Privacy policy

Last updated: January 18, 2026

This Privacy Policy describes Our policies and procedures on the collection, use, and disclosure of Your information when You use the Website or purchase Our Products, and informs You about Your privacy rights and how the law protects You.

We use Your Personal Data to provide and improve the Website and Our Products. By using the Website or purchasing Products, You agree to the collection and use of information in accordance with this Privacy Policy.

Interpretation and Definitions

Interpretation

Words with capitalized initial letters have meanings defined below. Definitions apply in singular or plural form.

Definitions

For the purposes of this Privacy Policy:

  • Account means a unique account created for You to access our Website or manage orders/subscriptions.
  • Affiliate means an entity that controls, is controlled by, or is under common control with a party, where “control” means ownership of 50% or more of shares, equity interest, or voting securities.
  • Business, for the purpose of the CCPA (California Consumer Privacy Act), refers to the Company as the legal entity that collects Consumers' personal information and determines the purposes and means of processing, or on behalf of which such information is collected, that does business in California.
  • Company (referred to as “the Company,” “We,” “Us,” or “Our”) refers to Viva Tallow LLC, St Louis Park, MN. For GDPR purposes, the Company is the Data Controller.
  • Consumer, for CCPA purposes, means a California resident, including (1) individuals in the USA for other than temporary purposes, and (2) individuals domiciled in the USA who are outside the USA temporarily.
  • Cookies are small files placed on Your Device by a website, containing details of Your browsing history, among other uses.
  • Country refers to Minnesota, United States.
  • Data Controller, for GDPR purposes, refers to the Company as the legal entity determining the purposes and means of processing Personal Data.
  • Device means any device accessing the Website, such as a computer, cellphone, or tablet.
  • Do Not Track (DNT) is a concept promoted by the U.S. Federal Trade Commission for allowing users to control tracking of online activities.
  • Personal Data is any information relating to an identified or identifiable individual. For GDPR, it includes name, identification number, location data, or online identifiers. For CCPA, it includes information that identifies, relates to, or could be linked with You.
  • Products refer to tallow soap, whipped tallow skin cream, whipped tallow sun cream, tallow candles, and rendered tallow offered for sale.
  • Sale, for CCPA purposes, means disclosing a Consumer’s personal information to a third party for monetary or other valuable consideration.
  • Service Provider means any person or entity processing data on behalf of the Company to facilitate the Website, provide services, or analyze usage. For GDPR, Service Providers are Data Processors.
  • Usage Data refers to data collected automatically, such as page visit duration or Device identifiers.
  • Website refers to Viva Tallow, accessible from vivatallow.com.
  • You means the individual accessing or using the Website, or a company/legal entity on whose behalf the individual acts. For GDPR, You are the Data Subject or User.

Collecting and Using Your Personal Data

Types of Data Collected

Personal Data

When You use Our Website or purchase Products (online or at point-of-sale, e.g., farmers’ markets), We may collect personally identifiable information, including:

  • Email address
  • First name and last name
  • Phone number
  • Address, State, ZIP/Postal code, City
  • Payment information (processed securely by third parties)
  • Usage Data

Usage Data

Usage Data is collected automatically when You use the Website, including:

  • Device’s IP address
  • Browser type and version
  • Pages visited, time, and date of visit
  • Time spent on pages
  • Unique device identifiers and diagnostic data

For mobile access, We may collect Device type, mobile browser, and identifiers, but not location or camera data.

Tracking Technologies and Cookies

We use Cookies and similar technologies (e.g., web beacons) to track activity and store information. Technologies include:

  • Cookies or Browser Cookies: Small files on Your Device. Refusing Cookies may limit Website functionality.
  • Web Beacons: Electronic files in emails or Website sections to count users or verify system integrity.

Cookies may be Persistent (stored offline) or Session (deleted on browser close). We use:

  • Necessary Cookies (Session, Administered by Us): Essential for Website services, user authentication, and fraud prevention.
  • Notice Acceptance Cookies (Persistent, Administered by Us): Record Your acceptance of Cookie use.
  • Functionality Cookies (Persistent, Administered by Us): Remember login details or preferences for a personalized experience.
  • Tracking and Performance Cookies (Persistent, Administered by Third Parties): Track Website traffic and user behavior, linked to pseudonymous identifiers, to test features and analyze performance.

For details, visit Our Cookies Policy at vivatallow.com/pages/cookies-policy.

Use of Your Personal Data

We may use Personal Data to:

  • Provide and maintain the Website, including monitoring usage.
  • Manage Your Account for accessing Website functionalities.
  • Perform contracts, such as processing orders or subscriptions for Products.
  • Contact You via email, phone, or SMS about order updates, security, or services.
  • Send news, offers, or information about Products, unless You opt out.
  • Manage Your requests or inquiries.
  • Deliver targeted advertising tailored to Your interests or location.
  • Evaluate business transfers (e.g., mergers), where Personal Data may be an asset.
  • Analyze data, identify trends, and improve Website, Products, and marketing.

We may share Personal Data with:

  • Service Providers: For analytics, advertising, payment processing, or contact.
  • Business Transfers: During mergers, sales, or acquisitions.
  • Affiliates: Required to honor this Privacy Policy.
  • Business Partners: To offer Products or promotions.
  • Other Users: If You share information publicly (e.g., reviews).
  • With Consent: For other purposes with Your permission.

