the UK, Switzerland and Brazil, only if you agree)
_ga, _ga_*Google Analytics: tell visits and visitors apartUp to 2 years
tt_landingRemembers the page where your visit started30 days
sbjs_* (set by WooCommerce)Record how you reached the Site, such as which campaign, so we can see which pages and campaigns lead to ordersUntil the end of your visit
fc_hash_secure, fc_cid (set when you click a link in one of our emails)Recognize you as that subscriber and note which email you came from, so we can see which emails lead to orders90 days; 28 days
Advertising (in Europe, the UK, Switzerland and Brazil, only if you agree)
_fbpIdentifies your browser to Meta to measure our ads90 days
_fbcStores the click ID when you arrive from a Meta ad90 days
_gcl_* (when set)Connects a Google ad click to your visit90 days
tt_lead_eidHolds a random ID after you submit a sign-up form, so the same sign-up isn’t counted twice10 minutes
Saved in your browser, not a cookie
Course progress (browser local storage)Remembers which lessons you watched, so you can pick up where you left off. It stays on your device, and we don’t receive it.Until you clear your browser data
Cart and checkout details (browser local storage, set by WooCommerce)Keeps a copy of your cart and of the details you type at checkout, such as your name, address, email address and phone number, so the cart and checkout keep working when you move between pages. This copy stays on your device.Until you clear your browser data

Video players

Videos on the Site play from Vimeo or YouTube. On course pages, the preview pictures load from Vimeo, so Vimeo receives your IP address and browser details when the page opens. Apart from that, nothing loads from Vimeo or YouTube until you press play. Vimeo or YouTube then also learns which video you chose and may set its own cookies under its own privacy policy. YouTube videos use YouTube’s privacy-enhanced mode, and our course player uses Vimeo’s “do not track” setting. How far you are through a course is saved only in your own browser.

Your privacy choices

Some US state laws count sharing information with Meta and Google for ads as a “sale” or “sharing” of personal information. To opt out, use the Your privacy choices link at the bottom of every page and turn on Do not sell or share my personal information. The Meta Pixel then stops running on this browser, our server stops reporting this browser to Meta, and Google stops using what we send it for personalized ads. Google Analytics keeps counting visits for our own statistics. This switch works per browser, so to also be left off the customer lists we give Meta, email hello@theTtool.com.

If your browser sends a Global Privacy Control (GPC) signal, we treat it the same way automatically, and the link shows that it has been honored. Your choice is saved in the tt_consent cookie on this browser for 12 months, so repeat it on each browser or device you use and after clearing cookies. If you can’t, email hello@theTtool.com and we’ll help you.

Other ways to control ads. You can also manage ads in your Meta ad preferences and Google My Ad Center, opt out of Google Analytics with Google’s browser add-on, or use the Digital Advertising Alliance and Network Advertising Initiative opt-out tools. We don’t respond to “Do Not Track” browser signals, which have no agreed standard, but we honor Global Privacy Control as described above. Nevada residents: we don’t sell covered information as Nevada law defines it, but you can still send an opt-out request to hello@theTtool.com.

Your rights

Wherever you live, you can ask us what personal information we hold about you and ask us to correct or delete it, and you can unsubscribe from our emails at any time. Email hello@theTtool.com and write “Privacy request” in the subject line. We don’t make decisions about you by automated means that have legal or similarly significant effects.

US state privacy rights

Depending on the state you live in (for example California, Colorado, Connecticut, Virginia and others with similar laws), you have the right to know what personal information we collect, use, disclose, sell or share, and to get a copy of it; to correct it; to delete it; and to opt out of the “sale” or “sharing” of your personal information and of targeted advertising. To opt out, use Your privacy choices or turn on Global Privacy Control in your browser, and email us to be left off our customer lists. For the other rights, email hello@theTtool.com.

We verify requests by matching details you give us (such as your email address and an order number) with our records. You can use an authorized agent; we may ask for proof that you authorized them and ask you to confirm your identity with us. We respond within 45 days, or tell you if we need up to 45 more days. We will not discriminate against you for using your rights. We don’t use or disclose sensitive personal information for purposes that would give you a right to limit it.

Appeals. If we decline your request, you can appeal by replying to our decision or emailing hello@theTtool.com with the subject “Privacy appeal”. We will answer in writing within 45 days and explain our reasons. If you disagree with the outcome, you can contact your state attorney general.

What we collect, why and who receives it (notice at collection)

CategoryExamplesWhere it comes fromWhy we use itWho receives itSold or shared for ads?
IdentifiersName, email address, postal address, phone number, IP address, cookie and device IDsYou and your deviceOrders, customer service, emails, security, analytics, advertisingOur service providers; Meta and GoogleYes, unless you opt out
Customer recordsName, address, phone number (card details go to Stripe)YouOrders and customer serviceOur service providersNo
Commercial informationProducts viewed, added to cart and boughtYou and your deviceOrders, analytics, advertisingOur service providers; Meta and GoogleYes, unless you opt out
Internet activityPages viewed, clicks, email opens and clicks, the site that referred you, browser and device detailsYour deviceAnalytics, security, advertisingOur service providers; Meta and GoogleYes, unless you opt out
Approximate locationYour region, from your device’s time zone or your connectionYour deviceApplying the right privacy rules; analyticsOur service providersNo
Sensitive personal informationNone held by us: card details go straight to Stripe, and we don’t offer customer accountsNot applicableNot applicableNot applicableNo

The only “selling” or “sharing” is the advertising use by Meta and Google described above, including the customer lists we give Meta. We do not knowingly sell or share the personal information of consumers under 16.

