Privacy policy

Last updated: August 26, 2026

Introduction

SO Legit, LLC ("Snake Oil," "Company," "we," "us," "our") is committed to lawful, fair, and transparent collection of your data. This Privacy Policy governs data collection by us and our service providers when you purchase or use our products, services, software, and website snakeoilworks.com (collectively the "Services").

This policy explains the types of information we collect from you, how we use it, how we share it, how we store and protect it, and your rights regarding your information.

If you do not agree with this policy, you should not use our Services. By accessing or using our Services, you agree to this policy, which may change from time to time to better reflect our practices and applicable laws. Your continued use after we make changes is deemed acceptance of those changes.

Children Under the Age of 13

Our Services are not intended for minors (children under 13 years of age, or equivalent depending on jurisdiction, "Children"), and use of our Services by Children is strictly prohibited.

We do not knowingly collect personally identifiable information from Children. If we learn we have collected or received personal information from Children without verification of parental consent, we will delete that information.

Additionally, our products are intended for users 18 years and older. Persons under 18 are not permitted to purchase or use our products.

If you believe we might have any information from or about a Child, please contact us at support@snakeoilworks.com.

Information We Collect

Information you provide directly

  • Account information: name, email address, phone number, mailing address, billing address
  • Order information: products purchased, order history, payment details (processed by our payment processor — see "Third-Party Services" below; we do not store full payment card numbers)
  • Subscription information: subscription tier, renewal cadence, payment frequency
  • Communication content: emails, support inquiries, contact form submissions, survey responses
  • Marketing preferences: email list signups, communication preferences, opt-in/opt-out status
  • Reviews and feedback: product reviews, ratings, comments (if posted publicly)

Information collected automatically

When you visit our Site, we automatically collect:

  • Device information: browser type and version, operating system, device type, screen resolution
  • Usage information: pages visited, time spent on pages, click patterns, referring URLs, exit pages
  • Location information: we infer your general geographic location (city, region, or country level) from your IP address. We use this information to calculate applicable sales tax, display accurate shipping options, prevent fraud, understand in aggregate where our visitors are located, and comply with regional legal requirements. We do not collect precise GPS location, we do not track your physical movements, and we do not offer location-based services.
  • Cookies and similar technologies: see "Cookies and Tracking" section below

Information from third parties

  • Payment confirmation data from our payment processor (transaction status, last 4 digits of card, card type)
  • Email engagement data from Klaviyo (open rates, click rates, list status)
  • Advertising attribution data from Meta, TikTok, Google (clicked our ads, conversion data)
  • Shipping carrier data (delivery status, tracking events)

How We Use Your Information

  • Fulfill orders: process purchases, manage subscriptions, ship products, send order confirmations and tracking updates
  • Provide customer support: respond to inquiries, troubleshoot issues, process returns and refunds
  • Manage your account: authenticate logins, maintain purchase history, save preferences
  • Send transactional communications: order confirmations, shipping notifications, subscription renewal reminders, account-related notices (these are not marketing emails and cannot be opted out of while you have an active account)
  • Send marketing communications: newsletters, product launches, promotional offers (only if you have opted in; you can unsubscribe anytime)
  • Improve our products and services: analyze usage patterns, conduct research, develop new products
  • Run advertising campaigns: target ads to potential customers on third-party platforms, measure ad performance, build lookalike audiences
  • Prevent fraud and abuse: detect suspicious orders, prevent unauthorized account access, protect against payment fraud
  • Comply with legal obligations: respond to legal requests, enforce our Terms of Service, comply with tax and consumer protection laws

Legal bases for processing (GDPR-applicable users)

For users in the European Economic Area, United Kingdom, or Switzerland, we process your personal data under the following legal bases:

  • Contract performance: to fulfill orders, manage subscriptions, and provide customer support
  • Legitimate interests: to improve our products, prevent fraud, conduct business analytics, and send transactional emails
  • Consent: for marketing emails, non-essential cookies, and targeted advertising
  • Legal obligation: to comply with tax laws, consumer protection laws, and lawful regulatory requests
  • Vital interests: to protect health and safety in rare circumstances (e.g., product recall communications)

Third-Party Services We Use

We use the following third-party services to operate our business. Each has its own privacy policy that governs how they handle your data.