Retention of Your Personal Data

We retain Personal Data only as long as necessary for this Privacy Policy’s purposes, legal obligations (e.g., tax records), dispute resolution, or agreement enforcement. Usage Data is retained briefly for analytics, unless needed for security or functionality.

Transfer of Your Personal Data

Your Personal Data is processed at Our offices and where Service Providers are located, potentially outside Your jurisdiction (e.g., Shopify’s servers). Your consent to this Privacy Policy agrees to such transfers. We ensure secure treatment via adequate controls.

Delete Your Personal Data

You may delete Your Personal Data via Account settings or by contacting Us at info@vivatallow.com. We may retain data for legal obligations or lawful bases.

Disclosure of Your Personal Data

Business Transactions

If involved in a merger or sale, Your Personal Data may be transferred. We will notify You before transfer to a different Privacy Policy.

Law Enforcement

We may disclose Personal Data if required by law or valid public authority requests.

Other Legal Requirements

We may disclose Personal Data to:

  • Comply with legal obligations.
  • Protect Our rights or property.
  • Prevent or investigate wrongdoing.
  • Protect user or public safety.
  • Guard against legal liability.

Security of Your Personal Data

We use commercially acceptable means to protect Personal Data, but no Internet transmission or storage is 100% secure. We cannot guarantee absolute security.

Detailed Information on Processing of Your Personal Data

Service Providers accessing Your Personal Data follow their Privacy Policies.

Analytics

We use third-party providers for analytics:

Email Marketing

We may use Personal Data for newsletters or promotions. Opt out via unsubscribe links or by contacting info@vivatallow.com.

Payments

We use third-party payment processors (e.g., Shopify Payments) for orders and subscriptions. We do not store payment card details. Processors comply with PCI-DSS standards. Privacy Policy: https://www.shopify.com/legal/privacy.

Behavioral Remarketing

We may use remarketing to advertise after You visit the Website, using cookies or non-cookie technologies. Providers include:

Opt out of interest-based ads via:

GDPR Privacy

Legal Basis for Processing Personal Data under GDPR

We process Personal Data based on:

  • Consent for specific purposes.
  • Contract performance (e.g., orders).
  • Legal obligations.
  • Legitimate interests (e.g., improving Website).

Contact Us for clarification on legal bases.

Your Rights under GDPR

If in the EU, You have the right to:

  • Access Your Personal Data.
  • Correct inaccurate Personal Data.
  • Object to processing for legitimate interests or marketing.
  • Request erasure of Personal Data.
  • Transfer Personal Data to another party.
  • Withdraw consent, potentially limiting Website access.

Exercising Your GDPR Rights

Contact info@vivatallow.com to exercise rights. We may verify Your identity. You may complain to an EEA Data Protection Authority.

CCPA Privacy

This section applies to California residents, supplementing the Privacy Policy.

Categories of Personal Information Collected

In the last 12 months, We may have collected:

  • Category A: Identifiers (e.g., name, email, IP address). Collected: Yes.
  • Category B: California Customer Records (e.g., address, phone, payment info). Collected: Yes.
  • Category C: Protected Classifications (e.g., race, religion). Collected: No.
  • Category D: Commercial Information (e.g., purchase history). Collected: Yes.
  • Category F: Internet Activity (e.g., browsing behavior). Collected: Yes.
  • Category G: Geolocation Data (e.g., approximate location). Collected: Yes.
  • Categories E, H, I, J, K (e.g., biometric, sensory, employment data). Collected: No.

Exclusions: Publicly available data, deidentified data, or HIPAA-covered information.

Sources of Personal Information

We collect from:

  • You directly (e.g., forms, purchases).
  • You indirectly (e.g., Website activity).
  • Automatically via Cookies.
  • Service Providers (e.g., analytics, payment processors).

Use and Disclosure of Personal Information

We use/disclose for:

  • Operating the Website and delivering Products.
  • Customer support and inquiries.
  • Fulfilling orders/subscriptions.
  • Legal compliance.
  • Security and fraud prevention.

In the last 12 months, We may have disclosed Categories A, B, D, F, G to Service Providers, payment processors, or partners under confidentiality contracts.

Sale of Personal Information

We may have sold (per CCPA) Categories A, B, D, F, G to third-party vendors for advertising. Contact info@vivatallow.com to opt out.

Your CCPA Rights

California residents have the right to:

  • Notice of data collection and purposes.
  • Request details on data collected, sources, purposes, and third parties.
  • Opt out of data sales.
  • Delete Personal Data, with exceptions (e.g., transaction completion).
  • Non-discrimination for exercising rights.

Exercising CCPA Rights

Contact info@vivatallow.com with verifiable requests. We respond within 45 days, extendable by 45 days with notice. Disclosures cover the prior 12 months.

Do Not Sell My Personal Information

Opt out of data sales at info@vivatallow.com or via:

Do Not Track Policy (CalOPPA)

Our Website does not respond to Do Not Track signals. Set browser preferences to disable tracking.

Children’s Privacy

We do not collect data from users under 13. Users under 18 require parental consent. If a child under 13 provides data, contact info@vivatallow.com to remove it.

California Privacy Rights (Shine the Light)

California residents may request information annually about data shared with third parties for marketing. Contact info@vivatallow.com.

Links to Other Websites

Our Website links to third-party sites. We are not responsible for their privacy practices. Review their policies.

Changes to This Privacy Policy

We may update this Privacy Policy, notifying You via email or Website notice. Changes are effective upon posting. Review periodically.

Contact Us

For questions, contact: