Are you 21 or older?

You must be of legal age to enter this site. We verify age on all orders.

By entering you agree to our Terms of Use and Privacy Policy.
FREE shipping on orders $100+ Orders placed now ship the next business day

Privacy Policy

Effective date: July 6, 2026 · Applies to toastedthemosted.com, operated by TTM Group LLC ("TTM," "we," "us").

This policy explains what personal information we collect, why we collect it, how we use and share it, how long we keep it, and the rights you have over it. We wrote it to be read — if anything is unclear, email info@toastedthemosted.com.

1. Information we collect

Information you give us

  • Order information: name, email address, phone number (optional), shipping address, and order contents when you make a purchase.
  • Age attestation: your confirmation that you are 21 or older.
  • Communications: messages you send through our contact form, tracking lookups, or email.
  • Newsletter signup: your email address if you join our list.

Information collected automatically

  • Strictly necessary data: a signed cart cookie and session data required to operate the store. These are always active because the store cannot function without them.
  • Analytics (only with your consent): if you accept analytics cookies, we use Google Analytics 4 with IP anonymization to understand site usage. Declining the cookie banner disables this entirely.
  • Security data: our infrastructure provider (Cloudflare) processes IP addresses and request metadata to protect the site from abuse.

What we do NOT collect

  • We never see or store your full payment card number. Payments are processed by our payment processor on their systems.
  • We do not collect precise geolocation, biometric data, or health information.
  • We do not knowingly collect any information from anyone under 21.

2. How we use your information

  • To process, fulfill, and ship your orders, and to send transactional emails (order confirmation, shipping notification with tracking, order status).
  • To respond to your questions and support requests.
  • To send marketing email only if you signed up for it — every message includes a one click unsubscribe.
  • To prevent fraud and abuse and to comply with legal obligations, including age restriction laws.
  • To improve the site, using consented analytics only.

3. How we share information

We do not sell your personal information for money. We share it only with service providers who need it to run the store:

  • Shipping carriers (USPS) — name and address, to deliver your order.
  • Payment processor — order amount and customer details needed to process payment.
  • Email provider (Resend) — your email address, to deliver transactional and subscribed marketing email.
  • Infrastructure (Cloudflare, Google Workspace) — hosting, database, security, and business email.
  • Analytics (Google Analytics, consent only) — pseudonymous usage data.
  • Legal compliance — if required by law, subpoena, or to protect our rights, we may disclose information to authorities.

Some analytics cookies may constitute "sharing" for cross context behavioral advertising under California law. You can opt out at any time on our Do Not Sell or Share My Personal Information page, or simply decline the cookie banner.

4. How long we keep it

  • Order records: kept as long as required for tax, accounting, and legal compliance (typically 7 years).
  • Marketing list: until you unsubscribe or ask us to delete you.
  • Support messages: up to 2 years, then deleted.
  • Cart cookies: expire automatically after 7 days.

5. Your rights

Depending on where you live, you may have the right to:

  • Access / know — request a copy of the personal information we hold about you.
  • Delete — request deletion of your personal information (subject to legal retention requirements for order records).
  • Correct — request correction of inaccurate information.
  • Opt out of sale/sharing — see our Do Not Sell or Share page.
  • Non discrimination — we will never penalize you for exercising a privacy right.

To exercise any right, use the privacy request form or email info@toastedthemosted.com with the subject "Privacy Request." We will verify your identity (by confirming control of the email on file) and respond within 45 days. You may use an authorized agent; we will require proof of authorization.

California residents (CCPA/CPRA)

In the last 12 months we have collected the categories of personal information described in Section 1: identifiers (name, email, address, phone), commercial information (order history), and internet activity (consented analytics). We collect them for the purposes in Section 2, share them as described in Section 3, and retain them as described in Section 4. We do not use or disclose sensitive personal information for purposes requiring a right to limit. We do not knowingly sell or share the personal information of consumers under 16 years of age.

Do Not Track / Global Privacy Control

We honor the Global Privacy Control (GPC) signal as an opt out of sharing where required by law. Analytics remains off unless you affirmatively accept the cookie banner.

6. Security

All traffic is encrypted with TLS. Cart and session data are cryptographically signed. Access to order data is restricted to authorized personnel behind hardware backed sign in. No system is perfectly secure — if we learn of a breach affecting your data, we will notify you as required by law.

7. Children

This site is strictly for adults 21 and older. We do not knowingly collect information from anyone under 21. If you believe a minor has provided us information, contact us and we will delete it.

8. Changes

If we change this policy, we will update the effective date above and, for material changes, post a notice on the site. Your continued use after changes means you accept the updated policy.

9. Contact

TTM Group LLC · info@toastedthemosted.com