Last updated: August 19, 2026
1. INTRODUCTION AND SCOPE
This Privacy Policy (the “Policy”) explains how Geotag, operated by RBC Group LLC, a limited liability company organized under the laws of the State of Wyoming (“we”, “us”, or “our”), collects, uses, discloses, and protects personal information when you visit trygeotag.com and its subdomains, contact our support team, or place an order (together, the “Services”).
It applies to visitors and customers wherever they are located. Two bodies of law are addressed side by side, and where they differ, the one that applies to you governs:
- United States — the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA/CPRA”), and the comparable statutes of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states as they take effect.
- European Economic Area, United Kingdom, and Switzerland — the General Data Protection Regulation (“GDPR”) and the UK GDPR.
This Policy does not cover the practices of third parties we do not control, including the payment providers, advertising platforms, and carriers referred to below. It should be read together with our Cookie Policy and our Terms and Conditions.
2. COMPANY INFORMATION AND CONTROLLER DETAILS
RBC Group LLC decides why and how personal information is processed through the Services, and is therefore the “controller” under the GDPR and the “business” under the CCPA/CPRA.
- Legal name: RBC Group LLC
- Legal form: limited liability company organized under the laws of the State of Wyoming, United States
- Wyoming filing ID: 2025-001839878
- Registered office: 30 North Gould Street, Suite N, Sheridan, Wyoming 82801, United States
- Registered agent: Northwest Registered Agent Service Inc., 30 North Gould Street, Suite N, Sheridan, Wyoming 82801, United States
- Brand operated: Geotag (trygeotag.com)
- Customer service: support@trygeotag.com
Privacy requests may be sent to support@trygeotag.com. Please write “Privacy Request” in the subject line so that we can route it correctly and meet the statutory deadline.
3. PERSONAL INFORMATION WE COLLECT
We collect only what the Services actually require. The categories below use the vocabulary of the CCPA/CPRA so that the disclosure is directly comparable to the statute.
| Category | Examples | Source |
|---|---|---|
| Identifiers | Name, billing and shipping address, email address, telephone number, order number, IP address, device and cookie identifiers. | You, and your device |
| Commercial information | Products viewed, cart contents, orders placed, amounts paid, returns and refunds, support history. | You, and our order systems |
| Financial information | Payment card type, last four digits, authorisation result, billing address. | Our payment providers |
| Internet and network activity | Pages visited, time on page, referring URL, clicks, search terms used on the Website, error events. | Your device |
| Geolocation data | Approximate city or region derived from IP address. We do not collect precise GPS location from your device. | Your device |
| Audio, electronic, and visual information | The content of emails, chat messages, and support tickets you send us, including any attachment. | You |
| Inferences | Product interests and audience segments derived from browsing and purchase behaviour, used for advertising measurement. | Derived by us and our partners |
We do not collect sensitive personal information as defined by the CCPA/CPRA, and we do not ask for social security numbers, precise geolocation, biometric data, racial or ethnic origin, religious beliefs, health data, or information about sex life or sexual orientation. Please do not send such information to our support team.
Payment card numbers never reach our systems. Card details are entered on, and transmitted directly to, a PCI-DSS compliant payment provider. We receive only the result of the authorisation and the truncated card details needed to reconcile the order and process refunds.
4. HOW WE USE PERSONAL INFORMATION, AND ON WHAT LEGAL BASIS
Each purpose below is paired with the GDPR legal basis on which we rely when the GDPR applies to you. Where it does not, the purposes still describe our actual use.
| Purpose | Legal basis (GDPR) |
|---|---|
| Taking, processing, and delivering your order, and communicating with you about it. | Performance of a contract |
| Handling returns, refunds, warranty claims, and support requests. | Performance of a contract; legal obligation |
| Detecting, preventing, and investigating fraud, abuse, and chargebacks. | Legitimate interests; legal obligation |
| Keeping accounting, tax, and consumer-protection records. | Legal obligation |
| Measuring and improving the performance and security of the Services. | Legitimate interests |
| Sending marketing messages about our products. | Consent, or legitimate interests for existing customers where the law allows, with an opt-out in every message |
| Advertising measurement, attribution, and audience building. | Consent |
| Establishing, exercising, or defending legal claims. | Legitimate interests |
Where we rely on legitimate interests, we have weighed those interests against your rights and freedoms, and you may object at any time as described in section 8.
We do not use your personal information to make decisions producing legal effects concerning you, or similarly significantly affecting you, by automated means alone. Automated fraud scoring may flag an order for manual review, but a human decides.
5. HOW WE DISCLOSE PERSONAL INFORMATION
We do not sell personal information for money. We disclose it to the following categories of recipients, each bound by contract to use it only for the purpose we specify:
- Payment providers and fraud-prevention services — to authorise, settle, refund, and secure transactions.
- Fulfilment centres and carriers — to pick, pack, ship, and track your order, and to process returns.
- Customer support and communication platforms — to receive and answer your messages and to send transactional email.
- Analytics providers — to measure how the Services are used.
- Advertising platforms and affiliate networks — to measure campaigns, attribute orders, and build audiences. See section 6.
