Privacy Policy

Privacy Policy of Selkbag

This Privacy Policy explains how Selkbag (“we”, “us”, “our”) collects, uses, stores, and shares personal information when you interact with our website, services, or communications.

Some users may be protected by privacy laws that grant additional rights. Where applicable, this Policy includes sections tailored for:

Virginia consumers
Colorado consumers
Connecticut consumers
Utah consumers
Users in the European Union

You may print or save this document for your records.

Owner and Data Controller

Selkbag
PO BOX 232272
Encinitas, CA 92024
info@selkbagusa.com

If you have questions about this Privacy Policy or want to exercise privacy rights, please contact us using the information above.

Types of Data Collected

We collect the following categories of information, depending on how you use our website or services:

Information you provide directly

Name
Email address
Shipping and billing address
Phone number
Account details (if you create an account)
Payment-related details (processed by third-party providers)
Messages, support requests, and other communications
Survey responses, reviews, and form submissions

Information collected automatically

When you browse our website, we may automatically collect:

IP address and general location
Device type, operating system, and browser details
Pages viewed and time spent on each page
Links you click
Session statistics
Unique identifiers for advertising (for example, Google Advertiser ID or similar)
Cookies and tracking technologies data

Information from third parties

We may receive information from:

Advertising networks
Social media platforms
Analytics providers
Payment processors
Marketing and email partners

Unless otherwise stated, all data requested by our website is required to provide our services. If you choose not to share certain information, we may be unable to complete transactions or deliver certain features.

You are responsible for any third-party personal information you submit or share through our website.

How We Process Data

Processing Methods

We take security seriously and use appropriate safeguards to prevent unauthorized access, modification, disclosure, or destruction of personal information.

Processing is performed using computers, secure systems, and tools aligned with the purposes outlined in this Policy. In certain situations, your data may be accessible to employees or third-party service providers acting on our behalf.

A list of processors can be requested at any time by contacting us.

Where Data Is Processed

Data is processed at our operating locations and in other places where our service providers maintain servers.

Depending on your location, your information may be processed in a country different from your own. Additional details on international transfers appear later in this Policy.

Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by law.

Once no longer needed, personal information will be securely deleted, anonymized, or archived.

Why We Collect and Use Personal Information

Selkbag collects personal information for the following purposes:

Fulfilling and delivering orders
Providing customer support
Managing accounts and user profiles
Processing payments
Conducting marketing and promotional campaigns
Sending transactional or promotional communications
Analyzing website performance and user behavior
Improving our website and services
Complying with legal requirements
Protecting rights, safety, and preventing fraud

Detailed explanations of how data is used for each specific service appear later in this Policy.

Detailed Information on the Processing of Personal Information

Below are the categories of services we use, the information they process, and their purposes.

ADVERTISING

These services help us deliver advertisements and promotional content, which may be tailored to your interests. Some partners use cookies or other tracking technologies to personalize ads.

Microsoft Advertising (Microsoft Corporation)

Allows us to display ads and measure their performance.

Personal Data processed:
Usage data; cookies; unique advertising identifiers; general browsing data

Location of processing: United States

Legal Classification

Depending on your state’s privacy laws, this may be considered:

A “sale” of personal information
“Sharing” for cross-context behavioral advertising

You may have the right to opt out. Details appear in the state-specific sections below.

ANALYTICS

These tools help us understand how visitors engage with our website to improve performance and user experience.

Google Analytics 4 (Google LLC / Google Ireland Ltd.)

Collects anonymized and aggregated data about website usage.

Personal Data processed:
Device information; browser details; session statistics; general geographic location; usage data; cookies

Notes:

IP addresses are anonymized or discarded according to Google’s settings
Data may be used to personalize ads on Google’s network

TikTok Pixel / TikTok Conversion Tracking

Helps measure ad performance and user actions after interacting with TikTok content.

Personal Data processed:
Device identifiers; browsing behavior; cookies; usage data

Meta Pixel (Meta Platforms, Inc.)

Tracks interactions on our website to support advertising on Facebook and Instagram.

Personal Data processed:
Cookies; browsing behavior; usage data

These services may be considered targeted advertising or data “sales” under certain state laws.

HANDLING PAYMENTS

We rely on trusted third-party payment processors. Selkbag does not store full credit card numbers.

Shop Pay / Shopify Payments (Shopify Inc.)

PayPal (PayPal, Inc.)

Personal Data processed:
Billing address; name; payment details; device data; usage data

Processing occurs according to each processor’s privacy policy.

PLATFORM SERVICES & HOSTING

Shopify (Shopify Inc.)

Our website is built and hosted on Shopify.

Personal Data processed:
Various categories necessary for website operation, order management, and customer accounts

Location: Primarily Canada and the U.S.

TAG MANAGEMENT

Google Tag Manager

Helps manage scripts and tracking tags.

