Information we collect
- Account details: name, email address, phone number, and your password, which we store only as a one-way hash (argon2id).
- Addresses: shipping and billing addresses you save.
- Orders: items, amounts, sales tax, delivery method, and order history.
- Payment details: card payments are processed by Stripe. We never receive or store your full card number or security code; we keep only the card brand, last four digits, and expiry date.
- Favorites and bag: items you save or add to your bag.
- Messages: what you send through the contact form, and your email if you subscribe to our newsletter.
- Usage and device data: pages visited and similar information collected through Google Analytics cookies, unless you opt out.
- Security data: IP address and sign-in attempts, used to protect accounts and limit abuse.
How we use it
- To process payments, fulfill and deliver orders, and send receipts.
- To calculate the sales tax required for your shipping address.
- To prevent fraud and keep accounts secure.
- To answer your messages and provide customer service.
- To understand how the site is used and improve it.
- To send our newsletter, if you subscribed. You can unsubscribe at any time: [To confirm: unsubscribe method — none exists yet].
Who we share it with
- Stripe — payment processing, sales tax calculation, and fraud screening. Stripe receives your payment details, email, shipping address, and order amounts.
- Delivery carriers — your name, shipping address, and phone number, to deliver your order.
- Google Analytics — site usage data and, when you make a purchase, the order amount and items, unless you opt out (see below).
- Service providers — [To confirm: hosting and database providers], who process data only on our behalf.
- Legal requirements — when required by law or to protect our rights.
We do not sell your personal information for money.
Your choices: opting out of sharing
Under some US state laws, sharing usage data with analytics providers can count as “selling” or “sharing” personal information. You can opt out in either way:
- Turn on “Do not sell or share my personal information” in your account privacy settings.
- Enable Global Privacy Control (GPC) in your browser. We treat the GPC signal as an opt-out, including for purchase reporting.
Your rights
Depending on where you live — including California, Colorado, Connecticut, Virginia, and other US states — you may have the right to:
- Know and access the personal information we hold about you, and get a copy.
- Correct inaccurate information.
- Delete your information.
- Opt out of the sale or sharing of your information.
- Not be treated differently for exercising these rights.
You can request a copy of your data or delete your account from your account privacy settings, or by contacting [To confirm: privacy contact email]. We may need to verify your identity before acting on a request.
How long we keep it
We keep account information while your account is open. Order and payment records are kept for [To confirm: retention period for tax and accounting records], as required by law, even if you delete your account.
Security
Data is sent over encrypted connections, passwords are stored only as hashes, and card numbers never reach our servers. No system is completely secure, but we work to protect your information.
Children
This site isn't directed to children under 13, and we don't knowingly collect their personal information.
Where data is processed
Your information is processed in [To confirm: countries where data is stored and processed].
Changes and contact
We'll post any changes on this page and update the date above. Questions about this policy: [To confirm: privacy contact email and mailing address].
See also our Terms of Sale.
