Privacy policy
Dirty Bastard Laundry Company LLC ("Dirty Bastard", "we", "us", "our") operates getdirtybastard.com and the services connected to it (the "Services"). This Privacy Policy explains what personal information we collect, why we collect it, how we use it, when we share it, and how you can exercise your privacy rights.
1. Who is responsible
Dirty Bastard Laundry Company LLC is the controller of your personal information under applicable privacy laws. Contact: hello@getdirtybastard.com. Mailing address available on request.
2. What personal information we collect
We collect the following categories of personal information:
- Identifiers: name, email address, phone number (if you opt in to SMS), shipping address, billing address, account password.
- Commercial information: orders, subscription history, product preferences, reward cycle count, referral activity.
- Internet activity: IP address, browser and device type, operating system, pages visited, time spent on pages, referring site, clicks, scroll depth, and interactions with marketing emails and SMS.
- Payment information: handled by our payment processor (Shopify Payments and, for subscriptions, our subscription billing provider). We do not store your full payment card number on our servers.
- Location: approximate location derived from IP address and shipping address.
- Inferences: inferences drawn from the above, such as scent preferences, purchase frequency, and reward eligibility.
- Communications with us: content of emails and support messages you send us.
We do not knowingly collect personal information from anyone under the age of majority in their jurisdiction. See Section 11.
3. How we collect personal information
- Directly from you when you place an order, create an account, subscribe to marketing, submit a contact form, or play our on-site game.
- Automatically through cookies, pixels, local storage, server logs, and analytics tools (see Section 7).
- From our service providers (payment processor, subscription provider, fulfillment partner, email and SMS platform, analytics providers).
- From marketing partners and advertising platforms (Meta, TikTok, Google) that send us aggregated reporting about ads you interacted with before visiting our site.
4. Why we use your personal information
- To fulfill orders, ship product, and provide customer service.
- To operate our subscription service, including recurring billing, cycle counting, and reward fulfillment.
- To send you transactional messages about your account and orders (order confirmations, shipping updates, subscription renewal reminders).
- To send you marketing emails and, if you opt in, marketing SMS (see Section 6).
- To measure, analyze, and improve the site and our product.
- To personalize the site, including pre-filling your information, showing relevant product recommendations, and running A/B tests.
- To prevent fraud, abuse, and security incidents.
- To comply with legal obligations and enforce our Terms of Service.
- To defend ourselves in legal disputes.
5. Legal bases for processing (for EU and UK visitors)
If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR and UK GDPR:
- Performance of a contract: to process your orders and provide your subscription.
- Consent: for marketing emails, marketing SMS, non-essential cookies, and other processing where consent is required. You can withdraw consent at any time.
- Legitimate interests: to operate and improve our business, prevent fraud, and understand how customers use the site, balanced against your rights.
- Legal obligations: to comply with tax, consumer protection, and other applicable laws.
6. Email and SMS marketing
If you opt in to email marketing, you agree to receive marketing and promotional emails from Dirty Bastard. You can unsubscribe at any time by clicking the unsubscribe link in any marketing email.
If you opt in to SMS marketing by providing your phone number and affirmatively consenting (for example, by checking a clearly labeled consent box on a form), you agree to receive recurring automated marketing text messages from Dirty Bastard at the number you provide. Consent is not a condition of any purchase. Message frequency varies, typically 2 to 8 messages per month. Message and data rates may apply. Reply HELP for help. Reply STOP to unsubscribe at any time. Mobile carriers are not liable for delayed or undelivered messages.
7. Cookies, pixels, analytics, and advertising
We use cookies and similar technologies to operate the site, measure how it is used, and support marketing. Categories we use:
- Strictly necessary cookies: required for the site to function, including cart and session cookies. Cannot be disabled.
- Analytics cookies: Google Analytics 4, Shopify's built-in analytics, and similar tools that help us understand aggregate site usage.
- Advertising and marketing cookies and pixels: Meta (Facebook and Instagram) Pixel, TikTok Pixel, Klaviyo web pixel, and similar tools that help us measure ad performance and show you relevant ads on other platforms.
