Privacy Policy

Who we are
Dutch Barn Soap Company (“Dutch Barn Soap,” “we,” “us,” or “our”)
Address: 200 River Rd, Belle Mead, NJ 08502
Contact: [email protected] / [email protected]

Scope
This Privacy Policy explains how we collect, use, share, and protect personal information when you visit DutchBarnSoap.com, create an account, make a purchase, or interact with our emails/ads.

What we collect

Identifiers & contact info: name, email, shipping/billing address, phone.

Order & payment data: items purchased, order totals, and last-4-only tokenized info from payment processor (e.g., Stripe/Shopify Payments).

Device & usage data: cookies, IP, pages viewed, and interactions.

Marketing preferences: Marketing, newsletter/subscription opt-ins.

User content: reviews, photos, messages you send us.

How we use info
To process orders, provide customer support, operate/secure our site, personalize content, send transactional messages, and—if you opt in—send marketing emails. We also use limited data to prevent fraud and comply with law (tax, accounting).

Sharing
We share personal information with service providers (e.g., web host, payment processor, fulfillment/email providers) under contracts that restrict use to our instructions. We do not sell or share personal information for cross-context behavioral advertising. California residents have the right to opt out of “sale” or “sharing” and we honor Global Privacy Control (GPC) signals.

Your privacy rights
Depending on your state (including California), you may have the right to access, delete, correct, or opt out of certain processing. You can make requests at [email protected] and we’ll verify your identity and respond within the required timeframes.

Cookies & tracking; “Do Not Track”
We use cookies/SDKs for core functionality and analytics/ads. California’s CalOPPA requires that we disclose how we respond to browser “Do Not Track” signals; currently, many services do not honor DNT, but we provide choices (including GPC and cookie settings) and honor legally required signals.

Children’s privacy
Our site is not directed to children under 18. We do not knowingly collect personal information from children under 18. If you believe a child provided information, contact us to delete it.

Email marketing
You can unsubscribe at any time via the link in our emails. We comply with CAN-SPAM for commercial emails (accurate sender, physical address, and timely opt-out).

Security & retention
We use reasonable technical and organizational measures appropriate to our size and the sensitivity of the data. We retain data 7 years or as required by law, then delete or de-identify it.

Changes
We may update this policy. We’ll post the new “Last Updated” date and, when required, notify you of material changes.

Last Updated: 10/26/2025