Privacy Policy

This Privacy Policy describes how TORRAS INC ("we", "us", "our") collects, uses, and discloses your personal information when you visit or make a purchase from glass.torraslife.com (the "Site") or otherwise interact with our services (collectively, the "Services"). "You" means the visitor or user of the Services.

Please read this Privacy Policy carefully. By using the Site, you agree to the practices described herein. If you do not agree, please discontinue use of the Services.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will revise the "Last Updated" date at the top of this page and post the updated policy on the Site.

We encourage you to review this Privacy Policy periodically. Your continued use of the Services after any changes become effective constitutes your acceptance of the revised policy. If we make material changes that significantly affect how we handle your personal information, we will take reasonable steps to notify you, for example, by posting a prominent notice on the Site or sending you an email.

We collect personal information in several ways: directly from you when you interact with our Site, automatically as you browse, and from third-party sources such as advertising partners.

• Contact & identity information: Name, mailing address, phone number, and email address provided when you create an account, place an order, or contact us.
• Order information: Products purchased, order history, billing and shipping addresses, and transaction details.
• Account information: Username, password, and preferences if you create a customer account.
• Payment information: Payment card details are processed by our third-party payment processor. We only receive the last four digits of your card number, expiration date, and billing zip code. We do not store full card numbers.
• Shopping data: Items added to your cart, wishlist, and browsing preferences on our Site.
• Email subscriptions: Your email address and communication preferences if you sign up for our newsletter or marketing emails.
• Customer support information: Communications, inquiries, and any information you voluntarily provide when you contact our support team.

When you visit the Site, we and our service providers may automatically collect:

• Device & connection data: IP address, browser type and version, operating system, unique device identifiers (UUID), browser ID (BID), client ID (CID), and Facebook Pixel ID (FBP).
• Usage & interaction data: Pages visited, links clicked, search terms entered on the Site, referring URLs, time spent on pages, and other clickstream data.
• General location data: Approximate geographic location derived from your IP address (city/region level, not precise GPS location).
• Cookies and tracking technologies: We use cookies, pixel tags, web beacons, and similar technologies to collect information about your interactions with the Site. See Section 5 for details.

Where applicable law requires us to have a legal basis for processing your personal information, we rely on the following:

We use the personal information we collect for the following purposes:

• Processing and fulfilling your orders, including payments, shipping, and delivery.
• Managing your customer account and providing customer support.
• Communicating with you about your orders, returns, and account updates.
• Sending transactional emails (order confirmation, shipping notifications, receipts).

• Sending promotional emails, newsletters, and special offers, where you have opted in or where permitted by law.
• Delivering targeted and personalized advertisements on our Site and third-party platforms (including social media).
• Retargeting you with relevant product recommendations based on your browsing and purchase history.
• Measuring the effectiveness of our marketing campaigns.

• Detecting and preventing fraudulent transactions, unauthorized access, and other illegal activities.
• Verifying identities and authenticating users.
• Monitoring Site activity for security purposes.

• Analyzing usage patterns to improve Site functionality and user experience.
• Conducting research and internal reporting.
• Personalizing content and product recommendations based on your interests.
• Complying with applicable legal and regulatory obligations.

We use cookies and similar tracking technologies (pixels, web beacons, local storage) to enhance your experience and gather information about your use of the Site. Below is a summary of the types of cookies we use:

We do not sell your personal information to third parties for their own independent marketing purposes. However, we do share personal information in the following circumstances:

We share information with vendors and service providers who perform functions on our behalf and under our direction, including:

• IT & platform services: Shopify (e-commerce platform), cloud hosting and infrastructure providers.
• Payment processors: Stripe, PayPal, or other processors who handle payment card transactions securely.
• Shipping & fulfillment: Carriers and logistics partners (UPS, FedEx, USPS) who fulfill and deliver your orders.
• Analytics providers: Google Analytics and similar tools to help us understand Site usage.
• Customer support tools: Helpdesk and communication platforms used to manage support inquiries.

These providers are authorized to use your personal information only as necessary to provide their services to us.

We may share certain data, such as identifiers and browsing behavior, with advertising networks and marketing partners to deliver targeted advertisements and measure campaign performance. This may include:

• Shopify and its affiliated services.
• Meta (Facebook/Instagram) advertising platform.
• Google Ads and display networks.
• Other ad networks operating with your consent or under applicable legal frameworks.

• Business transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you via a prominent notice on our Site.
• Legal process: We may disclose information when required by law, court order, or government authority, or when we believe disclosure is necessary to protect our rights or the safety of others.
• Rights protection: We may share information to enforce our Terms of Service, protect against fraud or security threats, or defend legal claims.

