Privacy policy
The Autism Community in Action (TACA)
Effective Date: October 14, 2026
Last Updated: October 14, 2026
1. Introduction
Shop TACA operates this online store and website, including its content, features, tools, products, and related services (the “Store”). The Store is hosted by Shopify, which enables us to provide our ecommerce services.
This Privacy Policy explains how The Autism Community in Action (“TACA,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you visit or use the Store, create an account, purchase products, communicate with us, or otherwise interact with our ecommerce services.
This Policy supplements TACA’s Privacy and Cookie Policy, which describes our broader privacy practices across our website, programs, events, fundraising activities, and other services. Our separate Consumer Health Data Privacy Notice provides additional information about consumer health data.
Please read this Policy carefully. Where applicable, your use of the Store is subject to the privacy practices described here and in the other applicable TACA privacy notices.
2. Personal Information We Collect
“Personal information” means information that identifies, relates to, describes, or could reasonably be linked to an individual or household, as defined under applicable law. It does not include information that has been properly de-identified or is otherwise excluded by law.
Depending on how you interact with the Store, we may collect or process the following categories of personal information.
Contact and Account Information
This may include your name, email address, telephone number, billing address, shipping address, account identifiers, login information, and account preferences.
Order and Transaction Information
This may include products you view or purchase, items added to your cart, order history, transaction amounts, discounts, order confirmations, refunds, returns, cancellations, shipping details, and related customer service records.
Payment-Related Information
This may include your payment method, billing information, transaction identifiers, payment status, payment confirmations, and other information associated with a purchase.
Payments are processed through Shopify and/or the applicable payment providers. The payment information made available to TACA depends on the payment method and the configuration of the Store. Please consult the applicable payment provider's privacy notice for information about its independent processing of payment information.
Communications
This may include information you provide when contacting us about an order, product, account, return, refund, or other Store-related matter.
Device, Technical, and Usage Information
This may include your IP address, browser type, device information, network information, identifiers, pages viewed, referral information, and information about how and when you interact with the Store.
Preferences and Marketing Information
This may include your communication preferences, marketing subscription status, product interests, and interactions with promotional communications, where applicable.
We do not intentionally request health or diagnosis information as a condition of making an ordinary purchase through the Store.
3. Sources of Personal Information
We may collect personal information from the following sources:
Directly from you, when you browse the Store, create an account, place an order, complete a form, or contact us.
Automatically through the Store, including through cookies, pixels, and similar technologies, subject to applicable consent requirements and your privacy choices.
From Shopify and other service providers, when they process information in connection with hosting, payment processing, order management, analytics, security, or other services.
From business partners and other third parties, where permitted by applicable law and relevant to operating the Store or providing requested services.
We may combine information from different sources for the purposes described in this Policy.
4. How We Use Personal Information
We may use personal information for the following purposes, as applicable.
Providing and Operating the Store
We use information to display products, process orders and payments, fulfill purchases, arrange shipping, manage accounts, provide receipts, handle returns and refunds, and respond to customer service inquiries.
Communications
We use information to communicate about purchases, account activity, shipping, returns, security, customer support, and other services you request.
We may also send promotional or marketing communications where permitted by law and consistent with your communication preferences. You can unsubscribe from promotional emails using the unsubscribe link in those messages.
Improving the Store and Services
We may use information to understand Store usage, assess product interest, improve the shopping experience, troubleshoot technical issues, and evaluate the effectiveness of our communications and services.
Security and Fraud Prevention
We may use information to authenticate accounts, protect transactions, detect and investigate fraud, prevent unauthorized access, maintain the security of the Store, and protect TACA and its customers.
Legal and Administrative Purposes
We may use information to maintain financial and transaction records, comply with legal obligations, respond to lawful requests, resolve disputes, enforce our policies, and protect our legal rights.
Marketing and Advertising
We may use limited Store interaction information for marketing, advertising measurement, campaign attribution, and related activities, depending on the technologies and services enabled.
Where applicable law requires consent or provides an opt-out right, we will apply the relevant requirements and available privacy controls.
TACA does not sell personal information for money. We do not rent, trade, or exchange donor or member lists for other organizations' own marketing or fundraising purposes.
Some privacy laws define “sale,” “sharing,” and “targeted advertising” more broadly than an exchange of information for money. Depending on the technologies enabled and how they operate, certain advertising or measurement activities may fall within those broader definitions. See Section 8 for information about your privacy choices.
5. How We Disclose Personal Information
We may disclose personal information in the following circumstances, subject to applicable law and the commitments in this Policy.
Shopify and Service Providers
We may share information with Shopify and other service providers that help us operate the Store and deliver services. These providers may include:
- Payment processors and transaction service providers.
- Hosting, cloud storage, and technology providers.
- Order management, shipping, and fulfillment providers.
- Customer service and communications platforms.
- Analytics, security, and fraud-prevention providers.
- Marketing and advertising service providers, where applicable.
