Privacy Policy

Last updated: October 2026

When you make a purchase from our online store, Curious Creatures, we collect personal information that you provide, such as your name, address, and email address. In this privacy policy, we refer to any information that can identify, relate to, or be reasonably linked to an individual as "Personal Information." This policy explains what Personal Information we collect, why we collect it, who we share it with, and the choices and rights you have.

With your consent, we would like to send you email updates about Curious Creatures and share stories.

Personal Information We Collect

Device and Usage Information

• Examples of Personal Information collected: The version of your web browser, your IP address, time zone, cookie information, the websites or products you view, search terms, and how you interact with the Site.
• Purpose of collection: To make sure the Site loads correctly for you, to perform analytics on Site usage in order to optimize its performance, and, where permitted, to measure and personalize our advertising.
• Source of collection: Collected automatically when you access our Site using cookies, log files, web beacons, tags, or pixels.
• Disclosure for a business purpose: We share this information with our processors, including Shopify, Google, and Klaviyo.

Order Information

• Examples of Personal Information collected: Your name, billing address, shipping address, payment information (including credit card numbers, which are handled by our payment processor), email address, and phone number.
• Purpose of collection: To provide products to you, process your payment, arrange for shipping, provide order confirmations, communicate with you, screen orders for potential risk or fraud, and, in line with your preferences, provide information or advertising about our products or services.
• Source of collection: Collected directly from you.
• Disclosure for a business purpose: We share this information with our processors, including Shopify and ShipStation.

Account and Marketing Information

• Examples of Personal Information collected: Your email address, phone number (if you sign up for text messages), account details, purchase history, and your communication preferences.
• Purpose of collection: To send you the emails and offers you ask for, run your account, and understand which of our messages are useful to you.
• Source of collection: Collected directly from you, and from your interactions with our emails and Site.
• Disclosure for a business purpose: We share this information with our email marketing provider, Klaviyo.

How We Use Your Personal Information

• To fulfill your orders: to receive, process, confirm, ship, and track your order, process returns and refunds, and communicate with you about your purchase.
• To run and improve our Site and services: to keep the Site working, handle customer service requests, diagnose technical problems, and understand which products and pages people use most.
• To market to you: to tell you about new products, stories, and offers, to measure and improve our advertising, and to show you ads that may interest you, in line with your choices.
• For reviews and content: to display reviews or content you choose to submit about our products.
• For security and fraud prevention: to protect our Site, our customers, and our business, and to screen orders for fraud or misuse.
• To meet legal obligations: for tax, accounting, and legal compliance, and to respond to lawful requests.

Where We Get Your Personal Information

• Directly from you when you place an order, create an account, sign up for our emails, or contact us.
• Automatically when you use our Site, through cookies, pixels, and similar technologies.
• From service providers and advertising platforms that help us run our store and measure our marketing, such as Shopify, Klaviyo, Google, and Meta.

We may combine the information from these sources, along with publicly available information, to understand what our customers like, improve our products, and personalize the messages and ads you see.

Categories of Personal Information (California and Other U.S. States)

The list below describes the categories of Personal Information we have collected in the past 12 months, using the categories defined by California law, and whether we have "sold" or "shared" them. Under these laws, "sharing" means disclosing Personal Information to a third party for cross-context behavioral advertising (advertising based on your activity across other sites and apps), and "selling" includes disclosures for something of value other than money.

