Privacy policy
Last updated: October 15, 2026
The short version. We collect what we need to sell you products and classes and to run our business. We use advertising tools from Meta and Google, analytics and session-recording tools including Google Analytics and Microsoft Clarity, and email from Klaviyo, and we share some customer information with Meta to show ads. Our live classes are recorded. You can limit tracking using the choices in "Your Choices About Tracking and Advertising." The full details are below.
Who This Policy Covers
Big Red Barn Soapmaking Shop ("we", "us") operates this store and website, our landing and sales pages at pages.brbgoatmilksoap.com, our online member hub, and our live online classes (together, the "Services"). Big Red Barn Soapmaking Shop is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase through the Services, take one of our classes, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.
Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.
Some of the tools described in this policy, including the Meta Pixel, Google Analytics, and Microsoft Clarity session recording, collect information about your visit as it happens and send it to those companies. If you are a California resident or anyone else, this policy is our notice to you of that collection, and by continuing to use the Services after being shown this notice you agree to it. If you do not agree, please use the choices described in "Your Choices About Tracking and Advertising" or do not use the Services.
Personal Information We Collect or Process
When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been de-identified, so that it cannot identify or be reasonably linked to you. We may collect or process the following categories of personal information, including inferences drawn from this personal information, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:
- Contact details including your name, address, billing address, shipping address, phone number, and email address.
- Financial information including credit card, debit card, and financial account numbers, payment card information, financial account information, transaction details, form of payment, payment confirmation and other payment details.
- Account information including your username, password, security questions, preferences and settings.
- Transaction information including the items you view, put in your cart, add to your wishlist, or purchase, return, exchange or cancel and your past transactions.
- Communications with us including the information you include in communications with us, for example, when sending a customer support inquiry.
- Device information including information about your device, browser, or network connection, your IP address, and other unique identifiers.
- Usage information including information regarding your interaction with the Services, including how and when you interact with or navigate the Services.
- Class participation including your name or display name, and your voice, video, and chat messages if you share them during a live class (see "Live Classes and Recordings" below).
Personal Information Sources
We may collect personal information from the following sources:
- Directly from you including when you create an account, visit or use the Services, communicate with us, or otherwise provide us with your personal information;
- Automatically through the Services including from your device when you use our products or services or visit our websites, and through the use of cookies and similar technologies;
- From our service providers including when we engage them to enable certain technology and when they collect or process your personal information on our behalf;
- From our partners or other third parties.
How We Use Your Personal Information
Depending on how you interact with us or which of the Services you use, we may use personal information for the following purposes:
- Provide, Tailor, and Improve the Services. We use your personal information to provide you with the Services, including to perform our contract with you, to process your payments, to fulfill your orders, to remember your preferences and items you are interested in, to send notifications to you related to your account, to process purchases, returns, exchanges or other transactions, to create, maintain and otherwise manage your account, to arrange for shipping, to facilitate any returns and exchanges, to enable you to post reviews, and to create a customized shopping experience for you, such as recommending products related to your purchases. This may include using your personal information to better tailor and improve the Services.
- Marketing and Advertising. We use your personal information for marketing and promotional purposes, such as to send marketing, advertising and promotional communications by email, text message or postal mail, and to show you online advertisements for products or services on the Services or other websites, including based on items you previously have purchased or added to your cart and other activity on the Services. This includes measuring which ads and pages lead to purchases, and sharing customer contact information with advertising platforms to show ads to you and to find new people with similar interests (see "Advertising and Customer Lists" below).
- Security and Fraud Prevention. We use your personal information to authenticate your account, to provide a secure payment and shopping experience, detect, investigate or take action regarding possible fraudulent, illegal, unsafe, or malicious activity, protect public safety, and to secure our services. If you choose to use the Services and register an account, you are responsible for keeping your account credentials safe. We highly recommend that you do not share your username, password or other access details with anyone else.
- Communicating with You. We use your personal information to provide you with customer support, to be responsive to you, to provide effective services to you and to maintain our business relationship with you.
- Legal Reasons. We use your personal information to comply with applicable law or respond to valid legal process, including requests from law enforcement or government agencies, to investigate or participate in civil discovery, potential or actual litigation, or other adversarial legal proceedings, and to enforce or investigate potential violations of our terms or policies.
How We Disclose Personal Information
In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy. Such circumstances may include:
- With Shopify, vendors and other third parties who perform services on our behalf (e.g. IT management, payment processing, data analytics, customer support, cloud storage, fulfillment and shipping).
- With business and marketing partners to provide marketing services and advertise to you. For example, we use Shopify to support personalized advertising with third-party services based on your online activity with different merchants and websites. Our business and marketing partners will use your information in accordance with their own privacy notices. See "Advertising and Customer Lists" and "Your Choices About Tracking and Advertising" below for what we share with advertising partners and how you can limit it.
- When you direct, request us or otherwise consent to our disclosure of certain information to third parties, such as to ship you products or through your use of social media widgets or login integrations.
- With our affiliates or otherwise within our corporate group.
