Your Privacy Matters To Us

Thank you for choosing Mylar Bag Depot LLC ("Mylar Bag Depot Texas", "Mylar Bag Depot", "we", "us", or "our"), operator of the texas.mylarbagdepot.com Texas-focused packaging subdomain. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you visit our texas.mylarbagdepot.com website, request custom packaging quotes, place orders for our premium custom Mylar bags and barrier packaging products, contact our customer support team, or otherwise interact with our Texas-focused packaging services. We are committed to protecting the privacy of our customers, prospective customers, suppliers, and website visitors located in Texas, the broader United States, the European Economic Area (EEA), the United Kingdom, Canada, Australia, and all other jurisdictions we serve.

We have designed this Privacy Policy to be transparent and easy to understand. Please read it carefully. By accessing or using our website, placing an order, creating an account, or providing your personal information to us in any manner, you acknowledge that you have read, understood, and agreed to be bound by the practices and policies described in this Privacy Policy and our Terms of Service. If you do not agree with our policies and practices, please do not use our website, provide us with any personal information, or place orders for our products.

1. Information We Collect About You

We collect only the information that is reasonably necessary for us to operate our business, process your orders, deliver our products, provide customer support, improve your shopping experience, and comply with our legal obligations. We do not sell your personal information to third parties for commercial purposes, and we never will.

a. Information You Provide Directly To Us

We collect the following types of information when you voluntarily provide it to us:

• Contact and Account Information: When you create a customer account, sign up for our email newsletter, place an order, request a free custom quote, or contact customer support, we collect information such as your full legal name, business or company name, email address, physical shipping and billing addresses, phone number, and account password (stored only in encrypted, salted, hashed format).
• Order and Transaction Information: When you place an order for our custom Mylar bags, stand-up pouches, child-resistant packaging, glass jars, or any other products, we collect the details of your order including product selections, sizes, quantities, custom artwork file names and specifications, design notes, requested turnaround time, shipping method preferences, and special delivery instructions.
• Payment Information: We do NOT store your complete credit card, debit card, or bank account numbers on our servers or internal systems. All payment transactions are processed securely through our PCI DSS Level 1 compliant payment service providers (Stripe, PayPal, and Shopify Payments). Our payment processors may collect your cardholder name, card number, expiration date, CVV security code, and billing address directly in their secure, encrypted payment environments at the time of checkout.
• Communications and Support: When you send us emails, fill out website contact forms, submit customer support tickets, participate in customer satisfaction surveys, or interact with our live chat agents, we collect the content of those communications, including any files, attachments, custom artwork files, design proofs, photographs, or other documents you choose to share with us, along with your contact information and metadata about the interaction.
• Custom Design and Artwork Files: When you upload custom artwork, logo files, design mockups, brand guidelines, sketches, or other creative files for use in your custom packaging order, we store those files and any associated design notes, revision history, and proof approval records associated with your order.
• Customer Reviews and Testimonials: If you choose to submit a product review, star rating, customer testimonial, case study, or other user-generated content for publication on our website or marketing materials, we collect the content you submit along with your first name, last initial, company name, and any photograph or avatar you elect to provide.

b. Information Collected Automatically When You Visit Our Website

When you browse, visit, or interact with our website, certain information about your device and activity may be collected automatically through cookies, web beacons, embedded pixels, server log files, and similar technologies, as further described in our Cookie Policy:

• Device and Technical Information: Internet Protocol (IP) address, device type, device manufacturer and model, operating system and version, screen resolution, web browser name and version, browser language setting, installed browser plugins, time zone, approximate geographic location (city and country level derived from IP address), mobile carrier information, and network type (Wi-Fi or cellular data).
• Website Usage and Analytics Information: Pages and products viewed, date and time of visit, length of time spent on each page, referral source website or search engine that directed you to our site, search terms entered on our internal site search, clicks on links, buttons, and product images, items added to shopping cart, checkout funnel progression, abandoned cart events, order completion, and conversion event attribution.
• Advertising and Marketing Information: Interactions with our paid marketing advertisements displayed on Google Search, Google Display Network, Facebook, Instagram, TikTok, Pinterest, LinkedIn, and other digital advertising platforms. This includes ad impressions, clicks, view-through conversions, retargeting audience membership, and attribution data used to measure and optimize our advertising campaign performance.

