Privacy Policy

Tikka Twist LLC is a Minnesota limited liability company based in Elk River, Minnesota. We make and sell spice blends, and we operate the website at tikkatwist.com. In this policy, "we", "us" and "our" mean Tikka Twist LLC.

This policy explains what personal information we collect through the website, why we collect it, who else handles it, and what you can ask us to do with it. It applies to the website and to orders placed through it. It does not apply to other companies' websites that we link to.

If anything here is unclear, email contact@tikkatwist.com.

Most of what we hold is information you typed in yourself in order to buy something. The rest is collected automatically when you use the site, and is listed in the same table so nothing is hidden in a different section.

We do not collect Social Security numbers, dates of birth, or any of the categories that state privacy laws treat as sensitive, and we have no reason to. We also never receive your full card number; see section 4.

We use the information above to:

• take, process and fulfil your order;
• send you an order confirmation and, for a market pickup, a reminder before the day;
• contact you if there is a problem with your order or a change to a market;
• let you sign in and see your own past orders;
• keep accurate business and tax records;
• understand which parts of the site people use, and where demand exists for delivery;
• protect the site from abuse, such as repeated sign-in code requests.

We do not use your information to build advertising profiles, and we do not run advertising on this site.

Card payments are processed by Helcim. When you pay, Helcim's secure payment window opens over our page and your card details are sent directly to Helcim. They do not pass through our systems and we do not store them.

What we receive back is the amount, whether the payment succeeded, and a transaction reference. Helcim handles your card information as a payment processor under its own privacy policy and under the card industry's security standards.

We set the following cookies ourselves:

• tt_session, set only once you sign in. It keeps you signed in and is what the account pages use to recognise you. It cannot be read by scripts and is only sent over an encrypted connection. It lasts 90 days or until you sign out.

Cookies are also set by services we use:

• Google Analytics sets cookies to count visits and distinguish repeat visitors. See section 6, including how to opt out.
• Helcim may set its own cookies inside the payment window when you pay, to run and secure that payment. That window is Helcim's, and what happens inside it is governed by their policy rather than this one.

We do not use advertising cookies or social network tracking pixels, and nothing we set follows you to other websites. You can block or delete cookies in your browser settings; if you block ours, the account pages will not be able to keep you signed in, but you can still browse and order as a guest.

We use Google Analytics to understand how the site is used. It records the pages you view, roughly where in the world you are, what kind of device you used, and how you arrived. We use this to decide which pages are worth improving.

One item is specific enough to name. If you try to order delivery to an address outside the areas we serve, we record the ZIP code you entered on its own. We use it to decide where to expand delivery next. It is recorded without your name, email address or anything else that identifies you.

You can prevent Google Analytics from collecting anything by installing Google's opt-out browser add-on. The site works normally either way. Google's handling of this data is covered by the Google Privacy Policy.

We do not sell or rent your personal information, and we do not share it with advertisers. We share it only with the service providers that make the website and the business run, and only to the extent each one needs:

• Amazon Web Services hosts the site, stores orders, and delivers our email. Your information is stored in the United States.
• Helcim processes card payments, as described in section 4.
• Google Analytics provides the website statistics described in section 6.
• Web3Forms delivers messages sent through our contact form. What you type into that form passes through their service on its way to our inbox.

We may also disclose information if we are required to by law, or to establish or defend a legal claim. If the business is ever sold or merged, order records may transfer with it; if that happens, this policy continues to apply to information collected before the transfer unless you are told otherwise.

Retention periods are listed for each item in section 2. In summary: incomplete orders delete themselves after 14 days, sign-in codes after 10 minutes, sessions after 90 days, and the IP addresses used for rate limiting after an hour.

Completed orders are kept for seven years, because they are business and tax records. If you ask us to delete your information, we will delete everything we are not required to keep for that purpose, and tell you what remains.

The measures we take include:

• the whole site is served over an encrypted connection;
• order and account records are encrypted where they are stored;
• sign-in codes are stored only as scrambled values, so the code itself cannot be read back out of our records;
• the sign-in cookie cannot be read by scripts and is only sent over an encrypted connection;
• access to order records is limited to the two people who run Tikka Twist.

No method of storing or transmitting information is completely secure, so we cannot guarantee absolute security. If a breach ever affected your information, we would tell you.

You can ask us at any time to:

• tell you what personal information we hold about you;
• correct anything that is wrong;
• delete it, apart from records we are required to keep for tax purposes;
• give you a copy in a portable format.

Email contact@tikkatwist.com and we will respond within 30 days. We may need to confirm you control the email address on the order before acting on a request, so that nobody else can obtain or delete your information.

You can also opt out of analytics using the link in section 6, sign out to end your session, and see your own orders at any time from your account.

Order confirmations and pickup reminders are part of the order itself rather than marketing, so they are not something to unsubscribe from. We do not currently send marketing email. If that changes, joining will be something you opt into and every message will have an unsubscribe link.

The website is intended for adults. We do not knowingly collect personal information from children under 13. If you believe a child has given us information, email contact@tikkatwist.com and we will delete it.

If we change how we handle personal information, we will update this page and change the date at the top. Where a change materially affects information we have already collected, we will say so on this page rather than change it silently.

For any question about this policy, or to make a request under section 10, email contact@tikkatwist.com or use the contact form.

Tikka Twist LLC
Elk River, Minnesota, United States
contact@tikkatwist.com