Privacy Policy

Last Updated: September 28, 2026

This Privacy Policy describes how TORRAS INC. ("TORRAS," "we," "us," or "our") collects, uses, discloses, retains, and otherwise processes personal information when you visit, access, or use the TORRAS Glass website, purchase TORRAS Glass products, create or use an account, communicate with us, subscribe to marketing communications, participate in promotions, or otherwise interact with our websites, products, services, and related features (collectively, the "Services").

The Services covered by this Privacy Policy are intended for consumers in the United States.

Our online store is powered by Shopify. We also use third-party service providers and technologies to support website functionality, payments, order fulfillment, customer service, analytics, security, advertising, marketing, and related business operations.

This Privacy Policy explains:

• what personal information we collect;
• where we obtain it;
• why we collect and use it;
• how and with whom we disclose it;
• how long we retain it;
• our use of cookies, pixels, and similar technologies;
• when personal information may be "sold" or "shared" under U.S. privacy laws; and
• the privacy rights and choices available to you.

For California residents, this Privacy Policy also serves as our disclosure under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA").

1. California Notice at Collection

This Section 1 serves as our Notice at Collection for purposes of the CCPA.

Depending on how you interact with the Services, we may collect the categories of personal information described below.

TORRAS does not sell personal information for monetary consideration. However, we use advertising and marketing technologies that may disclose certain information to advertising partners. These activities constitute "sharing" for cross-context behavioral advertising under the CCPA.

Personal Information We Collect

TORRAS does not intentionally collect precise geolocation, biometric information used for unique identification, health information, genetic information, racial or ethnic origin, religious beliefs, sexual orientation, or similar sensitive information through the TORRAS Glass products or Services.

TORRAS Glass products are not designed to collect health information, biometric information, precise geolocation or similar sensitive consumer information.

We do not use or disclose sensitive personal information for purposes of inferring characteristics about consumers.

You may opt out of the sale or sharing of applicable personal information through the "Your Privacy Choices" or "Do Not Sell or Share My Personal Information" link available on the Site.

For additional information, see Sections 9 and 13 below.

2. Personal Information We Collect

We collect personal information from several sources.

A. Information You Provide Directly to Us

We may collect personal information when you: purchase a product; create or manage an account; provide billing or shipping information; register a product; request warranty service; return or exchange a product; contact customer service; sign up for email or other marketing communications; participate in a promotion, survey, giveaway or similar activity; submit a product review or other content; or otherwise communicate with TORRAS.

This information may include your name, email address, telephone number, postal address, billing and shipping information, transaction details, account information, communications and other information you choose to provide.

B. Information Collected Automatically

When you visit or interact with the Services, we and certain service providers and advertising partners may automatically collect information using cookies, pixels, tags, local storage, software development kits and similar technologies.

This may include IP address; browser and device information; operating system; device or advertising identifiers; cookie identifiers; pages and products viewed; searches; clicks; referring and exit pages; shopping-cart activity; dates and times of visits; interactions with advertisements; conversion events; purchase-related events; and other information regarding how you interact with the Services.

C. Information We Receive from Other Sources

We may receive personal information from Shopify; payment processors; shipping and fulfillment providers; customer-service providers; analytics providers; advertising and marketing platforms; social-media services; fraud-prevention and security providers; and other service providers that support our Services.

3. How We Use Personal Information

Provide Products and Services: Process orders, accept payments, deliver products, maintain accounts, provide order updates, process returns and refunds and administer warranties.

Provide Customer Support: Respond to questions, complaints and other communications and provide technical or warranty assistance.

Operate and Improve the Services: Maintain website functionality, analyze use of our Services, identify errors, understand customer interactions, improve website performance and develop or improve products and services.

Personalize Your Experience: Remember preferences, personalize content, recommend products and provide functionality based on your interactions with the Services.

Advertising and Marketing: Provide marketing communications, measure advertising effectiveness, attribute conversions, perform remarketing and, subject to your privacy choices, provide advertising based on your activities across websites or services.

Security and Fraud Prevention: Authenticate users, detect suspicious activity, protect accounts and transactions, prevent fraud, investigate security incidents and protect our rights and systems.

Legal and Compliance Purposes: Comply with laws, regulations, court orders and lawful governmental requests; maintain required business records; enforce contracts and policies; and establish, exercise or defend legal claims.

