Privacy policy
Privacy Policy
Last Updated: May 2026
At T-Rex Cookie, accessible from https://trexcookie.com, one of our main priorities is the privacy of our visitors. This Privacy Policy document contains types of information that is collected and recorded by T-Rex Cookie and how we use it.
If you have additional questions or require more information about our Privacy Policy, do not hesitate to contact us.
This Privacy Policy applies to information collected by T-Rex Cookie through all channels, including our website (https://trexcookie.com), in-store point-of-sale (POS) sign-ups, pop-up events, and any other location where we request your personal information. This includes our loyalty program and email/SMS marketing list sign-ups collected in person.
Consent
By using our website, signing up for our loyalty program, or providing your personal information at any of our physical locations or pop-up events, you hereby consent to our Privacy Policy and agree to its terms.
Information We Collect
The personal information that you are asked to provide, and the reasons why you are asked to provide it, will be made clear to you at the point we ask you to provide your personal information — whether online, at a physical store location, or at a pop-up event.
If you contact us directly, we may receive additional information about you such as your name, email address, phone number, the contents of the message and/or attachments you may send us, and any other information you may choose to provide.
When you register for an Account, we may ask for your contact information, including items such as name, company name, address, email address, and telephone number.
When you make a purchase or interact with our website, we may also collect:
• Purchase history and order details
• Browsing and click behavior on our website (pages visited, products viewed)
• Device and browser information
• IP address and approximate location data
• Email engagement data (opens, clicks) when you interact with our marketing emails
Loyalty Program and In-Person Sign-Ups
T-Rex Cookie collects personal information in person at our retail locations and pop-up events, including through our loyalty program and marketing list sign-up forms at the point of sale. When you sign up in person, we may collect:
• Name
• Email address
• Phone number (where SMS marketing consent is provided)
• Birthday or anniversary (for loyalty reward purposes)
• Purchase history associated with your loyalty account
Information collected in person is subject to the same privacy protections described in this policy and may be entered into our systems, including Klaviyo, for the purpose of managing your loyalty account and sending marketing communications you have consented to receive.
At the time of sign-up, we will clearly communicate what data we are collecting and how it will be used. You are not required to join our loyalty program or marketing list, and you may opt out of communications at any time as described in the Opt-Out and Unsubscribe Rights section below.
How We Use Your Information
We use the information we collect in various ways, including to:
• Provide, operate, and maintain our website
• Improve, personalize, and expand our website
• Understand and analyze how you use our website
• Develop new products, services, features, and functionality
• Communicate with you, either directly or through one of our partners, including for customer service, to provide you with updates and other information relating to the website, and for marketing and promotional purposes
• Send you marketing emails and, where you have provided consent, SMS messages
• Find and prevent fraud
Log Files
T-Rex Cookie follows a standard procedure of using log files. These files log visitors when they visit websites. All hosting companies do this and a part of hosting services' analytics. The information collected by log files include internet protocol (IP) addresses, browser type, Internet Service Provider (ISP), date and time stamp, referring/exit pages, and possibly the number of clicks. These are not linked to any information that is personally identifiable. The purpose of the information is for analyzing trends, administering the site, tracking users' movement on the website, and gathering demographic information.
IP addresses collected through log files may be used to derive approximate geographic location (such as city or region). This location data is used solely for analytics purposes — such as understanding where our visitors are located and optimizing website performance — and is not used for precise location tracking or shared with third parties for location-based advertising.
Cookies and Web Beacons
Like any other website, T-Rex Cookie uses 'cookies'. These cookies are used to store information including visitors' preferences, and the pages on the website that the visitor accessed or visited. The information is used to optimize the users' experience by customizing our web page content based on visitors' browser type and/or other information.
In addition to standard cookies, we use third-party tracking technologies for marketing purposes. This includes the Klaviyo tracking pixel and JavaScript snippet, which collects data such as pages visited, products viewed, email address (when provided), and purchase activity. This information is used to personalize marketing communications and measure campaign effectiveness.
T-Rex Cookie's website uses cookies to help keep track of items you put into your shopping cart, including when you have abandoned your cart. This information is used to determine when to send cart reminder messages by text message.
You can choose to disable cookies through your individual browser options. To know more detailed information about cookie management with specific web browsers, it can be found at the browsers' respective websites. Please note that disabling cookies may affect the functionality of certain marketing features.
