Privacy policy
SALT & STRAW PRIVACY POLICY
This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from saltandstraw.com (the "Site") or otherwise interact with us, such as by taking a survey online or in one of our stores. This policy includes both our general privacy practices and our specific practices related to advertising.
Effective: March 12, 2026
Last updated: March 12, 2026
1. GENERAL PRIVACY INFORMATION
1.1 Personal Information We Collect
When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as "Device Information."
We collect Device Information using the following technologies:
-
Cookies: Data files placed on your device that often include an anonymous unique identifier. For more information about cookies and how to disable them, visit http://www.allaboutcookies.org.
-
Log files: Track actions on the Site, collecting data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
-
Web beacons, tags, and pixels: Electronic files used to record information about how you browse the Site.
When you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including your:
-
Name
-
Billing address
-
Shipping address
-
Payment information (including credit card numbers)
-
Email address
-
Phone number
We refer to this information as "Order Information."
We also collect information you share through surveys, including information that directly or indirectly identifies or could reasonably be linked to you. We refer to this information as "Survey Information." We collect Survey Information to better understand your opinions about our products and services.
When we talk about "Personal Information" in this Privacy Policy, we are talking about Device Information, Order Information, and Survey Information.
1.2 How We Use Your Personal Information
We use the Order Information that we collect generally to fulfill orders placed through the Site (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations). Additionally, we use this Order Information to:
-
Communicate with you
-
Screen our orders for potential risk or fraud
-
When in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services
We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimize our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns).
We use Survey Information as part of market research efforts.
1.3 Sharing Your Personal Information
We share your Personal Information with third parties to help us use your Personal Information, as described above. For example:
-
We use Shopify to power our online store. You can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy
-
We use Google Analytics to help us understand how our customers use the Site. You can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/. You can also opt out of Google Analytics here: https://tools.google.com/dlpage/gaoptout
We may share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.
We may also share your Personal Information with our affiliates (e.g., parent company, sister companies, subsidiaries, joint ventures, or other companies under common control). If a company acquires, or enters negotiations to acquire, our company, business, or assets, we may share Personal Information with that company.
We may share your Personal Information with service providers. Service providers may help us to run our website, conduct surveys, provide technical support, process payments, fulfill orders, and more.
1.4 Do Not Track
Please note that we do not alter our Site's data collection and use practices when we see a Do Not Track signal from your browser.
1.5 Data Retention
When you place an order through the Site, we will maintain your Order Information for our records unless and until you ask us to delete this information.
2. CALIFORNIA PRIVACY RIGHTS (CCPA COMPLIANCE)
This section supplements the information contained in our Privacy Policy and applies solely to all visitors, users, and others who reside in the State of California ("consumers" or "you"). We adopt this Notice to comply with the California Consumer Privacy Act of 2018 (CCPA). Any terms defined in the CCPA have the same meaning when used in this Notice.
2.1 Information We Collect
Our Website collects information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device ("personal information").
2.2 How We Use Personal Information
We may use or disclose the personal information we collect for one or more of the following business purposes:
- To fulfill or meet the reason you provided the information
- To provide, support, personalize, and develop our Websites, products, and services
- To create, maintain, customize, and secure your account with us
- To process your requests, purchases, transactions, and payments and prevent transactional fraud
- To provide you with support and to respond to your inquiries
- To personalize your Website experience and to deliver content and product and service offerings relevant to your interests, including targeted offers and ads
- To help maintain the safety, security, and integrity of our Websites, products and services
- To conduct surveys
As described to you when collecting your personal information or as otherwise set forth in the CCPA
2.3 Your Rights and Choices
The CCPA provides consumers (California residents) with specific rights regarding their personal information. This section describes your CCPA rights and explains how to exercise those rights.
You have the right to request that Salt & Straw disclose certain information to you about our collection and use of your personal information over the past 12 months, including:
- The categories of personal information we collected about you
- The categories of sources for the personal information we collected about you
- Our business or commercial purpose for collecting that personal information
- The categories of third parties with whom we share that personal information
- The specific pieces of personal information we collected about you
- To exercise the access, data portability, and deletion rights described above, please submit a request to us by either:
-
Emailing us at human@saltandstraw.com
-
Sending a letter to Salt & Straw, LLC, 110 SE 2nd Ave, Portland, Oregon 97214
2.4 Non-Discrimination
We will not discriminate against you for exercising any of your CCPA rights, unless permitted by the CCPA.
3. EUROPEAN PRIVACY RIGHTS
If you are a European resident, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the contact information below.
