Privacy policy
PRIVACY POLICY
Rule of Thirds
Effective Date: August 5, 2026 Last Updated: August 5, 2026
1. WHO WE ARE
This Privacy Policy describes how JEDCAL LLC, a California limited liability company authorized to do business in New York, doing business as Rule of Thirds ("Rule of Thirds," "we," "us," or "our"), collects, uses, and discloses personal information when you visit or purchase from ruleofthirds.com (the "Site"), or otherwise interact with us (the "Services").
JEDCAL LLC is the controller of the personal information described in this policy.
Contact: JEDCAL LLC d/b/a Rule of Thirds 54 State Street, Ste 804 #17688 Albany, NY 12207 contact@ruleofthirds.com
"You" means any individual whose personal information we collect — customer, visitor, or otherwise.
By using the Services, you acknowledge this Privacy Policy. Where we rely on your consent, we will ask for it separately.
2. INFORMATION WE COLLECT
2.1 Information you give us
- Contact details: name, email address, phone number, billing and shipping addresses.
- Order information: items purchased, order history, payment confirmation, delivery details.
- Account information: username, password, saved preferences.
- Communications: anything you include when you email us, message us on social media, or submit a form.
- Content you submit: product reviews, photos, and other user-generated content.
2.2 Information collected automatically
When you use the Site, we and our providers collect usage data through cookies, pixels, tags, and similar technologies: IP address, device and browser type, operating system, referring URLs, pages viewed, items viewed and added to cart, session duration, approximate location derived from IP address, and interactions with our emails.
2.3 Information from third parties
- Shopify, which hosts our store and provides store analytics.
- Payment processors, which collect and process your payment card or bank details. We never receive or store your full payment card number.
- Shipping carriers and fulfillment partners, which provide delivery status.
- Advertising and analytics providers, which may collect information about your activity on our Site and across other sites.
- Social media platforms, if you interact with us there or use a social login.
2.4 What we do not collect
We do not knowingly collect Social Security numbers, government ID numbers, precise geolocation, biometric data, or information about health, religion, race, sexual orientation, or union membership. We do not use or disclose sensitive personal information to infer characteristics about you.
2.5 Notice at collection
We collect the categories of information described above at the point you provide them or visit the Site, for the purposes described in Section 3, and retain them for the periods in Section 7. We do not sell your personal information for money; our use of advertising and analytics cookies may qualify as "selling" or "sharing" under certain state laws, and you may opt out under Section 9.2.
3. HOW WE USE YOUR INFORMATION
| Purpose | Examples | Legal basis (EU/UK) |
|---|---|---|
| Fulfilling your order | Processing payment, shipping, returns, exchanges, order updates | Performance of a contract |
| Customer support | Answering questions, resolving issues | Performance of a contract / legitimate interests |
| Account management | Creating and maintaining your account | Performance of a contract |
| Marketing | Promotional emails, product launches, drop announcements | Consent (EU/UK) / legitimate interests (elsewhere) |
| Advertising | Showing you our ads on other platforms, measuring campaigns | Consent (EU/UK) / legitimate interests (elsewhere) |
| Fraud prevention and security | Detecting fraudulent orders, bot activity, and abuse of purchase limits | Legitimate interests / legal obligation |
| Analytics and improvement | Understanding how the Site is used, improving products and sizing | Legitimate interests |
| Legal compliance | Tax records, responding to lawful requests, enforcing our Terms | Legal obligation / legitimate interests |
We do not use your personal information for automated decision-making that produces legal or similarly significant effects.
4. HOW WE DISCLOSE YOUR INFORMATION
We disclose personal information to:
- Service providers who work on our behalf: Shopify (store platform, hosting, and Shopify Email), payment processors, shipping carriers and fulfillment partners, customer support tools, cloud storage, and analytics providers. These parties may use your information only to perform services for us.
- Advertising and analytics partners, which may set cookies and receive usage data. See Sections 5 and 9.2.
- Professional advisors — accountants and lawyers — where necessary.
- Authorities, where required by law, subpoena, or court order, or to protect our rights, your safety, or the safety of others.
- A successor entity, in connection with a merger, acquisition, financing, or sale of assets.
We do not sell your personal information for money. However, our use of advertising and analytics cookies may qualify as "selling" or "sharing" personal information for targeted advertising under California, Virginia, Colorado, Connecticut, Texas, Oregon, and other state privacy laws. You may opt out — see Section 9.2.
We do not knowingly sell or share the personal information of anyone under 16 years of age.
5. COOKIES AND TRACKING
We use cookies and similar technologies to operate the Site, remember your cart and preferences, analyze usage, and — where permitted — deliver and measure advertising.
Categories:
- Strictly necessary — checkout, cart, security, fraud prevention. These cannot be disabled.
- Analytics — how visitors find and use the Site.
- Advertising — showing you relevant ads and measuring their performance.
For Shopify's cookies specifically, see shopify.com/legal/cookies.
