Last updated:
This Privacy Policy explains what personal information Tumbler Lane collects when you visit tumblerlane.com or buy from us, why we collect it, who we share it with, how long we keep it and the choices you have. We sell drinkware, so we need enough information to take payment, pack your order and get it to your door, and to answer you when you write to us. We do not need, and do not try to collect, much more than that. Tumbler Lane is the business responsible for your information: Tumbler Lane, 4555 Mansell Rd., Alpharetta, GA 30022, US, support@tumblerlane.com.
The short version
- What we collect: what you give us at checkout or in a message (name, addresses, email, order details), plus basic technical data any website receives (IP address, browser type, pages requested).
- What we do not collect: we never see or store your full card number; payments are handled by the payment provider shown at checkout.
- Why: to fulfil orders, deliver parcels, handle returns and refunds, answer support requests, keep the site secure and meet legal duties.
- Selling data: we do not sell your personal information and we do not share it for cross-context behavioural advertising.
- Marketing: we do not send marketing emails unless you ask to receive them.
- Your rights: ask for a copy, a correction or deletion at any time by emailing us.
1. Information we collect
1.1 Information you give us
- When you place an order: your name, billing address, shipping address, email address, phone number if you choose to enter one, the items you bought (capacity, colour, lid style, quantity), any order notes, and the shipping country.
- When you create an account: your email, a password (stored only in hashed form, never readable by us) and the addresses you save.
- When you contact us: your name, email, order number and whatever you choose to include in your message, such as photos of a dented tumbler or a cracked lid. Please do not send card numbers, passwords or government ID in support messages.
- When you leave a product review (if reviews are enabled for a product): your name or initials as you enter them, your review text and rating, and your email, which is not published.
1.2 Information collected automatically
- Technical data: like every website, our server and our content delivery network receive your IP address, browser and device type, the page requested, the referring page and the time of the request. This is used to deliver pages, protect the site from abuse and fix errors.
- Cart and session data: WooCommerce, the store software we use, keeps track of what is in your cart and whether you are logged in, using cookies described in section 4.
- Order analytics inside the store: our store software produces sales reports from orders (for example, which capacities sell most). These reports are based on order records we already hold, not on tracking you across other websites.
1.3 Information from others
- Payment provider: confirmation that a payment succeeded or failed, the last four digits and type of card or the payment account email if the provider shares it, and fraud-screening results.
- Carriers: delivery status updates, delivery scans and, for some services, a delivery photo or location, which we use to resolve missing-parcel claims.
- Gift buyers: if someone sends you a Tumbler Lane gift, we receive your name and address from them so that we can deliver it.
2. How we use your information
| Purpose | Information used | Basis |
|---|---|---|
| Process and ship your order | Name, addresses, email, order details | Needed to perform our contract with you |
| Send order, shipping and refund emails | Email, order details | Needed to perform our contract with you |
| Handle returns, exchanges, claims and refunds | Order details, messages, photos you send | Needed to perform our contract; legal obligations |
| Answer support requests | Contact details, messages | Our legitimate interest in helping customers; your request |
| Prevent fraud and keep the site secure | IP address, technical data, payment screening results | Legitimate interest; legal obligations |
| Keep accounting and tax records | Order and payment records | Legal obligation |
| Improve products and pages | Order records, return reasons, support topics | Legitimate interest |
| Marketing emails (only if you opt in) | Your consent, which you can withdraw at any time |
We do not use automated decision-making that produces legal or similarly significant effects about you. Fraud screening by a payment provider may flag an order for a manual check by us, in which case a person reviews it before any decision is made.
3. How we share information
We share personal information only with service providers who need it to run the store on our behalf, and only the information they need:
- Payment providers, to take and refund payments. They process your payment details under their own privacy terms and security standards; we never receive your full card number.
- Shipping carriers and postal services in the United States, Canada, Australia and New Zealand, which receive your name, delivery address and sometimes your email or phone number so they can deliver and send delivery notifications.
- Hosting, security and content delivery providers, which store the website and its database and protect it against attacks. Our site is served through a content delivery network that processes IP addresses and request data to deliver pages quickly and block malicious traffic.
- Font service: our pages load typefaces from Google Fonts, so your browser connects to Google’s servers, which receive your IP address and browser information when the fonts load.
- Email services that send transactional emails such as order confirmations.
- Professional advisers and authorities, such as accountants, or where the law requires us to share information, for example in response to a valid legal request, or to protect our customers and business from fraud.
- A buyer of the business, if Tumbler Lane is ever sold or merged, under the same protections described here.
We do not sell personal information, we do not rent customer lists and we do not share personal information with third parties for their own marketing.
4. Cookies and similar technologies
Cookies are small files your browser stores so that a site can remember things between pages. We use them for the store to work, not to follow you around the internet.
| Cookie or storage | Set by | Purpose | How long |
|---|---|---|---|
| woocommerce_cart_hash, woocommerce_items_in_cart | Our store software | Remember the contents of your cart | Session |
| wp_woocommerce_session_* | Our store software | Link your cart and checkout to your visit | Up to 2 days |
| wordpress_logged_in_*, wordpress_sec_* | Our site software | Keep you logged in if you have an account | Session or up to 14 days if you tick “remember me” |
| wp-settings-* | Our site software | Remember display settings for logged-in users | Up to 1 year |
| Security cookies (for example __cf_bm) | Our content delivery network | Tell people and automated bots apart to protect the site | About 30 minutes |
You can block or delete cookies in your browser settings. If you block the store’s cookies, the cart and checkout will not work. We do not currently use advertising cookies or third-party tracking pixels. If that ever changes, we will update this policy first and ask for your consent where the law requires it.
5. How long we keep information
- Order records (what you bought, prices, addresses, payment confirmations): kept for as long as tax and accounting laws require, generally up to 7 years, then deleted or anonymised.
