Privacy policy
Last Updated: January 29, 2026
Shuttle Finance, Inc. (DBA Acre Gold) ("Acre Gold," "we," "us," or "our") operates the getacregold.com website, the Acre Gold mobile application, and all related services (collectively, the "Services"). This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you visit, use, or make a purchase through our Services or otherwise communicate with us.
This Privacy Policy applies to residents of all jurisdictions, including California residents (who have specific rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act), and residents of the European Union, United Kingdom, Germany, and France (who have specific rights under the General Data Protection Regulation and equivalent laws).
If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.
By using our Services, you acknowledge that you have read and understand this Privacy Policy.
TABLE OF CONTENTS
1. Personal Information We Collect
2. How We Collect Personal Information
3. How We Use Personal Information
4. How We Disclose Personal Information
5. Third-Party Service Providers
6. Cookies and Tracking Technologies
7. Data Retention
8. Your Privacy Rights (All Users)
9. California Privacy Rights (CCPA/CPRA)
10. European and UK Privacy Rights (GDPR)
11. SMS and Text Message Privacy
12. Mobile Application Privacy
13. Children's Privacy
14. Security
15. International Data Transfers
16. Changes to This Policy
17. Contact Us
1. PERSONAL INFORMATION WE COLLECT
We collect the following categories of personal information:
Identifiers and Contact Information
- Name, email address, phone number
- Billing address, shipping address
- Account username and password
- IP address and device identifiers
Financial and Payment Information
- Credit card and debit card numbers
- Payment card expiration dates and security codes
- Billing information and transaction history
- Subscription payment history and accumulated balance
Commercial Information
- Products viewed, added to cart, or purchased
- Purchase and transaction history
- Subscription tier, status, and preferences
- Return, exchange, and cancellation history
- Customer service inquiries and communications
Internet and Network Activity
- Browsing history on our website
- Search queries on our website
- Interactions with our emails (opens, clicks)
- Referral source (how you found us)
- Pages visited and time spent on pages
Device and Technical Information
- Device type (desktop, mobile, tablet)
- Operating system and browser type
- Screen resolution and language preferences
- Mobile app usage data (if using our app)
Geolocation Data
- General location based on IP address
- Shipping and billing address locations
Inferences
- Product preferences and interests
- Purchase propensity
- Customer segment classifications
Sensitive Personal Information
We collect the following categories of sensitive personal information:
- Financial account information (payment card details) - used only to process your transactions
- Precise geolocation (only if you enable location services in our mobile app) - used only to provide location-based features
We use sensitive personal information only for the purposes of providing you with the Services you requested and as permitted by law. We do not use or disclose sensitive personal information for purposes other than those specified in California Civil Code Section 1798.121.
2. HOW WE COLLECT PERSONAL INFORMATION
We collect personal information from the following sources:
Directly from You
- When you create an account
- When you make a purchase or subscribe
- When you contact customer support
- When you sign up for emails or SMS
- When you participate in surveys or promotions
Automatically Through Technology
- Cookies and similar tracking technologies
- Pixels and web beacons in emails
- Log files and server data
- Mobile app analytics
From Third-Party Sources
- Shopify (our e-commerce platform)
- Recharge (our subscription management platform)
- Payment processors
- Advertising platforms (when you click our ads)
- Social media platforms (when you interact with our content)
3. HOW WE USE PERSONAL INFORMATION
We use your personal information for the following business purposes:
Providing Our Services
- Processing your orders and subscriptions
- Managing your Acre Gold subscription and accumulated balance
- Shipping your gold bars and other products
- Processing payments through Shopify Payments
- Managing returns, exchanges, and cancellations
- Creating and maintaining your account
- Providing customer support via Zendesk
Marketing and Advertising
- Sending promotional emails via Klaviyo
- Sending SMS marketing messages (with your consent)
- Showing you targeted ads on Meta/Facebook, Google, and TikTok
- Personalizing your shopping experience
- Recommending products based on your interests
Analytics and Improvement
- Understanding how you use our website and app
- Analyzing traffic and usage patterns via Google Analytics
- Improving our website, app, and Services
- Testing new features and functionality
Security and Fraud Prevention
- Detecting and preventing fraudulent transactions
- Verifying your identity
- Protecting our Services and users
- Enforcing our Terms of Service
Legal Compliance
- Complying with applicable laws and regulations
- Responding to legal requests and court orders
- Protecting our legal rights
4. HOW WE DISCLOSE PERSONAL INFORMATION
We may disclose your personal information to the following categories of third parties:
Service Providers
We disclose personal information to service providers who perform services on our behalf. These providers are contractually obligated to use your information only for the purposes we specify.
Advertising and Marketing Partners
We share personal information with advertising platforms to show you targeted advertisements. Under California law, this may constitute "sharing" of personal information. You have the right to opt out of this sharing.
Business Transfers
If we are involved in a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction.
Legal Requirements
We may disclose personal information to comply with legal obligations, respond to lawful requests from public authorities, or protect our rights and safety.
