Privacy Policy

Last updated: August 28, 2026

1. Introduction

Backdropsource Inc. (“Backdropsource,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains what personal information we collect through www.backdropsource.com (the “Site”), how we use and disclose it, and the rights available to you under applicable U.S. state privacy laws. This Policy applies to visitors, customers, and users located in the United States.

This Policy does not apply to information collected offline or through third-party sites we do not control, even if linked from our Site.

2. Information We Collect

We collect the following categories of personal information. “Personal information” means information that identifies, relates to, or could reasonably be linked with you or your household. It does not include de-identified or publicly available information.

Category	Examples	Source
Identifiers	Name, email address, phone number, billing/shipping address, account username, IP address	Directly from you; automatically from your device
Commercial information	Order history, products viewed, cart activity, payment method type	Directly from you; our payment processor
Financial information	Payment card details (processed by our payment processor; we do not store full card numbers)	You; our payment processor
Internet/network activity	Browser type, device information, pages viewed, referral source, clickstream data, cookie identifiers	Automatically, via analytics and advertising technologies
Geolocation data	Approximate location inferred from IP address	Automatically
Inferences	Purchase preferences and interests used for personalization and advertising	Derived from the categories above

We do not collect or infer sensitive personal information beyond payment card data necessary to process your order, which is handled by our PCI-compliant payment processor. We do not knowingly collect precise geolocation, government ID numbers, or health information through the Site.

3. How We Use Your Information

We use personal information for the following business and commercial purposes:

To process, fulfill, and ship your orders, and to handle payments, returns, and customer service requests.
To create and manage your account.
To communicate with you about orders, promotions, and updates via email, chat, SMS, or social media (where you have opted in, as required).
To personalize your shopping experience and to serve interest-based (remarketing) advertising through services such as Google Analytics and the Meta (Facebook) Pixel.
To detect, investigate, and prevent fraud and abuse, including through our fraud-prevention vendor, Signifyd.
To maintain, improve, and secure the Site, and to comply with legal and tax obligations.

4. Selling and Sharing of Personal Information; Your Opt-Out Rights

We do not sell personal information for money.

However, our use of advertising technologies such as the Meta (Facebook) Pixel and similar tools may constitute “sharing” or a “sale” of personal information under certain state privacy laws (including California's CCPA/CPRA), because these tools allow third-party advertising partners to use information about your activity on our Site for cross-context behavioral advertising, even though we receive no monetary payment.

You have the right to opt out of this sharing at any time:

Cookie preference tool: Use the “Your Privacy Choices” link in the footer of our Site to opt out of sharing/selling and to manage cookie categories.
Global Privacy Control (GPC): If your browser or a browser extension sends a GPC opt-out signal, we will treat it as a valid request to opt out of sale/sharing for that browser and device.
Direct request: Email us at privacy@backdropsource.com with the subject line “Do Not Sell or Share My Personal Information.”

We do not knowingly sell or share the personal information of consumers we know are under 16 years of age.

5. Disclosure of Personal Information to Third Parties

We disclose personal information to the following categories of recipients, each acting under contractual confidentiality and data-protection obligations:

Payment processors, to complete transactions.
Shipping and fulfillment carriers, to deliver orders.
Fraud-prevention providers (e.g., Signifyd), to screen for fraudulent transactions.
Analytics and advertising providers (e.g., Google Analytics, Meta Pixel), for site analytics and remarketing, as described in Section 4.
Customer support and email/SMS platforms, to communicate with you.
Professional advisors, regulators, and law enforcement, where required by law or to protect our rights.
A successor entity, in the event of a merger, acquisition, or sale of assets.

We do not disclose personal information to third parties for their own independent marketing purposes without your consent.

6. Cookies and Tracking Technologies

We and our service providers use cookies, pixels, and similar technologies to operate the Site, remember preferences, analyze traffic, and deliver advertising. You can control cookies through your browser settings, our on-site cookie preference tool, or by enabling a Global Privacy Control signal. Disabling certain cookies may affect Site functionality.

