At Tidysetup, your privacy and data security are our highest priorities. This Privacy Policy explains how we collect, use, disclose, transfer, and safeguard your personal data when you visit tidysetup.com or make a purchase from us.
1 – HOW DO WE COLLECT PERSONAL INFORMATION?
1.1 We collect personal information directly when you interact with our website (e.g., placing an order, subscribing to our newsletter, or contacting customer support), automatically through browsing technologies (cookies, web beacons), and from trusted third-party service providers (such as payment gateways and analytics providers).
1.2 Order Information: When you purchase something from our store, we collect necessary personal details such as your name, billing address, shipping address, email address, and phone number in order to process and fulfill your order.
1.3 Payment Information: When you pay via credit card, debit card, Apple Pay, Google Pay, or PayPal, your payment credentials are submitted directly to our PCI-compliant payment processors (Stripe, Inc. and PayPal). Tidysetup never stores or handles your full card number or security codes on our servers.
1.4 Device & Browsing Information: When you browse our site, we automatically collect your IP address, browser type, operating system, and pages viewed to optimize website performance and enhance security.
2 – CONSENT & LEGAL BASES FOR PROCESSING
2.1 When you provide personal information to complete a transaction, verify your payment method, place an order, or arrange for delivery/returns, we process this information to perform our contract with you.
2.2 For secondary purposes such as marketing communications, we will always ask for your explicit consent or provide an immediate opt-out mechanism. You can withdraw your consent at any time by clicking “unsubscribe” in promotional emails or by emailing [email protected].
3 – HOW WE USE YOUR INFORMATION
3.1 We use your information to fulfill orders, process payments, provide shipment tracking notifications, respond to customer support inquiries, prevent fraudulent transactions, and comply with applicable tax and accounting laws.
4 – THIRD-PARTY SERVICE PROVIDERS & PAYMENT PROCESSORS
4.1 We only share personal data with third-party service providers (such as payment gateways, shipping couriers, and hosting providers) to the extent necessary to deliver our services.
4.2 Payment Processors: We use Stripe, Inc. and PayPal to securely handle payment transactions. Payment processors have their own privacy policies regarding the financial and personal information we are required to provide to them for purchase-related transactions. We encourage you to review Stripe’s Privacy Policy to understand how Stripe collects and processes payment data.
4.3 International Transfers: Our servers and third-party service providers may process data across international borders (including within the European Union and the United States). All cross-border data transfers are protected under applicable Standard Contractual Clauses and data protection frameworks.
5 – DATA RETENTION & SECURITY
5.1 We retain order and customer records only as long as necessary to fulfill contractual obligations, resolve disputes, maintain accounting/tax records, and comply with legal requirements.
5.2 Security Standards: We maintain technical and administrative safeguards, including 256-bit SSL/TLS encryption across our entire site. Credit and debit card transactions are tokenized and processed via Stripe, Inc., which is certified as a PCI-DSS Service Provider Level 1.
6 – COOKIES & ANALYTICS POLICY
6.1 Cookies are small text files stored by your browser. We use them to run the shop (your cart and checkout), keep the site secure, and, where allowed, to understand how visitors use the site. We group them into three categories: Essential, Analytics and Marketing.
6.2 Your choice: we only set Analytics and Marketing cookies after you agree in our cookie banner. “Accept all” and “Reject all” are offered side by side, and you can choose each category separately under “Preferences”. You can change or withdraw your choice at any time in the Manage Preferences section below or through “Cookie settings” in the footer. We remember your choice for 6 months. Visitors from other regions do not see the banner, and Analytics and Marketing cookies are used by default; you can block or delete them in your browser settings at any time.
