Privacy Policy

Welcome to TruthInBottle ("we," "our," or "us"). Your privacy is critically important to us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website truthinbottle.com.

1. Information We Collect

1.1 Personal Information

We may collect personal information that you voluntarily provide when you:

• Subscribe to our newsletter (name, email address)
• Contact us through forms (name, email, message content)
• Request access to your data under privacy laws

1.2 Automatically Collected Information

When you visit our website, we automatically collect:

• Device Information: Browser type, device type, operating system
• Log Data: IP address, pages visited, time spent on pages, referring URLs
• Cookies and Tracking Technologies: See Section 3 for details

2. How We Use Your Information

We use collected information for the following purposes:

• Website Operation: Improve user experience, analyze traffic, prevent fraud
• Communication: Respond to inquiries, send newsletters (with consent)
• Analytics: Understand how visitors interact with our content
• Advertising: Serve relevant ads through third-party platforms (with consent where required)
• Legal Compliance: Comply with legal obligations and enforce our terms

2.1 Legal Basis for Processing (GDPR Article 6)

For users in the European Economic Area (EEA), we process personal data based on:

• Consent: For cookies, marketing, and newsletter subscriptions
• Legitimate Interest: For website analytics, security, and fraud prevention
• Contract: For responding to your inquiries
• Legal Obligation: For tax, accounting, and regulatory compliance

3. Cookies and Tracking Technologies

3.1 What Are Cookies?

Cookies are small text files stored on your device to enhance your browsing experience and enable website functionality.

3.2 Types of Cookies We Use

3.3 Third-Party Tracking Pixels

We use the following third-party tracking technologies:

• Google Tag Manager & Google Analytics 4: Website analytics and conversion tracking
• Google Ads Conversion Tracking: Measure ad campaign performance
• Meta Pixel (Facebook/Instagram): Track conversions from Meta ads
• TikTok Pixel: Track conversions from TikTok ads
• Taboola/Outbrain/MGID Pixels: Track native ad performance
• Microsoft Advertising (Bing Ads): Track conversions from Microsoft ads

3.4 Managing Cookies

You can control cookies through your browser settings:

• Chrome: Settings > Privacy and Security > Cookies
• Firefox: Options > Privacy & Security > Cookies
• Safari: Preferences > Privacy > Cookies
• Edge: Settings > Cookies and Site Permissions

4. Third-Party Services and Data Sharing

4.1 Service Providers

We share data with the following categories of service providers:

• Analytics Providers: Google Analytics
• Advertising Platforms: Google Ads, Meta (Facebook/Instagram), TikTok, Taboola, Outbrain, MGID, Microsoft Advertising
• Affiliate Networks: ClickBank, Digistore24, and other affiliate partners
• Hosting Providers: Website hosting and CDN services
• Email Marketing: Newsletter delivery services (if applicable)

4.2 Affiliate Disclosure

TruthInBottle participates in affiliate marketing programs. This means that some links on our website are affiliate links. If you click an affiliate link and make a purchase, we may receive a commission at no additional cost to you.

4.3 We DO NOT Sell Your Data

We do not sell, trade, or rent your personal information to third parties for their marketing purposes.

5. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including the United States. These countries may have different data protection laws.

For transfers from the EEA to countries not deemed adequate by the European Commission, we implement appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission.

6. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes outlined in this policy:

• Newsletter Subscribers: Until you unsubscribe
• Contact Form Submissions: 24 months after last communication
• Analytics Data: 26 months (Google Analytics default)
• Cookie Data: According to cookie duration (see Section 3.2)
• Legal/Tax Records: As required by law (typically 7 years)

7. Your Privacy Rights

7.1 GDPR Rights (European Economic Area)

If you are in the EEA, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure ("Right to be Forgotten"): Request deletion of your data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time (does not affect prior processing)

7.2 CCPA/CPRA Rights (California Residents)

If you are a California resident, you have the right to:

• Know: What personal information we collect and how it is used
• Delete: Request deletion of your personal information
• Opt-Out: Opt-out of the "sale" of personal information (we do not sell data)
• Non-Discrimination: Not be discriminated against for exercising your rights

7.3 LGPD Rights (Brazil)

If you are in Brazil, you have the right to:

• Confirm the existence of data processing
• Access your personal data
• Correct incomplete, inaccurate, or outdated data
• Request anonymization, blocking, or deletion of unnecessary data
• Request data portability
• Revoke consent

7.4 PIPEDA Rights (Canada)

If you are in Canada, under PIPEDA and CASL, you have the right to:

• Access the personal information we hold about you
• Challenge the accuracy and completeness of your information
• Withdraw consent for data collection at any time
• Manage cookie preferences and opt-out of non-essential tracking
• File a complaint with the Office of the Privacy Commissioner of Canada

We respond to all valid access requests within 30 days as required by law.

7.5 How to Exercise Your Rights

To exercise any of these rights, contact us at:

8. Advertising Opt-Out

You can opt-out of interest-based advertising from participating companies through:

• Digital Advertising Alliance (DAA): www.aboutads.info/choices/
• Network Advertising Initiative (NAI): www.networkadvertising.org/choices/
• European Interactive Digital Advertising Alliance (EDAA): www.youronlinechoices.eu/
• Google Ads Settings: adssettings.google.com
• Meta Ad Preferences: Facebook Settings > Ads

9. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction, including:

• SSL/TLS encryption for data in transit
• Secure hosting with firewall protection
• Regular security audits and updates
• Access controls limiting data access to authorized personnel

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

10. Children's Privacy

Our website is not directed to children under the age of 16 (or 13 in the US, 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately, and we will take steps to delete the information.

11. External Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices, policies, or content of those external websites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of material changes by posting the updated policy on this page with a new "Last Updated" date.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. Data Protection Officer (DPO)

For GDPR compliance, our designated Data Protection Officer can be contacted at:

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: