Privacy Policy

1. Information we collect

Order information. When you place an order we collect your name, email address, phone number (optional), and shipping address including street, city, state and ZIP code. We also store what you ordered, the price paid, and any note you add. This is required to deliver your order and to handle returns or disputes.

Payment information. Payments are processed by a third-party payment processor. We receive confirmation of the transaction, such as the amount, currency and a transaction reference. We do not receive or store your full card number.

Site usage. We record which pages are visited, the referring site, your browser's user-agent string, and your country derived from your IP address. This is used to count visitors and understand which pages are useful. We do not use this data to build an advertising profile.

Account information. Administrative users sign in with an email address and a hashed password held by our authentication provider. We never see or store your password in plain text.

Local storage. Your cart is stored in your own browser's local storage so it survives a page refresh. It is never transmitted to us until you check out, and clearing your browser data removes it.

2. How we use your information

• To process, deliver, and support your order.
• To contact you about your order, returns, or a support request.
• To detect fraud and abuse of the checkout form.
• To count visitors and understand which pages are used.
• To meet legal, tax, and accounting obligations.

We do not sell your personal information. We do not share it with third parties for their own marketing.

3. Who we share it with

We share only what is necessary to operate the store:

• Supabase — our database and authentication provider, which stores your order and account data on our behalf.
• Our payment processor — to take payment and issue refunds.
• Our shipping carriers — your name, address, and phone number so the parcel can be delivered.
• Our hosting provider (Vercel) — to serve the site.
• Authorities — where required by law, a court order, or to protect our rights and the safety of others.

4. How long we keep it

Order records are retained for as long as needed to provide support and meet tax and accounting record-keeping requirements, typically several years. Aggregated visitor counts are retained indefinitely because they are not linked to you. If you ask us to delete your account data, we will do so except for records we are legally required to keep.

5. How we protect it

Data is transmitted over HTTPS. Access to order and customer data is restricted to administrators of this store and to our service providers, who process it under contract. Administrative actions are verified on the server for every request, not just in the interface.

No system is perfectly secure. If a breach affects your personal information we will notify you and the relevant authority as required by law.

6. Your rights

Depending on where you live — particularly in California — you may have the right to:

• Know what personal information we hold about you.
• Request a copy of that information.
• Ask us to correct information that is wrong.
• Ask us to delete information.
• Opt out of certain uses or “selling” of your information.
• Not be discriminated against for exercising these rights.

To exercise any of these, email us at [email protected]. We will verify your identity before acting on your request and will respond within the period required by applicable law. We do not sell personal information, so there is nothing to opt out of on that front. We will also supply our business name and contact details on request.

7. Children

This store is not intended for anyone under 13 and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

8. Security of the connection

Cart and account data are transmitted over encrypted connections. Please do not send payment details through email or messages.

9. International transfers

We ship only within the United States. Our service providers may process data in other countries; where they do, they are required to apply appropriate safeguards.

10. Changes to this policy

We may update this policy. The “last updated” date at the top always reflects the current version. If a change materially affects your rights we will make additional notice.