Corporate Transactions: Support a merger, acquisition, financing, investment, restructuring, bankruptcy, sale of assets or similar business transaction.

We will not collect additional categories of personal information or use collected personal information for materially different purposes that are incompatible with the purposes disclosed at collection without providing additional notice where required by applicable law.

4. Shopify

Our online store is hosted and supported by Shopify.

Shopify processes personal information to provide e-commerce, checkout, account, security, fraud-prevention, analytics and related functionality.

Depending on the Shopify features enabled for our store, Shopify may process:

• contact information;
• account information;
• transaction information;
• shopping activity;
• IP address;
• browser and device information;
• cookie and device identifiers;
• privacy preferences; and
• information concerning your interactions with our store.

Shopify may also provide certain services that combine information concerning customer interactions with our store, Shopify or other merchants to provide enhanced functionality, personalization, analytics, fraud prevention or advertising. More information see https://www.shopify.com/legal

Where Shopify processing constitutes a sale, sharing or targeted advertising under applicable U.S. privacy law, you may exercise the applicable opt-out rights described in this Privacy Policy.

If you opt out through our applicable privacy controls or through a legally recognized opt-out preference signal, we will communicate or apply that choice to Shopify as required and technically supported.

5. Cookies, Pixels and Similar Technologies

We and our service providers and advertising partners use cookies, pixels, tags, local storage and similar technologies.

Based on the technologies currently implemented on the TORRAS Glass Site, providers may include: Shopify; Google; Meta / Facebook; TikTok; Microsoft; Klaviyo; Mixpanel; Adform; our consent-management provider; and similar service providers that we may use from time to time.

These technologies generally fall into the following categories.

Strictly Necessary Cookies

These technologies are necessary for core website functions, such as: checkout; shopping carts; authentication; fraud prevention; security; privacy preferences; and session management.

For example, Shopify uses technologies required to maintain shopping-cart, checkout, authentication, security and privacy-preference functionality.

Because these technologies are necessary to provide requested Services, they generally cannot be disabled through our cookie preference tool.

Functional Cookies

Functional technologies enable additional website functionality and personalization, such as remembering user settings or preferences; language or locale preferences.

Performance and Analytics Cookies

We use performance and analytics technologies to understand how visitors interact with our Site and improve website performance.

Providers may include: Shopify Analytics; Google Analytics; PostHog; Cloudflare; and similar analytics providers.

These technologies may collect browser identifiers, IP addresses, pages visited, referring pages, interactions and other usage information.

Targeting and Advertising Technologies

We use certain technologies for advertising, conversion measurement, attribution, remarketing and personalized advertising.

Providers may include: Google Ads; Meta / Facebook; TikTok; Microsoft Advertising; Adform; Shopify advertising or marketing services; and other advertising partners.

These technologies may collect or receive online identifiers, commercial information and information about your interactions with our Services.

For example, technologies may record that a browser viewed a product, placed a product in a shopping cart, visited the Site after interacting with an advertisement or completed a purchase.

When these technologies are used to target advertising based on activity across different businesses, websites, applications or services, such processing may constitute "sharing" for cross-context behavioral advertising under the CCPA.

6. Your Cookie Choices

You can manage non-essential cookies and similar technologies through the Cookie Settings or cookie preference tool available on our Site.

Depending on your selections, certain analytics, advertising or personalization technologies may be restricted.

Your browser may also allow you to block or delete cookies. Blocking cookies through your browser may affect website functionality.

Some cookies and similar tracking tools on our site are run by outside companies. We use third party services like Google Analytics and Meta Pixel. Using cookies, pixel tags and related tools, these services collect data about how you use our website. This gives us analytics and performance reports, helping us understand site usage, make improvements to our site and user experience, and show you ads that match your interests. In some instances, how these third parties process your data follows their own privacy policies for Google Analytics, please check Google’s Privacy & Terms. If you do not want Google Analytics to collect information about your visits to our websites, you can read Google’s data practices at http://www.google.com/policies/privacy/partners/. You can opt out by downloading Google Analytics’ official browser add on here: https://tools.google.com/dlpage/gaoptout/. Nearly all browsers automatically accept cookies, but you can change this. You can disable cookies altogether, or set your browser so you get a choice to accept or refuse cookies from individual websites. Check your browser’s “Help” section or visit https://www.allaboutcookies.org for step by step instructions for your browser. You may also opt out of cookie based ad-targeting and other related data uses. Just select the “Preferences” link on the cookie banner at the bottom of our website pages.

