Privacy policy

Privacy Policy (Texas, USA)

Last Updated: September 1, 2025

This Privacy Policy describes how Tullia Sage, LLC (“Tullia Sage,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you visit or make a purchase from www.tulliasage.com and tulliasage-com.myshopify.com (the “Site”) or shop at our boutique located at 162 W Main St, Lewisville, TX 75068 (the “Store”), contact us, or otherwise interact with us.

We operate on Shopify’s commerce platform. See Shopify’s Privacy Policy for details about how Shopify processes data: https://www.shopify.com/legal/privacy.

If you do not agree with this Privacy Policy, please do not use the Site or our services.

1) Who We Are & How to Contact Us

Controller: Tullia Sage, LLC (Texas, USA)
Store Address: 162 W Main St, Lewisville, TX 75068
Email: info@tulliasage.com
Phone: (469) 431-3143

2) Scope

This Policy covers personal information we collect online (the Site, email/SMS, social media, ads) and offline (in-store visits, events, workshops, customer support).

3) Personal Information We Collect

A. Device & Browsing Information (collected automatically)

  • Examples: browser type/version, IP address, time zone, cookie IDs, pages viewed, referring/exit pages, search terms, clickstream, interaction with emails/ads, and other analytics data.

  • Source: cookies, pixels, SDKs, web beacons, log files, and similar technologies.

  • Purpose: operate, secure, debug, and improve the Site; measure and optimize performance; detect/prevent fraud.

  • Disclosure: Shopify (hosting, analytics, payment/checkout), and (as applicable) analytics/ads partners and anti-fraud providers.

B. Order & Account Information

  • Examples: name, billing/shipping address, email, phone, items purchased, gift notes, payment method details (tokenized by processor), last 4 digits of card, transaction totals, tax, and delivery info.

  • Source: you (checkout, account registration, in-store POS), and Shopify.

  • Purpose: fulfill orders, process payments, provide invoices and updates, manage returns/exchanges, detect/prevent fraud, customer service, legal compliance (e.g., tax).

  • Disclosure: Shopify; payment processors (e.g., Shopify Payments/PayPal/Apple Pay/Shop Pay—depending on your selection); shipping/fulfillment providers; tax and compliance tools; anti-fraud providers.

C. Customer Support & Communications

  • Examples: messages, order issues, measurements/fit notes you share, event RSVPs, survey responses, photos you submit, and preferences.

  • Source: you (email, phone, forms, social DMs), event registrations.

  • Purpose: respond to requests, troubleshoot, improve services, personalize recommendations.

  • Disclosure: Shopify, help desk/email/SMS platforms, CRM tools.

D. Marketing & Events

  • Examples: email address, mobile number, consent status, engagement with emails/SMS/ads, event/workshop sign-ups.

  • Source: you (forms, checkout opt-in, in-store), cookies/pixels.

  • Purpose: send marketing (email/SMS), targeted advertising, run promotions/events, measure effectiveness, honor opt-outs.

  • Disclosure: email/SMS platforms, ad/measurement partners, Shopify marketing apps.

Sensitive Personal Data: We do not intentionally collect sensitive personal data (e.g., precise geolocation, health, biometric) for consumer profiling. If you choose to share sensitive data for a specific service, we will obtain consent or otherwise process it as permitted by law.

4) Cookies & Similar Technologies

We use cookies and similar technologies for site functionality, security, analytics, and advertising. You can manage cookies via your browser settings; blocking some cookies may impact site functionality.

Common Shopify cookies (non-exhaustive):

  • Functionality/checkout: _ab, _secure_session_id, cart, cart_sig, cart_ts, checkout_token, secure_customer_sig, storefront_digest, _shopify_u

  • Reporting/analytics: _tracking_consent, _landing_page, _orig_referrer, _s, _shopify_fs, _shopify_s, _shopify_sa_p, _shopify_sa_t, _shopify_y, _y

We may also use pixels or SDKs from advertising and social platforms (e.g., Meta, Google, Pinterest, TikTok) to measure performance and deliver relevant ads. See Behavioral Advertising below for opt-out options.

5) How We Use Personal Information

  • Provide, operate, and secure the Site and Store

  • Process and fulfill orders; handle shipping, returns, and customer service

  • Personalize content and product recommendations

  • Send transactional notices (order confirmations, shipping updates)

  • Send marketing emails/SMS with your consent (opt-out anytime)

  • Debugging, analytics, and service improvement

  • Detect, prevent, and investigate fraud or illegal activities

  • Comply with legal obligations (e.g., tax, accounting) and enforce our Terms

6) Sharing Personal Information

We share information with service providers under contracts that limit their use to performing services for us, including:

  • Shopify (store platform, hosting, checkout, analytics)

  • Payment processors (e.g., Shopify Payments, PayPal, Apple Pay, Shop Pay—depending on your choices)

  • Shipping/fulfillment (carriers, warehouse apps)

  • Marketing & communications (email/SMS platforms; ad networks and measurement tools)

  • IT/security/anti-fraud and customer support tools

  • Professional advisors (accounting, legal) and authorities (when required by law)

We may disclose information to comply with law, subpoenas, or lawful requests; to protect our rights, users, or the public; or in connection with a corporate transaction.

