1. Purpose and scope.

This policy explains what personal information the store collects, why it collects that information, how it uses and shares it, how long it keeps it, and what choices and rights a customer has. It applies to information collected through the website, through the checkout, through customer-support communications, and through marketing interactions. It is written to address the categories of information that an e-commerce store typically handles, including order data, account data, analytics data, marketing data, and cookie data, and it describes the disclosures expected under United States state privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act, and, where applicable, other state laws that have adopted similar requirements.

This policy does not cover information collected by third parties on their own sites, even if the customer reached those sites through a link from this store. A customer should review the privacy policy of any third-party site before providing information to that site.

2. Information collected directly from the customer.

When a customer places an order, the store collects the information needed to process and fulfill that order. This includes the customer’s name, shipping address, billing address, email address, telephone number if provided, and the products ordered. Payment card details are not stored by the store in full; payment processing is handled by a payment processor, and the store receives a transaction confirmation and the last four digits of the card for reference. The store does not receive or store the full card number, card verification value, or full expiration date.

When a customer creates an account, the store collects login credentials and any information the customer adds to the account, such as saved addresses or order history. When a customer contacts support, the store collects the content of the communication, including any attachments such as photographs of a damaged product or a screenshot of an error. When a customer signs up for marketing emails, the store collects the email address and any preferences the customer expresses. When a customer participates in a survey or leaves a review, the store collects the information the customer chooses to provide.

The store does not require a customer to create an account to place an order. A customer may check out as a guest, in which case the store collects only the information needed to fulfill the order and does not create a persistent account.

3. Information collected automatically.

When a customer visits the site, the store and its service providers collect certain information automatically. This includes the IP address, browser type and version, device type, operating system, referring URL, pages viewed, time spent on pages, and actions taken on the site. This information is used to operate the site, diagnose technical issues, understand how visitors navigate the site, and improve the shopping experience.

The store uses cookies and similar technologies. Cookies are small text files placed on the customer’s device that allow the site to remember preferences, keep items in a cart, and recognize a returning visitor. The store uses essential cookies that are necessary for the site to function, analytics cookies that help the store understand how the site is used, and marketing cookies that may be used to show relevant advertisements on other platforms. A customer can control cookies through browser settings; disabling essential cookies may prevent the site from functioning correctly.

Where required by applicable law, the store provides a mechanism to opt out of the sale or sharing of personal information for targeted advertising. The store honors opt-out preference signals, including the Global Privacy Control signal, to the extent required by applicable law. A “Do Not Sell or Share My Personal Information” link is available in the site footer for California residents and other consumers whose jurisdictions provide an equivalent right.

4. How information is used.

The store uses personal information for the following purposes. To process and fulfill orders, including payment processing, fraud screening, packing, shipping, and delivery confirmation. To communicate about orders, including dispatch confirmations, tracking updates, delivery issues, and return or refund status. To respond to customer-support inquiries and resolve disputes. To detect, prevent, and address fraud, unauthorized transactions, and security incidents. To comply with legal obligations, including tax, accounting, and consumer-protection requirements. To improve the site, products, and services, using aggregated or de-identified information where possible. To send marketing communications where the customer has opted in or where permitted by law, and to measure the effectiveness of those communications.

The store does not sell personal information in the conventional sense of exchanging it for money. The store does share information with service providers as described in the next section, and some state privacy laws may classify certain sharing arrangements as “sales” or “sharing” for targeted advertising. Where that classification applies, the store provides the disclosures and opt-out rights described in this policy.

5. Sharing with service providers and third parties.

The store shares information with service providers that perform functions on its behalf. These include payment processors, shipping carriers, fulfillment partners, email service providers, analytics providers, customer-support tools, and fraud-prevention services. Each service provider receives only the information needed to perform its function, and the store requires service providers to use the information only for the purpose for which it was shared.

