Privacy policy

Effective Date: May 19, 2026 Last Updated: May 19, 2026

This Privacy Policy describes how Old School & Real, Inc., doing business as True North Granola ("True North Granola," "we," "us," or "our"), collects, uses, shares, and protects personal information when you visit truenorthgranola.com (the "Site"), purchase our products, subscribe to our communications, or otherwise interact with us.

By using the Site or providing us with personal information, you acknowledge the practices described in this Policy. If you do not agree with this Policy, please do not use the Site.

1. Information We Collect

Information You Provide

We collect personal information you provide directly when you:

• Create a customer account

• Place an order or enroll in a subscription

• Sign up for our email list

• Submit a product review or other user-generated content

• Contact customer service

• Participate in a promotion, survey, or sweepstakes

This information may include:

• Name

• Email address

• Mailing and billing addresses

• Phone number

• Payment information (processed by our payment providers — see Section 6; we do not store full payment card numbers on our servers)

• Account credentials (username, password)

• Order history and subscription preferences

• Communications you send us, including reviews and customer service messages

Information Collected Automatically

When you visit the Site, we and our service providers automatically collect:

• IP address and approximate location

• Device type, operating system, and browser

• Pages viewed, time spent, and links clicked

• Referring URL

• Date and time of access

• Cookie and similar tracking identifiers

Information From Third Parties

We may receive information about you from:

• Payment processors confirming transaction status

• Shipping carriers providing delivery updates

• Social media platforms when you interact with our pages or ads

• Marketing, analytics, and review partners

2. How We Use Personal Information

We use personal information to:

• Process and fulfill orders, including recurring subscription orders

• Manage customer accounts

• Communicate about orders, shipments, and customer service

• Send marketing emails to subscribers (you may opt out at any time)

• Operate, improve, and personalize the Site

• Measure advertising and marketing performance

• Detect, investigate, and prevent fraud, security incidents, and illegal activity

• Comply with legal obligations, including tax and recordkeeping requirements

• Enforce our terms and protect our rights

3. Cookies and Tracking Technologies

We use cookies, web beacons, pixels, and similar technologies to operate the Site, remember preferences, analyze performance, and (in the future) support advertising.

Categories of cookies we use or may use:

• Strictly necessary — required for the Site to function (shopping cart, login, security).

• Performance and analytics — help us understand how visitors use the Site. We currently use Google Analytics 4 and expect to use Shopify analytics.

• Functional — remember your preferences and settings.

• Advertising and targeting — may be used in the future to deliver and measure advertising (see Section 4).

You can manage cookies through your browser settings, through our cookie banner where available, and through the opt-out tools described in Section 7. Blocking some cookies may affect Site functionality.

We respond to Global Privacy Control (GPC) signals as a valid opt-out of "sale" and "sharing" of personal information for residents of states that recognize GPC.

4. Advertising and Analytics

Currently: We use Google Analytics 4 for site analytics. We do not currently run advertising pixels.

In the future, we anticipate using one or more of the following advertising and tracking providers:

• Meta (Facebook / Instagram) Pixel

• Google Ads and Google Tag Manager

• TikTok Pixel

• Pinterest Tag

• Retargeting platforms (e.g., Criteo, AdRoll)

• Affiliate tracking platforms (e.g., ShareASale, Refersion)

If and when we deploy these tools, they may collect information about your activity on the Site and across other sites to deliver targeted advertising and measure performance. Under California and certain other state privacy laws, this activity may be considered "sharing" of personal information for cross-context behavioral advertising. See Section 8 for your opt-out rights.

You may also opt out of interest-based advertising through industry tools:

• Digital Advertising Alliance: optout.aboutads.info

• Network Advertising Initiative: optout.networkadvertising.org

• For mobile devices, use your device's "Limit Ad Tracking" or "Opt Out of Ads Personalization" setting

5. How We Share Personal Information

We share personal information in the following circumstances:

Service providers. We share information with vendors that perform services for us, including payment processing, order fulfillment, shipping, email marketing, web hosting, analytics, customer reviews, and IT support. These providers are contractually limited to using personal information for the services they perform on our behalf.

Advertising partners. If we run advertising programs (see Section 4), we may share limited identifiers with advertising platforms for targeting and measurement.

Legal compliance and safety. We may disclose information when we believe in good faith that disclosure is required to comply with a subpoena, court order, or other legal obligation; to protect the rights, property, or safety of True North Granola, our customers, or others; or to investigate fraud or violations of our terms.

Business transfers. If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, personal information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your personal information.

With your direction or consent. We share information when you direct us to or otherwise consent.

We do not sell personal information for money. Some of the advertising and analytics activities described in Section 4 may qualify as "sale" or "sharing" under California and other state privacy laws. See Section 8 for opt-out rights.

6. Third-Party Services We Currently Use

To be transparent about who has access to data on our behalf, our current providers include:

Each provider maintains its own privacy policy describing how it handles personal information.

7. Your Choices

Email marketing. Unsubscribe using the link in any marketing email or by emailing info@truenorthgranola.com. Transactional emails (order confirmations, shipping updates, account notices) will continue.