• Identifiers. Examples: Name, email address, phone number, postal address, IP address, online identifiers. Disclosed for a business purpose to: Shopify, ShipStation, Klaviyo, Google. Sold or shared in the past 12 months: Yes (shared for targeted advertising).
• Customer records. Examples: Name, billing and shipping address, phone number, payment details (handled by our payment processor). Disclosed for a business purpose to: Shopify, ShipStation. Sold or shared in the past 12 months: No.
• Commercial information. Examples: Products viewed, items added to cart, purchase history. Disclosed for a business purpose to: Shopify, Klaviyo, Google. Sold or shared in the past 12 months: Yes (shared for targeted advertising).
• Internet or network activity. Examples: Browsing on our Site, search terms, interactions with our emails and ads. Disclosed for a business purpose to: Shopify, Google, Klaviyo. Sold or shared in the past 12 months: Yes (shared for targeted advertising).
• Geolocation (approximate). Examples: City or region derived from your IP address. Disclosed for a business purpose to: Shopify, Google. Sold or shared in the past 12 months: Yes (shared for targeted advertising).
• Inferences. Examples: Preferences or interests drawn from the above (for example, product categories you tend to browse). Disclosed for a business purpose to: Klaviyo, Google. Sold or shared in the past 12 months: Yes (shared for targeted advertising).
• Sensitive Personal Information. Examples: Payment card number combined with the security code needed to complete a purchase. Disclosed for a business purpose to: Our payment processor. Sold or shared in the past 12 months: No.

We do not knowingly sell or share the Personal Information of anyone under 16 years of age.

Sharing Personal Information

• Service providers who help us run our business and fulfill our contracts with you, such as Shopify (which powers our online store; see their privacy policy for how they use your Personal Information), our payment processor, ShipStation (shipping), Klaviyo (email marketing), and Google (analytics). We give them only the information they need to do their job and they may not use it for their own purposes.
• Advertising partners, such as Meta and Google, who receive information about your Site activity and purchases to measure and target our advertising. This is the disclosure that may count as "sharing" or "sale" under U.S. state privacy laws, and you can opt out as described below.
• Legal and safety recipients. We may share Personal Information to comply with applicable laws and regulations, respond to a subpoena or lawful request for information, or protect our rights, customers, and Site.
• Business transfers. If Curious Creatures is involved in a merger, acquisition, or sale of assets, Personal Information may be transferred as part of that transaction, and we will make sure it remains protected.
• The information that you give us and information about your order may be combined with other personally identifiable information (such as demographic information and past purchase history) available from our records and other sources. This information may also be shared with other third-party marketers to bring you offers of interest. These third parties may share your information with others and may use this information for their own interest-based advertising and commercial purposes.

You can stop the sharing described above by following the opt-out instructions in the "Do Not Sell or Share My Personal Information" section below.

We do not sell your Personal Information in exchange for money. Because the laws in California and other states define "sale" and "sharing" broadly, our advertising and analytics practices may count as a sale or sharing, and we give you the opt-out rights described below.

Your Privacy Rights

If you are a resident of California or of another U.S. state with a comprehensive consumer privacy law (such as Colorado, Connecticut, Oregon, Texas, or Virginia), you have certain rights over your Personal Information. We choose to offer these rights to all U.S. customers, regardless of the state you live in. You have the right to:

• Know and access: request the categories and specific pieces of Personal Information we have collected about you, the sources, the purposes, and the categories of third parties we share it with, and receive a copy in a portable format.
• Delete: ask us to delete the Personal Information we have collected from you, subject to exceptions (for example, information we need to complete a transaction, detect fraud, or comply with the law).
• Correct: ask us to correct inaccurate Personal Information.
• Opt out of sale, sharing, and targeted advertising: tell us not to sell or share your Personal Information, or use it for targeted advertising or profiling (see below).
• Limit the use of sensitive Personal Information: we only use sensitive Personal Information to process your purchase and for other purposes the law allows, and we do not use it to infer characteristics about you.
• Non-discrimination: we will not deny you goods or services, charge you different prices, or provide a different level of service because you exercised a privacy right.

How to make a request

You can submit a request by emailing us at hello@wearecuriouscreatures.com with the subject line "Privacy Request" and telling us which right you want to exercise. We will need to verify your identity, usually by matching the information in your request to the information we already have about you (such as your email address and a recent order). We will respond within 45 days, and let you know if we need an additional 45 days.

You may use an authorized agent to make a request for you. We may ask for written proof that you gave the agent permission, and may still need to verify your identity with you directly.

If we deny your request, you may appeal by replying to our response with the word "Appeal" in the subject line. We will respond to appeals within 60 days. If you are not satisfied with the outcome, you may contact your state attorney general.