2. How We Use Your Information

We use the personal information we collect for the following legitimate business purposes, all conducted in reliance on applicable legal bases for processing including the performance of our contract with you, our legitimate business interests, your consent where legally required, and our compliance with applicable laws and regulations:

1. To Process and Fulfill Your Orders: To confirm your order details, charge your selected payment method, manufacture your custom printed packaging products, verify design specifications, arrange packaging of finished goods, schedule shipment with our carrier partners (UPS, FedEx, DHL Express, USPS), provide order status updates, respond to production-related inquiries, and ensure delivery to the correct shipping address.
2. To Create and Manage Your Customer Account: To enable account registration, authenticate your login credentials, securely store your shipping and billing address preferences, maintain your order history, track reorder information, manage your newsletter and marketing communication preferences, and provide access to exclusive pricing and loyalty program benefits where applicable.
3. To Provide Customer and Technical Support: To respond to your inquiries, process returns, refunds, and warranty claims, resolve order issues, arrange replacement shipments for defective or damaged goods, answer product specification questions, provide free custom design assistance, coordinate digital proof revisions, and schedule calls with our packaging consultants.
4. To Improve Our Website and Products: To analyze customer browsing and purchasing patterns, identify popular products and sizes, optimize our website navigation and checkout flow, improve page load performance, fix technical bugs and errors, test new website features, and inform future product development and packaging material improvements.
5. For Marketing Communications and Personalization: Subject to your applicable marketing opt-in preferences, to send you order confirmation emails, shipping notification emails, abandoned cart reminder emails, product launch announcements, exclusive sales and discount offers, design tips, company updates, newsletters, and personalized product recommendations. We use information about your past orders, page views, and expressed preferences to customize the content and product offers that appear on our website, in our emails, and in our paid advertising creatives.
6. For Digital Advertising, Attribution and Measurement: To deliver relevant, interest-based paid advertisements to prospective and existing customers across Google Ads, Google Shopping, Facebook/Instagram Ads, Pinterest Ads, TikTok Ads, LinkedIn Ads, and other digital channels. We use website activity data to build custom and lookalike retargeting audiences, measure advertisement click-through and conversion rates, calculate return on ad spend (ROAS), allocate our marketing budgets, and optimize our advertising campaign performance.
7. For Legal Compliance, Safety, and Fraud Prevention: To comply with all applicable federal, state, provincial, and local laws, rules, regulations, ordinances, and binding government orders. This includes verifying the age and identity of customers ordering age-restricted packaging products, conducting anti-money laundering and payment fraud screening, maintaining required business records and audit trails, responding to lawful subpoenas, court orders, and valid government information requests, protecting the security, integrity, and safety of our website, systems, employees, customers, and business operations, and establishing, exercising, or defending our legal rights and claims.

3. How We Share Your Information

We share your personal information only with the following carefully vetted categories of third parties, only for the limited purposes described in this section, and only pursuant to appropriate written data protection agreements or terms of service that require those third parties to protect your information consistent with this Privacy Policy and applicable law:

• Payment Processors: Stripe, PayPal, Shopify Payments, and other PCI DSS compliant payment gateways that process your transaction and payment method details to charge for placed orders, process refunds, and detect payment fraud.
• Shipping, Logistics and Fulfillment Providers: UPS, FedEx, DHL Express, USPS, and other shipping carriers to generate pre-paid shipping labels, schedule package pickup and delivery, provide in-transit tracking information, calculate shipping rates, resolve delivery issues, and process lost or damaged package claims.
• Design, Production and Manufacturing Vendors: Our own printing facilities and any third-party contract manufacturers, laminators, die-cutters, and quality control labs that may be engaged to produce, assemble, test, or finish your custom packaging order. We only share the minimum information necessary: product specifications, your custom artwork file, order number, and required quantities.
• E-commerce and Hosting Platform Providers: Shopify, our primary e-commerce platform, as well as managed hosting providers, content delivery networks (CDNs), cloud storage providers, domain registrars, email delivery services, SMS notification services, and other technology infrastructure vendors that power and secure the operation of our website and communications.
• Analytics, Measurement and Advertising Platforms: Google Analytics, Google Ads, Google Tag Manager, Meta/Facebook Business Manager, Pinterest Ads, TikTok Ads, LinkedIn Ads, Hotjar, and other analytics and advertising technology vendors that help us understand website traffic, measure conversions, build retargeting audiences, serve personalized advertisements, and optimize our digital marketing performance.
• Professional Advisors and Consultants: External certified public accountants, tax advisors, insurance brokers, outside legal counsel, compliance consultants, and payment dispute resolution providers acting on our behalf in connection with audits, tax filings, insurance claims, litigation, regulatory filings, and dispute resolution proceedings.
• Law Enforcement, Regulators and Governmental Authorities: In response to a valid and legally binding court order, subpoena, search warrant, regulatory inspection request, or other compulsory legal process, or as otherwise required by applicable federal, state, or local laws. We may also disclose information when we in good faith believe it is necessary to prevent imminent physical harm, financial loss, or violation of our Terms of Service.
• Business Transfers and Successors: In connection with a proposed or completed merger, acquisition, reorganization, divestiture, restructuring, sale of substantially all assets, joint venture, financing transaction, bankruptcy, insolvency, or similar corporate event in which personal information held by us about our customers is among the assets transferred or assigned.