Cookies. Adjust your browser settings or use the Site's cookie controls where available.

Targeted advertising. Use the industry opt-out tools listed in Section 4 and the state-specific rights in Section 8.

Account information. Review and update account information by signing into your account or by contacting us.

8. Your Privacy Rights

California Residents (CCPA / CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, disclose, sell, or share

• Access the specific pieces of personal information we hold about you

• Correct inaccurate personal information

• Delete personal information, subject to legal exceptions

• Opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising

• Limit the use and disclosure of sensitive personal information

• Non-discrimination for exercising any of these rights

Categories of information we collect: identifiers; commercial information (purchases); internet or other electronic network activity; approximate geolocation; and inferences drawn from the above.

Sources of information: directly from you; automatically from your device; from our service providers; from third-party platforms when you interact with our content.

Purposes of collection: as described in Section 2.

Disclosure and sharing: as described in Sections 4, 5, and 6.

Retention: as described in Section 10.

To submit a request, email info@truenorthgranola.com with "California Privacy Request" in the subject line, or call 1-802-254-9200. We will verify your identity before processing requests. You may use an authorized agent; we will require written authorization and verification.

Do Not Sell or Share / Limit Use of Sensitive Personal Information. Email us at info@truenorthgranola.com with "Do Not Sell or Share" or "Limit Use of Sensitive PI" in the subject line. We also recognize the Global Privacy Control browser signal as a valid opt-out.

Shine the Light (Cal. Civ. Code §1798.83). California residents may request information about our disclosure of personal information to third parties for direct marketing purposes. We do not currently make such disclosures.

Other US State Residents

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, New Hampshire, New Jersey, Indiana, Iowa, Tennessee, Minnesota, Maryland, and other states with comprehensive consumer privacy laws may have similar rights, including the right to access, correct, delete, obtain a portable copy of personal information, and opt out of targeted advertising, sale, or certain profiling activities. Submit requests using the contact methods above. If we deny a request, you may appeal by replying to our response with "Appeal."

Residents of the European Economic Area, United Kingdom, and Switzerland

If you are in the EEA, the UK, or Switzerland, you have rights under the GDPR and UK GDPR, including the right to access, rectify, erase, restrict, or object to processing of personal information; the right to data portability; and the right to withdraw consent where processing is based on consent.

Legal bases for processing include performance of a contract (orders and accounts), compliance with legal obligations, our legitimate interests in operating and improving our business, and your consent (marketing).

International transfers. When we ship internationally or process data from the EEA, UK, or Switzerland, personal information is transferred to the United States, where data protection laws differ. Where required, we rely on Standard Contractual Clauses or other lawful transfer mechanisms.

Supervisory authority. You may lodge a complaint with your local data protection authority.

Contact info@truenorthgranola.com to exercise any of these rights.

9. Subscription Auto-Renewal

If you enroll in a subscription product, you authorize us to automatically charge your payment method at the frequency you selected until you cancel. We will send a reminder before each charge where required by law. You may cancel a subscription at any time by signing into your account or by emailing info@truenorthgranola.com. Cancellation takes effect for future shipments; charges already processed for shipped orders are governed by our refund policy.

10. Data Retention

We retain personal information for as long as needed to fulfill the purposes described in this Policy, including:

• Order and transaction records: at least seven (7) years to comply with tax, accounting, and consumer-protection laws

• Account information: until you request deletion or your account becomes inactive for an extended period

• Marketing data: until you unsubscribe or request deletion

• Customer service records: typically two (2) to three (3) years

• Analytics and log data: typically 14 to 26 months in standard analytics tools

We may retain information longer where required by law or to defend legal claims.

11. Data Security

We use commercially reasonable administrative, technical, and physical safeguards to protect personal information. Payment card data is processed by PCI-DSS compliant providers and is not stored on our servers. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. If we become aware of a security incident affecting your personal information, we will notify you as required by law.

12. Links to Other Sites

The Site may contain links to third-party websites, including distributor and retailer pages. We are not responsible for the privacy practices or content of those sites. Review their privacy policies before providing personal information.

13. Children's Privacy

The Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us and we will delete it. For California residents under 16, we do not sell or share personal information without affirmative opt-in.

14. Do Not Track

Some browsers offer a "Do Not Track" signal. Because no industry standard has been adopted for responding to DNT signals, we do not currently respond to them. We do honor the Global Privacy Control signal as described in Section 3.

15. Changes to This Policy

We may update this Policy from time to time. The "Last Updated" date at the top reflects the most recent revision. Material changes will be communicated via email or a prominent notice on the Site before the change takes effect.

16. Contact Us

For questions, concerns, or requests related to this Policy:

Old School & Real, Inc. DBA True North Granola 74 Cotton Mill Hill, A-132 Brattleboro, VT 05301 Email: info@truenorthgranola.com Phone: 1-802-254-9200

 

17. Governing Law

This Policy is governed by the laws of the State of Vermont, without regard to its conflict-of-laws principles, except where superseded by applicable state, federal, or international privacy law granting consumers stronger rights.