Privacy Policy
Twease is built the way our bottle is built — with restraint. This site runs no analytics, no advertising trackers, and no third-party cookies. We collect personal information only when you choose to give it to us, and we never sell it or share it for advertising. This policy explains exactly what we collect, why, and the rights you have — including under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), CalOPPA, and other U.S. state privacy laws.
1. Who we are & scope
This Privacy Policy describes how Twease ("Twease," "we," "us," or "our") handles information in connection with tweasewater.com (the "Site") and the Twease V1 interest-list program. It applies to visitors and customers in the United States. By using the Site, you agree to the practices described here.
2. Information we collect
We collect the minimum we need, and only when you choose to provide it:
- Interest-list details (provided by you). When you join the Twease V1 interest list, we collect your name, email address, your optional finish preferences (shell and canister choices), and a random reference code. No order is placed, no payment is taken, and no payment-card data is collected on this Site.
- Newsletter signup (provided by you). Your email address, if you subscribe.
- Correspondence (provided by you). Anything you include when you email us.
- Hosting logs (automatic, by our infrastructure provider). Like virtually every website, the company that hosts the Site may briefly log IP addresses and request metadata for security and reliability purposes. We do not use this information to identify or profile you.
We do not collect: precise geolocation, biometric information, government identifiers, financial account details, or any category of "sensitive personal information" as defined by the CPRA. We do not use analytics services, advertising pixels, fingerprinting, or session recording.
3. Notice at collection (California)
For California residents, this table summarizes our practices in the categories defined by Cal. Civ. Code §1798.140:
| Category of personal information | Collected? | Source | Purpose | Sold or shared? |
|---|---|---|---|---|
| Identifiers (name, email) | Yes | Directly from you | Maintain the interest list, send updates you request | No |
| Commercial information (interest-list selections) | Yes | Directly from you | Maintain the interest list | No |
| Internet or network activity | Hosting logs only | Automatically, by our host | Security and reliability | No |
| Geolocation (precise) | No | — | — | — |
| Sensitive personal information | No | — | — | — |
| Biometric, audio/visual, employment, education, inferences | No | — | — | — |
We do not sell personal information, and we do not share it for cross-context behavioral advertising. We have not done so in the preceding 12 months. We retain each category only as long as described in Data retention.
4. How we use information
- To record and manage your Twease V1 interest-list signup, and to email you when orders open.
- To send the newsletter you subscribed to (every email includes a way to opt out).
- To respond when you contact us.
- To protect the Site and our business — preventing fraud and abuse, and complying with legal obligations.
We do not use your personal information for automated decision-making, profiling, or targeted advertising.
7. Your California privacy rights (CCPA/CPRA)
If you are a California resident, you have the right to:
- Know / access. Request the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the categories of third parties to whom it was disclosed.
- Delete. Request deletion of personal information we collected from you, subject to legal exceptions.
- Correct. Request correction of inaccurate personal information.
- Portability. Receive a copy of your personal information in a usable format.
- Opt out of sale or sharing. We do not sell personal information or share it for cross-context behavioral advertising — so there is nothing to opt out of. If that ever changed, we would post a "Do Not Sell or Share My Personal Information" link first.
- Limit sensitive personal information. We do not collect sensitive personal information as defined by the CPRA.
- Non-discrimination. We will never deny you service, charge a different price, or provide a different quality of service for exercising your privacy rights.
Shine the Light (Cal. Civ. Code §1798.83): we do not disclose personal information to third parties for their own direct-marketing purposes, so no Shine the Light request is necessary — but California residents may still ask us to confirm this once per year.
8. Other U.S. state privacy rights
Residents of states with comprehensive privacy laws — including Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), and Oregon (OCPA) — have similar rights to access, correct, delete, and obtain a copy of their personal data, and to opt out of targeted advertising, sale, and profiling. We do not engage in targeted advertising, sale of personal data, or profiling, and we honor access, correction, and deletion requests from any U.S. resident regardless of state.
Appeals: if we decline to act on your request, you may appeal by replying to our decision email with the word "Appeal" in the subject line. We will respond within the period required by your state's law. If your appeal is denied, you may contact your state attorney general.
9. How to exercise your rights
- Email privacy@tweasewater.com with the subject line "Privacy Request" and tell us which right you are exercising.
- We will verify your request by matching the email address you write from (or another reasonable method) against our records. We may ask for additional confirmation if needed; we will never ask for more information than verification requires.
- You may use an authorized agent to submit requests on your behalf; we will ask for written proof of authorization.
- We respond within 45 days (extendable once by 45 days where permitted, with notice). Exercising your rights is always free.
10. Children's privacy
The Site is not directed at children. We do not knowingly collect personal information from children under 13 (per COPPA), and we do not sell the personal information of anyone — including consumers under 16, for whom California law would require opt-in. If you believe a child has provided us personal information, contact us and we will delete it.
11. Data retention
- Interest list: kept until orders open and the list is retired, or until you ask us to delete you — then up to 24 months for records and legal compliance.
- Newsletter: kept until you unsubscribe, then removed from the active list.
- Correspondence: kept as long as needed to resolve your inquiry and for a reasonable period after.
- Hosting logs: retained briefly by our infrastructure provider per their security practices.
12. Security
The Site is served exclusively over HTTPS with strict transport security, a restrictive Content-Security-Policy, and no third-party scripts. Reservation submissions travel encrypted in transit. No method of transmission or storage is 100% secure, but we minimize risk the most reliable way there is: by collecting almost nothing. Security researchers can reach us via security.txt.
13. Changes to this policy
If we change this policy, we will post the new version here and update the "Last updated" date above. Material changes will be highlighted on the Site or, where appropriate, emailed to affected customers. The policy is reviewed at least every 12 months as required by the CCPA.
14. Contact us
Privacy questions, requests, or complaints: privacy@tweasewater.com (subject: "Privacy Request").