Privacy policy

Your privacy matters to us. We handle your data with the same straightforwardness we bring to everything else — no hidden agendas, no unnecessary complexity. If you ever have a concern about how we're using your information, contact us directly at hello@toughmother.com.

This Privacy Policy explains what personal information we collect, why we collect it, and what we do with it when you visit or shop at toughmother.com (the "Site").

What We Collect

Device Information

Every time someone visits the Site, we automatically receive certain technical data from their device: browser type, IP address, time zone, and cookies present on the device. We also gather data on which pages and products are viewed, how visitors arrived at the Site, and general browsing behavior. We refer to all of this as "Device Information."

We gather Device Information through:

  • Cookies — small data files stored on your device, typically containing an anonymous identifier. Visit allaboutcookies.org for more information or to learn how to disable them.

  • Log files — server-side records that capture IP addresses, browser types, internet service providers, entry and exit pages, and date/time data.

  • Pixels, tags, and web beacons — small electronic files embedded in pages that track browsing activity.

We use Google Analytics and Facebook Pixel to measure site traffic and purchase behavior. This data is stored internally and used only by us. We operate in compliance with GDPR and only process your data where we have your consent.

Order Information

When you place or attempt to place an order, we collect your name, billing address, shipping address, payment details (which may include credit card information, PayPal, Amazon Pay, or Google Pay), email address, and phone number. We refer to this as "Order Information."

"Personal Information" in this policy refers to both Device Information and Order Information together.

How We Use It

Order Information is used to process and fulfill your purchases — handling payment, coordinating shipping, and sending order confirmations and invoices. Beyond that, we use it to:

  • Stay in touch with you

  • Identify and screen for potential fraud or risk

  • Share relevant product information and offers, consistent with any preferences you've indicated

Device Information is used primarily to detect fraud and to understand how visitors interact with the Site — which helps us improve the experience and evaluate the effectiveness of our marketing.

For retargeting purposes, we use Google Analytics, Facebook Pixel, and AdWords, always subject to your consent and in line with GDPR requirements.

Who We Share It With

We work with a small number of third-party service providers who help us operate the Site, and we share Personal Information with them only to the extent necessary.

Our store runs on Shopify. You can review Shopify's privacy practices at shopify.com/legal/privacy. We use Google Analytics to understand site usage — Google's approach to data is outlined at google.com/intl/en/policies/privacy. You can opt out of Google Analytics tracking at tools.google.com/dlpage/gaoptout.

We may also disclose Personal Information when legally required to do so — for example, in response to a court order, subpoena, or other lawful request — or when necessary to defend our legal rights.

We may use your information to serve you relevant advertising. The Network Advertising Initiative has a helpful explanation of how targeted advertising works: networkadvertising.org.

To opt out of targeted advertising from specific platforms:

You can also use the Digital Advertising Alliance's opt-out tool at optout.aboutads.info.

Do Not Track

We do not modify our data collection or usage practices based on Do Not Track signals transmitted by your browser.

How Long We Keep Your Data

Order Information is retained indefinitely unless you request that we delete it. To make that request, contact us at hello@toughmother.com.

Updates to This Policy

We may revise this Privacy Policy periodically to reflect changes in our practices, our services, or applicable law. The current version will always be available on the Site.

Get in Touch

If you have questions about this policy, want to make a complaint, or would like to request deletion of your data, reach us at hello@toughmother.com or by mail:

Victory Garden LLC

Tough Mother

8401 Mayland Drive #6429

Richmond, VA 23294

Personal Information Sources

We obtain Personal Information about you from various sources. This includes information you provide directly to us (such as during checkout or newsletter signup), information collected automatically through your device while browsing the Site, and information from third-party partners who help us understand our visitors better.

Relationship with Shopify

As noted, our Site is hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our products to you. Your data is stored through Shopify’s data storage, databases, and the general Shopify application on a secure server behind a firewall.

Children's Data

The Site is not intended for individuals under the age of 18. We do not intentionally collect Personal Information from children. If you are a parent or guardian and believe your child has provided us with Personal Information, please contact us to request deletion.

Security and Retention

We take reasonable precautions and follow industry best practices to make sure your personal information is not inappropriately lost, misused, accessed, disclosed, altered or destroyed. We will maintain your Order Information for our records unless and until you ask us to delete this information.

Your Rights and Choices

Depending on where you live, you may have the right to access the personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise these rights, please reach out via the contact information provided above.

Complaints

If you are not satisfied with our response to your inquiry regarding your Personal Information, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

International Transfers

Please note that your information may be transferred outside of your country of residence, including to the United States and Canada, where data protection laws may differ from those in your jurisdiction.