Privacy policy
Last updated: July 15, 2026
Privacy Policy for Isadore Nut Company
Effective Date: July 15, 2026
Last Updated: July 15, 2026
Isadore Nut Company LLC ("we," "our," "us") values the trust of our customers and visitors. This Privacy Policy describes how we collect, use, and disclose your Personal Information when you visit, use, or make a purchase from our website located at www.isadorenutco.com (the "Site"), communicate with us, or engage with our services (collectively, the "Services").
Please read this Privacy Policy carefully.
By using our Services, you agree to the collection, use, and disclosure of your information as described in this policy. If you do not agree, please do not use our Services.
1. Scope and Relationship with Shopify
Our online storefront is hosted on the Shopify e-commerce platform. Shopify acts as our primary web host, checkout engine, and data processor, collecting and processing your Personal Information on our behalf to operate our online store.
Your Personal Information will be transmitted to and stored on Shopify’s secure servers (which may be located in the United States, Canada, or other jurisdictions outside of your country of residence).
To understand how Shopify processes and protects your data, you can review the following Shopify agreements:
• Shopify Terms of Service: https://www.shopify.com/legal/terms
[cite: 29]
• Shopify Privacy Policy: https://www.shopify.com/legal/privacy
[cite: 25]
• Shopify Consumer Privacy Policy:
https://www.shopify.com/legal/privacy/consumers
[cite: 6, 24]
2. Information We Collect
We collect several categories of Personal Information depending on how you interact with our site.
A. Information You Provide Directly to Us• Contact Information: Your name, email address, physical shipping address, billing address, and phone number.
• Account Credentials: Username and password if you create a customer account on our Site.
• Payment Information: Payment card details (credit/debit card number, expiration date, CVV). All payment data is processed securely through PCI-DSS compliant third-party payment processors (such as Shopify Payments). We never store or have access to full, unencrypted payment card numbers; only tokenized transaction data is retained.
• Customer Support Communications: Information you include when you contact us via email, contact forms, or phone, including written records or call details.
B. Information Automatically Collected via Tracking Technologies
When you navigate our Site, we automatically collect technical metadata using cookies, pixels, and web beacons, including tracking scripts from our email marketing processor, Klaviyo, which place first-party cookies on your browser:
• Device and Browser Identifiers: IP address, device type, operating system, browser type, unique device ID, and language settings.
• Activity and Usage Data: Referring URL (the website you visited before landing on our Site), pages viewed, specific products searched for, items added to cart, time spent on pages, and navigation patterns. This includes actions such as searching for specific artisan blends, adding customized gift tins to your shopping cart, and starting the checkout flow (which helps us power automated cart recovery flows and personalized outreach via Klaviyo).
• Location Data: Coarse, approximate geographic location derived solely from your IP address (typically at the city/state level; we do not collect precise GPS data).
C. Information Received from Third Parties
We may receive information from service providers who collect data on our behalf, such as:
• Shopify Fraud Screening: To verify transaction security.
• Advertising Partners: Ad platforms that share attribution data indicating which campaign directed you to our Site.
3. How We Use Your InformationWe process your Personal Information to achieve the following operational purposes:
• Fulfilling Orders and Processing Payments: We use your billing, shipping, and payment details to execute our contract with you, process your purchase, ship products from our Maplewood, MN location, send invoices, and provide order confirmation and shipping updates.
• Customer Support: We process your communication history to address inquiries, manage returns, and maintain our business relationship.
• Security, Compliance, and Fraud Prevention: We analyze device identifiers and transaction details to identify malicious activity, detect fraudulent purchases, protect public safety, and comply with legal requirements.
• Marketing and Advertising: We use your email address (with your consent where required) to send promotional newsletters and automated marketing campaigns (such as checkout recovery and product recommendations managed through Klaviyo), and utilize cookies/pixels to deliver tailored, interest-based advertisements on third-party platforms.
• Analytics and Site Optimization: We analyze automatic tracking data to measure Site traffic, understand consumer behavior, and improve our product offerings.