Platform and infrastructure

Payment processing

  • Shopify Payments — our primary payment processor for credit/debit cards, provided by Shopify and built on Stripe's payment infrastructure. We do not store full payment card numbers on our systems. Payment data handling is governed by Shopify's Privacy Policy.
  • PayPal Holdings, Inc. — alternative payment method for customers who choose PayPal. PayPal Privacy Policy
  • Shop Pay, Apple Pay, Google Pay — expedited checkout via your existing wallet. Each has its own privacy practices governed by Shopify, Apple, and Google respectively.

Email marketing and communications

  • Klaviyo, Inc. — email marketing platform that sends newsletters and marketing campaigns. Klaviyo stores your email address, name, purchase history (received from Shopify), engagement data (opens, clicks), and segmentation attributes. Klaviyo Privacy Notice

Subscription management

  • Subscription management is handled within Shopify's native subscription infrastructure. The specific tooling may change; updates will be reflected here.

Analytics

  • Google Analytics — web analytics service that helps us understand how visitors use our Site. Google Privacy Policy

Advertising

  • Meta Platforms, Inc. (Facebook, Instagram) — advertising platform. Meta Pixel tracks conversions from ads on Meta properties. Meta Privacy Policy
  • TikTok — advertising platform. TikTok Pixel tracks conversions from ads on TikTok. TikTok Privacy Policy
  • Google Ads — advertising platform. Google Ads tag tracks conversions from Google Search and Display ads. Google Privacy Policy

Shipping and fulfillment

  • USPS, UPS, FedEx or comparable carriers — used to ship orders. Carriers receive your name, shipping address, and order weight.

Customer support

  • Email correspondence flows through standard email infrastructure (Google Workspace or similar).

Reviews

  • A reviews mechanism may be used to collect and display customer reviews. Review data including name (or anonymized identifier), star rating, review text, and verified purchase status may be visible to other customers.

How We Share Your Information

We do not sell or rent your personal information. We do not sell, rent, or share your mobile opt-in or SMS consent data — including your phone number collected for text messaging — with any third parties for advertising or marketing purposes, and we do not use SMS opt-in data to build advertising audiences.

Third-party advertising partners (Meta, TikTok, Google) may collect information directly through their own cookies and pixels on our Site, as described in the "Cookies and Tracking Technologies" section. California residents can opt out of this activity at any time via our Your Privacy Choices page.

SMS consent and opt-in data are never shared with or sold to third parties or affiliates for their marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, except with our text messaging service provider solely to enable delivery of the messages you have requested.

We may share your information:

  • With our service providers (listed above) who have a business need to know and have agreed to confidentiality and data protection obligations
  • For legal compliance — to comply with court orders, legal processes, government or regulatory requests
  • To enforce our terms — to enforce our Terms of Service and other agreements
  • To protect rights and safety — to protect the rights, property, or safety of the Company, our customers, or others
  • For business transfers — in the event of a merger, acquisition, divestiture, restructuring, or sale of company assets
  • With aggregated/anonymized data — we may share aggregated or anonymized information that does not identify any individual

Cookies and Tracking Technologies

We use cookies and similar tracking technologies on our Site. Cookies are small data files stored on your device.

Types of cookies we use

  • Essential cookies: required for the Site to function (shopping cart, account login, security). Cannot be disabled.
  • Functional cookies: remember your preferences (language, region, recently viewed products).
  • Analytics cookies: help us understand how visitors use the Site (Google Analytics).
  • Advertising cookies: track conversions and enable targeted advertising (Meta Pixel, TikTok Pixel, Google Ads).

If you have opted in to text messages, we may also use cookies to determine when you have left items in your shopping cart, so we can send you a reminder by text.

Managing cookies

  • Your browser settings — most browsers allow you to block or delete cookies
  • Our cookie consent banner (shown on first visit and accessible from the footer)
  • Opt-out tools provided by advertising networks (e.g., Network Advertising Initiative, Digital Advertising Alliance)

Note: blocking essential cookies may prevent parts of the Site from functioning properly.

How We Protect Your Information

We implement reasonable administrative, technical, and physical safeguards to protect your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. Specific measures include:

  • SSL/TLS encryption for data transmitted between your browser and our Site
  • Password protection and access controls for administrative systems
  • Payment card data processed via PCI-compliant payment processors (we do not store full card numbers)
  • Limited employee access to personal data on a need-to-know basis
  • Regular security reviews of our systems and third-party providers

The transmission of information via the internet is not completely secure. We cannot guarantee the security of personal information transmitted to our Site. Any transmission is at your own risk.