We do not currently respond differently to browser “Do Not Track” signals beyond our treatment of Global Privacy Control, as described above.

7. Data Retention

We retain personal information only as long as reasonably necessary for the purposes described in this Policy, generally as follows:

Order and transaction records: retained for the period required by applicable tax and accounting laws (generally up to 7 years).
Account information: retained while your account remains active, and for a reasonable period thereafter in case you wish to reactivate it.
Marketing communication preferences: retained until you unsubscribe or opt out, plus a reasonable suppression period.
Fraud-screening and security logs: retained as needed to detect and prevent fraudulent activity, consistent with our vendor's retention practices.

When personal information is no longer needed, we securely delete or de-identify it.

8. Your Privacy Rights

Depending on your state of residence, you may have some or all of the following rights under applicable state privacy laws (including California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and other states with comprehensive privacy laws):

Right	What it means
Right to Know / Access	Request the categories and specific pieces of personal information we have collected about you, and the categories of sources, purposes, and third parties involved.
Right to Delete	Request deletion of personal information we have collected from you, subject to certain legal exceptions (e.g., completing a transaction, security, legal compliance).
Right to Correct	Request that we correct inaccurate personal information we maintain about you.
Right to Opt Out of Sale/Sharing	Direct us not to “sell” or “share” your personal information, including for cross-context behavioral advertising. See “Your Opt-Out Rights” below.
Right to Limit Sensitive PI	Direct us to limit the use of sensitive personal information to purposes necessary to provide the goods or services you requested.
Right to Appeal	If we decline a request, you may appeal that decision using the contact information below.
Right to Non-Discrimination	We will not deny goods or services, charge different prices, or provide a different level of quality because you exercised a privacy right.

To exercise these rights, email us at privacy@backdropsource.com or call +1 (650) 614-1888. We will verify your identity before responding, generally by matching the information you provide to information in our records, and will respond within the time required by applicable law (typically 45 days, extendable once by an additional 45 days). You may designate an authorized agent to submit a request on your behalf, subject to verification.

9. State-Specific Disclosures

California

In the preceding 12 months, we have disclosed the categories of personal information listed in Section 2 to service providers as described in Section 5, and have shared (but not sold for monetary consideration) identifiers and internet activity information with advertising partners as described in Section 4. California residents may also request information about disclosures of personal information to third parties for their own direct marketing purposes (“Shine the Light”); we do not currently make such disclosures.

Nevada

Nevada residents may submit a request directing us not to sell covered information, as defined under Nevada law. We do not currently sell covered information as defined by Nevada law, but you may still submit a request to privacy@backdropsource.com.

Other States

Residents of Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island, and other states with applicable comprehensive privacy laws may exercise the rights described in Section 8 to the extent granted by their state's law.

10. Data Security

We use commercially reasonable administrative, technical, and physical safeguards to protect personal information, including SSL/TLS encryption in transit and restricted access to systems containing personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Children's Privacy

Our Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13 in a manner inconsistent with the Children's Online Privacy Protection Act (COPPA). As a matter of company policy, our products and services are intended for use by individuals 18 years of age or older. If we learn that we have collected personal information from a child under 13 without verifiable parental consent, we will delete that information promptly. Parents or guardians who believe we may have collected such information should contact us at privacy@backdropsource.com.

12. International Data Transfers

Backdropsource is based in the United States, and the personal information we collect is primarily processed in the United States. If we or our service providers process data in other countries, we take reasonable steps to ensure it receives a comparable level of protection as described in this Policy.

13. Third-Party Links

Our Site may contain links to third-party websites. This Policy does not apply to those sites, and we encourage you to review their privacy policies before providing any personal information.

14. Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices or applicable law. We will post the revised Policy on this page with an updated “Last updated” date, and, where required by law, provide additional notice of material changes.