4. How We Share Your Information
We do not sell your personal contact information to third parties. We disclose your Personal Information only to the following trusted partners:
• Shopify: To host our store, power checkout, and manage backend logistics.
• Service Providers: Third parties who perform essential business tasks on our behalf under strict data protection agreements. This includes payment gateways (such as Shopify Payments), shipping carrier services, and our email marketing and analytics partner, Klaviyo, which acts as a third-party data processor.
• Legal and Regulatory Authorities: We may disclose your information to comply with subpoena requests, court orders, or valid requests from law enforcement, or to protect our legal rights, property, and safety.
5. Google Analytics and Ad Partner Disclosures
We utilize advanced digital advertising tools to optimize our marketing campaigns.
A. Google Analytics and Google AdsWe use Google Analytics 4 (GA4) and Google Ads to analyze user behavior and display advertisements.
Please be advised that starting June 15, 2026, Google has consolidated data controls across GA4 and Google Ads. The historical Google Signals setting in GA4 no longer independently controls ad profiling. All advertising data collection and cross-device user recognition are managed directly through Google Consent Mode v2.
Our Site implements Google Consent Mode v2, which transmits four specific signals to Google depending on your preferences:
• analytics_storage: Enables performance measurement.
• ad_storage: Permits the use of advertising cookies.
• ad_user_data: Controls whether user data (such as hashed email addresses) can be sent to Google.
• ad_personalization: Governs whether data can be used for personalized retargeting ads. You can manage your Google personalization settings or opt out of Google’s tracking by visiting:
• Google's Partner Privacy Policy: https://policies.google.com/technologies/partner-sites [cite: 10, 53]
• Google Ad Settings: https://adssettings.google.com
B. Meta Business Tools (Facebook Pixel & Conversions API)
We implement Meta Business Tools, including the Facebook Pixel and Conversions API. These technologies automatically track user events (such as adding an item to the cart or checking out) and transmit this data, along with hashed contact identifiers (utilizing secure SHA-256 cryptographic hashing), to Meta Platforms, Inc. This allows us to track conversion rates from Facebook ads and build custom, optimized target audiences on Meta platforms in accordance with the Meta Business Tools Terms.
You can control Meta’s ad personalization features via the Meta Accounts Center or by visiting https://www.facebook.com/adpreferences/ad_settings.
C. LinkedIn Insight Tag
We utilize the LinkedIn Insight Tag, operated by LinkedIn Ireland (for EU residents) or
LinkedIn Corporation (for US residents). This tool collects technical data (IP address,operating system, referrer URL) to provide us with conversion tracking and professional demographic insights.
You can opt out of LinkedIn tracking by managing your LinkedIn account settings or by visiting https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
6. Shopify Network Intelligence & Enhanced Services
We have enabled Shopify’s "Enhanced Services" powered by Shopify Network Intelligence. This feature securely pools anonymized customer interaction data across multiple Shopify merchants to generate predictive insights, optimize advertising networks (such as Shopify Audiences), and improve fraud-prevention tools.
Shopify combines information about your interaction with our Site, other online stores, and Shopify itself.
By using our Site, you acknowledge that Shopify is responsible for the processing of your Personal Information for these pooled Enhanced Services. You may learn more about Shopify's processing, read about your rights over this data, and submit privacy requests directly to Shopify by visiting:
• Shopify Consumer Privacy Policy:
https://www.shopify.com/legal/privacy/consumers
[cite: 6, 54]
• Shopify Privacy Portal: https://privacy.shopify.com
[cite: 25, 28, 49]
7. Your Privacy Rights and Choices
Depending on your geographic location, you may possess specific statutory rights regarding your Personal Information under frameworks such as the General Data Protection Regulation (GDPR) or various US state consumer privacy laws (including California, Texas, and Minnesota).
A. Summary of Consumer Rights
• Right to Know/Access: The right to confirm whether we process your data and to request a copy of the specific pieces of Personal Information we maintain about you.
• Right to Correction: The right to request that we modify or correct inaccurate, outdated, or incomplete Personal Information.
