Privacy policy

Koala Eco Privacy Policy
Last Updated: October 31, 2025

Introduction

This “Privacy Policy” describes the privacy practices of Koala Eco (“Koala Eco,” “we,” “our,” or “us”) in connection with how you use and access our website at www.koalaeco.com (the “Site”). Please read this Privacy Policy carefully to understand our policies regarding your information and how we will treat it. If you do not agree with our policies and practices, do not use our Site. By accessing our Site or making a purchase, you acknowledge the policies outline here. 

Updates To This Policy

We may revise this Privacy Policy from time to time. When we update our Privacy Policy, we will take appropriate measures to inform you, consistent with the significance of the changes we make. If you do not agree with our changes, you should cease use of our Site immediately.

Children’s Data

The Site is not directed to, and we do not knowingly collect personal information from anyone under the age of 18. If a parent or guardian becomes aware that his or her child has provided us with information, they should contact us. We will delete such information from our files as soon as reasonably practicable.

Accurate Information

When you complete forms online or otherwise provide us information in connection with your use of the Site, you agree to provide accurate, complete, and true information. You agree not to use a false or misleading name or a name that you are not authorized to use. If, in our sole discretion, we believe that any such information is untrue, inaccurate, or incomplete, or you have opted to use our Site for an ulterior purpose, we may refuse you access to our Site or any services we may provide on the Site, and pursue any appropriate legal remedies.

Personal Information We Collect

Information You Provide Us

When you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including your name, billing address, shipping address, payment information (including credit card numbers), email address, and phone number. We refer to this information as “Order Information”. You may also provide us with personal information when you sign up to participate on our promotions.

Information We Automatically Collect

When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically collected information as “Device Information”.

We collect Device Information using the following technologies:

  • “Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org.

  • “Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.

  • “Web beacons”, “tags”, and “pixels” are electronic files used to record information about how you browse the Site.

When we talk about “Personal Information” in this Privacy Policy, we are talking both about Device Information and Order Information.

How Do We Use Your Personal Information?

We use the Order Information that we collect generally to fulfill any orders placed through the Site (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations). Additionally, we use this Order Information to:

  • Communicate with you;

  • Screen our orders for potential risk or fraud; and

  • When in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.

We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimize our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns).

How We Use Cookies

We use Cookies to track how you use our Site by providing usage statistics. Cookies are also used to deliver our information (including updates) and allow account authentication to you based upon your browsing history and previous visits to the Site. Information supplied to us using Cookies helps us to provide a better online experience to our visitors and users and send marketing communications to them, as the case may be. We may combine the information we collect from Cookies with personal information that we have collected from you to learn more about how you use our Site to improve it.

Types of Cookies

We use both session Cookies (which expire once you close your web browser) and persistent Cookies (which stay on your device until you delete them). To make it easier for you to understand why we need them, the Cookies we use on our Site can be grouped into the following categories:

  • Strictly Necessary: These Cookies are necessary for the Site to work properly. They include any essential authentication and authorization Cookies for our Site.

  • Functional: These Cookies enable technical performance and allow us to remember the choices you make while browsing our Site, including any preferences you set. They also include sign-in and authentication Cookies and IDs that enable you to return without additional sign-in.

  • Performance/Analytics: These Cookies allow us to collect certain information about how you navigate the Site and services running on your device. They help us understand which areas you use and what we can do to improve them.

  • Targeting: These Cookies are used to deliver relevant information related to our Site to an identified machine or other device (not a named or otherwise identifiable person) which has previously been used to visit our Site. Some of these types of Cookies on our Site are operated by third parties with our permission and are used to identify advertising sources that are effectively driving customers to our Site.

How to Control and Delete Cookies

Cookies can be controlled, blocked, or restricted through your web browser settings. Information on how to do this can be found within the Help section of your browser. All Cookies are browser specific. Therefore, if you use multiple browsers or devices to access websites, you will need to manage your Cookie preferences across these environments.

Find out how to manage Cookies on popular browsers:

If you are using a mobile device to access the Site, you will need to refer to your instruction manual or other help/settings resource to find out how you can control Cookies on your device.  For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org.

