Last update: Dec 1, 2025

Privacy Policy

Privacy Policy — Capsule Vans LLC
Effective Date: [MONTH DAY, YEAR]

  1. Effective Date & Scope
    This Privacy Policy explains how Capsule Vans LLC (“Capsule Vans,” “we,” “us,” or “our”) collects, uses, discloses, and safeguards personal information when you interact with our websites, products, services, applications, marketing, and communications (collectively, the “Services”).
    Capsule Vans LLC is a Washington limited liability company (EIN [insert]), registered in the State of Washington, USA.
    This Policy applies to: – visitors and users of our websites [https://capsulevans.com]; – customers purchasing or inquiring about our products; – partners, suppliers, and subscribers communicating with us through our Services.
    Capsule Vans operates primarily in the United States and does not intentionally target or offer services to residents of the European Economic Area (EEA), United Kingdom, or other international jurisdictions. However, some of our service providers may process data internationally as described in Section 15. While our Services are primarily directed to U.S. residents, some personal information may be processed internationally by vendors under appropriate safeguards (e.g., EU Standard Contractual Clauses).
    We do not intentionally collect or process personal data of individuals located in the EEA, UK, or Switzerland, and our Services are not designed for such users.
    We may update this Policy periodically. If changes materially affect your rights, we will provide prominent notice (e.g., banner or email). The “Effective Date” above shows the latest version. Archived versions are retained for a minimum of six years for audit and compliance purposes and are available upon request.

  2. Governing Law and Dispute Resolution
    This Privacy Policy is governed by the laws of the State of Washington, with a conditional application of Oregon law where required.
    This Policy incorporates by reference our Terms of Use, including: – Governing Law (WA/OR); – Binding Arbitration Clause; – Mediation Clause; – Class-Action Waiver; except where prohibited by law.
    By using our Services, you acknowledge that disputes arising under this Policy are subject to the binding arbitration and class-action waiver provisions described in our Terms of Use.
    Any dispute relating to this Policy will be resolved in accordance with those Terms.

  3. Contact Information
    Controller: Capsule Vans LLC Legal Address: [REGISTERED BUSINESS ADDRESS – Street, City, State, ZIP, USA] Privacy Email: [privacy@capsulevans.com] Phone: [+1 (XXX) XXX-XXXX] Privacy Lead / DPO-equivalent: [Full Name, Title, Email, Phone]
    If you are unsatisfied with our response, you may contact your state Attorney General or, if applicable, the California Privacy Protection Agency (CPPA).

  4. California Notice at Collection
    This section serves as our Notice at Collection under California Civil Code §1798.100(b).
    We collect the following categories of personal information under the California Consumer Privacy Laws (CPRA):
    Category
    Examples
    Source
    Purpose
    Disclosed to
    Retention
    Identifiers
    Name, email, phone, address
    You
    Account setup, fulfillment
    Service providers
    6 years
    Commercial Information
    Orders, payments
    You, payment processor
    Fulfillment, returns
    Payment & logistics providers
    6 years
    Internet/Network Activity
    IP, device ID, pages visited
    Devices, cookies
    Analytics, performance
    Analytics & AdTech partners
    24 months
    General Geolocation
    City/state via IP lookup
    Automatic
    Localization, analytics
    Analytics partners
    24 months
    Inferences
    Preferences (non-sensitive)
    Derived
    Improve services
    Internal only
    24 months
    Sensitive Personal Information
    Not collected




    We do not collect or process sensitive personal information for marketing or to infer characteristics. We do not sell personal information. We do not sell or share personal information of consumers under 16 years of age. We may “share” limited data for cross-context behavioral advertising; you may opt out at any time.

  5. Information We Collect
    We collect information in three main ways:
    (a) Information You Provide This includes your name, email, phone number, billing/shipping address, payment details (processed securely by our payment providers), and any messages or feedback you send to us.
    (b) Information Collected Automatically We use cookies and analytics tools to gather IP addresses, device identifiers, browser type, operating system, referral URLs, and interactions with our websites.
    (c) Information from Service Providers We receive limited aggregated data from payment, analytics, and advertising partners to help us improve our services and understand usage trends.
    Capsule Vans does not currently collect telemetry or geolocation data from its products.