- Support messages and photos: kept for up to 2 years after the issue is closed, so that we can see the history if a problem comes back, then deleted.
- Customer accounts: kept until you ask us to close the account. Order records linked to the account are kept as described above.
- Server and security logs: kept for a short period, usually no longer than 90 days, unless needed to investigate an incident.
- Abandoned carts: session data expires automatically within about 2 days.
6. How we protect information
The whole site runs over HTTPS, so data travelling between your browser and our server is encrypted. Payment details are entered into the payment provider’s secure systems, not stored by us. Access to the store’s admin area is limited to people who need it and protected by passwords. We keep the store software up to date and use a security layer in front of the site to block common attacks. No system can be guaranteed perfectly secure, but if we ever learn of a breach that affects your personal information, we will tell you and the relevant authorities as the law requires.
7. Your rights and choices
Wherever you live, you can ask us to:
- tell you what personal information we hold about you and give you a copy;
- correct information that is wrong or out of date, such as an old address;
- delete your information, except what we must keep for legal reasons such as tax records;
- stop using your information for a particular purpose, such as marketing;
- transfer the information you gave us to you in a common digital format.
To make a request, email support@tumblerlane.com from the email address linked to your orders, with the subject “Privacy request”. We may ask you to confirm details of a recent order to make sure we are dealing with the right person. We respond within 30 days, and we never charge for a reasonable request or treat you differently for making one.
7.1 California and other US states
If you live in California or another US state with a consumer privacy law, you have the rights listed above, including the right to know, correct and delete, and the right to opt out of the “sale” or “sharing” of personal information. We do not sell or share personal information in that sense, so there is nothing to opt out of; you can still contact us to confirm. You may use an authorised agent to make a request on your behalf; we will ask the agent for proof of authorisation.
7.2 Canada
Canadian customers have rights of access and correction under federal and provincial privacy laws. You can withdraw consent to optional uses of your information at any time, subject to legal or contractual limits.
7.3 Australia and New Zealand
Customers in Australia and New Zealand can access and correct their personal information under the Australian Privacy Act 1988 and the New Zealand Privacy Act 2020. If you are not satisfied with how we handle a complaint, you may contact the Office of the Australian Information Commissioner or the New Zealand Office of the Privacy Commissioner.
7.4 Categories of personal information, in one table
Some privacy laws ask businesses to describe their practices by category. Here is the same information as above, organised that way, covering the last 12 months.
| Category | Examples | Source | Disclosed for business purposes to |
|---|---|---|---|
| Identifiers | Name, email, postal address, IP address, account username | You; your device | Payment providers, carriers, hosting and email services |
| Commercial information | Products bought, order history, returns and refunds | You; our store records | Payment providers, carriers, accountants |
| Internet activity | Pages requested, browser type, referring page | Your device | Hosting, security and content delivery providers |
| Customer service records | Messages, photos of damaged or faulty items | You | Email and helpdesk services; carriers for claims |
| Sensitive personal information | Not collected beyond account passwords, which are stored hashed | You | Not disclosed |
7.5 Browser privacy signals
Some browsers send a “Do Not Track” or Global Privacy Control signal. Because we do not sell personal information, do not share it for cross-context advertising and do not run third-party advertising trackers, honouring these signals does not change how the site behaves for you: you are already treated as opted out.
7.6 Photos you send us
When something arrives damaged or faulty, photos are the fastest way to sort it out. Please photograph only the item, the packaging and the shipping label. Try to keep people, faces, house numbers you do not need to show, and other personal items out of the frame. We use claim photos to decide on a replacement or refund and, where a carrier is at fault, to file a claim with that carrier. We do not publish them or use them in marketing.
8. Marketing emails
We do not add you to a mailing list because you placed an order. Order, shipping and refund emails are transactional and are sent because you bought something. If we offer a newsletter in future, you will only receive it if you sign up, and every marketing email will include a one-click unsubscribe link.
9. Children’s privacy
Tumbler Lane sells drinkware that families use, including cups for children, but our website is meant for adults making purchases. We do not knowingly collect personal information from children under 13 (or the equivalent minimum age where you live). If you believe a child has given us personal information, contact us and we will delete it.
10. International visitors and transfers
Tumbler Lane is based in the United States and our website is hosted on servers that may be located in the United States or in other countries used by our service providers. If you order from Canada, Australia or New Zealand, your information is transferred to and processed in the United States so that we can fulfil your order, and is shared with the carrier that delivers in your country. We take reasonable steps to make sure service providers protect it in line with this policy.
11. Links to other sites
Our pages may link to carriers’ tracking pages or other sites. Those sites have their own privacy practices, which we do not control. Please read their policies when you visit them.
12. Security tips for your account
Most account problems we see have nothing to do with our systems and everything to do with reused passwords. If you create a Tumbler Lane account, use a password you do not use anywhere else, and consider a password manager. We will never email you asking for your password, a one-time code or card details. If you receive a message that claims to be from us and asks for any of those, do not reply or click its links; forward it to support@tumblerlane.com so we can warn other customers. You can check your recent orders at any time from your account page, and if anything looks unfamiliar, tell us straight away.
13. Changes to this policy
We update this policy when our practices change, for example if we add a new payment provider or start a newsletter. The date at the top shows the latest version. If a change significantly affects how we use information you have already given us, we will tell you by email or with a notice on the site before it takes effect.
14. Talk to a person
Questions about privacy, or a request about your data, go to support@tumblerlane.com with the subject “Privacy request”. You can also use our Contact Us page or open a ticket. Postal address: Tumbler Lane, 4555 Mansell Rd., Alpharetta, GA 30022, US. For how we handle orders and money, see our Terms of Service and Refund Policy.