Privacy Policy

Last Updated: November 2025

This Privacy Policy explains how we collect, use, and protect your personal information when you use our website and services. We’ve written it in clear, simple language so you know exactly what happens with your data.

1. Who We Are & How to Contact Us

We are responsible for the personal information we collect through our website and services.

Contact:

  • Email: general [ at ] ctrlcollective [ dot ] com

2. What Data We Collect

We may collect:

  • Personal Information: Name, email, phone number, billing/shipping details.
  • Account Information: Login credentials (username, password).
  • Technical & Usage Data: IP address, browser type, device info, operating system, pages visited, time spent on pages, clicks, and other usage patterns.
  • Analytics & Location/Device Data: Through tools like Google Analytics, we may collect additional metadata such as city-level location, device type, operating system, browser, and screen resolution. Region- and country-level metadata may be collected by default.
  • Payment Information: Processed securely by third-party payment providers — we do not store full payment card details.
  • Communication Data: Messages, inquiries, or feedback you send us.
  • Identifiers & User-Provided Data (Hashed): In some cases, and only where permitted, we may use hashed versions of information you provide (such as email address or phone number) for analytics and advertising measurement purposes with our partners (e.g., Google).

3. How We Use Your Data

We use your information to:

  • Provide and improve our services
  • Process payments and orders
  • Respond to your questions or requests
  • Send important service updates or legal notices
  • Send marketing communications (only if you’ve opted in)
  • Improve website performance and user experience
  • Analyze how people use our site across sessions and devices
  • Build audiences and measure the effectiveness of our advertising (where allowed)
  • Prevent fraud or misuse of our services

4. Legal Reasons We Process Your Data

We process your data when it is:

  • Necessary to provide our services
  • Based on your consent (e.g., marketing emails, certain cookies, advertising and analytics features)
  • Required by law
  • In our legitimate business interests (such as improving security and understanding how our services are used), unless those interests override your rights

5. Cookies & Tracking

We use cookies and similar technologies to improve your experience. Some cookies are essential for the website to work; others help us understand how people use our site and improve it, support analytics, and enable advertising features.

You can control cookies through your browser settings or via our Cookie Preferences tool.

6. Google Analytics, Google Signals & Advertising Features

6.1 Google Analytics

We use Google Analytics (including Google Analytics 4) to understand how visitors use our website and to improve our services. Google Analytics uses cookies and similar technologies to collect information about your use of our site in an aggregated, pseudonymous way.

For more information on how Google processes data, please see the
Google Privacy Policy.

6.2 Google Signals

We may enable Google signals, an additional Google Analytics feature. When Google signals is turned on:

  • Google may associate information about your visits to our site with your Google account, if you are signed in to your Google account and have turned on Ads Personalization.
  • This may include information such as your approximate location, search history, YouTube history, and activity on sites and apps that partner with Google.

We use this combined information to obtain aggregated insights (for example, cross-device reports) and to improve our advertising and measurement.

You can manage how Google uses your information for ads personalization and related features in your Google account,
including via My Activity
and Ads Settings.

6.3 User-ID (Cross-Device Tracking)

We may use the User-ID feature in Google Analytics to understand how registered users interact with our website across multiple sessions and devices.

  • We assign an internal identifier (User-ID) to your account or activity on our site.
  • Google Analytics then interprets each User-ID as a separate user for reporting, which gives us a more accurate and holistic view of how our services are used.

We do not send personally identifiable information (such as your plain-text name, email address, or phone number) as the User-ID to Google. We use User-ID only in accordance with the Google Analytics Terms of Service.

6.4 User-Provided Data (Hashed)

We may use user-provided data collection features offered by Google Analytics and Google Ads. When we do:

  • We only send information you have voluntarily provided to us (for example, your email address) and only where we have the necessary rights/consent.
  • This data is hashed (mathematically transformed into a coded form) before it is sent to Google.
  • Google uses this hashed data to improve conversion measurement, build more accurate audiences, and provide more detailed, privacy-safe insights.

We do not use user-provided data features for any Google-defined sensitive categories, and we only use them in line with Google’s policies and applicable laws.

6.5 Granular Location & Device Data

When enabled, Google Analytics may collect more granular location and device data, such as:

  • City-level location (approximate)
  • Device type, operating system, browser, and other device characteristics

We use this information to understand where visitors are coming from, which devices they use, and how we can improve performance, design, and accessibility.