Data Retention

We retain your personal information only as long as needed to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. General retention periods:

  • Account information: retained while your account is active and for up to 7 years after account closure (for tax and legal record-keeping)
  • Order information: retained for 7 years for tax and warranty purposes
  • Marketing communications data: retained while you are subscribed and for 12 months after unsubscribing
  • Customer support communications: retained for 3 years
  • Analytics data: retained according to Google Analytics default retention (typically 14-26 months)
  • Cookie data: retained according to cookie expiration settings (most expire within 1 year)

Your Rights

All users

  • Access the personal information we hold about you
  • Correct inaccurate personal information
  • Request deletion of your personal information (subject to legal retention requirements)
  • Opt out of marketing communications at any time (use the unsubscribe link in any marketing email or email us)

To exercise any of these rights, email support@snakeoilworks.com.

California Resident Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

  • Right to know what personal information we have collected, used, disclosed, and sold or shared about you
  • Right to delete personal information we have collected from you, subject to certain exceptions
  • Right to correct inaccurate personal information
  • Right to opt out of sale — we do not sell personal information for monetary consideration, but if our practices change, you will have the right to opt out
  • Right to opt out of sharing for cross-context behavioral advertising — use our Your Privacy Choices page (also linked as "Your Privacy Choices" in our footer)
  • Right to limit use of sensitive personal information — we do not knowingly collect sensitive personal information for purposes beyond what is necessary to provide our products and services
  • Right to non-discrimination — we will not discriminate against you for exercising your CCPA rights
  • Right to designate an authorized agent to make requests on your behalf

To exercise these rights, email support@snakeoilworks.com with "California Privacy Request" in the subject line, or use our Your Privacy Choices page (also linked as "Your Privacy Choices" in our footer). We may need to verify your identity before processing your request.

EEA, UK, and Swiss Resident Rights (GDPR)

  • Right of access to your personal data
  • Right to rectification of inaccurate or incomplete personal data
  • Right to erasure ("right to be forgotten"), subject to certain exceptions
  • Right to restriction of processing in certain circumstances
  • Right to data portability — receive your personal data in a structured, commonly used, machine-readable format
  • Right to object to processing based on legitimate interests or for direct marketing
  • Right not to be subject to automated decision-making including profiling that produces legal or similarly significant effects
  • Right to withdraw consent at any time (where processing is based on consent)
  • Right to lodge a complaint with a supervisory authority in your jurisdiction

To exercise these rights, email support@snakeoilworks.com. We will respond within 30 days.

International Data Transfers

We are based in the United States. If you access our Services from outside the United States, your personal information will be transferred to and processed in the United States, which may have different data protection laws than your country. For transfers from the EEA, UK, or Switzerland to the United States, we rely on appropriate safeguards including Standard Contractual Clauses (SCCs) where applicable.

Marketing Communications and Opt-Out

We may send you marketing emails (newsletters, promotional offers, product updates) only if you have opted in to receive them. You can opt out at any time by:

  • Clicking the "unsubscribe" link at the bottom of any marketing email
  • Updating your email preferences in your account dashboard
  • Emailing support@snakeoilworks.com with "Unsubscribe" in the subject line

Even after you opt out of marketing emails, we may still send you transactional emails related to your account, orders, or subscriptions (these are not marketing communications). We comply with the CAN-SPAM Act and similar email marketing laws.

Text Message (SMS) Marketing

If you opt in to receive text messages from us (for example, at checkout or through a signup form), we will use your phone number to send you SMS messages, which may include order and shipping notifications, cart reminders, promotional offers, and other marketing messages. Message frequency varies. Message and data rates may apply.

Your consent to receive text messages is not a condition of any purchase. You can opt out at any time by replying STOP to any message from us, or by emailing support@snakeoilworks.com. Reply HELP for help. We use Klaviyo to send text messages on our behalf; your phone number and messaging activity are handled in accordance with the Klaviyo Privacy Notice.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be reflected by updating the "Last updated" date at the top of this page. For material changes, we may also notify you via email or a prominent notice on our Site.

Contact Us

SO Legit, LLC
31 N 6th Ave, Ste 105-520
Tucson, Arizona, USA 85701

Email: support@snakeoilworks.com
Online: snakeoilworks.com/pages/contact

For California-specific privacy requests, please include "California Privacy Request" in your email subject line. For GDPR-specific requests, please include "GDPR Request" in your email subject line.