Please note that if you restrict, disable or block any or all Cookies from your web browser or mobile or other device, the Site may not operate properly, and you may not have access to our services available through the Site. We are not responsible for your inability to use our Site or any degraded function you may experience that may be caused by your settings and choices regarding Cookies. 

Sharing Your Personal Information
We share your Personal Information with third parties to help us use the information, as described above. For example, we use Shopify to power our online store. You can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy. We also use Google Analytics to help us understand how our customers use the Site -- you can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.

We may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

We do not sell, rent, loan, trade, lease, or otherwise transfer for profit any phone numbers or personal information collected through our website to any third party. Nonetheless, we reserve the right at all times to disclose any information as necessary to satisfy any law, regulation or governmental request, to avoid liability, or to protect our rights or property.

We may disclose your personal information as part of a corporate business transaction such as a merger or acquisition, divestiture, sale of company assets, or in the event of insolvency, bankruptcy, or receivership. In these cases, personal information could be transferred to third-parties as business asset. 

Personal Information Collection Summary

Category

Examples

Collected

A: Identifiers

A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number, or other similar identifiers.

YES

B: Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).

A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. 

Some personal information included in this category may overlap with other categories.

YES

C: Protected classification characteristics under California or federal law.

Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).

YES

D: Commercial Information

Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.

YES

E: Biometric Information

Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.

NO

F: Internet or other similar network activity

Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement.

YES

G: Geolocation Data

Physical location or movements.

YES

H: Sensory Data

Audio, electronic, visual, thermal, olfactory, or similar information.

NO

I: Professional or employment-related information

Current or past job history or performance evaluations.

NO

J: Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)

Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial Information, or student disciplinary records.

NO

K: Inferences drawn from other personal information.

Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

YES

 

Marketing Communications

As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. You may opt-out of all marketing communications by clicking the “Unsubscribe” link included in each email sent to you or choosing the relevant option in the banner that appears across your screen when you visit the Site. 

For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

Certain services allow you to opt out of targeted advertising by using the links below: 

Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: http://optout.aboutads.info/.

Do Not Track

Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to “Do Not Track” or similar signals. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com.

Data Security

We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. All information you provide to us is stored on our secure servers behind firewalls.

If you choose a direct payment gateway to complete your purchase, then Shopify stores your credit card data. It is encrypted through the Payment Card Industry Data Security Standard (“PCI-DSS”). Your purchase transaction is stored only as long as is necessary to complete your purchase transaction. After that is complete, your purchase transaction information is deleted. 

All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standard Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover.

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Site, you are responsible for keeping this password confidential. We ask you not to share your password with anyone and urge you to be careful about giving out information in public areas of the Website like in customer reviews. The information you share in public areas may be viewed by any user of the Website.

Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our Site. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Website.

Text Marketing And Notifications

If you choose to enter your phone number in the checkout when completing a purchase, you agree that we may send you text notifications (for your order, including abandoned cart reminders) and text marketing offers. Your phone number will be shared with third parties who assist us with delivering SMS notifications. We may also share this data for marketing purposes.  You can unsubscribe from further text messages by replying STOP. 

Notice to European Residents

If you are a European resident, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise these rights, please contact us through the contact information below.

Additionally, if you are a European resident we note that we are processing your information in order to fulfill contracts we might have with you (for example if you make an order through the Site), or otherwise to pursue our legitimate business interests listed above. Additionally, please note that your information will be transferred outside of Europe, including to Canada and the United States.

California’s Shine the Light Law

California Civil Code Section 1798.83 permits Users of our Website that are California residents to request certain information regarding our disclosure of the information you provide through the Site to third parties for their direct marketing purposes. To make such a request, please contact us here: privacyusa@koala.eco

NOTICE TO CALIFORNIA CONSUMERS

This section outlines data privacy rights afforded to California residents who use our Site.

Your Data Privacy Rights

Residents of California have the following rights:

  • Right to Know

You can request information about how we have collected, used, and shared your personal information during the past 12 months. We have made this information available to California residents without having to request it by including it in this Privacy Policy. 

  • Right to Access

You can request a copy of the Personal Information that we maintain about you. 