7) Behavioral Advertising & Analytics

We and our partners may use cookies and similar technologies to deliver ads based on your interests and to measure campaign performance.

Choices/Opt-Out:

If you use Google Analytics, you can opt-out via: https://tools.google.com/dlpage/gaoptout

We honor Global Privacy Control (GPC) signals where required and as a best practice for opt-out of sale/sharing/targeted advertising, when technically feasible.

8) Texas Consumer Rights (TDPSA)

If you are a Texas resident, you may have the following rights regarding your personal data (subject to legal exceptions):

  • Confirm whether we process your personal data and access it

  • Correct inaccuracies in your personal data

  • Delete personal data you provided or we obtained about you

  • Data portability (obtain a copy of your data in a portable format)

  • Opt-out of:

    • Targeted advertising

    • Sale of personal data (we do not “sell” personal data as commonly defined, but you may still opt-out of targeted ads or sharing with ad partners)

    • Profiling in furtherance of decisions that produce legal or similarly significant effects

How to Exercise Your Rights:
Email privacy@tulliasage.com (or info@tulliasage.com) with your request and “Texas Privacy Request” in the subject. We will verify your identity and respond within the time required by law.

Appeals:
If we deny your request, you may appeal by replying to our decision email or writing to privacy@tulliasage.com with “Appeal” in the subject. If your appeal is denied, you may contact the Texas Attorney General for more information.

9) Email & SMS Marketing (TCPA, CAN-SPAM, TX SB 140)

By providing your email or mobile number, you consent to receive marketing messages from us. Message and data rates may apply.

  • Opt-out of email: click “unsubscribe” in any email.

  • Opt-out of SMS: reply STOP to any text; for help, reply HELP.
    We honor all opt-outs as required by law, including Texas SB 140 rules applicable to marketing texts/calls effective September 1, 2025.

10) Children’s Privacy (COPPA)

Our Site and Store are not intended for children under 13. We do not knowingly collect personal information from children under 13. If you are a parent/guardian and believe a child has provided personal information, contact us at privacy@tulliasage.com to request deletion.

11) Data Retention

We retain personal information for as long as needed to fulfill the purposes described in this Policy, including to comply with legal, accounting, or reporting obligations, resolve disputes, and enforce agreements. You may request deletion as described above.

12) Security

We implement administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

13) International Transfers

We and our service providers (including Shopify) may process personal information in the United States, Canada, the EEA/UK, or other countries. Where required, Shopify’s transfer mechanisms (e.g., SCCs) apply. See Shopify’s privacy documentation for details.

14) Do Not Track

There is no consistent industry standard for responding to browser “Do Not Track” signals, so we do not alter our practices upon detecting DNT. We do honor GPC signals for applicable opt-outs where feasible (see Section 7).

15) Changes to This Policy

We may update this Policy from time to time to reflect operational, legal, or regulatory changes. The “Last Updated” date indicates the latest revision. Your continued use of the Site or services means you accept the updated Policy.

16) Complaints & Contact

Questions, requests, or complaints about this Policy or our privacy practices:
Email: privacy@tulliasage.com (or info@tulliasage.com)
Mail: Privacy Officer, Tullia Sage, LLC, 162 W Main St, Lewisville, TX 75068

If you believe your concern remains unresolved, you may contact the Texas Attorney General or your local authority. We encourage you to contact us first so we can address your concerns directly.

17) Additional Disclosures for Other Jurisdictions (If Applicable)

California (CCPA/CPRA)

If you are a California resident, you may have similar rights (know/access, correct, delete, portability, opt-out of sale/sharing, limit use of sensitive information). To exercise, email privacy@tulliasage.com with “California Privacy Request.”

EEA/UK (GDPR)

If you are in the EEA/UK, our lawful bases may include consent, contract performance, legal obligation, vital interests, public interest, and legitimate interests (balanced against your rights). You may have GDPR rights (access, rectification, erasure, restriction, portability, objection, and withdrawal of consent). Shopify’s GDPR page: https://help.shopify.com/en/manual/your-account/privacy/GDPR.

18) Supplemental: Cookie List & Vendors (Customize as Needed)

Analytics/Ads (examples—enable only what you actually use):

  • Google Analytics / Google Ads

  • Meta (Facebook/Instagram) Pixel

  • Pinterest / TikTok Ads

  • Klaviyo / Attentive / Postscript (email/SMS)

  • ReCAPTCHA (fraud/abuse prevention)

Payment & Fulfillment (examples):

  • Shopify Payments / Stripe / PayPal / Apple Pay / Shop Pay

  • ShipStation / carrier integrations (USPS/UPS/FedEx)

We will update this section as our vendor stack evolves.

19) Messaging Terms

By using our messaging services, you agree to our Messaging Terms and Messaging Privacy Policy (applicable to SMS and other messaging):