- Professional advisers and other service providers supporting our operations.
Where a provider processes information on TACA’s behalf, we use appropriate contractual and other safeguards designed to protect the information and limit its use to authorized purposes. Some providers may process information independently under their own privacy notices and legal obligations.
Shopify Enhanced Services and Advertising
Shopify offers additional services that may use information about your interactions with our Store, other merchants, and Shopify. Depending on the services enabled, this processing may support analytics, personalization, advertising, security, and other business functions.
The information Shopify processes and the purposes for which it uses that information depend on the features enabled and the applicable terms. Where Shopify processes information independently for its own purposes, Shopify's own privacy practices and available controls may apply.
For further information, review the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.
Shipping and Other Requested Services
We may share information with third parties when necessary to fulfill an order, arrange delivery, process a return, or provide another service you request.
Legal, Safety, and Security Purposes
We may disclose information where reasonably necessary to comply with applicable law, respond to lawful legal process, investigate fraud or security incidents, enforce agreements, or protect the rights, safety, or property of TACA, our customers, or others.
Organizational Transactions
If TACA is involved in a restructuring, affiliation, transfer of assets, or similar organizational transaction, information may be transferred in connection with that transaction, subject to applicable law and the commitments in this Policy.
At Your Direction or With Your Consent
We may disclose information when you direct us to do so or provide appropriate consent.
We do not authorize the use of sensitive health-related information for targeted advertising.
6. Shopify's Role in Processing Information
Shopify hosts the Store and processes personal information relating to your access to and use of the Store to provide and improve its platform and services.
Information submitted through the Store may be transmitted to Shopify and to other service providers involved in processing transactions or providing ecommerce services. Those providers may operate in countries other than the country where you reside.
Shopify may also process certain information independently for purposes described in its own privacy policies, including in connection with additional services that may use information from interactions with our Store and other Shopify merchants.
For information about Shopify's privacy practices and available rights and controls, visit:
TACA is responsible for handling privacy requests relating to personal information under its control. Shopify may be responsible for handling requests concerning information it processes independently for its own purposes.
7. Cookies and Similar Technologies
The Store may use cookies, pixels, and similar technologies for essential ecommerce functions, account management, security, analytics, personalization, and advertising, depending on the services and features enabled.
These technologies may collect information such as device identifiers, IP addresses, browser information, pages visited, interactions with products, and information about how you use the Store.
Essential technologies may be necessary to operate the Store, maintain your shopping cart, process transactions, protect accounts, and provide services you request.
Where applicable law requires consent before non-essential technologies operate, those technologies must be configured to respect the required consent and your applicable choices.
Managing Your Privacy Choices
You can manage your privacy choices by visiting Your Privacy Choices, where you can exercise the opt-out choices made available through the Store.
You can also manage cookie consent through the Store's cookie banner and available preference settings. To update your cookie tracking preferences at any time, click here: Privacy Preferences
Where applicable law requires consent before non-essential technologies operate, those technologies must be configured to respect the required consent. You may also contact TACA using the details in the Contact section at the end of this Policy to exercise applicable privacy rights.
Global Privacy Control
Some browsers and browser extensions support Global Privacy Control (GPC), a signal that communicates a user's privacy preference regarding the sale or sharing of personal information.
Where required by applicable law and supported by our Store configuration, we will recognize and process applicable opt-out preference signals in accordance with those requirements.
Other browser privacy signals may not be recognized where there is no applicable legal requirement or supported mechanism.
8. Sale, Sharing, and Targeted Advertising Choices
TACA does not sell personal information for money. We do not rent, trade, or exchange donor or member lists for other organizations' own marketing or fundraising purposes.
Certain privacy laws define the sale or sharing of personal information to include some disclosures for cross-context behavioral advertising or targeted advertising, even when no money changes hands.
Depending on the technologies and Shopify services enabled, certain Store interactions may be processed for advertising or measurement purposes that are subject to additional privacy rights.
Where applicable, you can exercise the available opt-out choices through Your Privacy Choices.
The availability and scope of these choices depend on applicable law and the services enabled for the Store. We will not discriminate against you for exercising a privacy right that applies to you.
9. Consumer Health Data and Sensitive Information
The Store is not intended to collect health information for ordinary product purchases.
If you voluntarily provide information relating to a diagnosis, disability, health condition, treatment, therapy, or other sensitive matter in a communication with TACA, we will handle that information in accordance with the applicable practices, protections, and retention periods described in our Privacy and Cookie Policy and our separate Consumer Health Data Privacy Notice.
TACA does not sell sensitive information, including health, diagnosis, or disability information. We do not use sensitive health-related information for targeted advertising.
The separate Consumer Health Data Privacy Notice describes the categories of consumer health data TACA collects, how that information may be used or shared, applicable retention practices, and the additional rights and choices available under relevant laws.
10. Children's Privacy
The Store is intended for adults making purchases or managing transactions. Children may be beneficiaries of TACA's mission, but the Store is not intended to invite children to create accounts or make purchases independently.