Your choices. Most browsers accept cookies by default; you can block or delete them through browser settings, though this may break parts of the Site. If you are in the EU or UK, we will ask for your consent before setting non-essential cookies, and you can change your choice at any time through the cookie settings link on our Site.
Global Privacy Control. We honor GPC and similar browser opt-out signals as a valid request to opt out of sale or sharing where required by law.
6. MARKETING COMMUNICATIONS
If you opt in, we send email through Shopify Email about new releases, drops, restocks, and promotions. You can unsubscribe at any time using the link in any marketing email, or by emailing orders@ruleofthirds.com. You will still receive transactional messages about your orders.
We do not currently send marketing text messages. If we begin to, we will obtain your separate express written consent first.
7. HOW LONG WE KEEP YOUR INFORMATION
| Type | Retention |
|---|---|
| Order and transaction records | 7 years (tax and accounting) |
| Account information | While your account is active, plus 2 years |
| Marketing contact details | Until you unsubscribe, plus 1 year |
| Customer support correspondence | 3 years |
| Website usage and analytics data | 26 months |
| Fraud and security logs | 2 years |
We may keep information longer where necessary to resolve disputes, enforce agreements, or comply with law.
8. SECURITY
We use commercially reasonable safeguards, including encryption in transit, access controls, and reliance on PCI-DSS compliant payment processors. No system is perfectly secure, and we cannot guarantee absolute security. Do not send sensitive information to us through unsecured channels. Keep your account password confidential and tell us immediately if you believe your account has been compromised.
9. YOUR PRIVACY RIGHTS
9.1 Rights available to you
Depending on where you live, you may have the right to:
- Know or access the personal information we hold about you and how we use and disclose it;
- Correct inaccurate information;
- Delete your personal information;
- Receive a portable copy of your information;
- Opt out of targeted advertising, sale, or sharing;
- Restrict or object to certain processing;
- Withdraw consent where we rely on it;
- Appeal a decision to decline your request;
- Not be discriminated against for exercising any of these rights.
To exercise a right, email contact@ruleofthirds.com. We will verify your identity — usually by confirming your email address or order details — and respond within the time required by law (45 days in most U.S. states, extendable once; one month under the GDPR). You may use an authorized agent, with proof of authorization.
9.2 Opt out of targeted advertising, sale, or sharing
You may opt out by:
- Clicking "Your Privacy Choices" in our website footer;
- Enabling Global Privacy Control in your browser;
- Emailing contact@ruleofthirds.com with "Opt Out" in the subject line.
9.3 California residents
Under the CCPA/CPRA, you have the rights in Section 9.1, including the right to limit the use of sensitive personal information — though we do not use sensitive personal information for purposes that trigger this right. The categories of personal information we collect, disclose, and share are described in Sections 2 and 4.
You may also contact the Complaint Assistance Unit of the Division of Consumer Services of the California Department of Consumer Affairs at 1625 North Market Blvd., Suite N 112, Sacramento, CA 95834, or (800) 952-5210.
9.4 Other U.S. states
Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws have similar rights, including the right to appeal a denied request. To appeal, reply to our decision or email contact@ruleofthirds.com with "Privacy Appeal" in the subject line. If your appeal is denied, you may contact your state attorney general.
9.5 EU, UK, and Switzerland
You have the rights in Section 9.1 under the GDPR and UK GDPR, and the right to lodge a complaint with your local supervisory authority (in the UK, the Information Commissioner's Office).
10. INTERNATIONAL TRANSFERS
We are based in the United States, and your personal information will be transferred to, stored, and processed in the United States and other countries where our service providers operate. These countries may not offer the same level of data protection as your own.
Where we transfer personal information out of the EEA, UK, or Switzerland, we rely on the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or another recognized transfer mechanism, unless the destination benefits from an adequacy decision. You may request a copy of the relevant safeguards by emailing contact@ruleofthirds.com.
11. USER-GENERATED CONTENT
If you post reviews, photos, or other content in a public area of the Services, that content — and any personal information in it — is public and accessible to anyone. We cannot control how others use it. Please do not include information you would not want to be public.
If you tag us or use our hashtags on social media, see Section 14.2 of our Terms of Service for how we may use that content and how to revoke that permission.
12. THIRD-PARTY SITES
The Site may link to websites we do not operate. We are not responsible for their privacy practices or content. Review their policies before providing information.
13. CHILDREN
The Services are not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided us with personal information, email contact@ruleofthirds.com and we will delete it.
14. CHANGES TO THIS POLICY
We may update this Privacy Policy. We will post the revised version here, update the "Last Updated" date, and — for material changes — provide additional notice as required by law, such as by email or a notice on the Site.
15. CONTACT US
JEDCAL LLC d/b/a Rule of Thirds 54 State Street, Ste 804 #17688 Albany, NY 12207
Privacy requests and questions: contact@ruleofthirds.com
If you are not satisfied with our response, you may escalate to your local data protection authority or state attorney general.
This Privacy Policy was last updated on August 5, 2026.