PRIVACY POLICY

Privacy Policy

Effective Date: September 1, 2025

Thank you for visiting tongshops.com (hereinafter referred to as "we" or "the site"). This Privacy Policy is designed to help you understand how we collect, use, share, and protect your personal information. Please read this Privacy Policy carefully to understand our practices.

Section 1 - How We Process Your Information

• Device Information: When you visit our site, we automatically collect information about your device, including:

  • Your IP address, browser type, time zone, device information, etc.

  • Pages you visit, products you view, search engines, referral pages, etc.
    We collect device information through the following technologies:

  • Cookies: Data files stored on your device, usually containing an anonymous unique identifier.

  • Log Files: Data that records your website activity, including your IP address, browser type, internet service provider, etc.

  • Web Beacons, Tags, Pixels: Electronic files used to record how you navigate through the site.

• Order Information: When you make a purchase, we collect the following information:

  • Your name, billing address, shipping address, payment information (including credit card numbers), email address, and phone number.

• Personal Information: We refer to device information and order information as "Personal Information."

Section 2 - Consent

How Do We Obtain Your Consent?

When you provide us with personal information to complete a transaction, verify your credit card, place an order, arrange for delivery, or process a return, we assume that you consent to our collection and use of this information for that specific purpose.

If we ask for your personal information for secondary purposes (e.g., marketing), we will either ask for your explicit consent or provide you with the opportunity to decline.

How Can I Withdraw My Consent?

If you change your mind, you can withdraw your consent at any time by contacting us at service@tongshops.com or mailing us at:

TONGSHOP
312 W 2ND ST CASPER, WY 82601

Withdrawing your consent will not affect the legality of the collection or use of your information prior to your withdrawal.

Section 3 - Disclosure

We may disclose your personal information in the following cases:

• Legal Requirements: If required by law or if you violate our terms of service, we may disclose your information.

Section 4 - Shopify

Our store is hosted on Shopify Inc. They provide us with an online e-commerce platform that allows us to sell our products and services to you.

Your data is stored through Shopify’s data storage, databases, and the general Shopify application. They store your data on secure servers behind firewalls.

Payments
If you choose to complete a purchase via direct payment gateways, Shopify will store your credit card data. This data is encrypted according to the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data will only be stored as long as necessary to complete the transaction. Once the transaction is complete, your purchase information is deleted.

All direct payment gateways adhere to the PCI-DSS standards managed by the PCI Security Standards Council, which is a joint effort by brands like Visa, MasterCard, American Express, and Discover. These PCI-DSS requirements help ensure that our store and its service providers securely handle credit card information.

For more information, you may also want to read Shopify’s Terms of Service or Privacy Policy.

Section 5 - Third-Party Services

In general, third-party providers we use only collect, use, and disclose your information to the extent necessary to allow them to perform the services they provide to us.

However, certain third-party service providers (such as payment gateways and other payment processors) have their own privacy policies regarding the information we are required to provide to them for your purchase-related transactions.

We recommend that you read their privacy policies to understand how these providers handle your personal information.

Please note that some providers may be located in jurisdictions other than yours or ours. Therefore, if you choose to proceed with a transaction involving third-party service providers, your information may be subject to the laws of the jurisdiction in which that service provider or its facilities are located. For example, if you are in Canada and your transaction is processed by a payment gateway located in the United States, your personal information used to complete that transaction may be subject to disclosure under U.S. law (including the Patriot Act).

Sharing Your Personal Information As described above, we share your Personal Information with third parties to help us use your Personal Information. For example, we use Shopify to power our online store—you can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy. We also use Google Analytics to help us understand how our customers use the Site—you can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.

Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant, or other lawful request for information we receive, or to otherwise protect our rights.

• Behavioral Advertising As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications that we believe may be of interest to you. For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understand-online-advertising/how-does-it-work.

  You can opt out of targeted advertising by:

  • Facebook: https://www.facebook.com/settings/?tab=ads
  • Google: https://www.google.com/settings/ads/anonymous
  • Bing: https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads

  Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: http://optout.aboutads.info/.

Section 6 - Security

To protect your personal information, we take reasonable precautions and follow industry best practices to ensure that your information is not inappropriately lost, misused, accessed, disclosed, altered, or destroyed.

If you provide us with your credit card information, we encrypt that information using Secure Sockets Layer (SSL) technology and store it using AES-256 encryption algorithms. While no method of internet transmission or electronic storage is 100% secure, we comply with all PCI-DSS requirements and implement widely accepted industry standards.

Section 7 - Cookies

Here is a list of the cookies we use. We have listed them here so you can choose whether to opt-out of cookies.

• _session_id: A unique token, session-based, allows Shopify to store information about your session (referral source, landing page, etc.).

• _shopify_visit: Does not store data, retains for 30 minutes since last visit, used by our website provider’s internal statistics tracker to record visits.

• _shopify_uniq: Does not store data, expires at midnight (relative to the visitor) on the next day, counts the number of visits to the store.

• cart: A unique token, retains for 2 weeks, stores information about your cart contents.

• _secure_session_id: A unique token, session-based.

• storefront_digest: A unique token, uncertain. If the store has a password, it is used to determine if the current visitor has access.

• PREF: A short-lived cookie set by Google to track visitors to the store.

Section 8 - Age of Consent

By using this site, you represent that you are at least the age of majority in your state or province of residence, or that you are the age of majority in your state or province of residence and you have given us your consent to allow any of your minor dependents to use this site.

Section 9 - Legal Compliance (GDPR and Other Data Protection Laws)

If you are a resident of the European Economic Area (EEA), under the General Data Protection Regulation (GDPR), you have the following rights with respect to your personal data:

• Access: You have the right to request access to the personal data we hold about you.

• Correction: You have the right to request correction of any inaccurate or incomplete personal data.

• Deletion: You have the right to request deletion of your personal data.

• Restriction of Processing: In certain circumstances, you have the right to request that we restrict the processing of your personal data.

• Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format.

• Objection: You have the right to object to the processing of your personal data, especially for direct marketing purposes.

For GDPR purposes, the legal bases for our processing of your personal data include the performance of a contract with you, your consent, or compliance with a legal obligation.

If you wish to exercise any of your GDPR rights, please contact us at service@tongshops.com or use the contact information provided below.

Data Transfers
We may transfer your personal data to countries outside the European Economic Area (EEA) for processing. Specifically, your data may be transferred to the United States or other countries where data protection standards may not be as comprehensive as those in the EEA.

Section 10 - Data Retention

We will retain your personal data as long as is necessary for the purposes set out in this Privacy Policy, including:

• Order Information: We will retain your order information for 7 years to process refunds or other service requests.

• Marketing Data: We will retain your marketing preferences and contact information until you opt-out or withdraw your consent.

If you would like to have your data deleted, please contact us and we will process your request promptly.

Section 11 - Updates to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon posting on the website. If we make material changes to this policy, we will notify you here that it has been updated, so you are aware of the information we collect, how we use it, and under what circumstances (if any) we disclose it.

If our store is acquired or merged with another company, your information may be transferred to the new owners to continue selling products to you.

Section 12 - Questions and Contact Information

If you would like to: access, correct, amend, or delete any personal information we have about you, file a complaint, or simply want more information, please contact our Privacy Compliance Officer at service@tongshops.com, or send a mail to:

TONGSHOP
[Re: Privacy Compliance Officer]
TONGSHOP, 312 W 2ND ST CASPER, WY 82601