About deletion requests

We may not be able to delete everything if an exception applies, for example:

• Transactions: to complete a transaction, provide a product or service you requested, or perform a contract with you.
• Security: to detect and respond to security incidents.
• Fraud and legal: to protect against fraud or illegal activity, or to comply with tax, accounting, or other legal obligations.
• Internal use: to use information internally in ways that are lawful and compatible with the reason you gave it to us, such as improving our services.

Please note that if we delete your Personal Information, some things will work differently:

• Returns and customer service: we will not be able to look up your past orders, so we may ask for proof of purchase to process a return, refund, or other request.
• Accounts: if you have a customer account, it will be closed, and your order history, saved addresses, and preferences will no longer be available.
• Marketing: we will stop sending you marketing communications. We will keep the minimum information needed (such as your email address) to make sure we honor your opt-out.

Do Not Sell or Share My Personal Information

You have the right to opt out of the sale or sharing of your Personal Information, and of its use for targeted advertising. You can do this any of these ways:

• Use our privacy banner or the "Do Not Sell or Share My Personal Information" link in the footer of our Site and choose to decline marketing and advertising cookies.
• Turn on a universal opt-out signal. We treat browser-based signals such as Global Privacy Control (GPC) as a valid request to opt out of sale and sharing for that browser (and for your account, if you are logged in). Learn more about GPC at globalprivacycontrol.org.
• Email us at hello@wearecuriouscreatures.com with the subject line "Do Not Sell or Share" and the email address associated with your orders or marketing subscription. We will process your request as soon as possible and no later than 15 business days.

We do not require you to create an account to opt out. Opting out does not stop other advertising from appearing on other sites, but it will no longer be tailored using the information we share. Because cookie-based opt-outs apply to the browser and device you are using, you will need to opt out on each browser and device, or use a universal opt-out signal.

Opting Out of Direct Marketing Communications

You always have the choice not to receive e-mail marketing information. And you have the right to ask in writing not to receive direct marketing material from us. You can email us at hello@wearecuriouscreatures.com with a request to be "opted out" from our communications. Once properly notified by you, we will take steps to stop using your information in this way. Please allow us 30 days to satisfy your request.

Every marketing email we send also includes an unsubscribe link.

Text Message (SMS) Marketing

If you sign up for our text messages, we use your phone number to send you order updates, marketing offers, and reminders, including abandoned cart reminders. Our Site uses cookies to keep track of items in your cart, which helps us decide when to send a cart reminder. We do not share your text message opt-in data or consent with third parties, except with messaging partners that help us operate our text program. Message and data rates may apply. You can opt out at any time by replying STOP.

Behavioral Advertising

As mentioned earlier, we use your Personal Information to provide you with targeted advertisements or marketing communications that we believe may be of interest to you. For example:

• We use Google Analytics to help us understand how our customers use the Site. You can learn more about how Google uses your Personal Information in their privacy policy. You can also opt out of Google Analytics.
• We use Klaviyo, and we share information about your Site usage, purchases, and interactions with our ads on other websites with our advertising partners (such as Meta and Google). Some of this information is collected and shared directly with our advertising partners, and in some cases through the use of cookies or similar technologies (subject to your consent, depending on your location).

For more information on how targeted advertising works, you can visit the Network Advertising Initiative's (NAI) educational page. You can also opt out of targeted advertising through:

• Facebook
• Google
• The Digital Advertising Alliance's opt-out portal at optout.aboutads.info

Cookies

A cookie is a small piece of information that is downloaded to your computer or device when you visit our Site. We utilize various types of cookies, including functional, performance, advertising, and social media or content cookies. These cookies enhance your browsing experience by allowing the website to remember your actions and preferences, such as login information and region selection. This eliminates the need for you to enter this information repeatedly when you revisit the site or navigate between pages. Cookies also provide insights into how people use the website, indicating whether they are first-time visitors or frequent users.

To optimize your experience on our Site and provide our services, we employ the following cookies:

Cookies Necessary for the Functioning of the Store

• _ab – Used for admin access.
• _secure_session_id – Used for storefront navigation.
• cart – Used for the shopping cart.
• cart_sig – Used for checkout.
• cart_ts – Used for checkout.
• checkout_token – Used for checkout.
• secret – Used for checkout.
• secret_customer_sig – Used for customer login.
• storefront_digest – Used for customer login.
• shopify_u – Facilitates the updating of customer account information.