We do NOT sell your personal information. We do not operate a data brokerage business and we do not offer personal information about our customers, website visitors, or prospects for sale, lease, rent, or exchange to any unaffiliated third parties for their own independent direct marketing, advertising, or commercial purposes.

4. Your Privacy Rights and Choices

Depending on your country, state, or province of residence, you may be entitled to certain statutory rights under applicable data protection laws including the California Consumer Privacy Act (CCPA), the EU General Data Protection Regulation (GDPR), the UK GDPR, the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA), and the Australian Privacy Principles contained in the Privacy Act 1988 (Cth). These rights may include:

• Right of Access / Right to Know: The right to request confirmation of whether we hold personal information about you and to obtain a copy of that information, along with details about how we have used and disclosed it during the preceding 12-month period.
• Right to Rectification: The right to request correction of any inaccurate, incomplete, out-of-date, or incorrectly recorded personal information that we hold about you.
• Right to Erasure / Right to Delete: The right to request deletion of your personal information that we hold, subject to certain legal exceptions such as our need to retain order transaction records for tax, accounting, warranty, or legal claim defense purposes.
• Right to Restrict Processing: The right to request that we limit the purposes for which your personal information is processed under certain legally specified circumstances.
• Right to Data Portability: Where processing is based on your consent or the performance of a contract, the right to receive the personal information you have provided to us in a structured, commonly used, and machine-readable format, and the right to request transmission of that data directly to another service provider where technically feasible.
• Right to Object to Processing: The right to object to processing of your personal information based on our legitimate interests or for purposes of direct marketing and profiling.
• Right to Opt Out of Sale or Targeted Advertising: Under US state laws including CCPA/CPRA, Colorado Privacy Act, and Connecticut Data Privacy Act, you may have the right to opt out of the "sale" of your personal information and the processing of your personal information for "targeted advertising" purposes as those terms are defined under those statutes.
• Right to Withdraw Consent: Wherever we have collected or processed your personal information on the basis of your consent, you have the absolute right to withdraw that consent at any time, effective for future processing activities.
• Right to Non-Discrimination: You have the right not to receive discriminatory treatment from us by virtue of exercising any of the privacy rights conferred to you by applicable law.

To exercise any of the above rights, please submit a verifiable consumer request by emailing our Data Protection team at privacy@mylarbagdepot.com with the subject line "Privacy Rights Request." We will respond to all verified requests within the legally required timeframes (typically 45 calendar days, extendable under certain circumstances). We may require you to provide sufficient information to verify your identity before processing your request, such as confirming your name, email address, recent order number, or registered account details, as required by law to protect against fraudulent requests.

5. Email and Marketing Communications

You may opt out of receiving promotional, marketing, or newsletter email communications from us at any time by following the "unsubscribe" link included at the bottom of every commercial email we send, or by submitting a written opt-out request to unsubscribe@mylarbagdepot.com. Please note that even if you opt out of marketing emails, we may still send you important non-promotional, transactional, account-related, or legal communications relating to active orders, open support tickets, product recalls, warranty claims, or material updates to our terms or policies.

6. Data Security and Retention

We take the security of your personal information seriously and maintain a comprehensive information security program designed to protect your data against unauthorized access, misuse, modification, disclosure, or accidental or unlawful destruction. Technical, administrative, and organizational safeguards include:

• Industry-standard TLS 1.2+ encryption for all data transmitted between your browser and our website (HTTPS with active SSL certificate)
• End-to-end PCI DSS Level 1 compliant payment processing by our payment gateway partners, ensuring cardholder data never touches our internal servers
• Argon2id or bcrypt strong one-way hashing and salting of all stored user account passwords
• 256-bit AES encryption at rest for all sensitive customer and order records stored in our production databases
• Role-based access control with principle of least privilege applied to all internal employee and vendor system access
• Regular internal and third-party vulnerability scanning, penetration testing, and security audits
• Annual employee data protection and information security training with signed confidentiality agreements
• Written incident response plan and breach notification procedures that meet all applicable federal and state regulatory requirements including the EU GDPR Article 33 and California CCPA 1798.82 notification standards

We retain personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected, comply with applicable legal recordkeeping requirements, resolve disputes, establish and defend legal claims, and enforce our agreements. After expiration of the applicable retention period, personal information is either permanently deleted, anonymized, or destroyed in accordance with our documented data retention schedule. If you delete your account or request erasure of your information, residual copies may remain in our encrypted backup media for a limited period of time before they are automatically purged during standard backup rotation cycles.