Your Cookie Settings and your CCPA sale/sharing opt-out are related but legally distinct choices.

If you wish to exercise your right to opt out of the sale or sharing of personal information, please use our Your Privacy Choices / Do Not Sell or Share My Personal Information mechanism or a recognized opt-out preference signal such as Global Privacy Control.

7. How We Disclose Personal Information

Shopify: We disclose information to Shopify to provide and operate our e-commerce Services, including checkout, account, security, analytics and related features.

Service Providers and Contractors: We may disclose information to companies that provide services on our behalf, including website and cloud hosting; payment processing; order processing; fulfillment and shipping; customer service; email and communications; analytics; IT services; cybersecurity; fraud prevention; warranty administration; and related business services. We require service providers and contractors to process personal information subject to applicable contractual and legal restrictions.

Payment Providers: Payment information may be processed through Shopify Payments, card processors, PayPal or other available payment providers. TORRAS generally does not retain complete payment-card information where that information is processed directly by a payment provider.

Shipping and Fulfillment Providers: We may disclose your name, shipping address, telephone number, email address and relevant order information as necessary to fulfill and deliver orders.

Advertising and Analytics Partners: We allow certain advertising, analytics and marketing providers to collect or receive information through pixels, cookies and similar technologies. These providers may include Google, Meta, TikTok, Microsoft, Adform and other advertising or analytics providers. Depending on the provider, configuration and purpose, these disclosures may constitute a sale or sharing under applicable privacy laws, even where TORRAS does not receive money in exchange for the information.

Marketing and Communications Providers: We may use providers such as Klaviyo to facilitate marketing communications, measure interactions with communications or support related marketing functions.

Analytics Providers: Providers such as Shopify Analytics, Google Analytics, Mixpanel and Microsoft Clarity may process information to help us understand website usage and improve our Services.

Affiliates: We may disclose information to TORRAS-affiliated companies where reasonably necessary for business operations, administration, customer support, security, legal compliance and other legitimate corporate purposes.

Professional Advisers: We may disclose information to attorneys, auditors, accountants, insurers and other professional advisers.

Business Transactions: Personal information may be disclosed or transferred in connection with a proposed or completed merger, acquisition, financing, restructuring, bankruptcy, sale of assets or other corporate transaction.

At Your Direction

We may disclose information where you request, direct or consent to the disclosure.

Legal and Safety Disclosures

We may disclose personal information when reasonably necessary to: comply with applicable law; respond to legal process; comply with lawful governmental or regulatory requests; detect or prevent fraud; investigate security incidents; protect the rights, property or safety of TORRAS or others; or establish, exercise or defend legal claims.

8. Payment Information

When you purchase a product, payment-related information may be processed by Shopify, Shopify Payments, PayPal, card networks, financial institutions or other payment providers.

Payment providers may process information according to their own privacy policies and legal obligations.

TORRAS does not use payment-card information for cross-context behavioral advertising.

Where payment-related information constitutes sensitive personal information, it is processed only as reasonably necessary to complete transactions, prevent fraud, maintain security, resolve disputes and comply with applicable law.

9. Sale, Sharing and Cross-Context Behavioral Advertising

TORRAS does not sell personal information to third parties in exchange for money.

However, the CCPA defines "sale" and "sharing" more broadly than their ordinary meanings.

We use third-party advertising technologies that may collect or receive:

• cookie identifiers;
• IP addresses;
• device identifiers;
• advertising identifiers;
• Internet or electronic network activity;
• commercial information; and
• inferences concerning interests or preferences.

Our advertising partners may use this information for purposes such as:

• advertising attribution;
• conversion measurement;
• campaign optimization;
• Re-marketing;
• personalized advertising; and
• cross-context behavioral advertising.

Accordingly, during the preceding 12 months, TORRAS has shared certain categories of personal information for cross-context behavioral advertising, including:

• identifiers and online identifiers;
• commercial information;
• Internet or electronic network activity;
• approximate geolocation where inferred from IP address; and
• inferences.

The categories of third parties to whom such information may be shared include advertising networks, advertising platforms, social-media platforms and advertising measurement providers, including providers such as Google, Meta, TikTok, Microsoft, Adform and applicable Shopify advertising services.