- In connection with a business transaction such as a merger or bankruptcy, to comply with any applicable legal obligations (including to respond to subpoenas, search warrants and similar requests), to enforce any applicable terms of service or policies, and to protect or defend the Services, our rights, and the rights of our users or others.
The Tools We Use
We use the following service providers and partners to run our business. Each one processes your information under its own privacy policy, linked below.
| Provider | What it does for us | What it collects |
|---|---|---|
| Shopify (privacy) | Hosts our store and checkout; processes payments (including Shop Pay) | Order, payment, account, and browsing information on the store |
| Meta (Facebook/Instagram) (privacy) | Advertising and ad measurement, through the Meta Pixel and Conversions API | Pages you visit, items you view or buy, and order details, linked to identifiers such as hashed email and phone number |
| Google (privacy; how Google uses information from sites that use its services) | Website analytics (Google Analytics), advertising, and product listings | Pages you visit, how you got here, device and approximate location, and purchases |
| Microsoft Clarity (privacy) | Records how visitors move through our store pages (session replays, heatmaps, scrolling and clicks) so we can see where people get stuck and improve the site. Clarity works with Microsoft Advertising, and Microsoft uses this data for site improvement, fraud and security, and advertising. | Your clicks, scrolling, mouse movements, and the pages you view on our store, captured as they happen using first- and third-party cookies. We set Clarity to hide all text on the page, including anything you type, from its recordings. |
| Klaviyo (privacy) | Email (and text, if you sign up) marketing and order emails | Your contact details, signups, purchases, and email activity such as opens and clicks |
| Mixpanel (privacy) | Product and website analytics | Pages you visit and actions you take on our store, with device and browser information |
| UpPromote (privacy) | Runs our affiliate and referral program | Which affiliate link brought you to us and the orders that came from it |
| Leadpages (privacy) | Hosts our landing and sales pages at pages.brbgoatmilksoap.com | Page visits and analytics |
| Zipify OneClickUpsell (privacy) | Shows add-on offers during and after checkout | Order and offer information |
| PayWhirl (privacy) | Manages subscriptions and recurring billing | Contact details, subscription plan, billing schedule, and payment information |
| Recharge (privacy) | Manages subscriptions and recurring billing | Contact details, subscription plan, billing schedule, and payment information |
| Seal Subscriptions (privacy) | Manages subscriptions | Subscription and payment schedule details |
| Membership.io (privacy) | Hosts our member hub, class replays, and course content | Your name, email, login, and what you watch |
| Zoom (privacy) | Hosts our live classes | See "Live Classes and Recordings" |
| YouTube (privacy) | Plays videos embedded on our pages | Viewing activity, through YouTube's own cookies |
| ThriveCart (privacy) | Checkout and payment plans for some of our older courses and programs | Contact, order, and payment information |
| Stripe (privacy) | Payment processing for some of our courses | Contact and payment information |
We review this list periodically; it was last reviewed on October 15, 2026. We may also use other providers that perform similar functions.
Advertising and Customer Lists
Meta, Google, and other third parties may use cookies, pixels, web beacons, and similar technologies to collect or receive information from our websites and elsewhere on the internet, and use that information to provide measurement services and to target ads, including ads shown to you on other websites and apps. We advertise on Meta (Facebook and Instagram) and Google. To do this:
- Our pages include advertising and analytics code (the Meta Pixel and Google tags) that tells these platforms which pages you visited and what you bought, so we can measure our ads and show ads to people who have visited us.
- We send purchase information directly from our systems to Meta (the Conversions API), including identifiers like your email address and phone number in hashed (scrambled) form. Hashing protects this information in transit, but Meta can still use it to match the purchase to your Facebook or Instagram account.
- We upload lists of customer contact information (such as email address and phone number) to Meta. Meta hashes this information and uses it to match it to Meta accounts, so that we can show ads to existing customers, leave them out of certain ads, and find new people with similar interests ("lookalike" audiences). Meta does not give us information about who matched.
Some state privacy laws treat this kind of advertising (sharing information with advertising platforms, retargeting, and customer-list matching) as a "sale" or "sharing" of personal information, or as "targeted advertising." We describe it here so you know we do it. See "Your Rights" for how this interacts with the laws that may apply to you.
Text Messages
If you sign up for text messages from us, we use your mobile number to send the messages you agreed to. Message frequency varies; message and data rates may apply. Reply STOP to opt out or HELP for help. We do not share your mobile number or text-messaging opt-in with third parties for their own marketing purposes. Text-messaging opt-in data and consent are not shared with any third parties except the providers that deliver our text messages.
Live Classes and Recordings
Our live classes are held on Zoom and are recorded. Zoom tells you when recording starts, and by staying in the class you agree to be recorded. If you attend, your name or display name, and your voice, video, and chat messages, may appear in the recording if you share them.
Recordings are made available to class participants as replays in our member hub, usually for two to three months after the class. We keep the recordings after that, and we may use them, including excerpts, in our courses, other products, and marketing.
