🚚 FREE SHIPPING ON EVERY ORDER ⭐ THOUSANDS OF SNACKS & CANDY ⚡ FAST SHIPPING FROM NEW YORK

🔒 Privacy Policy

Your Privacy Matters

At Tribeca Curations we take your privacy seriously. This policy explains what we collect, who we share it with, and what you can tell us to stop doing. We sell only within the United States, so this policy is written around US privacy law.

Tribeca Curations · 40 Rabro Dr, Hauppauge, NY 11788 · Contact us

Information We Collect

  • Order information: your name, email address, shipping address and, if you give it, your phone number
  • Payment information: handled entirely by Square. Card details are entered into fields hosted by Square and never reach our servers
  • Account activity: your order history, and your email address if you sign in to view it
  • Marketing preferences: whether you have asked to receive email from us, and when you asked
  • Technical data: IP address, browser and device type, pages viewed, and the site that referred you

If you buy from us on a marketplace such as TikTok Shop and tick their box agreeing to marketing, we may receive your email address from that marketplace and add it to our list. If you did not tick it, we do not.

How We Use Your Information

  • Process, pack and ship your order
  • Send order confirmations and shipping updates
  • Answer your questions and provide support
  • Send marketing email, only if you asked for it, and only until you tell us to stop
  • Measure how the site is used so we can improve it
  • Show ads for our products to people who have visited the site
  • Detect and prevent fraud

Cookies and Tracking

These are the cookies this site actually uses. Nothing else is set by us.

Strictly necessary — the site does not work without these

  • session_id — keeps your basket and your signed-in state. Expires when you close your browser
  • tc_coupon — remembers a discount code you used a link for, so it still applies at checkout
  • tribeca_sub — identifies your newsletter subscription so the unsubscribe link works
  • tc_ref — records which affiliate sent you, for 30 days, so we can pay them commission if you buy

Analytics and advertising — set by others, and optional

  • Google Analytics (_ga, _ga_*) — how many people visit, which pages they read, what they buy
  • Microsoft Advertising / UET (_uetsid, _uetvid, MUID) — measures whether an ad led to a sale, and lets us show ads to people who visited the site
  • Meta (Facebook & Instagram) Pixel & Conversions API (_fbp, _fbc) — measures ad performance, custom audiences, and retargeting across Meta services. Securely hashes email addresses and phone numbers (SHA-256) for privacy-safe advanced matching and conversion measurement

Square sets its own cookies on the checkout page to process your payment securely and to detect fraud.

Advertising and Remarketing

We advertise through Meta (Facebook & Instagram) and Microsoft Advertising (Bing). If you visit this site, you may later be shown our ads on Facebook, Instagram, Bing, or partner networks. These platforms tell us, in aggregate, whether an ad led to a sale — but we do not receive your private account credentials from them. We also use Meta's Conversions API to securely transmit hashed event data (like hashed email or order value) directly to Meta to measure ad effectiveness accurately.

You can turn off targeted ads directly with the companies involved: Meta (Facebook/Instagram) ad settings, Microsoft ad settings, Google ad settings, or the Google Analytics opt-out add-on.

Your Privacy Choices

We honour Global Privacy Control. If your browser or an extension sends a GPC signal, we do not load the Google Analytics or Microsoft Advertising tags on any page you view. They are not loaded and switched off — they are not loaded at all, so neither company receives your IP address. Nothing is required of you beyond turning the setting on, and we do not record that you did.

GPC is built into some browsers and available as an extension for the rest. You can read about it at globalprivacycontrol.org.

You can also refuse cookies in your browser settings. The strictly necessary cookies above will stop working if you do, which mainly means your basket will not survive between pages.

Information Sharing

We do not sell your personal information for money. We do allow the advertising and analytics providers listed above to collect information about your visit, which California law treats as sharing for cross-context behavioural advertising. The section above tells you how to stop it.

Beyond that, we share your information only with:

  • Square — to take your payment and detect fraud
  • Our fulfilment and inventory provider — receives your name, shipping address and order contents so the order can be picked, packed and dispatched
  • Shipping carriers — USPS, UPS or FedEx, to deliver the parcel
  • Our email provider — to deliver order confirmations and, if you asked for it, marketing email
  • Meta, Google and Microsoft — analytics and advertising, as described above
  • Our image delivery network — serves product photographs, and receives your IP address in doing so
  • Legal requirements — when the law requires it or to protect our rights
  • Business transfers — if the business is sold or merged

Product pages also load fonts from Google Fonts, which means Google receives your IP address when a page loads.

Your California Privacy Rights

If you live in California, the CCPA as amended by the CPRA gives you the right to:

  • Know what personal information we have collected about you, and where it came from
  • Receive a copy of it
  • Have it corrected if it is wrong
  • Have it deleted, subject to the records we must keep for tax and order history
  • Opt out of the sharing of your personal information for cross-context behavioural advertising
  • Not be treated differently for exercising any of these rights — prices and service stay the same

To exercise any of them, contact us and say what you want. We will verify that the request comes from you, usually by replying to the email address on your order, and answer within 45 days.

We do not knowingly sell or share the personal information of anyone under 16.

Marketing Email

We only send marketing email to people who asked for it. Every message carries a one-click unsubscribe link and our postal address, and unsubscribing takes effect immediately. Order confirmations and shipping updates are not marketing and are sent regardless, because you need them.

If you unsubscribe here, we keep you unsubscribed. A marketing preference arriving later from a marketplace does not put you back on the list.

Data Security and Retention

  • TLS encryption on every page and every form
  • Card details are entered into Square's own hosted fields and never touch our servers
  • Access to customer records is restricted to staff who need it
  • Order records are kept as long as tax and accounting rules require
  • Marketing subscriptions are kept until you unsubscribe

No system is perfectly secure, and we do not claim otherwise. If a breach affects your information we will tell you as the law requires.

Children's Privacy

This site is not intended for children under 13 and we do not knowingly collect their personal information. If you believe we have, please contact us and we will delete it.

Policy Updates

We may update this policy. Significant changes will be posted here with a new date below.

Last updated: August 2026