- Professional advisers, auditors, and insurers — where necessary and under a duty of confidentiality.
- Public authorities — where we are legally compelled, and after checking that the request is valid and proportionate.
- An acquirer — if we sell or reorganise the business, in which case this Policy continues to apply until you are given notice of any change.
We do not disclose personal information to data brokers.
6. SALE AND SHARING FOR TARGETED ADVERTISING, AND HOW TO OPT OUT
We do neither. We do not exchange personal information for money, and no advertising platform reads a cookie identifier from your device through the Website — because the Website loads no advertising and no analytics technology at all. There is therefore no “sale”, no “share” for cross-context behavioural advertising under the CCPA/CPRA, and no “targeted advertising” under other state laws.
The complete list of what the Website does place on your device, measured rather than described, is in section 4 of our Cookie Policy. We have not sold or shared the personal information of a consumer we knew to be under 16 years of age, and we do not intend to.
Because there is nothing to opt out of, we offer no cookie banner — a control that decides nothing is worse than none. Two commitments stand in its place:
- we honour the Global Privacy Control (GPC) signal as a valid opt-out for that browser, without further action from you, for as long as it has anything to act on;
- if we ever add an advertising or analytics technology, the Cookie Policy will list it and consent will be requested before it is enabled — you may also write to support@trygeotag.com at any time with the subject “Do Not Sell or Share My Personal Information”.
7. YOUR RIGHTS UNDER UNITED STATES STATE PRIVACY LAWS
Depending on your state of residence, you have some or all of the following rights:
- Know and access — the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of recipients.
- Delete — the personal information we hold about you, subject to the exceptions the statute allows.
- Correct — inaccurate personal information.
- Opt out — of sale, sharing, and targeted advertising, as described in section 6.
- Portability — a copy in a readily usable format.
- Limit the use of sensitive personal information — we collect none, so there is nothing to limit.
- Non-discrimination — we will never deny you goods, charge a different price, or provide a lesser quality of service because you exercised a right.
We respond within 45 days, extendable once by a further 45 days where the request is complex, and we will tell you if we extend. Verification is proportionate: for most requests, confirming control of the email address used on the order is enough; for a request covering specific pieces of information, we may ask for additional matching details.
An authorised agent may submit a request on your behalf with written permission signed by you, and we may still contact you to confirm it. If we refuse a request, we explain why and how to appeal; an appeal is decided within 45 days, and you may then complain to your State Attorney General.
8. YOUR RIGHTS UNDER THE GDPR AND UK GDPR
If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the right to request access, rectification, erasure, restriction of processing, and portability; to object to processing based on legitimate interests, including profiling; and to withdraw consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
We answer within one month, extendable by two further months for complex requests, and we tell you if we extend. Exercising these rights is free unless a request is manifestly unfounded or excessive.
You also have the right to lodge a complaint with your supervisory authority. We would appreciate the chance to address your concern first.
9. RETENTION
We keep personal information only as long as the purpose requires, then delete or anonymise it. In practice:
| What | How long |
|---|---|
| Order, invoice, and payment records | As required by tax and accounting law, generally 7 years from the transaction |
| Support correspondence | 3 years from the last exchange |
| Marketing contact details | Until you unsubscribe, then a suppression record is kept so that we do not contact you again |
| Analytics identifiers | 14 months from your last interaction |
| Advertising identifiers | 13 months from your last interaction |
| Cookie consent records | As long as needed to demonstrate compliance, and no more than 24 months |
10. INTERNATIONAL TRANSFERS
We operate from the United States and use service providers located in the United States and elsewhere. Personal information may therefore be transferred to and processed in a country other than yours.
For transfers out of the EEA, the UK, or Switzerland, we rely on the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum where applicable, or a finding of adequacy, supplemented by additional safeguards where the circumstances of the transfer require them. You may ask us for details of the mechanism applied to a specific transfer.
11. SECURITY
We apply technical and organisational measures appropriate to the risk, including encryption of traffic in transit, access control on a need-to-know basis, segregation of payment processing to PCI-DSS compliant providers, logging, and contractual security obligations on our processors.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach affects your personal information and the law requires notification, we will notify you and the competent authority within the applicable deadline.
12. CHILDREN
The Services are intended for adults. We do not knowingly collect personal information from children under 16, and we do not knowingly sell or share it. If you believe a child has provided us with personal information, contact us and we will delete it promptly.
13. CHANGES TO THIS POLICY
We may update this Policy to reflect changes in our practices or in the law. The “Last updated” date above always reflects the current version. Where a change materially affects how we use or share your personal information, we will give prominent notice on the Website and, where the law requires it, obtain your consent before applying it.
14. CONTACT
For any privacy question, or to exercise a right:
- Customer service: support@trygeotag.com
- Legal and personal-data matters: robin@rbcgroupai.com
- Mailing address: 30 North Gould Street, Suite N, Sheridan, Wyoming 82801, United States
We do not currently operate a telephone customer-service line. All requests are handled by email, and we reply within 24 business hours. If a telephone number is made available for contractual contact, it will be published here.