6.6 Ads Personalization & Audience Sharing

We may connect Google Analytics with Google Ads and other advertising tools to:

  • Create and manage audiences based on how users interact with our site
  • Measure the performance of our campaigns
  • Show more relevant ads (where allowed by law and your preferences)

When Ads Personalization is turned on in our settings:

  • We may export Analytics audiences and key events (like conversions) to Google Ads.
  • This allows us to run remarketing campaigns and reach people who have visited our site or who share similar characteristics with our users.

If Ads Personalization is turned off, those audiences are marked as inactive and no new users are added to them going forward.

You can control how Google uses your data for ads personalization in your Google account’s Ads Settings and via other opt-out methods described below and in our Cookie Policy.

7. Sharing Your Data

We may share your data with:

  • Service providers that help us run our business (e.g., hosting, payment processing, analytics, email delivery, marketing tools, customer support tools)
  • Advertising and analytics partners such as Google, but only in pseudonymous or aggregated form where possible and in line with this Policy and applicable laws
  • Legal authorities when required by law
  • Partners only if you have given consent

We do not sell your personal information.

8. How Long We Keep Your Data

We keep your personal data only as long as necessary for the purpose it was collected or as required by law. When it’s no longer needed, we securely delete or anonymize it.

Analytics data may be retained for a period set in our analytics tools (for example, 14–50 months) and then either deleted or aggregated.

9. Your Rights (U.S. State Privacy Laws)

Depending on where you live, you may have certain rights under laws such as the California Consumer Privacy Act (CCPA/CPRA) or similar state laws. These may include:

  • The right to know what personal information we collect and how we use it
  • The right to request access to your personal information
  • The right to request deletion of your personal information
  • The right to opt out of the sale or sharing of your personal information
  • The right to correct inaccurate personal information
  • The right to limit the use of sensitive personal information

To make a request, email us at general [ at ] ctrlcollective [ dot ] com.
We will verify your identity before processing your request.

If you are a California resident, you may also designate an authorized agent to make requests on your behalf.

In addition, if you have a Google account, you can manage how Google uses your data in your Google account settings
(including My Activity
and Ads Settings).

10. Security

We use secure servers, encrypted connections (TLS 1.3), and restricted system access to protect your data. However, no online service can be 100% secure, so we encourage you to keep your account credentials safe.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make major changes, we’ll notify you by email or through our website before they take effect.

12. How to Complain

If you have questions, concerns, or complaints about this Privacy Policy or how we handle your data, contact us directly at general [ at ] ctrlcollective [ dot ] com.
If you live in a state with a privacy oversight body or attorney general’s office handling consumer privacy complaints, you may also contact them.

Cookie Policy

What Are Cookies?

Cookies are small files placed on your device when you visit our site. They help us remember your preferences, keep you logged in, and understand how you use our site.

We also use similar technologies such as pixels, tags, and local storage for similar purposes.

Types of Cookies We Use

  1. Essential Cookies – Required for the site to function (e.g., login, security, basic load balancing, shopping cart).
  2. Functional Cookies – Remember settings and improve your experience (e.g., language preferences, saved choices).
  3. Analytics Cookies – Measure site performance and usage (e.g., Google Analytics 4). These cookies can collect anonymized or pseudonymous data such as pages you visit, actions you take, time on site, navigation paths, city-level location, device and browser information. When features like Google signals and User-ID are enabled, Analytics may combine information about your visits across devices and sessions, and (if you have Ads Personalization turned on in your Google account) with other Google services, to provide aggregated insights.
  4. Marketing Cookies – Track browsing to show relevant ads and measure ad performance (only with your consent where required by law). This can include remarketing/retargeting cookies (e.g., from Google Ads), cookies used to build audiences and measure conversions, and cookies that support Ads Personalization when allowed.

Your Choices

  • Cookie Preferences: Accept or reject non-essential cookies via our Cookie Preferences tool.
  • Browser Settings: Change your cookie settings in your browser at any time (e.g., block or delete cookies).
  • Google Analytics Opt-Out: Opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on (if supported by your browser).
  • Google Ads Settings: Manage Google Ads settings and Ads Personalization in your Google account (including turning off personalized ads).
  • Industry Opt-Out Tools: Use tools such as the Network Advertising Initiative (NAI) or Digital Advertising Alliance (DAA), where available, to opt out of interest-based advertising from participating companies.

Please note: If you block or delete cookies, some features of our website may not function properly.

Legal Basis

  • Essential cookies: Legitimate business interests (running a secure, functional website).
  • Analytics cookies (including Google Analytics, Google signals, User-ID, and granular location/device data): Your consent where required by law; otherwise our legitimate interest in understanding and improving our services.
  • Marketing cookies (including Ads Personalization and remarketing): Your consent where required by law.

See our Terms of Service for other details

Close