Personal Data processed:
Usage data; cookies

MANAGING CONTACTS & SENDING MESSAGES

Klaviyo (Klaviyo, Inc.)

Used for email list management, marketing automation, and transactional emails.

Personal Data processed:
Email address; name; usage behavior; cookies; message analytics

COOKIE POLICY

This Website uses cookies and similar tracking technologies (“Cookies”) to operate, analyze, and improve user experience. Cookies may also support advertising and personalization.

What Cookies Are

Cookies are small text files stored on your browser or device when you visit a website. They help websites function properly, remember preferences, and understand usage patterns.

Types of Cookies We Use

Strictly Necessary Cookies

Essential for core features such as:

Navigating the site
Adding items to your cart
Processing orders
Enabling secure login

Without these, the Website cannot function correctly.

Performance and Analytics Cookies

Used to:

Measure traffic
Analyze how users interact with the site
Identify areas for improvement
Services like Google Analytics 4 and similar tools may place these cookies.

Functional Cookies

Allow us to:

Remember preferences
Provide enhanced website features
Maintain consistency during browsing sessions

Advertising and Marketing Cookies

Help us:

Display ads relevant to user interests
Measure the performance of advertising campaigns
Support retargeting across platforms (e.g., Meta, TikTok, Microsoft Ads)

Managing Your Cookie Preferences

You can manage or disable cookies through your browser settings. Options vary by browser but typically allow you to:

Block all cookies
Block specific types
Delete existing cookies

Note: Disabling some cookies may impact site functionality.

Global Privacy Controls & Do Not Track

Our site does not currently respond to “Do Not Track” signals. However, users in certain regions may have additional rights regarding targeted advertising (described in the state privacy sections below).

ADDITIONAL INFORMATION ABOUT PERSONAL DATA

Legal Requests

We may disclose Personal Data when required to do so by law, court order, or government authority, or if we believe such action is necessary to:

Comply with legal obligations
Protect our rights or property
Investigate fraud or security issues
Ensure the safety of users or the public

System Logs & Maintenance

For operational and security purposes, we may collect:

IP addresses
Server logs
Diagnostic information

This information may be processed as part of routine system maintenance or troubleshooting.

Information Not Contained in This Policy

If you have questions about specific data collection or processing activities not detailed here, you may request more information at any time.

Changes to this Policy

We may update this Privacy Policy periodically. The “Last Updated” date will indicate when changes were made.

Material changes may also be announced on the Website or sent via email, if required by applicable law.

USER RIGHTS UNDER VARIOUS PRIVACY LAWS

Your privacy rights differ depending on where you live. Below is an overview for U.S. states with comprehensive privacy laws.

CALIFORNIA PRIVACY RIGHTS (CCPA/CPRA)

If you are a California resident, you may have the following rights:

Right to Know

You may request:

Categories of Personal Information collected
Specific pieces of information collected
Sources of the information
Purposes for collecting or sharing data
Third parties with whom we share Personal Information

Right to Delete

You may ask us to delete Personal Information we collected, with exceptions such as:

Completing a transaction
Detecting security incidents
Complying with legal obligations

Right to Correct

You may request corrections to inaccurate Personal Information.

Right to Opt Out of Sale or Sharing

We may use advertising technologies considered a “sale” or “share” under California law.

California residents may opt out through:

A “Do Not Sell or Share My Personal Information” link (if applicable)
Global privacy control signals

Right to Limit Use of Sensitive Personal Information

Selkbag does not use Sensitive Personal Information for purposes requiring this right.

Non-Discrimination

We will not discriminate against you for exercising your privacy rights.

VIRGINIA (VCDPA)

Virginia residents may exercise rights to:

Access Personal Data
Correct inaccuracies
Request deletion
Obtain a copy of Personal Data
Opt out of targeted advertising or the sale of Personal Data

Requests may require identity verification.

COLORADO (CPA)

Colorado residents have rights similar to Virginia but also:

The right to appeal denied privacy requests

Colorado residents may opt out of:

Targeted advertising
Sale of Personal Data
Certain profiling activities

CONNECTICUT (CTDPA)

Connecticut residents may:

Access, correct, delete, and obtain copies of Personal Data
Opt out of sales, targeted advertising, and certain profiling
Submit appeals for denied requests

UTAH (UCPA)

Utah residents may:

Access and delete Personal Data collected
Obtain a copy of Personal Data
Opt out of targeted advertising and certain data sales

How to Exercise Your Rights (All States)

You may submit requests by contacting us at:
info@selkbagusa.com

We may need to verify your identity before responding.
If we cannot verify your identity, we may be unable to fulfill the request.

For states requiring an appeals process, instructions will be provided if your request is denied.