Parents, guardians, or other authorized adults may provide information relating to a child when necessary for a transaction or when communicating with TACA. We handle such information in accordance with this Policy and applicable law.
We do not knowingly collect personal information directly from children in circumstances where parental consent or other safeguards are legally required without satisfying those requirements.
If you believe a child has provided personal information to us inappropriately, please contact us using the details in the Contact section. We will review the request and take appropriate action consistent with applicable law.
11. Third-Party Websites and Services
The Store may contain links to third-party websites, applications, payment services, or other platforms that TACA does not own or control.
If you follow a link to a third-party service, its privacy practices are governed by its own privacy policy and terms. TACA is not responsible for the independent privacy or security practices of those third parties.
The inclusion of a link does not necessarily imply TACA's endorsement of that service.
12. Security and Retention
TACA uses reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, loss, or destruction.
No system for transmitting or storing information can be guaranteed to be completely secure. We cannot guarantee absolute security, and information transmitted over the internet may not always be secure in transit.
We retain personal information for as long as reasonably necessary for the purposes described in this Policy, including providing services, maintaining transaction records, complying with legal obligations, resolving disputes, preventing fraud, and enforcing agreements.
Retention periods vary depending on the type of information, the purpose for which it was collected, applicable legal requirements, and operational needs. We may retain certain transaction, tax, accounting, security, or legal records even after an account is closed or a deletion request is received, where permitted or required by law.
13. International Transfers
TACA is based in the United States. Shopify and other service providers may process or store personal information in the United States and other countries.
Those countries may have privacy and data-protection laws that differ from the laws of your country of residence.
Where required by applicable data-protection law, appropriate safeguards will be used for international transfers, which may include an applicable adequacy decision, Standard Contractual Clauses, a UK International Data Transfer Addendum, or another lawful transfer mechanism.
14. Your Privacy Rights and Choices
Depending on where you live and which laws apply, you may have certain rights regarding personal information, subject to applicable exceptions and limitations.
These rights may include:
- Access or know: Request information about the personal information we maintain about you.
- Deletion: Request deletion of personal information, subject to legal and operational exceptions.
- Correction: Request correction of inaccurate personal information.
- Portability: Request a copy of certain personal information in a portable format, where applicable.
- Opt out of sale, sharing, or targeted advertising: Exercise applicable choices concerning certain disclosures or uses of personal information.
- Withdraw consent: Withdraw consent where processing is based on consent, subject to applicable law.
- Appeal: Where applicable law provides a right to appeal a decision concerning your privacy request, follow the instructions provided with our response or contact us using the details below.
Not all rights apply in every jurisdiction or to every category of information. We may need to verify your identity before processing a request. We may also decline or limit a request where permitted by law, including where information must be retained for legal, accounting, security, or other legitimate purposes.
How to Submit a Privacy Request
You can contact TACA using the information in the Contact section below to request access to, correction of, or deletion of personal information under TACA's control.
You may also exercise available opt-out choices through Your Privacy Choices.
For information that Shopify processes independently for its own purposes, you may need to submit a request through the Shopify Privacy Portal.
Where permitted by applicable law, you may designate an authorized agent to submit a request on your behalf. We may require proof of authorization and may ask you to verify your identity directly.
We will respond to privacy requests within the time required by applicable law.
15. Marketing and Communication Preferences
You may receive promotional emails from TACA if you subscribe to our communications or otherwise provide an appropriate basis for receiving them.
You can unsubscribe from promotional emails at any time by using the unsubscribe link included in the message or by contacting us.
Unsubscribing from promotional communications will not necessarily stop transactional or administrative messages relating to an order, account, security matter, or service you requested.
We do not sell, rent, or share mobile telephone numbers or text-message opt-in information with third parties or affiliates for their own marketing purposes. If text messaging is offered, applicable consent and opt-out requirements will apply.
16. Complaints and Questions
If you have questions or concerns about how TACA handles personal information, please contact us using the details below.
Depending on where you live and which laws apply, you may also have the right to appeal a decision regarding a privacy request or submit a complaint to an applicable regulator or data-protection authority.
17. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, the Store's technology, Shopify's services, applicable laws, or other operational needs.
When we make changes, we will update the “Last Updated” date at the beginning of this Policy and provide any additional notice required by applicable law.
We encourage you to review this Policy periodically to understand our current privacy practices.
18. Contact Information
If you have questions about this Privacy Policy or wish to exercise a privacy right concerning personal information under TACA's control, you can contact us using the details below.
How to reach us. Email privacy@tacanow.org, or use the address and phone number provided below.
The Autism Community in Action (TACA)
Attn: Privacy
17752 Sky Park Circle, Suite 140
Irvine, CA 92614, United States
Phone: (949) 640-4401
Email: privacy@tacanow.org
Please include “Privacy Request” in the subject line when submitting a privacy-related request.