Reporting and Analytics

• _tracking_consent – Tracks user preferences.
• _landing_page – Tracks landing pages.
• _orig_referrer – Tracks landing pages.
• _s – Shopify analytics.
• _shopify_fs – Shopify analytics.
• _shopify_s – Shopify analytics.
• _shopify_sa_p – Shopify analytics for marketing and referrals.
• _shopify_sa_t – Shopify analytics for marketing and referrals.
• _shopify_y – Shopify analytics.
• _y – Shopify analytics.
• _ga and _ga_* – Google Analytics, used to understand how visitors use the Site.

Advertising and Marketing

• _fbp and _fbc – Meta (Facebook and Instagram) advertising, used to measure and target ads.
• __kla_id – Klaviyo, used to connect your Site activity to your email subscription.

The duration of a cookie on your computer or device depends on whether it is a "persistent" or "session" cookie. Session cookies expire when you stop browsing, while persistent cookies remain until they expire or are deleted. The majority of the cookies we use are persistent and expire between 30 minutes and two years from the date of download.

You have the ability to control and manage cookies in various ways. However, please note that removing or blocking cookies may adversely affect your user experience, and certain parts of our website may become inaccessible.

Most browsers automatically accept cookies, but you can choose to accept or reject cookies through your browser controls, usually found in the "Tools" or "Preferences" menu. For guidance on modifying your browser settings or blocking, managing, or filtering cookies, you can refer to your browser's help file or visit websites such as www.allaboutcookies.org.

Please be aware that blocking cookies may not entirely prevent us from sharing information with third parties, including our advertising partners. To exercise your rights or opt out of specific uses of your information by these parties, please follow the instructions in the "Do Not Sell or Share My Personal Information" and "Behavioral Advertising" sections above.

Do Not Track and Global Privacy Control

Because there is no consistent industry understanding of how to respond to "Do Not Track" signals, we do not change our data collection and usage practices when we detect such signals from your browser. We do, however, honor Global Privacy Control and other legally recognized opt-out preference signals as described in the "Do Not Sell or Share My Personal Information" section above.

How Long We Keep Your Information

We do not apply a single fixed retention period to all Personal Information. Instead, we keep it only as long as we need it for the purposes described in this policy, including to complete your order, provide customer service, meet tax, accounting, and legal obligations, resolve disputes, and enforce our agreements. We keep marketing information (such as your email address) until you unsubscribe or ask us to delete it. When we no longer need Personal Information, we delete or de-identify it.

Security

We use physical, electronic, and procedural safeguards to protect the Personal Information you give us, and payment details are handled by our payment processor rather than stored by us. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security. Please choose a strong password for any account you create and keep it private.

Links to Other Websites

Our Site may link to websites run by other companies. We do not control them, and their privacy practices may differ from ours. Please read the privacy policy of any site before you share your information with it.

Children's Privacy

Our Site is not directed to children under 13, and we do not knowingly collect Personal Information from children under 13. We do not knowingly sell or share the Personal Information of consumers under 16. If you believe a child has given us Personal Information, please contact us and we will delete it.

Financial Incentives

We may offer a discount or other perk (for example, a welcome offer) when you sign up for our email list or text messages. Participation is optional. To receive it, we ask for your email address or phone number, which we use to send you marketing messages. We value that information in line with the benefit of the offer. You can withdraw at any time by unsubscribing, and doing so does not affect your ability to buy from us.

California "Shine the Light"

California residents may request information about the categories of Personal Information we disclosed to third parties for their direct marketing purposes during the previous calendar year, and the names and addresses of those third parties. To make a request, contact us using the details below.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons. When we make material changes, we will update the "Last updated" date at the top of this page.

Contact Us

For questions about this policy, or to exercise any of your rights, contact us at:

Curious Creatures
7893 Alamosa Lane
Bozeman, MT 59718
Email: hello@wearecuriouscreatures.com