  • Right to Delete

You may request that we delete any of your personal data that we collected from you and retained, subject to certain exceptions. Once we receive your request and confirm your identity, we will review your request. We may deny your deletion request if retaining the information is proper and necessary or if an exception allowing us to retain the information applies. 

  • Right to Correct

You may also request that we correct any of your personal data that has become outdated or needs correction for any reason. 

Exercising Your Rights

To access or delete specific pieces of personal information we will need to verify your identity to the degree of certainty required by law. As permitted by applicable law, any request you submit to us is subject to an identification and residency verification process (“Verifiable Consumer Request”). We will not fulfill your request unless you have provided sufficient information for us to reasonably verify you are the consumer about whom we collected personal information.

Only you, or someone legally authorized to act on your behalf (an “Authorized Agent”), may make a request to know or delete related to your personal data. We require Authorized Agents to provide written authorization confirming they may submit a request on your behalf. You may only submit a request to know twice within a 12-month period. We endeavor to substantively respond to a Verifiable Consumer Request within forty-five (45) days of its receipt unless we require an extension. If we reasonably require an extension, we will inform you of the reason and extension period.

To exercise your rights described above, please submit a request by emailing us at privacyusa@koala.eco with the subject line “Data Rights Request”.

Once we receive your request and confirm your identity, we will review your request. We may deny your deletion request if retaining the information is proper and necessary or if an exception allowing us to retain the information applies. 

Non-Discrimination

We will not discriminate against you for exercising any of your data subject rights. We do not charge a fee to process or respond to your Verifiable Consumer Request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

DO NOT SELL OR SHARE MY PERSONAL INFORMATION (RIGHT TO OPT-OUT)

To request that Koala Eco not “Sell or Share Your Personal Information,” please see the section below titled “Exercising Your Rights.” In this case “sharing” refers to a specific type of disclosure under certain privacy laws that relates to advertising activity including targeted advertising (also called “cross-context behavioral advertising”). An example of selling or sharing information is when we disclose information about you (like when you have visited our Site) tied to unique identifiers, like device IDs, with third parties for targeted or cross-context behavioral advertising. When you tell us not to sell or share your Personal Information, we will not disclose your personal data for these purposes. Please note that not all disclosures of your Personal Information constitute a “share” or “sale” of your data under applicable privacy laws.

Who Do We Share Your Personal Information With?

Personal Information Category

Category of Third-Party Recipients

Business Purpose Disclosures

Sales

A: Identifiers.

Data Analytics Providers; Advertising Networks; Operating Systems & Platforms; Social Networks;

Advertising Networks

B: California Customer Records personal information categories.

Data Analytics Providers; Advertising Networks

Advertising Networks

C: Protected classification characteristics under California or federal law.

Service provides such as rewards programs handling services

None

D: Commercial Information.

Data Analytics Providers; advertising networks; Operating Systems & Platforms; Social Networks;

Advertising Networks

E: Biometric information.

None

None

F: Internet or other similar network activity.

Data Analytics Providers; Operating Systems & Platforms; Social Networks;

Advertising Networks

G: Geolocation data.

Data Analytics Providers; Operating Systems & Platforms

Advertising Networks

H: Sensory data.

None

None

I: Professional or employment-related information.

None

None

J: Non-public education information.

None

None

K: Inferences drawn from other personal information.

Data Analytics Providers; advertising networks; Operating Systems & Platforms; Social Networks;

Advertising Networks

 

Notice of Financial Incentive

Koala Eco provides certain loyalty programs that enable our customers to receive special offers or benefits. To receive these offers, you may be asked to provide your personal information. You may withdraw from our marketing messages or terminate your membership to any loyalty program that we may offer by contacting us at the information included below. When you choose to opt-in to a financial incentive, we use the information you provide to send you marketing emails, special offers and other advertising, and the information may be shared with our email providers and advertising partners. You may opt-out of email marketing at any time by unsubscribing from marketing emails using the “unsubscribe” link in such emails. If you opt out, we will not reduce the value of any financial incentives you previously received from us; however, you may no longer continue to receive offers from us. We do not assign a monetary value to the data that we collect in connection with our loyalty programs or other financial incentives.

Contact Us

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at privacyusa@koala.eco.