EUROPEAN UNION / EEA / UK RIGHTS (GDPR)

If you are located in the EU, EEA, or UK, the following rights apply:

Right of Access

Obtain confirmation whether we process your Personal Data and request a copy.

Right to Rectification

Request correction of inaccurate or incomplete Personal Data.

Right to Erasure

Request deletion of your Personal Data under certain circumstances.

Right to Restrict Processing

Limit the way we use your Personal Data.

Right to Object

Object to processing based on our legitimate interests or for direct marketing.

Right to Data Portability

Receive your data in a structured, commonly used format and transfer it to another controller.

Right to Withdraw Consent

If processing is based on consent, you may withdraw it at any time.

International Transfers

If your data is transferred outside the EU/EEA/UK, we rely on:

Standard contractual clauses
Adequacy decisions
Other lawful safeguards

SMS / MMS MOBILE MESSAGE PROGRAM TERMS

Selkbag (“we,” “our,” “us”) offers a mobile messaging program (“Program”). By choosing to participate, you agree to these Mobile Messaging Terms and also to the Selkbag Privacy Policy.

Participation confirms that you understand and consent to receiving automated or prerecorded marketing messages from Selkbag at the phone number you provide. Consent is not required to make a purchase.

1. User Opt-In

You may opt into the Program through:

Online forms
Checkout forms
Specific sign-up fields
Pop-ups
Text-based opt-ins

By opting in, you consent to:

Automated SMS/MMS messages
Marketing messages
Checkout reminders
Transactional updates
Frequency determined by Selkbag

Message and data rates may apply.

2. User Opt-Out

To stop receiving messages, reply:
STOP, END, CANCEL, UNSUBSCRIBE, or QUIT

You may receive a final confirmation message. Any other words or variations may not be recognized.

Requests made verbally or through non-designated channels are not valid opt-out methods.

3. Program Description

Messages may relate to:

Product launches
Promotions
Abandoned carts
Order updates
Shipping notifications
Special offers
Brand announcements

Message frequency may vary.

4. Costs & Frequency

Message and data rates apply.
Message frequency is recurring and varies based on your interactions.

5. Support

For help:

Reply HELP
Email info@selkbagusa.com

Support messages do not opt you out of the Program.

6. MMS Disclosure

If your device does not support MMS, messages may be delivered via SMS.

7. “As-Is” Provision

Message delivery depends on your carrier and external networks.
Selkbag is not responsible for:

Delays
Failures
Service interruptions

Carriers are not liable for delayed or undelivered messages.

8. User Requirements

Participants must:

Own a text-capable device
Have an active mobile account
Be subscribers of participating carriers
Be able to receive two-way messages

9. Age Requirements

Users must be:

13 years or older, and
Between 13 and 18 only with parental permission

By participating, you confirm you meet age requirements.

10. Prohibited Content

You may not send through our Program:

Fraudulent or unlawful material
Harassing or abusive content
Obscene or discriminatory content
Malware
Unlawful advertisements
HIPAA-protected data
Any content prohibited by applicable laws

11. Dispute Resolution (Binding Arbitration)

Any dispute arising from your participation in the Program will be resolved through binding arbitration on an individual basis, held in San Diego County, California, following the Commercial Arbitration Rules of the American Arbitration Association (AAA).

Key points:

No class actions
No jury trials
Limited appeal rights under the Federal Arbitration Act
Each party pays its own arbitration fees unless the arbitrator rules otherwise

If the arbitration clause is unenforceable, disputes must be brought in a state or federal court located in California.

12. Florida Residents

Messages sent as direct responses to your actions (e.g., HELP, STOP, shipping updates) are not considered telemarketing under Florida law.

13. Miscellaneous

You must have the authority to accept these terms.
Failure to enforce a term is not a waiver.
Invalid provisions will be limited, not removed, where possible.
The Program may evolve, and updates will be provided.
Continued participation confirms your acceptance of changes.

DEFINITIONS

Personal Data

Information identifying or relating to an identifiable individual.

Usage Data

Information automatically collected (e.g., IP address, browser type, device identifiers, time stamps).

User

Individual accessing or using the Website.

Data Subject

The person to whom the data refers.

Data Controller / Owner

Selkbag, responsible for determining data processing purposes.

Processor

External services processing data on behalf of Selkbag.

Tracker

Technology enabling tracking, including:

Cookies
Pixels
Tags
Scripts
Web beacons

Service

Features, tools, and functions provided through Selkbag’s Website.

Website / Application

www.selkbagusa.com and associated services.

LEGAL INFORMATION

This Privacy Policy is based on requirements of:

GDPR (EU)
CCPA / CPRA (California)
VCDPA (Virginia)
CPA (Colorado)
CTDPA (Connecticut)
UCPA (Utah)
Other applicable international and U.S. laws

This policy applies solely to Selkbag’s Website unless otherwise noted.

Last Updated: March 10, 2024