Categories of Personal Information Disclosed in the Past 12 Months:
| Category | Disclosed to Service Providers | Shared for Advertising |
|----------|-------------------------------|----------------------|
| Identifiers | Yes | Yes |
| Financial Information | Yes | No |
| Commercial Information | Yes | Yes |
| Internet Activity | Yes | Yes |
| Device Information | Yes | Yes |
| Geolocation | Yes | Yes |
| Inferences | Yes | Yes |
We do not sell personal information for monetary consideration. However, we do share personal information with advertising partners for targeted advertising purposes, which may constitute a "sale" or "share" under certain state privacy laws. You have the right to opt out of this sharing.
5. THIRD-PARTY SERVICE PROVIDERS
We use the following third-party service providers who may collect or process your personal information:
E-Commerce and Payments
- Shopify: Our e-commerce platform that hosts our website, processes orders, and handles payments through Shopify Payments. Shopify Privacy Policy: https://www.shopify.com/legal/privacy
- Recharge: Manages our subscription billing and recurring payments. Recharge Privacy Policy: https://rechargepayments.com/privacy-policy
Email and SMS Marketing
- Klaviyo: Sends our marketing emails and tracks email engagement (opens, clicks). Collects email address, purchase history, and browsing behavior. Klaviyo Privacy Policy: https://www.klaviyo.com/legal/privacy-notice
Customer Support
- Zendesk: Powers our customer support system and stores support ticket history. Zendesk Privacy Policy: https://www.zendesk.com/company/privacy-and-data-protection/
Analytics
- Google Analytics: Tracks website traffic and user behavior. Collects IP address, device information, and browsing activity. Google Privacy Policy: https://policies.google.com/privacy
Advertising
- Meta (Facebook/Instagram): We use the Meta Pixel to track conversions and show you targeted ads on Facebook and Instagram. Meta Privacy Policy: https://www.facebook.com/privacy/policy
- Google Ads: We use Google Ads conversion tracking and remarketing. Google Privacy Policy: https://policies.google.com/privacy
- TikTok: We use the TikTok Pixel to track conversions and show you targeted ads on TikTok. TikTok Privacy Policy: https://www.tiktok.com/legal/privacy-policy
Mobile Application
- Tapcart: Powers our mobile app and collects app usage data, device information, and push notification preferences. Tapcart Privacy Policy: https://tapcart.com/privacy-policy
Other Shopify Apps
We use various Shopify apps that may process your personal information in connection with providing their services. These apps operate under Shopify's partner agreements and privacy requirements.
6. COOKIES AND TRACKING TECHNOLOGIES
We use cookies, pixels, and similar tracking technologies to collect information about your browsing activity.
Types of Cookies We Use:
Essential Cookies: Required for our website to function (shopping cart, login sessions). Cannot be disabled.
Analytics Cookies: Help us understand how visitors use our website (Google Analytics).
Marketing Cookies: Track your activity across websites to show you relevant ads (Meta Pixel, Google Ads, TikTok Pixel).
Managing Cookies:
You can control cookies through your browser settings. However, disabling cookies may affect website functionality.
Opt-Out Preference Signals:
We recognize the Global Privacy Control (GPC) signal. If you visit our website with GPC enabled, we will treat this as a request to opt out of the sale/sharing of your personal information for that browser and device.
Do Not Track:
Other than GPC, we do not currently respond to "Do Not Track" browser signals.
7. DATA RETENTION
We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
Specific Retention Periods:
| Data Type | Retention Period |
|-----------|------------------|
| Account information | Until account deletion + 2 years |
| Transaction/order history | 7 years (tax/legal compliance) |
| Subscription history | 7 years from last transaction |
| Customer support tickets | 3 years from resolution |
| Marketing preferences | Until you unsubscribe + 1 year |
| Website analytics | 26 months (Google Analytics default) |
| Email engagement data | 3 years |
After the retention period expires, we will securely delete or anonymize your personal information.
8. YOUR PRIVACY RIGHTS (ALL USERS)
Regardless of where you live, you may:
- Access: Request a copy of the personal information we hold about you
- Correction: Request that we correct inaccurate information
- Deletion: Request that we delete your personal information (subject to legal exceptions)
- Opt-Out of Marketing: Unsubscribe from marketing emails and SMS at any time
To exercise these rights, contact us at info@getacregold.com.
9. CALIFORNIA PRIVACY RIGHTS (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act:
Right to Know/Access
You may request that we disclose:
- The categories of personal information we collected about you
- The categories of sources from which we collected personal information
- Our business or commercial purpose for collecting or sharing personal information
- The categories of third parties with whom we share personal information
- The specific pieces of personal information we collected about you
Right to Delete
You may request that we delete personal information we collected from you, subject to certain exceptions.
Right to Correct
You may request that we correct inaccurate personal information we maintain about you.
Right to Opt-Out of Sale/Sharing
You have the right to opt out of the "sale" or "sharing" of your personal information for targeted advertising purposes.
To opt out:
- Email us at info@getacregold.com with the subject line "Do Not Sell or Share My Personal Information"
- Or enable Global Privacy Control (GPC) in your browser, and we will automatically process your opt-out request
Right to Limit Use of Sensitive Personal Information
You may request that we limit our use of your sensitive personal information (such as payment card details) to uses necessary to provide the Services. We already limit our use of sensitive personal information in this manner.