We do not sell or share sensitive personal information for cross-context behavioral advertising.

10. Your Privacy Choices - Do Not Sell or Share My Personal Information

California residents have the right to direct us not to sell or share their personal information.

You may exercise this right through the "Your Privacy Choices" or "Do Not Sell or Share My Personal Information" link available in the footer of our Site.

You are not required to create an account to exercise this right.

We will not require you to verify your identity where verification is not necessary to process the opt-out.

After receiving a valid opt-out request, we will stop applicable sale or sharing activities as required by law.

The opt-out does not prevent us from processing information for: necessary website functionality; completing transactions; security; fraud prevention; customer service; contextual advertising; permitted first-party analytics; or other activities that do not constitute sale or sharing under applicable law.

11. Global Privacy Control

We recognize and process legally valid opt-out preference signals, including the Global Privacy Control ("GPC"), as required by applicable law. If your browser or device transmits a valid GPC or other legally recognized opt-out preference signal, we will treat the signal as a request to opt out of applicable sale or sharing for the browser or device from which the signal is sent. Where required by law and where we can reasonably associate the signal with your customer account, we will apply the preference to the associated account as applicable. You do not need to create an account to use GPC. An opt-out preference signal does not prevent personal information from being collected or used for purposes that do not constitute a sale or sharing, such as providing requested Services, security, fraud prevention and necessary website functionality.

12. Do Not Track

Some browsers offer a legacy Do Not Track ("DNT") setting. Because there is no generally accepted industry standard for responding to traditional DNT signals, our Services do not currently respond differently to legacy DNT signals except where required by applicable law. This is different from Global Privacy Control. Where required by applicable law, TORRAS recognizes valid GPC or other qualifying opt-out preference signals for purposes of opting out of sale or sharing. Third-party analytics and advertising technologies may collect information concerning your online activities over time and across different websites or online services, subject to your privacy choices and applicable law.

13. California Privacy Disclosures for the Preceding 12 Months

The following summarizes our practices during the preceding 12 months.

The specific business purposes for disclosure to service providers and contractors include: processing transactions; providing and maintaining the Services; fulfillment and delivery; customer support; warranty administration; security; fraud prevention; analytics; communications; maintaining and improving website functionality; and complying with applicable law.

The commercial purposes for sharing applicable personal information include advertising, advertising attribution, campaign measurement, remarketing and cross-context behavioral advertising.

TORRAS does not have actual knowledge that it sells or shares the personal information of consumers under 16 years of age.

14. California Privacy Rights

Right to Know and Access

You may request information concerning: categories of personal information we collected; categories of sources; business or commercial purposes; categories of third parties to whom information was disclosed; categories of information sold or shared; and specific pieces of personal information we collected about you.

Right to Delete

You may request that we delete personal information collected from you, subject to applicable legal exceptions.

For example, we may retain information where reasonably necessary to: complete a transaction; provide a product or service; administer warranties; protect security; prevent fraud; comply with law; maintain required records; or establish, exercise or defend legal claims.

Right to Correct

You may request correction of inaccurate personal information we maintain about you.

Right to Data Portability

Where applicable, you may request personal information in a portable and, to the extent technically feasible, readily usable format.

Right to Opt Out of Sale or Sharing

You may direct us not to sell or share personal information. See Sections 10 and 11.

Right to Limit Use and Disclosure of Sensitive Personal Information

California law provides a right to limit certain uses and disclosures of sensitive personal information.

TORRAS currently uses sensitive personal information only for purposes reasonably necessary to provide requested Services, process transactions, authenticate users, maintain security, prevent fraud and perform other purposes permitted by the CCPA.

We do not use or disclose sensitive personal information for purposes of inferring characteristics about consumers.

Accordingly, we do not currently engage in uses of sensitive personal information that require a separate "Limit the Use of My Sensitive Personal Information" mechanism.

Right to Non-Discrimination and Non-Retaliation

We will not unlawfully discriminate or retaliate against you for exercising your privacy rights.

15. How to Exercise Your Privacy Rights

You may submit a request to know, access, delete or correct personal information through:

• Privacy Request Form: available through the Privacy section of our Site.
• Email: glass@torraslife.com

Please describe the privacy right you wish to exercise and provide sufficient information to allow us to identify relevant records.

For requests to know, delete or correct, we may take reasonable steps to verify your identity.

