Privacy Policy

Effective Date:
June 30, 2026
Last Updated:
June 30, 2026

Welcome to Our Tool Crib (“Our Tool Crib,” “we,” “us,” or “our”),
operated by Our Tool Crib,
a company organized under the laws of
Minnesota.
Our website is located at OurToolCrib.com.

We take your privacy seriously. This Privacy Policy explains what personal
information we collect about you, how we use and protect it, when and with
whom we share it, and what rights you have regarding your information.
Please read this policy carefully before using our website or placing an order.
By visiting OurToolCrib.com or purchasing from us, you agree to the practices
described in this policy.

1. Information We Collect

A. Information You Provide to Us

When you create an account, place an order, contact customer support, sign up
for marketing communications, or otherwise interact with us, you may provide us
with the following types of personal information:

  • Identity information: First and last name, company name
    (for business customers).
  • Contact information: Email address, phone number.
  • Billing and shipping address: Street address, city,
    state, ZIP code.
  • Account credentials: Username and password (passwords
    are stored in hashed/encrypted form — see Section 7).
  • Order information: Products purchased, quantities, order
    history, returns or exchanges, and warranty or support requests.
  • Communications: Messages, inquiries, and attachments you
    send to our support team at
    support@ourtoolcrib.com.
  • Marketing preferences: Your opt-in or opt-out choices for
    promotional emails and other marketing communications.

B. Payment Information

We do not collect or store your full payment card number, card
verification value (CVV), or bank account number on our servers.
All payment transactions are processed by one or more third-party
payment processors. By submitting payment information on our checkout page,
you are transmitting that information directly to our payment processor(s),
subject to their own privacy policies. We receive only a tokenized or
truncated reference (e.g., the last four digits of your card and card type)
and a transaction confirmation. See Section 4 (Sharing of Information) for
more on our payment processors.

C. Information Collected Automatically

When you visit OurToolCrib.com, our servers and third-party tools automatically
collect certain technical and usage data, including:

  • Device and browser information: IP address, browser type
    and version, operating system, device type (desktop, mobile, tablet),
    screen resolution, and referring URL.
  • Log data: Pages visited, links clicked, time and date of
    visits, time spent on pages, and error logs.
  • Location data: General geographic location inferred from
    your IP address (city/region level; we do not collect precise GPS
    coordinates).
  • Cookies and similar technologies: As described in
    Section 5 below.
  • Analytics data: Aggregated and, where applicable,
    individual behavioral data collected through analytics tools such as
    Google Analytics.

D. Information from Third Parties

We may receive limited information about you from third parties, including:

  • Shipping carriers (e.g., delivery status and address corrections).
  • Payment processors (e.g., transaction status, fraud signals).
  • Advertising networks and analytics providers, as described in Section 5.

2. How We Use Your Information

We use the personal information we collect for the following purposes:

  • Processing and fulfilling orders: To accept payment
    authorizations (through our third-party processor), pick, pack, and ship
    your order, and communicate order status, tracking, and delivery
    confirmations.
  • Account management: To create and maintain your customer
    account, allow you to view order history, and manage your saved addresses
    and preferences.
  • Customer support: To respond to your questions, process
    returns or exchanges, and resolve disputes.
  • Fraud prevention and security: To detect, investigate, and
    prevent fraudulent transactions, unauthorized access, and other illegal
    activity, and to protect the rights, property, and safety of our customers
    and our business.
  • Legal compliance: To comply with applicable federal and
    state laws, including tax and recordkeeping obligations, and to respond to
    lawful requests from courts or government authorities.
  • Marketing communications (with your consent or as permitted by
    law):     To send you promotional emails about new products, special
    offers, and discounts. You may opt out at any time as described in
    Section 6. We comply with the federal CAN-SPAM Act and applicable
    state law when sending commercial email.
  • Website improvement and analytics: To understand how
    visitors use our site, improve our product catalog and user experience,
    and measure the performance of our marketing campaigns.
  • Business operations: For internal recordkeeping,
    accounting, and audit purposes.

We do not use your personal information to make fully automated
decisions that produce significant legal or similarly significant effects
on you without human review.

3. Payment Data Handling

As noted in Section 1(B), payment card data is handled exclusively by our
third-party payment processor(s).
We currently offer PayPal and Affirm as payment and financing options at checkout; each handles your payment information in accordance with its own privacy policy.
These processors are PCI-DSS compliant. We strongly encourage you to review
their privacy policies and terms before submitting payment information.

We never store, transmit, or have access to your full card number,
CVV, or PIN. Our records contain only the tokenized reference
provided by our payment processor.

4. How We Share Your Information

We do not sell your personal information to data brokers or unaffiliated
third parties for their own marketing purposes.

We do not “sell” your personal information as defined by the
California Consumer Privacy Act (CCPA/CPRA), Cal. Civ. Code § 1798.140(ad).

We also do not “share” your personal information for cross-context behavioral advertising as defined by CPRA § 1798.140(ah).