Right to Non-Discrimination
We will not discriminate against you for exercising any of your CCPA rights.
How to Submit a Request
You may submit a request by emailing us at info@getacregold.com with the subject line "Privacy Request."
We will verify your identity before processing your request. We may ask you to provide information that matches information we have on file. You may designate an authorized agent to submit requests on your behalf.
Response Timing
We will respond to your request within 45 days. If we need more time, we will notify you of the extension.
California "Shine the Light" (Civil Code § 1798.83)
California residents may request information about our disclosure of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes. If we change this practice, we will update this Privacy Policy and provide you with an opt-out mechanism.
Metrics
Information about CCPA requests we received in the prior calendar year is available upon request.
10. EUROPEAN AND UK PRIVACY RIGHTS (GDPR)
If you are located in the European Economic Area (including Germany and France) or the United Kingdom, you have rights under the General Data Protection Regulation (GDPR) or UK GDPR.
Legal Basis for Processing
We process your personal information based on the following legal grounds:
- Contract Performance: Processing necessary to fulfill our contract with you (e.g., processing your order, managing your subscription, shipping your gold)
- Legitimate Interests: Processing necessary for our legitimate business interests (e.g., fraud prevention, improving our Services, analytics), where those interests are not overridden by your rights
- Consent: Where you have given us consent (e.g., marketing emails, SMS marketing, cookies for advertising)
- Legal Obligation: Processing necessary to comply with our legal obligations
Your Rights Under GDPR
In addition to the rights listed in Section 8, you have the right to:
- Data Portability: Receive your personal information in a structured, machine-readable format
- Restriction: Request that we restrict processing of your personal information in certain circumstances
- Objection: Object to processing based on legitimate interests or for direct marketing
- Withdraw Consent: Withdraw consent at any time where we rely on consent to process your information
Lodging Complaints
You have the right to lodge a complaint with your local data protection authority:
- Germany: Die Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI)
- France: Commission Nationale de l'Informatique et des Libertés (CNIL)
- UK: Information Commissioner's Office (ICO)
A list of EEA data protection authorities is available at: https://edpb.europa.eu/about-edpb/about-edpb/members_en
Data Controller
Shuttle Finance, Inc. (DBA Acre Gold) is the data controller of your personal information.
We do not monitor physical mail. Email is the only way to contact us.
Registered Business Address (for legal purposes only):
1447 2nd Street, Floor 2, Santa Monica, CA 90401, USA
Email: info@getacregold.com
11. SMS AND TEXT MESSAGE PRIVACY
If you opt in to receive SMS/text messages from us, we collect your mobile phone number and use it to send you:
- Order confirmations and shipping updates
- Subscription payment reminders
- Marketing messages and promotions (with your consent)
SMS messages are sent through Klaviyo.
Your SMS Rights:
- You may opt out of SMS marketing at any time by replying STOP to any message
- Your consent to receive SMS is not required as a condition of purchase
- Message frequency varies; message and data rates may apply
We do not share your phone number with third parties for their marketing purposes.
12. MOBILE APPLICATION PRIVACY
If you use the Acre Gold mobile app (powered by Tapcart), we may collect:
- Device identifiers and mobile advertising IDs
- App usage data and interactions
- Push notification preferences and tokens
- Device type, operating system, and app version
- Crash logs and performance data
Push Notifications
If you enable push notifications, we may send you:
- Order and shipping updates
- Subscription reminders
- Marketing messages and promotions
You can disable push notifications in your device settings at any time.
13. CHILDREN'S PRIVACY
Our Services are not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at info@getacregold.com and we will delete it.
As of the date of this Privacy Policy, we do not have actual knowledge that we sell or share the personal information of individuals under 16 years of age.
14. SECURITY
We implement reasonable technical and organizational security measures to protect your personal information, including:
- Encryption of payment card data
- Secure HTTPS connections
- Access controls and authentication
- Regular security assessments
However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
If you believe your account has been compromised, please contact us immediately at info@getacregold.com.
15. INTERNATIONAL DATA TRANSFERS
Your personal information may be transferred to and processed in countries other than your own, including the United States, where our servers and service providers are located.
If you are located in the EEA or UK, we rely on the following transfer mechanisms:
- European Commission Standard Contractual Clauses
- UK International Data Transfer Agreement
- Adequacy decisions where applicable
By using our Services, you acknowledge that your information may be transferred internationally.
16. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.
When we make material changes, we will:
- Update the "Last Updated" date at the top of this policy
- Notify you by email or prominent notice on our website (for material changes)
We encourage you to review this Privacy Policy periodically.
17. CONTACT US
To exercise your privacy rights or ask questions, email us at:
We do not monitor physical mail. Email is the only way to contact us.
Registered Business Address (for legal purposes only):
Shuttle Finance, Inc. (DBA Acre Gold)
1447 2nd Street, Floor 2
Santa Monica, CA 90401
United States
For the purpose of GDPR, we are the data controller of your personal information.