- Functional cookies: Remember your preferences, landing-page variant (db_variant), and whether you have already seen a popup.
You can manage your cookie preferences through the cookie banner that appears on your first visit, or by clicking "Manage Cookie Preferences" in the site footer. You can also disable cookies at the browser level, but the site may not function as intended.
8. How we share personal information
We share personal information with:
- Service providers acting on our behalf, including our payment processor, subscription billing provider, shipping carriers, fulfillment partners, email and SMS platforms, cloud hosting, analytics, customer support, and fraud prevention.
- Marketing partners such as Meta, TikTok, and Google, for ad measurement and retargeting. You can opt out of targeted advertising through our cookie banner, the Your Privacy Choices page, or directly through each platform.
- Authorities, courts, or other parties when required by law, to respond to legal process, or to defend against claims.
- Acquirers or successors in the event of a merger, sale, restructuring, or financing transaction.
We do not sell personal information for money. Under the California Consumer Privacy Act (CCPA) and similar laws, sharing personal information with advertising partners for cross-context behavioral advertising may be treated as a "sale" or "share" of personal information. You can opt out of this sharing through the Your Privacy Choices link in our footer or at /pages/your-privacy-choices.
9. Your privacy rights
You may have the following rights under applicable law, including the California CCPA and CPRA, the Florida Digital Bill of Rights (FDBR), the Virginia VCDPA, the Colorado CPA, the Connecticut CTDPA, the Utah UCPA, and similar state laws, as well as the EU and UK GDPR:
- Right to know or access: a copy of the personal information we hold about you.
- Right to delete: request that we delete personal information we have collected from you.
- Right to correct: request correction of inaccurate personal information.
- Right to data portability: request your information in a portable format.
- Right to opt out of sale or sharing for cross-context behavioral advertising.
- Right to limit use of sensitive personal information.
- Right to non-discrimination for exercising these rights.
To exercise these rights, email hello@getdirtybastard.com or visit /pages/your-privacy-choices. We will verify your identity before responding. For California residents, you may designate an authorized agent to submit a request on your behalf, subject to identity verification. If you are in the EU or UK, you also have the right to lodge a complaint with your local supervisory authority.
10. Data retention
We keep your personal information for as long as necessary to provide the Services, comply with legal obligations (including tax and accounting), resolve disputes, and enforce our agreements. Order and subscription records are typically retained for at least 7 years for tax and accounting purposes. Marketing contact information is retained until you unsubscribe or request deletion.
11. Children
The Services are not directed to, and we do not knowingly collect personal information from, individuals under the age of majority in their jurisdiction. If we learn that we have collected personal information from a child, we will delete it. If you believe we have collected information about a child, contact hello@getdirtybastard.com.
12. Security
We use commercially reasonable administrative, technical, and physical safeguards to protect your personal information. Payment information is handled by PCI-compliant payment processors. No transmission over the internet or storage system is completely secure, so we cannot guarantee absolute security. If we learn of a security incident affecting your personal information, we will notify you as required by law.
13. International transfers
We are based in the United States, and your personal information is processed in the US. If you access the Services from outside the US, you understand that your information will be transferred to and processed in the US. Where required by law, we rely on appropriate safeguards such as Standard Contractual Clauses for transfers of EU and UK personal information.
14. Third-party links
Our site may link to third-party sites. Their privacy practices are governed by their own policies, not this one.
15. Global Privacy Control and Do Not Track
We honor the Global Privacy Control (GPC) signal for California residents and treat it as a valid request to opt out of sale or sharing. We do not currently respond to traditional Do Not Track browser headers.
16. Changes to this Policy
We may update this Privacy Policy from time to time. If we make material changes, we will post the updated Policy and update the "Last Updated" date. Material changes that expand our use of personal information will be communicated by email or prominent site notice where required by law.
17. Contact
Privacy questions, requests, or complaints:
- Email: hello@getdirtybastard.com
- Subject line: "Privacy Request"
- Mailing address: available on request at hello@getdirtybastard.com