We share your personal information only in the following limited circumstances:

A. Service Providers and Processors

We work with trusted third-party companies that perform services on our
behalf, under written agreements requiring them to protect your data and
use it only for the specific services they provide to us. These may include:

  • Payment processors (to process credit and debit card
    transactions).
  • Shipping and fulfillment carriers (to deliver your
    order — we share your name and shipping address with carriers such as
    UPS, FedEx, and USPS).
  • Website hosting and technology providers (to operate and
    maintain OurToolCrib.com —
    WordPress / WooCommerce and our website hosting provider).
  • Analytics providers
    (Google Analytics, used to
    understand traffic patterns).
  • Fraud prevention and security services.

B. Shipping Carriers

To deliver your order, we must share your name, shipping address, and
relevant order details with our shipping carriers. Those carriers may have
their own privacy policies governing how they use this information.

C. Legal Requirements

We may disclose your personal information when we believe in good faith that
disclosure is required or permitted by law, including to:

  • Comply with a court order, subpoena, warrant, or other lawful legal
    process.
  • Respond to requests from law enforcement or other governmental
    authorities.
  • Enforce our Terms of Use or other agreements.
  • Protect against fraud, abuse, or imminent threat to the safety of any
    person.

D. Business Transfers

If Our Tool Crib is involved in a merger, acquisition, asset sale,
reorganization, or similar business transaction, your personal information
may be transferred as part of that transaction. We will notify you via
a prominent notice on this website, or by email to the address associated
with your account, before your information is transferred and becomes subject
to a materially different privacy policy.

E. With Your Consent

We may share your information with other parties when you have given us your
explicit consent to do so.

5. Cookies and Tracking Technologies

A. What We Use

Like most e-commerce websites, OurToolCrib.com uses cookies and similar
tracking technologies (such as web beacons, pixels, and local storage) to
operate our site effectively and provide you with a better experience.

  • Strictly necessary cookies: Required for the website to
    function. These include your shopping cart session, login authentication,
    and security tokens. You cannot opt out of these without disabling the site.
  • Preference/functionality cookies: Remember your choices
    such as saved addresses, currency preferences, and wishlist items.
  • Analytics cookies: Collect information about how visitors
    use our site (pages visited, time on site, bounce rate). We use
    Google Analytics for this purpose.
  • Advertising/targeting cookies: We do not currently use advertising or targeting cookies, and we do not permit third-party advertising networks to place such cookies through our Site.

B. Your Cookie Choices

You can control and limit cookie use in the following ways:

  • Browser settings: Most browsers allow you to refuse or
    delete cookies. Refer to your browser’s help documentation. Note that
    disabling cookies may affect website functionality, including your ability
    to add items to your cart or complete checkout.
  • Google Analytics opt-out: You can install the
    Google Analytics Opt-out Browser Add-on
    to prevent your data from being used by Google Analytics.

  • Advertising opt-outs: You may opt out of interest-based
    advertising by visiting:

  • Do Not Track (DNT): Some browsers transmit a “Do Not
    Track” signal. Because there is no uniform industry standard for
    responding to DNT signals, our website does not currently alter its data
    collection practices in response to DNT signals. We will revisit this
    position if a uniform standard is adopted.
  • Global Privacy Control (GPC): California residents who
    use a browser or browser extension that signals the Global Privacy Control
    (GPC) may use that signal as an opt-out of the sale or sharing of personal
    information for cross-context behavioral advertising to the extent required
    by CPRA § 1798.135(b).

6. Your Privacy Rights

A. California Residents — CCPA/CPRA Rights

If you are a California resident, the California Consumer Privacy Act of 2018
(CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA)
(Cal. Civ. Code § 1798.100 et seq.), grants you the following rights:

  • Right to Know (§ 1798.110): You have the right to request
    that we disclose what categories and specific pieces of personal information
    we have collected about you, the categories of sources, the business or
    commercial purposes for collecting it, and the categories of third parties
    with whom we share it.
  • Right to Delete (§ 1798.105): You have the right to
    request deletion of personal information we have collected from you,
    subject to certain exceptions (e.g., information we need to complete a
    transaction you requested, to comply with a legal obligation, or to detect
    security incidents).
  • Right to Correct (§ 1798.106): You have the right to
    request that we correct inaccurate personal information we maintain
    about you.
  • Right to Opt Out of Sale or Sharing (§ 1798.120):
    You have the right to opt out of the “sale” of your personal information
    or its “sharing” for cross-context behavioral advertising.
    Because we do not sell or share your personal information, there is nothing to opt out of; you may contact us at any time with questions.
  • Right to Limit Use of Sensitive Personal Information
    (§ 1798.121):     To the extent we collect “sensitive personal
    information” as defined by CPRA, you have the right to limit our use of
    that information to purposes necessary to provide the services you request.
    We do not currently collect sensitive personal information as defined by CPRA.
  • Right to Non-Discrimination (§ 1798.125): We will not
    discriminate against you for exercising any of your CCPA/CPRA rights.
    We will not deny you goods or services, charge you different prices, or
    provide a different quality of service because you exercised your privacy
    rights.

How to Exercise Your California Rights: Submit a verifiable
consumer request by:

  • Emailing us at
    support@ourtoolcrib.com
    with the subject line “California Privacy Rights Request.”
  • You may also call us at (763) 200-5760, Monday–Friday, 8:00 AM–5:00 PM Central Time.