7. Children's Privacy

Our website, products, and services are intended exclusively for use by adults aged 18 years and older who are legally capable of entering into binding purchase contracts. We do not knowingly collect, solicit, or maintain personal information from children under the age of 16 (or the higher applicable age of digital consent in certain jurisdictions including 13 under US COPPA and 16 under EU GDPR). If you are a parent or legal guardian and believe that your child under the age of 16 has provided us with personal information without your consent, please contact us immediately at privacy@mylarbagdepot.com and we will take all commercially reasonable steps to permanently delete that information from our active systems and backups within a reasonable timeframe.

8. International Data Transfers

Mylar Bag Depot is headquartered in the United States and our primary information technology systems, e-commerce platform, database servers, cloud storage infrastructure, and backup facilities are all currently located in the United States. If you are accessing or using our website or providing personal information from a location outside of the United States (including the European Economic Area, United Kingdom, Canada, Australia, or other jurisdictions with data protection laws that restrict international transfers), you acknowledge and understand that your personal information may be transferred to, stored in, and processed by us and our trusted third-party service providers in the United States, a jurisdiction which may have data protection laws that are different from and in some cases less comprehensive than those of the jurisdiction in which you are a resident. For transfers originating from the EEA or UK, we rely on EU Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914) and UK International Data Transfer Addendum to provide appropriate safeguards for the transfer of personal data to recipients located outside of those regions. You may obtain a copy of the applicable Standard Contractual Clauses by contacting our Data Protection team at the address listed in this policy.

9. Third-Party Websites and Services

Our website may contain hyperlinks to third-party websites, platforms, blogs, social media services, video sharing sites, or e-commerce applications that are owned, controlled, or operated by companies or individuals unaffiliated with Mylar Bag Depot. This includes links to our official social media pages on Facebook, Instagram, Twitter/X, LinkedIn, Pinterest, and YouTube, as well as payment provider checkout pages and third-party logistics carrier tracking portals. This Privacy Policy applies only to the information practices of our website and our direct communications with you. We have no control over, and assume no responsibility for, the privacy policies, information practices, data collection, or content of any such unaffiliated third-party websites or services. We encourage you to always carefully read the privacy policy of every website you visit and every service you use before submitting any personal information to them.

10. Your California Privacy Rights

If you are a resident of the State of California, the California Consumer Privacy Act of 2018 (Cal. Civ. Code § 1798.100 et seq.), as amended by the California Privacy Rights Act of 2020 (collectively "CCPA"), provides you with specific rights regarding our collection, use, and disclosure of your personal information. Under the CCPA, California consumers have the right to request from us disclosure of the categories and specific pieces of personal information we have collected about you in the last 12 months, the categories of sources from which that information was collected, the business or commercial purpose for collecting that information, the categories of third parties with whom we have shared that information, and the categories of information that we have disclosed for a business purpose. You also have the right to request deletion of your personal information, the right to opt out of the "sale" of your personal information, and the right to be free from discrimination for exercising your CCPA rights. In the preceding 12-month period, we have disclosed the following categories of personal information for a business purpose, consistent with Section 1798.130(a)(4) of the CCPA: identifiers (name, email, address, IP address), commercial information (order history, products purchased, value of goods), internet or other electronic network activity information (website browsing records, product views, advertising interaction data), and geolocation data (approximate city/country derived from IP address). As stated in this policy, we do not sell personal information, and we have not sold personal information in the preceding 12 months.

11. Changes to This Privacy Policy

We reserve the right to update, modify, revise, or otherwise change this Privacy Policy at any time and from time to time in our sole and absolute discretion to reflect changes to our information collection and handling practices, changes to our business operations or product offerings, improvements to our website, or to satisfy new or changed legal, regulatory, judicial, or governmental requirements. When we make material changes to this Privacy Policy that affect your privacy rights or alter the ways in which we collect, use, or share your personal information, we will post the updated policy on this page with a revised "Last Updated" date prominently displayed at the top, and we will take commercially reasonable steps to notify you of such material changes (such as by emailing the primary email address associated with your customer account or displaying a prominent notice banner on our website homepage for a reasonable period of time after the changes become effective). Your continued access to or use of our website, continued placement of orders for our products, or continued provision of personal information to us after the effective date of any revised Privacy Policy constitutes your acceptance of such revisions. We encourage you to periodically review this Privacy Policy to stay informed about how we are protecting your personal information.

12. Contact Information

If you have any questions, comments, concerns, complaints, or requests regarding this Privacy Policy, our information handling practices, our compliance with applicable data protection laws, or if you wish to exercise any of your statutory privacy rights as described above, please contact our Data Protection team using any of the following methods:

We will acknowledge receipt of all written privacy-related inquiries, complaints, and rights requests within 10 business days and will respond substantively within the timeframes prescribed by applicable law (generally 45 calendar days for most requests, extendable by an additional 45 calendar days where legally permitted for complex or high-volume requests).