Verification may include matching information you provide against information we already maintain. The level of verification may vary depending on the nature and sensitivity of the requested information.

Information collected for verification will be used only for verification, security, fraud prevention and legal compliance purposes.

A request to opt out of sale or sharing does not require submission of a verifiable consumer request.

To opt out of sale or sharing, use Your Privacy Choices / Do Not Sell or Share My Personal Information or a valid opt-out preference signal such as GPC.

16. Authorized Agents

California residents may designate an authorized agent to exercise applicable CCPA rights on their behalf.

We may require the authorized agent to provide evidence that the consumer has authorized the agent to act for them.

Where permitted by law, we may also require the consumer to:

• verify their identity directly with us; or
• confirm that they authorized the agent.

These requirements do not apply where prohibited by law or where the authorized agent acts pursuant to a valid Glass of attorney satisfying applicable California law.

17. Children's Privacy

The Services are intended for a general adult audience and are not directed to children under 13. We do not knowingly collect personal information online from children under 13 in violation of the Children's Online Privacy Protection Act ("COPPA"). We do not have actual knowledge that we sell or share personal information of consumers under 16 years of age. If you are a parent or legal guardian and believe that a child has provided personal information to us in violation of applicable law, please contact glass@torraslife.com.

18. Other U.S. State Privacy Rights

Residents of certain U.S. states may have additional privacy rights under applicable state law.

Depending on your state and applicable law, these may include rights to:

• confirm whether we process your personal information;
• access personal information;
• correct inaccurate information;
• delete personal information;
• obtain a portable copy of personal information;
• opt out of certain sales;
• opt out of targeted advertising;
• opt out of certain profiling activities; and
• appeal a decision concerning a privacy request.

Where applicable law provides a right to appeal, you may submit an appeal by contacting glass@torraslife.com and including "Privacy Rights Appeal" in the subject line.

We will process applicable requests and appeals according to the laws of your state of residence.

19. California "Shine the Light"

California Civil Code Section 1798.83 permits certain California residents to request information concerning disclosures of personal information to third parties for those third parties' own direct marketing purposes.

TORRAS does not disclose personal information to unaffiliated third parties for their independent direct marketing purposes in the manner contemplated by California Civil Code Section 1798.83.

California residents may contact glass@torraslife.com with questions regarding this provision.

20. Data Retention

We retain personal information only for as long as reasonably necessary and proportionate to the purposes described in this Privacy Policy.

When determining an appropriate retention period, we consider: the category and nature of the information; why the information was collected; the duration of the customer relationship; whether the information is necessary to provide the Services; transaction and payment requirements; returns and warranty periods; tax and accounting requirements; fraud-prevention and security needs; applicable statutes of limitation; contractual requirements; litigation and regulatory obligations; and privacy and security risks associated with continued retention.

Cookies and similar technologies are retained according to their applicable duration. Current cookie-specific retention information is available through our Cookie Settings interface.

When personal information is no longer reasonably necessary, we will delete, destroy or deidentify it in accordance with applicable law and our retention procedures. Information stored in backups may remain until the applicable backup is overwritten or deleted in accordance with our backup and disaster-recovery procedures.

21. Third-Party Websites and Services

Our Services may contain links to third-party websites, applications, social-media services or other services. We do not control the privacy practices of independent third parties. Information you provide directly to a third party is subject to that third party's privacy policy and practices. We encourage you to review third-party privacy notices before providing personal information.

22. International Processing

Although the TORRAS Glass Services covered by this Privacy Policy are offered to customers in the United States, TORRAS and our service providers may process information in the United States and other countries in which we or our service providers operate. Privacy and data-protection laws in those jurisdictions may differ from the laws of your state. Where required by applicable law, we use appropriate contractual, organizational or other safeguards for such processing.

23. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in: our Services; technologies; service providers; advertising practices; information-processing practices; or applicable law.

When we update this Privacy Policy, we will revise the "Last Updated" date above. If we make material changes that require additional notice or consent under applicable law, we will provide such notice or obtain consent as required. We periodically review this Privacy Policy and will update it as required by applicable law.

24. Contact Us

If you have questions about this Privacy Policy, our privacy practices or your privacy rights, please contact:

TORRAS INC.
200 Spectrum Center Drive
Suite 300
Irvine, California 92618
United States
Privacy: glass@torraslife.com