Privacy Policy

1. Introduction

The Tonneau Cover (“we,” “our,” or “us”) operates from Austin, Texas, United States. This Privacy Policy explains how we collect, use, disclose, and protect information from visitors to our website at https://thetonneaucover.com (the “Site”).

By using the Site, you consent to the practices described in this Privacy Policy. If you do not agree with any part of this policy, please do not use the Site.

2. Information We Collect

2.1 Information You Provide Directly

We may collect personal information that you voluntarily provide when you:

Submit our contact form (name, email address, message content)
Subscribe to our newsletter (email address)
Communicate with us via email or other channels

2.2 Information Collected Automatically

When you visit the Site, we and our third-party service providers may automatically collect certain information, including:

Device information: Browser type, operating system, device type, screen resolution
Usage information: IP address (approximate location derived from IP), pages visited, time spent on pages, referring URLs, clickstream data
Cookies and tracking technologies: We use cookies, web beacons, and similar technologies to collect information about your browsing behavior (see Section 4 for details)

2.3 Information From Third Parties

We may receive information from third-party platforms:

Amazon Associates: If you click an affiliate link and make a purchase, Amazon may share information necessary to attribute the commission (e.g., order confirmation, but not personally identifiable details about your purchase)
Analytics providers: Google Analytics provides aggregated traffic data
Search engines: Referral data when you arrive from search results

3. How We Use Your Information

We use the information we collect for the following purposes:

Operate and maintain the Site: Ensure functionality, troubleshoot technical issues, improve site performance
Respond to inquiries: Answer questions submitted via our contact form or email
Send newsletters: If you subscribe, we send periodic emails about new reviews, buying guides, and tonneau cover recommendations (you can unsubscribe anytime)
Analyze traffic and improve content: Understand which pages are popular, how visitors navigate the Site, and what content resonates with readers
Attribute affiliate commissions: Track when a reader clicks an Amazon affiliate link so we can earn a commission if they make a purchase (this tracking is governed by Amazon’s privacy practices)
Legal compliance and fraud prevention: Comply with applicable laws, respond to legal requests, protect our rights, detect and prevent fraud or abuse

4. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience and collect usage data. Cookies are small text files stored on your device.

4.1 Types of Cookies We Use

Essential cookies: Required for the Site to function properly (e.g., session management)
Analytics cookies: Google Analytics cookies track visitor behavior, page views, and traffic sources to help us improve the Site
Affiliate cookies: Amazon Associates cookies track clicks on affiliate links for commission attribution (typically expire within 24 hours)
Advertising cookies: May be used by third-party ad networks if we display ads in the future

4.2 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. Note that disabling cookies may affect Site functionality (e.g., you may not be able to submit the contact form).

For more information about managing cookies, visit www.allaboutcookies.org.

5. How We Share Your Information

We do NOT sell your personal information to third parties. We may share your information in the following limited circumstances:

5.1 Service Providers

We share information with trusted third-party service providers who help us operate the Site, under strict confidentiality obligations:

Hosting providers: Store and serve website files
Email service providers: Send newsletters and respond to contact form submissions
Analytics providers: Google Analytics processes usage data to generate reports

5.2 Affiliate Partners

When you click an Amazon affiliate link and make a purchase, Amazon collects information about that transaction for commission tracking. This is governed by Amazon’s privacy policy, not ours. We do not receive your order details, payment information, or shipping address.

5.3 Legal Requirements

We may disclose information if required by law, court order, subpoena, government request, or to protect our rights, property, or safety (or that of our users or the public).

5.4 Business Transfers

If we are involved in a merger, acquisition, asset sale, or bankruptcy, your information may be transferred to the acquiring entity or successor.

6. Data Security

We implement reasonable technical and organizational measures to protect your information from unauthorized access, disclosure, alteration, or destruction, including:

SSL/TLS encryption: All data transmitted between your browser and the Site is encrypted
Secure hosting: Our hosting provider uses industry-standard security practices
Access controls: Only authorized personnel have access to personal information
Regular updates: We keep software and plugins up to date to address known vulnerabilities

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information.