6.3 Essential cookies are needed for the site and checkout to work and cannot be switched off:
| Cookie | Purpose | Duration |
|---|---|---|
wp_woocommerce_session_* | Keeps your cart and checkout details between pages (WooCommerce). | 2 days |
woocommerce_cart_hash, woocommerce_items_in_cart | Tracks whether your cart has changed (WooCommerce). | Session |
wordpress_logged_in_*, wordpress_sec_* | Keeps you signed in to your customer account, if you have one. | Session, or 14 days with “Remember me” |
tidy_consent | Stores your cookie choice. | 6 months |
__cf_bm and other Cloudflare security cookies | Protects the site against bots and abuse (Cloudflare, including the Turnstile check on forms). | Up to 30 minutes |
PayPal and Stripe cookies (for example __stripe_mid, __stripe_sid) | Set by our payment providers when their payment buttons or card fields load, to process payments and prevent fraud. See section 4.2. | Up to 1 year |
tidysetup-theme, tidysetup-wcpay-theme (stored in your browser, not cookies) | Remembers the Light or Dark look you chose for this site, and which of the two the card payment form was last styled for, so it matches after you switch. Written only after you press Light or Dark, or once the payment form has saved its styling. Never sent to us or used for analytics. | Until you choose System, or until you clear your browser data |
6.4 Analytics cookies help us understand which pages and products are viewed and how the shop performs, so we can improve it. We use Google Analytics, provided by Google and loaded through our own domain; data may be processed outside the EU as described in section 4.3. Where your cookie choice allows it, Google Analytics may also detect contact details you enter in our forms (such as email address, phone number or address) and send them to Google only in hashed form, to measure orders more accurately.
| Cookie | Purpose | Duration |
|---|---|---|
_ga | Distinguishes one browser from another to count visitors (Google Analytics). | Up to 2 years |
_ga_P32HN3DHRM | Keeps track of your current visit (Google Analytics). | Up to 2 years |
6.5 Marketing cookies record which website, link or ad brought you to us, so we can see which sources lead to orders. We use Google Ads to measure which of our ads lead to purchases and to show our ads to people who have visited our site. When you place an order, Google receives the order details and, so the purchase can be matched to an ad, your email address, name and phone number in hashed form together with your postal address (enhanced conversions). You can turn this off under Manage Preferences or in your Google ad settings.
| Cookie | Purpose | Duration |
|---|---|---|
sbjs_current, sbjs_current_add, sbjs_first, sbjs_first_add, sbjs_session, sbjs_udata, sbjs_migrations | Records the website, link or campaign that referred your visit; saved with your order if you buy (WooCommerce order attribution). | Session (up to 30 minutes) |
_gcl_au | Links a visit to a later purchase (Google tag). | 90 days |
IDE (on doubleclick.net) | Google measurement cookie used by the Google tag. | Up to 13 months |
Manage Preferences
Use the button below to review or change which optional cookies we may use. Turning a category off stops those cookies from being set and removes the Analytics and Marketing cookies already stored for this site.
You can block or delete cookies in your browser settings, and opt out of Google Analytics with the Google Analytics opt-out browser add-on.
This cookie section was last updated on 9 October 2026.
7 – YOUR PRIVACY RIGHTS (GDPR & CCPA/CPRA)
7.1 Depending on your location, you have statutory rights regarding your personal information:
- Right to Access: You can request a copy of the personal data we hold about you.
- Right to Rectification: You can request correction of inaccurate or incomplete data.
- Right to Erasure (“Right to be Forgotten”): You can request deletion of your personal data, subject to legal and regulatory retention obligations.
- Right to Opt-Out: We do not sell your personal data for money. Our use of Google Ads (section 6.5) may count as sharing for targeted advertising under some US state laws; you can opt out of it under Manage Preferences, in your browser settings or in your Google ad settings, and you may opt out of marketing communications at any time.
To exercise any of these rights, please email our Data Privacy Officer at [email protected].
8 – CONTACT US & POLICY UPDATES
We may update this Privacy Policy from time to time. Changes become effective upon posting. For questions or requests regarding your data, contact us at:
Email: [email protected]
Customer Contact: TidySetup, 111 NE 1st Street, Miami, FL 33132, USA
Operating Entity: Sukrano OY, Riia mnt 49, Viljandi, Estonia (Reg: 14648791)