Free shipping on orders over $60 · prices in USDFree shipping over $60
Privacy & Cookie Policy
Last updated: 12 October 2026
This policy explains how TieSecret uses information collected through this store. For privacy questions or requests, email info@tiesecret.com.
Information you give us
When you place an order, create an account or contact us, we collect the details you provide, such as your name, email, delivery and billing addresses, phone number, order contents and messages. If you subscribe to our newsletter, we also record your email subscription.
How we use your information
We use order and delivery details to fulfil your purchase and handle returns, and account details to provide the account you request. We keep records where required by applicable law and use security information to protect the store against fraud and misuse. Optional analytics, advertising and newsletter subscriptions rely on your separate consent. Rejecting optional cookies does not stop you browsing or buying.
Services that help run the store
Our store uses Medusa for commerce and account management, Vercel for the storefront, and Cloudflare for network and image delivery. Stripe processes card and wallet payments. If you choose PayPal, you continue to PayPal to approve payment; we send PayPal the payment amount, currency and a payment reference, and receive the payment result and transaction reference. We do not receive your PayPal password. Resend delivers our emails. Delivery and fulfilment partners receive the order and address information needed to prepare and deliver your parcel. These services may process data outside the country where you live.
Your cookie choices and withdrawal
If you allow both analytics and advertising, Meta Pixel sends visits, viewed product codes, basket and checkout activity, and completed purchases with their amount and currency to Meta to measure and improve Facebook and Instagram advertising. Meta also receives browser and network information, such as IP address and user agent, and may connect activity with your Meta account. We do not send order emails, phone numbers or addresses to Meta through this integration, and automatic advanced matching and automatic event detection are disabled. No Meta tracking loads before you allow both optional categories. Withdrawal stops future tracking and removes Meta first-party cookies where the browser permits.
If you allow both analytics and advertising, we use Google Ads Enhanced Conversions to measure purchases. On the order confirmation page, we normalise your order email and convert it to a SHA-256 hash before sending that hash to Google Ads. Google can match it with signed-in Google accounts to attribute purchases to ads. The hash is still personal data; hashing does not make it anonymous. We do not send your original email, phone number or address through this tracking feature, and the email hash is not included in our Google Analytics events. No enhanced conversion data is sent if you reject either optional category. You can withdraw consent in Cookie settings.
Necessary cookies support the services you request, including your cart, account and payment security. Optional analytics and advertising are off until you make a choice. Accept all enables both optional categories; Reject all leaves only necessary functions active. Configure cookies lets you choose each optional category separately. Tools combining both purposes remain blocked unless both are allowed.
Open Cookie settings in the footer to change or withdraw your choice at any time. We remember the choice for 180 days on this browser, across the English and Spanish store. When it expires, or the purposes change, we ask again. Withdrawing permission stops future tracking and removes relevant first-party tracking cookies where the browser permits. It does not undo processing already performed with your permission. Your cart and sign-in are preserved.
Cookies and browser storage used by the store
The table covers the store settings and Google and Meta tracking currently integrated. Cookies are set only when the relevant feature or consent is active; provider settings and browser restrictions can shorten their lifetime. Google and Stripe describe additional cookies on their own domains in the linked policies below.
| Name | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
_medusa_cart_id / _medusa_cart_id_es | TieSecret | Cart, including the separate Spain basket | Up to 7 days | Necessary |
_medusa_jwt | TieSecret | Sign-in session | Up to 7 days | Necessary |
_medusa_cache_id | TieSecret | Store cache identifier | Up to 1 day | Necessary |
_medusa_pending_customer | TieSecret | Temporarily retain signup details during email verification | Up to 1 day | Necessary |
_medusa_locale | TieSecret | Language preference, when selected | Up to 1 year | Necessary |
tiesecret_cookie_consent | TieSecret | Remember the consent version, choices and date in localStorage | 180 days | Necessary |
_ga / _ga_* | Distinguish visitors and measure shopping activity | Up to 2 years | Analytics | |
_gcl_* | Measure ad conversions and support relevant advertising | Up to 90 days | Advertising | |
__stripe_mid / __stripe_sid | Stripe | Payment security and fraud prevention when Stripe payment tools load | Up to 1 year / 30 minutes | Necessary |
_fbp / _fbc | Meta | Measure shopping activity and attribute Facebook or Instagram advertising; _fbc is used when a Meta ad click identifier is present | Up to 90 days | Advertising |
meta:1659270918970113:purchase:* | TieSecret | Prevent duplicate Meta purchase events in localStorage | Until browser storage is cleared | Advertising |
PayPal uses its own cookies and security tools on its checkout pages when you choose PayPal. These are governed by PayPal's privacy and cookie policies.
You can also block or delete cookies through your browser settings. Deleting the consent record makes the banner appear again. Blocking necessary cookies can prevent your cart, sign-in or checkout from working.
Keeping and updating information
Order and account information is retained to operate the store, fulfil orders, answer support requests and meet applicable record-keeping obligations. You can update saved account details after signing in. Contact us to request access, correction or deletion of personal information; some records may need to be kept for order fulfilment, disputes or legal obligations.
Your choices
You can unsubscribe from marketing emails using the unsubscribe link in those emails, or contact us at info@tiesecret.com. Essential messages about an order or account request are sent separately. We will update this page when our practices change.
Privacy requests and complaints
Where applicable, you can request access, correction, deletion, restriction or portability of your personal data, object to certain processing, and withdraw consent. Contact us with your request; we may need to verify your identity. Some records must be retained for legal obligations, disputes or fulfilment of your order. If you are in Spain, you can also raise a complaint with the Spanish Data Protection Agency (AEPD).
Email for privacy requests: info@tiesecret.com
TieSecret contact address: Flat E, 20/F, Shui Sum Industrial Building, 8-10 Kwai Sau Road, Kwai Chung, N.T., Hong Kong.