7.1 All Users

Regardless of location, you have the right to:

Access: Request a copy of the personal information we hold about you
Correction: Request that we correct inaccurate or incomplete information
Deletion: Request that we delete your personal information (subject to legal obligations)
Opt-out of marketing: Unsubscribe from newsletters via the link in every email or by contacting us

7.2 European Union and United Kingdom (GDPR)

If you are located in the EU or UK, you have additional rights under the General Data Protection Regulation (GDPR):

Right of access: Obtain confirmation of whether we process your data and receive a copy
Right to rectification: Correct inaccurate personal data
Right to erasure (“right to be forgotten”): Request deletion of your data under certain circumstances
Right to restriction of processing: Limit how we use your data
Right to data portability: Receive your data in a structured, machine-readable format
Right to object: Object to processing based on legitimate interests or for direct marketing
Right to withdraw consent: If processing is based on consent, you may withdraw it at any time
Right to lodge a complaint: File a complaint with your local data protection authority

7.3 California (CCPA/CPRA)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

Right to know: Request disclosure of the categories and specific pieces of personal information we collect, use, disclose, and sell
Right to know about sharing/sale: We do NOT sell personal information
Right to opt out of sale: Not applicable (we don’t sell your data)
Right to delete: Request deletion of your personal information
Right to correct: Request correction of inaccurate information
Right to limit use of sensitive personal information: We do not collect or use sensitive personal information as defined by the CPRA
Right to non-discrimination: We will not discriminate against you for exercising your privacy rights

7.4 Other U.S. State Privacy Laws

If you are a resident of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), or other states with comprehensive privacy laws, you have similar rights:

Right to access: Confirm whether we process your data and obtain a copy
Right to correct: Request correction of inaccuracies
Right to delete: Request deletion of your personal data
Right to opt out of targeted advertising: We do not currently engage in targeted advertising, but you may opt out if we do in the future
Right to data portability: Receive your data in a portable format (where applicable)

7.5 How to Exercise Your Rights

To exercise any of these rights, email us at privacy@thetonneaucover.com with the subject line “Privacy Rights Request.” Please include:

Your full name
The email address you used on the Site (if applicable)
A description of your request (e.g., “I would like to delete my personal information”)
Proof of identity (we may ask for verification to protect your privacy)

We will respond to verified requests within 30-45 days as required by applicable law.

8. Children’s Privacy (COPPA Compliance)

The Tonneau Cover is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13.

If we learn that we have inadvertently collected personal information from a child under 13, we will delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us at privacy@thetonneaucover.com.

9. Third-Party Links

The Site contains links to third-party websites, primarily Amazon product pages. We are not responsible for the privacy practices or content of these external sites.

When you click an affiliate link and navigate to Amazon (or another retailer), you are subject to that company’s privacy policy. We encourage you to review the privacy policies of any third-party sites you visit.

10. Data Retention

We retain personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention Periods:

Contact form submissions: Up to 12 months (to respond to inquiries and maintain records)
Newsletter subscriptions: Until you unsubscribe or request deletion
Analytics data: Google Analytics retains data according to its default settings (typically 26 months, but we may configure shorter periods)
Affiliate tracking cookies: Amazon Associates cookies expire within 24 hours

If you request deletion of your personal information, we will delete it within 30-45 days, except where retention is required by law (e.g., tax records, legal disputes).

11. International Data Transfers

The Tonneau Cover is based in the United States. If you are located outside the U.S., your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country.

For users in the European Union or United Kingdom, we rely on standard contractual clauses (SCCs) approved by the European Commission to ensure adequate protection when transferring data to the U.S.

By using the Site, you consent to the transfer of your information to the United States and other countries where we or our service providers operate.

12. Email Communications

12.1 Newsletter

If you subscribe to our newsletter, we will send periodic emails about new tonneau cover reviews, buying guides, comparisons, and recommendations. You can unsubscribe at any time by clicking the “Unsubscribe” link at the bottom of every newsletter email.

12.2 Transactional Emails

We may send transactional emails in response to your actions (e.g., confirmation after you submit the contact form). These emails are necessary to provide the service you requested and cannot be opted out of.

12.3 No Third-Party Marketing

We do NOT share your email address with third parties for their marketing purposes.

13. Do Not Track Signals

Some browsers have a “Do Not Track” (DNT) feature that signals websites not to track users. The Site does not currently respond to DNT signals because there is no universally accepted standard for how to interpret them.

You can manage tracking through your browser settings and by opting out of third-party analytics services (e.g., Google Analytics opt-out browser add-on).

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the Site’s functionality. Material changes will be indicated by updating the “Last Updated” date at the top of this page.

If we make significant changes that materially affect how we use your personal information, we will notify you via email (if you have provided one) or by posting a prominent notice on the Site.

Your continued use of the Site after the effective date of the revised Privacy Policy constitutes your acceptance of the changes.