Marketing Services — Klaviyo
We use Klaviyo, a third-party email and SMS marketing platform, to manage and deliver our marketing communications. In connection with this service, we may share the following categories of personal data with Klaviyo:
• Name and email address
• Phone number (where SMS marketing consent has been provided)
• Purchase history and order details
• Website browsing behavior and engagement events (e.g., page views, product clicks, cart activity)
• Email engagement data (e.g., opens and clicks)
This data is used for purposes including sending marketing emails and SMS messages, customer segmentation, behavioral targeting, and marketing automation.
Klaviyo acts as a data processor on our behalf and is contractually obligated to protect your data. Klaviyo may retain marketing data in accordance with their own data retention policies. To learn more about how Klaviyo handles your data, please review their Privacy Policy at https://www.klaviyo.com/legal/privacy-notice.
Text messaging opt-in data and consent information will not be shared with any third parties, including for advertising or data sale purposes.
If you wish to have your data removed from Klaviyo's systems, please contact us directly and we will coordinate the deletion request with Klaviyo on your behalf.
Opt-Out and Unsubscribe Rights
You have the right to opt out of marketing communications from T-Rex Cookie at any time.
• Email: You may unsubscribe from marketing emails by clicking the 'Unsubscribe' link included in the footer of every marketing email we send. Unsubscribe requests are processed in accordance with CAN-SPAM Act requirements, typically within 10 business days.
• SMS: If you have provided consent to receive SMS marketing messages, you may opt out at any time by replying STOP to any message you receive from us. This is consistent with TCPA requirements. Standard message and data rates may apply.
• Direct Request: You may also contact us directly to opt out of any or all marketing communications.
Please note that opting out of marketing communications does not affect transactional or service-related messages (such as order confirmations or account notifications).
Data Retention
We retain your personal data only as long as necessary to fulfill the purposes described in this Privacy Policy, or as required by applicable law. Marketing data shared with Klaviyo may be retained by Klaviyo in accordance with their data retention policies, available at https://www.klaviyo.com/legal/privacy-notice.
If you request deletion of your personal data, we will take steps to remove it from our own systems and will submit a corresponding deletion request to Klaviyo and any other applicable third-party processors.
Our Advertising Partners
Some of advertisers on our site may use cookies and web beacons. Our advertising partners are listed below. Each of our advertising partners has their own Privacy Policy for their policies on user data. For easier access, we hyperlinked to their Privacy Policies below.
• Google – https://policies.google.com/technologies/ads
• Klaviyo – https://www.klaviyo.com/legal/privacy-notice
Third Party Privacy Policies
T-Rex Cookie's Privacy Policy does not apply to other advertisers or websites. Thus, we are advising you to consult the respective Privacy Policies of these third-party ad servers for more detailed information. It may include their practices and instructions about how to opt-out of certain options.
The above excludes text messaging originator opt-in data and consent; this information will not be shared with any third parties.
CCPA Privacy Rights (Do Not Sell My Personal Information)
Under the CCPA, among other rights, California consumers have the right to:
• Request that a business that collects a consumer's personal data disclose the categories and specific pieces of personal data that a business has collected about consumers.
• Request that a business delete any personal data about the consumer that a business has collected.
• Request that a business that sells a consumer's personal data, not sell the consumer's personal data.
Please note that deletion requests under the CCPA will extend to data held by our third-party processors, including Klaviyo, to the extent required by law.
If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us.
GDPR Data Protection Rights
We would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:
• The right to access – You have the right to request copies of your personal data. We may charge you a small fee for this service.
• The right to rectification – You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete the information you believe is incomplete.
• The right to erasure – You have the right to request that we erase your personal data, under certain conditions. This right extends to personal data processed on our behalf by third-party processors, including Klaviyo.
• The right to restrict processing – You have the right to request that we restrict the processing of your personal data, under certain conditions.
• The right to object to processing – You have the right to object to our processing of your personal data, under certain conditions. This includes the right to object to processing for direct marketing purposes.
• The right to data portability – You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us.
Children's Information
Another part of our priority is adding protection for children while using the internet. We encourage parents and guardians to observe, participate in, and/or monitor and guide their online activity.
T-Rex Cookie does not knowingly collect any Personal Identifiable Information from children under the age of 13. If you think that your child provided this kind of information on our website, we strongly encourage you to contact us immediately and we will do our best efforts to promptly remove such information from our records.