If you would rather not appear in a recording, keep your camera and microphone off, change your Zoom display name before joining, and send questions to the host privately instead of to everyone. Other attendees can see your display name, and anything you share with everyone, while the class is live.
Your Choices About Tracking and Advertising
Because we use several different service providers, we do not operate a single opt-out that reaches every one of them. These are the ways you can limit tracking:
- Our store: use our data sharing opt-out page. On our store (soapmaking.brbgoatmilksoap.com), we also treat the Global Privacy Control signal as an opt-out request for the browser and device that send it. This opt-out limits the Meta and Google advertising and analytics code on our Shopify store; some other tools listed above, such as Microsoft Clarity, keep running. It does not apply to our landing pages hosted on Leadpages (pages.brbgoatmilksoap.com), our member hub, or our class platform, and it does not remove you from customer lists we upload to Meta. To stop seeing ads based on those lists, use the Meta setting below.
- Your browser: blocking third-party cookies, using private browsing, or using a tracker-blocking browser or extension limits tracking on all of our pages, including our landing pages.
- Meta ads: manage your ad preferences on Facebook or Instagram. Under "Audience-based advertising," you can see advertisers (including us) who uploaded a list that included your information and choose not to see their list-based ads.
- Google ads and analytics: manage My Ad Center, or install Google's Analytics opt-out add-on.
- Interest-based ads generally: aboutads.info/choices and optout.networkadvertising.org.
- Email and text: use the unsubscribe link in any marketing email, or reply STOP to a text. We may still send you messages about your orders and account.
Other than the Global Privacy Control on our store, we do not respond to "Do Not Track" or similar browser signals.
Your Rights
Depending on where you live, privacy laws may give you rights to access, delete, correct, or receive a copy of your personal information, or to opt out of certain uses. Where applicable law gives you these rights, we will respond as that law requires. We may need to verify your identity first, and we may decline a request where the law allows.
To make a request, send a letter by mail to Big Red Barn Soapmaking Shop, Attn: Privacy Requests, 4282 370th St., Sheldon IA 51201, United States. Tell us what you are asking for, which state you live in, and the email address and mailing address you use with us, so we can find your information. If we decline your request, we will tell you why, and where the law gives you a right to appeal, you can appeal by replying to our decision.
Shopify also processes personal information from its merchants' stores, and you can make requests about that directly through the Shopify Privacy Portal.
We will not discriminate against you for exercising any rights you have under applicable law.
Relationship with Shopify
The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for you. Information you submit to the Services will be transmitted to and shared with Shopify as well as third parties that may be located in countries other than where you reside, in order to provide and improve the Services for you. In addition, to help protect, grow, and improve our business, we use certain Shopify enhanced features that incorporate data and information obtained from your interactions with our Store, along with other merchants and with Shopify. To provide these enhanced features, Shopify may make use of personal information collected about your interactions with our store, along with other merchants, and with Shopify. In these circumstances, Shopify is responsible for the processing of your personal information, including for responding to your requests to exercise your rights over use of your personal information for these purposes. To learn more about how Shopify uses your personal information and any rights you may have, you can visit the Shopify Consumer Privacy Policy. Depending on where you live, you may exercise certain rights with respect to your personal information through the Shopify Privacy Portal.
Third Party Websites and Links
The Services may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites. Information you provide on public or semi-public venues, including information you share on third-party social networking platforms may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use by us or by a third party. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Services.
Children's Data
The Services are not intended to be used by children, and we do not knowingly collect any personal information about children under the age of majority in your jurisdiction. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the contact details set out below to request that it be deleted. As of the Effective Date of this Privacy Policy, we do not have actual knowledge that we "share" or "sell" (as those terms are defined in applicable law) personal information of individuals under 16 years of age.
Security and Retention of Your Information
Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee "perfect security." In addition, any information you send to us may not be secure while in transit. We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us.
How long we retain your personal information depends on different factors, such as whether we need the information to maintain your account, to provide you with Services, comply with legal obligations, resolve disputes or enforce other applicable contracts and policies. Session recordings collected through Microsoft Clarity are kept by Microsoft for a limited period (currently about 30 days for recordings). Class recordings are kept as described in "Live Classes and Recordings."
Complaints
If you have complaints about how we process your personal information, please contact us using the contact details provided below. Depending on where you live, you may have the right to appeal our decision by contacting us using the contact details set out below, or lodge your complaint with your local data protection authority.
International Transfers
Please note that we may transfer, store and process your personal information outside the country you live in.
Our service providers are mostly located in the United States. Where they receive personal information from the European Economic Area, the United Kingdom, or Switzerland, they rely on recognized transfer mechanisms such as the European Commission's Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on this website, update the "Last updated" date and provide notice as required by applicable law.
Contact
Should you have any questions about our privacy practices or this Privacy Policy, please call +1 712-230-0542 or email us at shanna@brbgoatmilksoap.com or contact us at 4282 370th St., Sheldon IA 51201, United States. Requests to exercise privacy rights must be made by mail as described in "Your Rights."