Legal
Privacy Policy
1. Who this policy covers
letsgobiscuit.com is operated by Let’s Go Biscuit (“Let’s Go, Biscuit”, “we”, “us”, “our”). This policy explains what personal information we collect when you visit or buy from our store, what we do with it, who else sees it, and the choices you have. It applies to everyone who uses the site, wherever you live in the United States.
If anything here is unclear, email support@letsgobiscuit.com and we will explain it in plain terms.
2. What we collect
Information you give us
- Your name, shipping address, billing address and email address when you place an order.
- Anything you write to us in a support email, including details about your dog if you choose to share them.
- Your email address if you sign up for our emails.
Payment details are handled by our payment processor, not by us. We do not see, receive or keep your full card number.
Information collected automatically
- Your IP address, browser type, device type and operating system.
- The pages you view on our site, how you arrived, and your time zone.
Order information
- What you bought, the size, the order total, and the order history attached to your email address.
3. Why we collect it
- To fill your order — taking payment, printing a label, getting the bed to your door, and telling you where it is.
- To answer you — sizing questions, returns, and anything else you email us about.
- To prevent fraud — catching stolen cards and fake orders.
- To measure our advertising — so we know which ads led to real orders. See section 4.
- To improve the site — understanding which pages people actually use.
- To email you — only if you asked us to. Every email has an unsubscribe link.
4. Advertising and measurement
We advertise on Facebook and Instagram, which are owned by Meta. To know whether those ads work, we use two Meta tools: the Meta Pixel, a small piece of code that runs in your browser, and the Conversions API, which sends the same information from our server instead of your browser. Both record actions like viewing a product page or completing a purchase.
When an order is matched to an ad, identifiers such as your email address are first normalised and then hashed using SHA-256 — a one-way scramble. Meta compares that scrambled value against its own records to see whether a match exists. It does not learn your actual email address from the hash. In that matching process Meta acts as an independent data controller.
We also use website analytics to understand traffic and page performance.
How to turn advertising tracking off
- Use our Do Not Sell or Share My Personal Information page. See section 9.
- Turn on Global Privacy Control (GPC) in your browser or extension. We honour that signal automatically — you do not need to fill in a form.
- Adjust your Meta ad settings at facebook.com/adpreferences/ad_settings.
- Use the industry opt-out portals run by the Network Advertising Initiative (optout.networkadvertising.org) and the Digital Advertising Alliance (optout.aboutads.info).
5. Who we share information with
We share your information with the companies that help us run the store, and only with the part of it they need to do their job:
- Our payment processor, to take payment securely.
- Our shipping carriers and warehouse, to deliver your order.
- Our email and customer support tools, to reply to you.
- Advertising and analytics platforms, as described in section 4.
- Law enforcement or a court, if we are legally required to.
We do not sell your personal information for money, and we do not pass your name or email to unrelated marketing companies or data brokers. California law uses a broad definition, and under it our use of advertising tools like the Meta Pixel is treated as “sharing” personal information for targeted advertising. You can stop that sharing at any time using the link in section 9.
6. Cookies
Cookies are small files placed on your device so a website can remember something between one page and the next. Our store runs across two systems, and each sets its own:
- letsgobiscuit.com — where you browse, read and land from our ads.
- Our Shopify checkout — where your cart, payment and order are handled.
The cookies below are the ones we and our platforms set in normal use. Durations are approximate, and an individual cookie can change as our platforms update.
Strictly necessary — the store does not work without these
These cannot be switched off. They hold your cart together, keep your session secure, and remember your privacy choice.
| Cookie | What it does | Roughly how long |
|---|---|---|
cart, cart_ts, cart_sig | Remembers what you put in your cart and keeps it valid | 2 weeks |
_secure_session_id | Keeps your checkout session secure | 24 hours |
secure_customer_sig | Keeps you signed in if you have an account | 20 years |
keep_alive | Carries your session between our site and checkout | 30 minutes |
_tracking_consent, _cmp_a | Stores your cookie and tracking preferences | 1 year |
lgb_optout | Our own cookie. Records that you opted out on the Do Not Sell page, so we keep honouring it | 1 year |
Functional — remembering your preferences
| Cookie | What it does | Roughly how long |
|---|---|---|
localization, _shopify_country | Remembers your country so prices and shipping show correctly | Session to 1 year |
wordpress_*, wp-settings-* | Set only if someone signs in to manage the site. Not set for shoppers | Session to 1 year |
Analytics — understanding how the site is used
Shopify measures visits and orders through its Web Pixels system rather than through cookies you can read. We also use website analytics to see which pages people actually use. None of this is used to identify you personally.
Advertising — measuring our Facebook and Instagram ads
| Cookie | What it does | Roughly how long |
|---|---|---|
_fbp | Set by the Meta Pixel to recognise this browser between visits | 3 months |
_fbc | Records that you arrived from one of our ads, so we can tell which ad worked | 3 months |
These are the only cookies affected when you opt out. See section 4 for what is shared and section 9 for the switch.
How to control them
- Use our Do Not Sell or Share My Personal Information page to stop the advertising cookies. This is the cleanest option and it takes effect immediately.
- Turn on Global Privacy Control in your browser. We honour it automatically.
- Use the cookie banner when you first arrive, if one is shown to you.
- Block or delete cookies in your browser settings. Note that blocking the strictly necessary ones will break the cart and checkout.
Some cookies are set by Shopify, which processes payments and orders for us, and are governed by Shopify’s own privacy terms as well as ours. Our platforms occasionally add, rename or retire cookies. If you find one on our site that is not listed here, email support@letsgobiscuit.com and we will tell you what it does and update this page.
7. How long we keep information
We keep order records for as long as we need them to fulfil the order, honour any return or warranty claim, and meet our tax and accounting obligations. Support emails are kept while your question is open and for a reasonable period afterwards in case you write again about the same order.
When we no longer need information for those purposes, we delete it. You can ask us to delete it sooner — see section 8.
8. Your privacy rights
Wherever you live in the United States, we extend the following rights to you:
- The right to know what personal information we have collected about you and who we shared it with.
- The right to correct information that is wrong.
- The right to delete the personal information we hold, subject to records we are legally required to keep.
- The right to opt out of the sharing of your personal information for targeted advertising.
- The right not to be treated differently for exercising any of these rights. Your price, your service and your return window do not change.
To use any of these rights, email support@letsgobiscuit.com with the request and the email address you used to order. We will confirm we received it within 10 business days and complete it within 45 days. If we need longer, we will tell you why before that period ends. We may need to verify your identity first, which usually means confirming details from your order.
9. Do Not Sell or Share My Personal Information
You can stop the sharing of your personal information for targeted advertising at any time, without giving a reason, using our Do Not Sell or Share My Personal Information page. It takes effect immediately and you do not need an account.
If your browser broadcasts a Global Privacy Control signal, we treat it as an opt-out automatically and you do not need to submit anything.
10. Security
Information you send us travels over an encrypted connection. Card payments are handled by a payment processor that meets the PCI-DSS security standard, so your card details never sit on our systems. We limit access to order information to the people who need it to do their jobs.
No website or method of transmission is perfectly secure, and we will not claim otherwise. If a breach ever affects your information, we will tell you.
11. Age
This site is intended for adults. By using it you confirm you are at least the age of majority in your state. We do not knowingly collect personal information from children. If you believe a child has given us information, email us and we will delete it.
12. Changes to this policy
We may update this policy from time to time. If a change is significant, we will say so clearly on this page rather than quietly editing it.
13. Contact us
Questions about this policy, or a request about your information, go to a real person at support@letsgobiscuit.com.