Last updated: 2025/11/28
Contact email: [CONTACT EMAIL]
Information we collect
- Information you give us
- Name, email address, billing/shipping address, phone number, order details, payment token (we do not store full card numbers), and messages you submit to customer support.
- Information automatically collected
- IP address, device/browser type, pages visited, referrer, search terms, cookies and analytics data (e.g., Google Analytics).
- Information from third parties
- Payment processors (e.g., Stripe, PayPal), shipping carriers, and dropshipping suppliers (supplier names: [SUPPLIER(S)]). We receive information necessary to fulfill orders and process returns.
How we use personal data
- Process and fulfill orders (including shipping and returns).
- Communicate with you about orders, refunds, and customer service.
- Improve and personalize the Site (analytics, testing).
- Prevent fraud and comply with legal obligations.
- Send marketing emails if you opt in. You can unsubscribe at any time.
Legal bases for processing (EEA/GDPR)
- Contract: to process orders and provide services.
- Consent: for marketing communications and non-essential cookies.
- Legitimate interests: fraud prevention, analytics, and site improvement.
- Legal compliance: retaining accounting records as required.
Sharing your data
We share data with:
- Payment processors: [Stripe/PayPal] (payment authorization and fraud checks).
- Dropshipping suppliers: to fulfill orders (we share order details and shipping address).
- Shipping carriers: for delivery.
- Service providers: analytics (Google Analytics), hosting (DreamHost), email provider ([MAIL PROVIDER]).
- Legal/process: when required by law or to protect our rights.
International transfers
Some processors and suppliers may be located outside your country. Where data is transferred outside the EEA/UK we rely on adequacy decisions, standard contractual clauses, or other lawful transfer mechanisms.
Data retention
We retain personal data as long as necessary for business purposes and legal obligations. Typically order data is retained for [X] years for tax/accounting reasons and account data until you request deletion.
Your rights (where applicable)
If you are in the EU/EEA/UK you may have rights to access, correct, delete, or port your data; restrict or object to processing; and withdraw consent. To exercise these rights contact: [CONTACT EMAIL]. We may need proof of identity.
Security
We use administrative, technical, and physical safeguards to protect data. No transmission over the internet is completely secure; we cannot guarantee absolute security.
Third-party links
The Site may link to third-party websites. We are not responsible for their privacy practices; please review their policies.
Children
The Site is not intended for children under 16. We do not knowingly collect personal data from children.
Marketing
If you opt in to marketing, we will send promotional emails. Unsubscribe via the link in emails or by contacting [CONTACT EMAIL].
Changes to this policy
We may update this Policy; we will post the new effective date here and notify users where appropriate.
Contact
For privacy questions or to exercise rights: [CONTACT EMAIL]