• Social login: If you choose to log in or connect via a social media account (e.g., Google, Facebook), those platforms may receive information about your activity on our Site per their own privacy policies.
• Carriers you authorize: When you select a shipping carrier or provide delivery instructions, relevant order information is shared with that carrier.

Depending on your location, you may have certain rights regarding your personal information. We are committed to honoring these rights in a timely manner.

To submit a privacy rights request, please contact us at:

• Email: glass@torraslife.com

Please include your full name, email address associated with your account, your state of residence, and a description of your request. We will verify your identity before processing your request. We will respond within 45 days of receiving your request. If we need additional time, we will notify you of the extension and the reason.

You may designate an authorized agent to make a request on your behalf. If you use an authorized agent, we may require written authorization and may verify your identity directly before processing the request.

The Site and our Services are not directed to children under the age of 16. We do not knowingly collect personal information from children under 16 without verifiable parental consent.

If you are a parent or guardian and you believe your child under 16 has provided us with personal information without your consent, please contact us immediately at glass@torraslife.com. We will take prompt steps to remove such information from our records and, where applicable, terminate any account associated with it.

If we learn that we have collected personal information from a child under 16 without parental consent, we will delete that information as quickly as possible. If you believe that a child has provided us with personal information, please contact us as described in Section 12.

We implement industry-standard technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption: Data transmitted between your browser and our Site is encrypted using TLS/SSL. Stored sensitive data is encrypted at rest where appropriate.
• Access controls: Access to personal information is restricted to authorized personnel who need it to perform their job functions.
• Third-party security: Our e-commerce platform (Shopify) is PCI DSS compliant, ensuring payment data is handled securely.
• Monitoring: We regularly monitor our systems for possible vulnerabilities and attacks.

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. In the event of a data breach that affects your rights or freedoms, we will notify you as required by applicable law.

We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Factors we consider include:

• The nature and sensitivity of the data.
• The purposes for which we process the data and whether we can achieve those purposes through other means.
• Applicable legal, regulatory, tax, or accounting requirements (e.g., we may retain order records for up to 7 years for tax and legal compliance).
• The potential risk of harm from unauthorized use or disclosure.

When your personal information is no longer needed, we will either securely delete it or anonymize it so it can no longer be associated with you. If deletion is not immediately possible (for example, because data is stored in backup archives), we will isolate the data and protect it from further use until deletion is possible.

This section supplements this Privacy Policy and provides additional disclosures required by US state privacy laws for residents of California, Colorado, Connecticut, Montana, Oregon, Texas, Utah, and Virginia. If there is a conflict between this section and the main body of this Privacy Policy, this section controls for residents of those states.

We collect the above categories of personal information for the business purposes described in Sections 4 and 6 of this Privacy Policy, including fulfilling orders, providing customer support, securing the Site, improving our services, and delivering personalized marketing.

We may share identifiers and internet activity data (such as cookie IDs and browsing data) with advertising partners to deliver personalized advertisements. This sharing may constitute a "sale" or "sharing" of personal information under certain state laws, or may qualify as "targeted advertising." You have the right to opt out of this activity.

We do not sell personal information in the traditional sense (i.e., exchanging names, emails, or contact information for money). We do not knowingly sell or share personal information of consumers under 16 years of age.

Depending on the state where you reside, you may have some or all of the following rights:

The following accordion provides additional details for residents of specific states. Click on your state to expand.

This section applies to individuals in the European Economic Area (EEA) and Switzerland. It supplements this Privacy Policy with information required by the General Data Protection Regulation (GDPR) and applicable Swiss data protection law.

For the purposes of GDPR and Swiss data protection law, the data controller is:

We process personal data of EEA/Swiss residents on the following legal bases under Article 6 GDPR:

As TORRAS INC is based in the United States, your personal data will be transferred to and processed in the United States, which may not provide the same level of data protection as your home country.

We use appropriate safeguards for international transfers, including:

• EU Standard Contractual Clauses (SCCs): Where we transfer personal data from the EEA to the United States or other third countries, we rely on the European Commission's approved Standard Contractual Clauses as the primary transfer mechanism.
• UK Addendum: Where applicable, we use the UK International Data Transfer Addendum (IDTA) for transfers from the United Kingdom.
• Swiss Equivalents: For transfers from Switzerland, we rely on the Swiss Federal Council's approved standard data protection clauses.

To obtain a copy of the applicable transfer mechanism or additional information about our international data transfer practices, please contact us at glass@torraslife.com.

If you are located in the EEA or Switzerland, you have the following rights under GDPR:

If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please contact us:

We are committed to resolving privacy concerns promptly. For privacy rights requests, please see Section 7 for instructions on how to submit a verifiable request. We aim to respond to all general privacy inquiries within 2 business days, and to formal rights requests within 45 days.