We will respond to a verifiable consumer request within 45 calendar
days. If we need additional time (up to another 45 days), we will
notify you within the initial 45-day period. You may designate an authorized
agent to submit a request on your behalf, subject to verification of the
agent’s authority.

B. Residents of Other States

A growing number of U.S. states have enacted comprehensive consumer privacy
laws, including (by way of example and not limitation) Virginia (VCDPA),
Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), and others. These laws
generally grant residents rights similar to those described above —
including rights to access, correct, delete, and opt out of certain uses of
personal information.

If you are a resident of a state with a privacy law that applies to our
processing of your personal information, you may submit a request using the
contact information in Section 9. We will evaluate your request and respond
in accordance with applicable law.
Depending on your state of residence, you may have additional rights under applicable state privacy laws. To exercise any such rights, please contact us using the information in Section 9.

C. Marketing Opt-Out

You may opt out of receiving promotional emails from us at any time by:

  • Clicking the “Unsubscribe” link at the bottom of any marketing email.
  • Emailing
    support@ourtoolcrib.com
    with “Unsubscribe” in the subject line.

Please note that even if you opt out of marketing emails, we will still send
you transactional communications necessary to complete your orders (e.g.,
order confirmations, shipping notifications, and support responses).

7. Data Security

We use commercially reasonable administrative, technical, and physical
safeguards designed to protect your personal information from unauthorized
access, use, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit using TLS/SSL protocols.
  • Hashed storage of account passwords (passwords are never stored in
    plain text).
  • Access controls limiting which employees and contractors can access
    personal information on a need-to-know basis.
  • Reliance on PCI-DSS-compliant third-party payment processors so that
    full payment card data is never stored on our systems.

No method of transmission over the internet or method of electronic
storage is 100% secure. While we work hard to protect your
information, we cannot guarantee absolute security. If you believe your
account has been compromised, please contact us immediately at
support@ourtoolcrib.com.

In the event of a data breach that triggers notification obligations under
applicable state law (e.g., California Civil Code § 1798.82), we will notify
affected individuals as required by law.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the
purposes described in this policy, including to complete transactions,
maintain your account, comply with legal obligations (such as tax and
accounting laws), resolve disputes, and enforce our agreements.

Specifically:

  • Order and transaction records are retained for
    seven (7) years to comply with IRS and state tax recordkeeping requirements
  • Account information is retained while your account remains
    active and for
    three (3) years after the last account activity or transaction thereafter.
  • Marketing data (email opt-in records) is retained until
    you opt out, and records of your opt-out are retained indefinitely for
    compliance purposes.
  • Support communications are retained for
    two (2) years.

When personal information is no longer needed, we delete or anonymize it
in a secure manner.

9. Children’s Privacy

OurToolCrib.com is a professional and consumer tool retailer. Our website and
services are not directed to, marketed toward, or intended for children under
the age of 13. We do not knowingly collect personal
information from children under 13 years of age. If we become aware that we
have inadvertently collected personal information from a child under 13,
we will promptly delete it.

We also do not knowingly collect personal information from individuals between
the ages of 13 and 15 for the purpose of selling or sharing that information
for targeted advertising without their opt-in consent, as required by
CPRA § 1798.120(c) for California residents under 16.

If you believe a child under 13 has provided personal information to us,
please contact us at
support@ourtoolcrib.com
so we can address the situation.

10. Our Tool Crib Operates in the United States

Our Tool Crib is a U.S.-based retailer. We ship only within the United States
and our systems are operated in the United States. If you are accessing our
website from outside the United States, please be aware that your information
will be transferred to, stored, and processed in the United States, where our
servers are located and our business is operated.

Data protection laws in the United States may differ from the laws of your
country. By using our website, you consent to the transfer of your information
to the United States to the extent permitted by applicable law.

11. Links to Third-Party Websites

Our website may contain links to third-party websites (for example, brand
manufacturer pages, shipping carrier tracking portals, or social media
profiles). We are not responsible for the privacy practices of those
third-party sites. We encourage you to review the privacy policies of any
third-party site you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in
our business practices, legal requirements, or technology. When we make
material changes, we will:

  • Update the “Effective Date” and “Last Updated” date at the top of this
    page.
  • Post the revised policy at
    OurToolCrib.com/privacy-policy
    .
  • For material changes, send an email notification to customers with
    active accounts or provide a prominent notice on our website.

Your continued use of our website after the effective date of any updated
policy constitutes your acceptance of the changes. We encourage you to review
this policy periodically.

13. How to Contact Us

If you have questions, concerns, or requests related to this Privacy Policy
or our privacy practices, please contact us:

Our Tool Crib
Our Tool Crib
15804 Central Avenue NE
Ham Lake, MN 55304
Email:
support@ourtoolcrib.com
Customer Support Hours: Monday–Friday, 8:00 AM – 5:00 PM Central Time

For California residents submitting a formal CCPA/CPRA rights request,
please include “California Privacy Rights Request” in the subject line of
your email to help us route your request promptly.