• Right to Deletion: The right to request that we erase your Personal Information from our records, subject to standard legal exceptions.•
Right of Portability: The right to obtain your data in a portable, structured, and commonly readable digital format.
• Right to Opt-Out of Targeted Advertising, Sale, or Sharing: The right to prevent us from selling your data or sharing tracking identifiers with third-party networks for behavioral advertising.
B. Exercising Your Rights
To exercise any of these rights, please contact us utilizing the details in the "Contact Us" section below. We will verify your identity before processing your request by matching the email address of the requestor with our active customer records.
C. Universal Opt-Out Preference Signals (Global Privacy Control)
We respect your preferences for privacy. Our Site is configured to automatically detect and honor Global Privacy Control (GPC) browser-level signals. If your browser transmits a GPC signal, our integration with the Shopify Customer Privacy API will automatically treat this as an opt-out request.
As a result, tracking scripts from Google Ads, Meta, LinkedIn, and Shopify Network Intelligence will be blocked from loading during your session without requiring further manual action on your part.
D. Managing Cookies and Marketing Communications
• Cookies: You can refuse cookies by clicking "Decline" on our Cookie Consent Banner or by adjusting your browser settings. Please note that disabling cookies may affect some shopping functionalities on our Site.
• Email Marketing: You can opt out of promotional emails at any time by clicking the "Unsubscribe" link at the bottom of any email we send you. We use Klaviyo to manage our subscriber lists and deliver campaigns. Please note that our marketing emails contain tracking pixels to measure campaign metrics (such as email opens or click-through rates), which you can manage by disabling image loading in your email client or opting out. We may still send you non-promotional, transactional emails regarding your active orders or account status.
8. Regional Disclosures
A. United States Residents (including California, Texas, and
Minnesota)Under state consumer privacy laws, our sharing of tracking data (such as IP addresses and browsing behaviors) with third-party ad networks constitutes a "sale" or "sharing" of data for cross-context behavioral advertising.
If you are a resident of California, Texas, Minnesota, or any other state with comprehensive privacy laws, you have the right to opt-out of this data sharing. You may do so automatically by enabling the Global Privacy Control (GPC) in your browser, or manually by visiting our Data Sharing Opt-Out Page (available via the "Your Privacy Choices" or "Do Not Sell or Share My Personal Info" link in our website footer).
B. EEA, UK, and Switzerland Residents
If you are located in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, our processing of your Personal Information relies on specific lawful bases under the GDPR:
• Contractual Necessity: To process and fulfill your orders.
• Consent: For the placement of non-essential cookies and the sending of marketing communications. You have the right to withdraw your consent at any time.
• Legitimate Interests: To protect our website, secure our transactions, and prevent fraudulent activity.
You also have the right to lodge a complaint with your local data protection supervisory authority if you believe our data processing violates applicable European law.
9. Security and Data Retention:
We implement industry-standard administrative, physical, and technical security measures to protect your Personal Information from unauthorized access, loss, or alteration. All data transmissions during checkout are protected by Secure Sockets Layer (SSL) and Transport Layer Security (TLS) encryption. Our payment system utilizes Shopify's PCI-DSS compliant infrastructure. However, please be aware that no method of transmission over the Internet is completely secure, and we cannot guarantee absolute security.
We retain your Personal Information only as long as necessary to fulfill the purposes outlined in this Privacy Policy, manage your customer account, resolve transactional disputes, and satisfy our administrative, tax, and legal obligations.
10. Children's Privacy
Our Services are not intended for use by children under the age of 18, and we do not knowingly collect any Personal Information from children. If you are a parent or guardianand believe that your child has provided us with their Personal Information, please contact us immediately so we can remove the data from our databases.
11. Contact Us
If you have any questions, comments, or complaints regarding this Privacy Policy, or if you would like to exercise your consumer privacy rights, please contact Isadore Nut Company LLC at:
• Mailing Address: Isadore Nut Company LLC, 1064 Gervais Avenue, Maplewood, MN 55109
• Email Address: hello@isadorenutco.com