Our sign-up offers

We give you something in return for your email address: a personal 10% code (good for 72 hours, one per person) or a free download such as our 10 Studies PDF. You also get our emails. You join by submitting the form, and you can leave at any time with the unsubscribe link in any of our emails or by emailing hello@theTtool.com. You keep anything we already sent you.

If you’re in Europe, the UK, Switzerland or Brazil

Analytics and advertising wait for your yes. Until you choose Accept all, or switch a category on under Preferences, Google’s and Meta’s tags don’t load, our server sends nothing to Meta or to Google Analytics, and no analytics or advertising cookies are set, including the cookies set when you click a link in our emails. Reject all keeps everything off, and you can change your mind at any time with “Your privacy choices”.

Why we may use your information.

  • Taking, delivering and supporting your order, including returns, our guarantee and emails about getting started with the Ttool you bought: our contract with you.
  • Marketing emails, including seeing whether they’re opened and which links are clicked, and analytics and advertising tools: your consent. You can withdraw it at any time; this doesn’t affect what we did before.
  • Keeping the Site secure, preventing fraud and spam, publishing reviews you write, asking inactive subscribers whether they still want our emails, and (in the UK only) reminding you about an order you started: our legitimate interests in running a safe, honest shop and not emailing people who don’t want our emails. We never rely on legitimate interests for analytics or advertising.
  • Tax and accounting records, and records that show what you agreed to: our legal obligations.

You don’t have to give us personal information, but we need your name, email address and delivery address to ship an order, and your email address to send the emails you ask for.

Your right to object. You can object at any time to our use of your information for marketing emails, cart reminders and review requests, and we will stop. You can also object to anything we do based on our legitimate interests; we will stop unless we have compelling reasons that override yours or we need the information for legal claims.

Your other rights. You can also ask us to restrict how we use your information, and to give you the information you gave us in a portable format. In Brazil, you can also ask us to confirm whether we use your information, to anonymize, block or delete information that is unnecessary or excessive, and to tell you who we share it with. We answer within one month (15 days for a full answer to a Brazilian access request). If a request is complex, we may take up to two more months and will tell you why within the first month. You can also complain to the data protection authority where you live or work.

Meta. If you allow advertising, we and Meta Platforms Ireland Limited are jointly responsible for collecting information on our Site with the Meta Pixel and sending it to Meta with the Conversions API. Meta alone is responsible for what it does with the information after that, as Meta’s privacy policy explains. You can use your rights about this with us or with Meta.

Your information is handled in the United States. When you visit, order or sign up, you send your information directly to us in the United States, where we and most of our service providers process it. Some providers, such as Google, Meta and Stripe, also process it in other countries where they operate. US law doesn’t protect personal information in the same way as the law where you live. Stripe, Amazon Web Services and Google are certified under the EU-U.S. Data Privacy Framework, its UK Extension and the Swiss-U.S. Data Privacy Framework. Meta is certified under the EU-U.S. and Swiss-U.S. Data Privacy Frameworks. The data processing terms of all four include the European Commission’s Standard Contractual Clauses. Our warehouse, the shipping carriers and, for deliveries outside the US, customs authorities receive your name, address and phone number because they need them to deliver your order. You can ask us about these safeguards at hello@theTtool.com.

How long we keep it

InformationHow long we keep it
Orders (your contact details, addresses, what you bought, the IP address and browser you ordered from, the privacy choice that applied at checkout, and, if you allowed analytics, a short summary of how you reached the Site, such as the campaign and the type of device)Ten years after the order, for our tax, accounting and warranty records (Washington requires at least five years). Then the personal details are removed.
Ad measurement details saved with an order (the Meta and Google Analytics cookie IDs, the page your visit started on, the page that sent you to the Site, and the copies of your IP address and browser details that we keep for Meta and for our own statistics)30 days after the order, then deleted
A checkout you started but didn’t finish (the cart and the details you typed)30 days, then deleted. If you didn’t order or sign up for our emails, we delete your email address from our records within six months.
Email sign-upsWhile you’re subscribed. If you unsubscribe, or we unsubscribe you because you stopped opening our emails, we stop emailing you but keep your contact record (your email address, name, sign-up records and which of our emails you received, opened or clicked), so we don’t email you again by mistake and can show what you agreed to. If you ask us to delete it, we delete everything except your email address, which we keep marked as unsubscribed so we never email you again by mistake.
Consent records (the privacy choice saved with an order, and the record of each email sign-up)As long as we need them to show what you agreed to
ReviewsAs long as they are published, or until you ask us to remove them. A review we don’t publish is deleted within 12 months.
Review-request records (the review form we email you, and a log of when we sent the email and whether you opened the form; both include your name, email address and order number)12 months after we send the email, then deleted
People who unsubscribe from review requestsUntil you ask us to delete it. We keep only a scrambled (hashed) copy of your email address, so that we never ask you for a review again by mistake.
Messages you send usAs long as we need them to help you and keep a record of our conversation
Security logs (IP addresses, logins and failed login attempts)Only as long as we need them to keep the Site secure
CookiesAs listed in the cookie table. Google Analytics keeps the detailed records it collects for up to 14 months. Meta and Google keep what they receive under their own policies.

You can ask us to delete your information sooner, except what the law requires us to keep.

Children, security and changes

The Site is not directed to children under 16, and we do not knowingly collect their personal information. We use reasonable safeguards to protect personal information, but no method of transmission or storage is completely secure. We review this policy at least once a year and may update it. When we do, we change the date at the top and, for significant changes, tell you on the Site or by email.

Contact us

TTOOLCO, LLC, 22426 Woodway Park Road, Woodway, WA 98020, USA, is responsible for your personal information. For questions, requests or complaints about privacy, email hello@theTtool.com or write to us at that address. For Brazil, this email address is also our data protection contact channel.

Your privacy choices