  6. How We Use Personal Information
    We use your information to: – provide, deliver, and improve our Services; – process transactions and verify payments; – respond to inquiries and support requests;
    – send order updates and marketing (with consent); – detect and prevent fraud or misuse; – comply with legal and regulatory obligations.
    We do not use personal data to make automated decisions producing legal or similarly significant effects.

  7. Cookies and Tracking Technologies
    We use several types of cookies: – Strictly Necessary Cookies: essential for website functionality (cannot be disabled). – Functional Cookies: remember preferences and enhance user experience. – Analytics Cookies: measure performance and usage trends (e.g., Google Analytics 4 with IP anonymization). – Advertising Cookies: enable limited cross-context behavioral advertising with partners like Google, Meta, TikTok, and LinkedIn.
    Advertising cookies are activated only after obtaining your affirmative consent through our Cookie Settings banner.
    You can manage preferences anytime via [Cookie Settings – https://capsulevans.com/cookies/settings] or through browser settings.
    We currently do not respond to browser “Do Not Track” (DNT) signals due to the absence of a legally recognized standard, but we honor Global Privacy Control (GPC) signals as required by applicable U.S. state laws. Users in CO, CT, and VA can opt out of targeted advertising and profiling via our Privacy Choices link.

  8. Targeted Advertising and Profiling Opt-Out
    You may opt out of targeted advertising or profiling at any time via the [Your Privacy Choices] page or the [Do Not Sell or Share My Personal Information] link in our footer. Opt-outs propagate automatically to all integrated AdTech vendors through the IAB U.S. Privacy / Global Privacy Platform (GPP). We honor browser-based GPC signals where required. Residents of Colorado and Virginia may also opt out of profiling in furtherance of decisions that produce legal or similarly significant effects.

  9. How We Share Information
    We do not sell personal information.
    We share limited categories of data only with trusted service providers for legitimate operational purposes, including: – Payment processors (e.g., Stripe, PayPal) for secure payment authorization (Capsule Vans does not store card data); – Analytics providers (e.g., Google Analytics 4) for traffic measurement; – Advertising partners (e.g., Google Ads, Meta, TikTok, LinkedIn) for performance marketing, subject to opt-out and GPC; – Email/SMS platforms (e.g., Klaviyo, Twilio) for transactional and opt-in marketing messages; – Tag management (e.g., Google Tag Manager); – Internal support via email (no third-party chat tools).
    We disclose only what is necessary for the service, under written contracts requiring confidentiality and data protection. We maintain Data Processing Agreements (DPAs) with all vendors that process personal information on our behalf. We perform annual vendor due diligence, including SOC 2 Type II or ISO 27001 compliance verification. A current list of subprocessors is available upon request at [privacy@capsulevans.com].

  10. Custom Audiences
    We may use hashed contact information (e.g., email) to create Custom Audiences in Google or Meta Ads for relevance and reach. We use SHA-256 one-way hashing for audience creation and exclude any data of users under 18 years of age. You can opt out through Do Not Sell or Share My Personal Information or Your Privacy Choices. We never disclose unhashed contact data to advertising partners.

  11. Your U.S. State Privacy Rights
    Residents of California, Colorado, Connecticut, Utah, and Virginia have the right to: – Access, correct, or delete personal information; – Request a portable copy of your personal information in a readily usable format; – Opt out of “selling” or “sharing” personal information; – Limit the use or disclosure of sensitive information; – Appeal a denied request.
    We will not discriminate against you for exercising your privacy rights. Requests may be submitted by emailing [privacy@capsulevans.com]. We will respond within 45 days (extendable once by 45 days).
    Verification may require matching information provided with existing records, a government-issued ID, or confirmation through a verified email associated with prior transactions.
    Authorized agents must provide signed authorization and identity verification.
    Appeals (CO / VA) If your request is denied, you may appeal by emailing [privacy@capsulevans.com] within 60 days. We will respond in writing within 45–60 days.
    Financial Incentives We do not offer financial incentives or price/service differences in exchange for personal information. If we introduce any loyalty, referral, or marketing incentive programs, we will provide a clear description and obtain opt-in consent as required by law.