Additionally, if you are a European resident, we note that we are processing your information in order to fulfill contracts we might have with you (for example if you make an order through the Site), or otherwise to pursue our legitimate business interests listed above. Please note that your information will be transferred outside of Europe, including to Canada and the United States.
4. ADVERTISING PRACTICES ADDENDUM
This section governs the processing, use, disclosure, retention, and security obligations of any Personal Information that we collect, process, or share in connection with advertising services.
4.1 Definitions
-
Company Systems: Any computer, computer network, computer application, storage device, mobile computing device or software owned or leased by us or operated by a third-party on our behalf.
-
Information: Any data or information in our care, custody or control or a third party on our behalf: (a) provided to us by customers or advertising partners; or (b) created, stored, processed or transmitted as a result of our advertising activities.
-
Personal Information: Anything within the scope of "personal information" as defined under the CCPA and "personal data" as defined under any Privacy Laws.
-
Sell/Share: As defined in the CCPA.
-
Service Provider: An entity that processes Personal Information on our behalf pursuant to a written contract.
-
Security Breach: Any actual or reasonably suspected unauthorized access, use, disclosure, or alteration of Information or Company Systems.
4.2 Advertising Data Collection and Use Practices
We use cookies, web beacons, pixels, and similar technologies to collect information about users for advertising purposes. Such technologies may be used to:
-
Deliver targeted advertisements based on browsing history and preferences
-
Measure advertisement effectiveness
-
Improve ad targeting and relevance
-
Track user interactions with advertisements
-
Analyze user behavior on our website
Information collected for advertising purposes may include:
-
IP address
-
Browser type and version
-
Operating system
-
Referring URLs
-
Pages visited on our website
-
Time spent on pages
-
Links clicked
-
Products viewed or purchased
-
Ad impressions and interactions
We may share certain information with advertising partners and platforms, including:
-
Google Ads
-
Facebook Advertising
-
Other third-party advertising networks and platforms
4.3 Opt-Out Rights
Users have the right to opt out of the sale or sharing of their Personal Information for targeted advertising purposes. We honor user opt-out preferences and provide clear mechanisms for users to exercise these rights, including:
-
"Do Not Sell or Share My Personal Information" link on our website
-
Cookie preference controls
-
Instructions for disabling or blocking cookies in browser settings
We honor Global Privacy Control signals and other technical opt-out mechanisms as required by applicable Privacy Laws.
Users may also opt out of targeted advertising by using these industry opt-out mechanisms:
-
Network Advertising Initiative: http://www.networkadvertising.org/managing/opt_out.asp
-
Facebook: https://www.facebook.com/settings/?tab=ads
-
Google: https://www.google.com/settings/ads/anonymous
-
Digital Advertising Alliance: http://optout.aboutads.info/
4.4 Service Provider Requirements
When we engage Service Providers to assist with advertising activities, we will:
-
Enter into written agreements that impose the same privacy and security obligations
-
Prohibit Service Providers from selling or sharing Personal Information
-
Limit Service Providers' use of Personal Information to specific business purposes
-
Require Service Providers to implement and maintain reasonable security procedures
We conduct reasonable due diligence on Service Providers to ensure compliance with this policy and applicable Privacy Laws.
4.5 Data Security and Retention
We employ reasonable security measures to protect Personal Information collected and used for advertising purposes, including:
-
Encryption of data in transit and at rest
-
Access controls and authentication mechanisms
-
Regular security assessments and testing
-
Employee training on data security practices
-
Monitoring for unauthorized access attempts
Retention of Personal Information collected for advertising purposes shall be limited to the period necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law or regulation.
4.6 Security Breach Response
In the event of a Security Breach involving Personal Information collected for advertising purposes, we will:
-
Promptly investigate the nature and scope of the breach
-
Take necessary steps to contain and mitigate the breach
-
Notify affected individuals, regulators, and other parties as required by applicable law
-
Document remedial actions taken
-
Review and update security procedures as necessary to prevent future breaches
4.7 Compliance with Privacy Laws
We will comply with all applicable Privacy Laws related to our advertising activities and respond to verifiable consumer requests regarding Personal Information used for advertising purposes, including requests to know, delete, opt-out, correct, or limit use of personal information.
5. CHANGES TO THIS POLICY
We may update this privacy policy from time to time to reflect changes to our practices or for other operational, legal or regulatory reasons. Material changes will be communicated through our website or other appropriate channels.
6. CONTACT US
For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us:
By email: human@saltandstraw.com
By mail:
Salt & Straw
[Re: Privacy Compliance Officer]
110 SE 2nd Ave
Portland, Oregon 97214
United States