The store may share information with professional advisers such as lawyers and accountants when necessary. The store may share information in connection with a business transaction—such as a merger, acquisition, or sale of assets—subject to the acquirer agreeing to honor this policy. The store may disclose information when required by law, subpoena, court order, or a lawful request from a public authority, and when necessary to protect the rights, property, or safety of the store, its customers, or the public.

The store does not share payment card details with shipping carriers or fulfillment partners. Carriers receive the name, address, and telephone number needed for delivery, not the payment information.

6. Data retention.

The store retains order and transaction information for as long as needed to fulfill the order, handle returns and refunds, comply with tax and accounting obligations, and resolve disputes. This generally means order records are retained for the period required by applicable tax and consumer-protection law, plus a reasonable period for dispute resolution. Account information is retained while the account is active and for a reasonable period after the account is closed to allow the customer to reopen it or request records.

Marketing contact information is retained until the customer unsubscribes or requests deletion. Support communications are retained for a reasonable period to allow the store to reference prior interactions and resolve follow-up issues. Analytics data is retained in aggregated or de-identified form for longer periods because it is no longer linked to an individual customer.

When information is no longer needed, the store deletes it or de-identifies it. If deletion is not immediately possible because information is stored in backup systems, the store restricts access to the backup data until it can be deleted in the ordinary course.

7. Security measures.

The store uses technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit using TLS, access controls that limit who can view personal information, authentication requirements for administrative access, and regular review of service-provider security practices. The store does not store full payment card details on its own systems; payment processing is handled by a PCI-DSS-compliant processor.

No method of transmission over the internet and no method of electronic storage is completely secure. The store cannot guarantee absolute security. A customer who suspects that their information has been compromised should contact support through the Contact page immediately so the store can investigate and, where required, notify affected individuals and authorities.

8. Customer rights and choices.

Depending on the customer’s jurisdiction, the customer may have the right to access the personal information the store holds about them, request correction of inaccurate information, request deletion of information, request a portable copy of information, opt out of certain sharing or targeted advertising, and limit the use of sensitive personal information where that category applies. California residents have the right to know what categories of personal information are collected and shared, the right to delete, the right to correct, the right to opt out of sale or sharing, and the right to limit the use of sensitive personal information.

A customer may exercise these rights by contacting support through the Contact page. The store will respond within the timeframe required by applicable law and may need to verify the customer’s identity before fulfilling a request. The store will not discriminate against a customer for exercising a privacy right. Where a request is denied in whole or in part, the store will explain the reason, subject to legal limitations.

A customer may opt out of marketing emails by using the unsubscribe link in any marketing email or by contacting support. Opting out of marketing emails does not prevent the store from sending transactional messages about an order, such as dispatch confirmations or refund notifications, because those messages are necessary to fulfill the order.

9. Children’s privacy.

The site is not directed to children, and the store does not knowingly collect personal information from children. Products are intended for general consumer use, but the store’s account and marketing features are not designed for children. If the store learns that it has collected information from a child without appropriate consent, the store will delete the information. A parent or guardian who believes a child has provided information to the store should contact support through the Contact page.

10. International data transfers.

The store may process and store information in countries other than the customer’s country of residence, including the United States. When information is transferred from a jurisdiction with data-transfer restrictions to another jurisdiction, the store uses appropriate safeguards, such as contractual data-protection terms with service providers, to protect the information. A customer who wants more information about the safeguards used for a specific transfer may contact support.

11. Changes to this Privacy Policy.

The store may update this policy to reflect changes in data practices, service providers, or legal requirements. When material changes are made, the updated policy replaces the prior version on the site. The store encourages customers to review this policy periodically. A customer who continues to use the site after an update accepts the updated policy, except where applicable law requires additional consent.

12. Contact for privacy matters.

Privacy questions, access requests, deletion requests, correction requests, and opt-out requests should be directed through the Contact page. The store will route privacy inquiries to the appropriate team and respond within the time required by applicable law. The Contact page is the single entry point for all privacy-related communication so that requests are documented and tracked.