Privacy Policy
Last updated: May 18, 2026.
The Calm Method ("we," "us," "our") operates thecalmmethod.shop (the "Services"). This Privacy Policy explains what personal information we collect, how we use it, who we share it with, your rights depending on where you live, and how to exercise them.
If you reside in California, Colorado, Connecticut, Texas, Virginia, Utah, Oregon, Delaware, Montana, Iowa, Indiana, Tennessee, New Jersey, New Hampshire, Minnesota, Maryland, Rhode Island, or any other US state with a consumer privacy law in effect, you have specific rights described in Sections 6 and 7.
1. What we collect
| Category | Examples | Source |
|---|---|---|
| Identifiers | Name, email, phone, shipping address, billing address, IP address, device ID | You; your device |
| Commercial information | Products viewed, added to cart, purchased; subscription status; returns history | You; Shopify |
| Payment information | Last 4 of card, billing zip, transaction confirmation. We never receive or store full card numbers; they go to our payment processor. | You via Shopify Checkout / iCount |
| Internet activity | Pages visited, time on page, referrer, click events, cart events | Cookies; pixels; analytics tags |
| Communications | Emails, support messages, review text, photos you submit | You |
| Inferences | Preferences and likely interests inferred from your behavior | Derived from the above |
We do not knowingly collect sensitive personal information such as Social Security numbers, government ID numbers, precise geolocation, racial or ethnic origin, religious beliefs, union membership, genetic data, biometric identifiers for unique identification, or health information. If you submit such information, we will delete it on request.
We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, contact us and we will delete it.
2. How we use it
- Fulfill orders. Process payments, ship products, handle returns, send order updates.
- Provide the Services. Customer support, account management, review submissions.
- Marketing. Send emails about products, training tips, and offers if you opted in. You can unsubscribe at any time via the link in every marketing email.
- Improve the Services. Analyze how visitors use the site to improve content, navigation, and product offerings.
- Advertising. Show you relevant ads on third-party platforms (e.g., Meta, Google). You can opt out via Section 6.
- Security and fraud prevention. Detect and prevent fraudulent transactions, abuse, and security incidents.
- Legal compliance. Comply with applicable laws, respond to lawful requests, and protect our rights.
3. Who we share it with
- Service providers. Shopify (hosting, checkout, payments-routing), iCount (payment processing), Resend (transactional and marketing email), Cloudflare (DNS, CDN, queue), Google (analytics), Meta (advertising), Klaviyo (email marketing, where used). Each handles your information under contract and uses it only to provide services to us.
- Advertising and analytics partners. When you visit the site with consent (or where consent is not required), we share device identifiers and behavior with Meta and Google for ad measurement and retargeting. See Section 6 for opt-out.
- Legal. Government, regulators, or other parties when required by law, court order, or to protect our rights, your safety, or the safety of others.
- Business transfers. If we are acquired, merge, or sell assets, your information may transfer to the successor under this policy or its equivalent.
We do not sell your personal information for money. Under California law and similar laws, however, some of our sharing for cross-context behavioral advertising (e.g., Meta retargeting) may be considered a "sale" or "share." You can opt out of this at any time via the methods in Section 6.
4. Cookies and similar technologies
We use cookies, pixels, and similar technologies to make the site work, remember your preferences, measure performance, and (with your consent where required) deliver advertising. You can manage your preferences at any time via our Your Privacy Choices page or by clicking "Cookie Settings" in the footer.
We honor the Global Privacy Control (GPC) signal as a valid opt-out request for the device and browser sending it. To learn more, visit globalprivacycontrol.org.
| Category | Purpose | Examples | Retention |
|---|---|---|---|
| Strictly necessary | Cart, checkout, login, fraud prevention | Shopify session cookies | Session to 2 years |
| Functional | Remember your settings (e.g., consent choices) | cm_consent | 12 months |
| Analytics | Understand site usage | Google Analytics, Shopify Analytics | Up to 24 months |
| Advertising | Measure ad performance and show relevant ads | Meta Pixel, Google Ads | Up to 13 months |
5. Retention
| Information | Retention period |
|---|---|
| Order and customer account data | 7 years after last order (tax + warranty obligations) |
| Marketing email subscriber data | Until you unsubscribe + 30 days |
| Support correspondence | 3 years |
| Analytics and ad measurement data | As described in Section 4 |
| Reviews you submit | Until you ask us to remove them |
6. Your rights and choices
Depending on where you live, you may have some or all of the following rights:
| Right | Available in |
|---|---|
| Access the personal information we hold about you | CA, CO, CT, VA, UT, TX, OR, DE, MT, IA, IN, TN, NJ, NH, MN, MD, RI, EU/UK |
| Delete personal information we hold about you | Same as above |
| Correct inaccurate personal information | Same as above |
| Portability: receive a copy in a portable format | Same as above |
| Opt out of "sale"/"share" for targeted advertising | CA, CO, CT, VA, UT, TX, OR, DE, MT, IA, IN, TN, NJ, NH, MN, MD, RI |
| Limit use of sensitive personal information | CA (we do not knowingly collect sensitive PI) |
| Opt out of automated decision-making / profiling that produces legal or similarly significant effects | CO, CT, VA, OR, MN, DE, TX (we do not engage in such profiling) |
| Appeal a denied request | CO, CT, VA, TX, OR, DE, MT, IN, TN, NJ, MN, MD, RI |
| Non-discrimination for exercising any right | All US states with privacy laws |
To exercise any right: email hello@thecalmmethod.com with the subject line "Privacy Request" and include the right you want to exercise. We will verify your identity before processing the request and respond within the time the applicable law requires (typically 45 days, extendable by 45 more if reasonably necessary).
Authorized agents. You may designate an authorized agent to act on your behalf. We will require written proof of the authorization and may verify the request directly with you.
To opt out of targeted advertising / "sale" / "share": visit Your Privacy Choices, click "Cookie Settings" in the footer, or send a Global Privacy Control signal from your browser.
7. Notice of Financial Incentive (California subscribers)
We offer a 15% discount when you enroll in our pad subscription program. To participate, you provide your name, email, payment information, and shipping address.
- Material terms. The discount applies to recurring pad shipments at the cadence you select. You can cancel at any time from your account portal; cancellation applies to the next billing cycle.
- How we value the data. The discount reflects the operational efficiency of recurring shipments and the lifetime value of a subscriber relationship. We estimate the value of the personal information you provide to us as approximately equal to the discount you receive.
- How to opt out. Cancel the subscription from your account portal or email us. Opting out does not affect any other rights you have under this policy.
8. Security
We use Shopify-managed encryption in transit and at rest, restrict access to personal information to employees and contractors who need it, and require service providers to maintain reasonable security. No system is perfectly secure; we cannot guarantee absolute security.
9. International transfers
We are based in the United States. If you access the site from outside the US, your information will be transferred to and processed in the US, which may have different data protection laws than your jurisdiction.
10. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will post the updated policy here, update the "Last updated" date, and where required by law notify you by email or other appropriate means.
11. Contact
The Calm Method
Email: hello@thecalmmethod.com
For privacy requests: subject line "Privacy Request" to the address above.