Privacy policy

Last updated 4 September 2026. What Thin Blue Line Holdings LLC collects when you use
tblholdings.store, why, how long it is kept, who sees it, and what you can ask us to do about it.

1. Who is responsible

Thin Blue Line Holdings LLC, 4595 S Cinder Cove Ave, Meridian, ID 83642, United States. Write to
legal@tblholdings.store about anything on this page.

2. What we collect

What you give us

To take an order we collect your name, delivery and billing address, email address and telephone number.
We need those to take the order, deliver it and contact you if something changes. Messages you send us are
kept with our replies so the history is there if you write again. An account stores an email address and a
hashed password — never the password itself.

Payment details

Card details go directly to our payment processor. We do not receive or store your full card number,
expiry date or security code. We receive the outcome, the last four digits, the card type and the billing
postcode, which is what lets us match a payment to an order and answer a question about it.

What is collected automatically

We log IP address, browser type and pages requested, for security, fault diagnosis and to understand which
pages are read. We use three cookies: one to keep your bag between pages, one to keep you signed in if you
have an account, one to remember that you dismissed the cookie notice. All three are necessary for the site
to work. If we ever add analytics or advertising cookies we will ask first.

3. Lawful basis

Order and delivery information is processed because it is necessary to perform your contract. Security
logs and fraud checks rest on our legitimate interest in protecting the site. Transaction records are kept
because tax and accounting law requires it. Where we rely on consent, you can withdraw it at any time.

4. Who we share it with

• our payment processor, to take payment and handle any dispute;
• the carrier, which receives your name, address and phone number;
• our web host and email provider, which store data on our behalf;
• our accountant, for transaction records;
• a professional adviser or public authority where we are legally obliged.

We do not sell your personal information and we do not share it for anyone else’s marketing.
If the business were sold, customer records could transfer to the buyer, who would be bound by this policy
until they told you otherwise.

5. How long we keep it

Order and transaction records for seven years, which is what our tax obligations require. Correspondence
for three years. Account records until you ask us to close the account. Server logs for ninety days. Records
of marketing consent for as long as the consent stands plus two years, so we can show when it was given and
withdrawn.

6. How we protect it

The site is served over HTTPS. Access to order data is limited to those who need it, behind individual
accounts with multi-factor authentication. Passwords are hashed. The platform is kept patched. No system is
perfect and we will not pretend otherwise: if a breach affects your information we will tell you and the
relevant authority as the law requires, and we will tell you what we know rather than the least we can.

7. Your rights

You can ask for a copy of what we hold, correction of anything wrong, deletion where we are not required
to keep it, restriction while a dispute is resolved, or a portable copy. You can object to processing based
on legitimate interest, and withdraw marketing consent at any time. We respond within thirty days and we do
not charge.

California residents have the right to know what is collected, to request deletion, to correct inaccurate
information and not to be discriminated against for exercising those rights. We do not sell or share personal
information as those terms are defined under California law.

8. Children

This site is not directed at children and we do not knowingly collect information from anyone under 16. If
you believe a child has given us information, write and we will delete it.

9. International transfers

We operate in the United States and our providers store data here. Ordering from elsewhere means your
information is transferred here.

10. Changes

The date at the top changes when this policy does. A change that materially affects information we already
hold is emailed to account holders rather than left for you to notice.

11. Contact and complaints

legal@tblholdings.store, or Thin Blue Line Holdings LLC, 4595 S Cinder Cove Ave, Meridian,
ID 83642. We would rather hear from you directly and fix it. You also have the right to
complain to your state attorney general or the Federal Trade Commission.