  12. Data Retention
    We retain personal information only as long as necessary for legitimate business or legal purposes, based on contractual necessity, legal obligations, and data minimization principles: – Customer accounts & orders: 6 years after last transaction (tax, audit, warranty); – Support communications: 3 years post-closure; – Marketing & analytics: 24 months or until opt-out; – System & access logs: 12 months; – Telemetry (if introduced): ≤24 months, then anonymized.
    Once retention periods expire, data is securely deleted or anonymized. Upon a verified deletion request, data will be permanently erased from active systems and removed from backups within 90 days.

  13. Security Measures
    Capsule Vans uses industry-standard safeguards, including: – Encryption in transit: TLS 1.2 or higher; – Encryption at rest: AES-256; – Key management: cloud-based KMS with restricted IAM; – Access control: least-privilege, MFA for admin accounts; – Quarterly access reviews;
    – Annual independent penetration testing with remediation tracking; – Vendor assessments via DPA and SOC 2 Type II / ISO 27001 reports.

  14. Incident Response
    Capsule Vans maintains a documented Incident Response Plan aligned with NIST SP 800-61 and ISO 27035. We classify incidents by severity and aim to notify affected individuals (and regulators, where required) within 72 hours of confirming a high-risk breach. We perform quarterly tabletop drills and annual reviews of our plan.
    Capsule Vans remains responsible for ensuring that all vendors processing personal data on its behalf maintain equivalent data protection standards.

  15. International Transfers
    Our vendors may process data outside the U.S. (e.g., EU/UK). Where applicable, we rely on EU Standard Contractual Clauses (2021) and the UK International Data Transfer Addendum, embedded in vendor DPAs. We conduct Transfer Impact Assessments (TIA/TRA) and apply additional safeguards: – TLS 1.2+, AES-256 encryption; – Cloud KMS key management; – Access limited to authorized personnel only.
    This approach aligns with best practices used by leading U.S. manufacturers and SaaS providers.
    If you believe we processed your data while located in the EEA or UK, contact our Privacy Lead for deletion or clarification.

  16. Children’s Privacy
    Our Services are not directed to children under 13. We do not knowingly collect information from minors. If we learn that we have collected data from a child under 13, we will promptly delete it and disable the related account or submission. Parents may contact us at [privacy@capsulevans.com] to review or delete their child’s information.

  17. Links to Other Sites
    Our websites may contain links to third-party sites for your convenience. We are not responsible for the privacy practices of those sites and do not endorse their content. Please review each site’s privacy notice before providing personal information.

  18. Changes to This Policy
    We may modify this Policy from time to time. Material changes include updates that expand the categories of personal information collected, new uses of existing data, or changes in disclosure practices. If changes materially affect how we use your information, we will provide prominent notice (e.g., email or on-site banner) before the new version takes effect.

  19. Language and Versions
    This Privacy Policy is published in English. In case of discrepancies between translations, the English version governs.

  20. Contact Us
    If you have any questions or concerns about this Privacy Policy or our privacy practices, please contact us at: Email: [privacy@capsulevans.com] Phone: [+1 (XXX) XXX-XXXX] Mail: [Registered Business Address – Street, City, State, ZIP, USA] Capsule Vans LLC
    Legal Disclaimer and FTC Oversight
    This Privacy Policy is provided for informational purposes and does not create any contractual or legal rights other than those required by applicable privacy laws. Capsule Vans complies with U.S. Federal Trade Commission (FTC) enforcement principles regarding privacy and data security. Nothing in this Policy limits your rights under the FTC Act or applicable state privacy laws.
    No failure or delay by Capsule Vans to enforce any provision of this Policy shall constitute a waiver of any rights.
    © [Year] All Rights Reserved.