1) Summary (Notice at Collection)
We collect personal information you give us or that’s generated by your use of the site (e.g., device data, cookies). We use it to process orders, deliver made-to-order goods and digital content, operate subscriptions, prevent fraud, and run the shop. We share limited data with service providers (e.g., payments, production/fulfillment, shipping, email) and, if enabled, with analytics/ads partners. We don’t sell personal information for money; if we use advertising cookies or similar, that may be considered “sharing” under California law. You can opt out (see §10).
2) Information We Collect
Identifiers & contact data: name, email, shipping/billing address, phone (if provided), order details.
Transaction data: items purchased, order IDs, amounts, currency, fulfillment/shipping status.
Payment data: processed by Stripe; we do not store full card numbers.
Account & content: if you create an account or post a review, we store your login, profile details, and submitted content. Reviews may be public and may be removed at our discretion.
Digital access data: for digital goods/subscriptions—download logs, access timestamps, device/usage info.
Device & usage data: IP address, browser type, pages visited, cookies, and similar tracking technologies.
Support messages: emails and any attachments you send us.
Sources: you (forms, checkout, email), your devices (cookies/scripts), payment processor (Stripe), production/fulfillment partners, and carriers.
3) How We Use Information
Contract & fulfillment: process and deliver orders (physical and digital), manage subscriptions, provide support.
Operations & security: troubleshoot, prevent fraud/abuse, maintain site integrity.
Communication & marketing: order confirmations, service messages, and if you opt in promotional emails.
Analytics & improvement: understand performance and improve products/site.
Legal compliance: tax, accounting, and record keeping.
4) Sharing of Information
We share personal information with:
Service providers/Processors: Stripe (payments), e-commerce platform (Big Cartel), production/fulfillment partners, shipping carriers, email and cloud hosts, analytics/anti-fraud providers, and customer support tools only to perform services for us.
Advertising/analytics partners (if enabled): may set cookies or receive hashed or pseudonymous identifiers for measurement or ads.
Authorities & legal: to comply with law, enforce terms, or protect rights.
Business transfers: in connection with mergers, asset sales, or similar events.
We do not sell personal information for monetary consideration. Where ad cookies/retargeting are enabled, California law may treat that as “sharing”; see §10 for opt-out.
5) Cookies & Tracking
We (and partners) may use:
Essential cookies (required for checkout, security).
Analytics/performance (traffic, errors, conversions).
Advertising (if enabled) for measurement and retargeting.
Control options: browser settings; clearing cookies; ad-industry opt-outs; and any cookie banner/preferences offered by your theme. Disabling cookies may affect site function.
6) Digital Goods & Subscriptions
For digital downloads and subscription content, we log access to prevent abuse and to deliver what you purchased. Subscriptions auto-renew until canceled (see Terms). We do not provide refunds for partial periods.
7) Data Retention
We keep order and accounting records as required by law (often 7 years). Account/marketing data is kept until you delete your account or unsubscribe, or until it’s no longer needed. We may keep logs for security and fraud prevention.
8) Security
We use reasonable administrative, technical, and physical safeguards. No method of transmission or storage is 100% secure.
9) Your Choices
Marketing emails: unsubscribe via the link in our emails or contact us.
Accounts & reviews: you can request deletion or editing; reviews may remain public if required by law or legitimate interests.
Cookies/ads: adjust browser settings or site preferences where available; see §10 for CA opt-out.
10) California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have the right to:
Know/Access: request the categories and specific pieces of personal information we collected.
Delete: ask us to delete personal information (subject to legal exceptions).
Correct: request correction of inaccurate data.
Opt-out of “Sale/Sharing”: we don’t sell data for money; if we use cross-context behavioral advertising, you can opt-out.
Limit Use of Sensitive Info: we do not use sensitive data for inferring characteristics.
How to exercise: email [email protected] with “California Request” and specify access, delete, correct, or opt-out. We’ll verify your request (we may ask for order details or email confirmation). Authorized agents may act on your behalf with proof of authority.
Opt-out signals: where our site recognizes a Global Privacy Control (GPC) signal, we treat it as an opt-out of sale/sharing for that browser.
Categories collected (last 12 months): identifiers, contact and commercial information, internet/usage data, and (if you submit content) user-generated content. We disclosed these to service providers and, if enabled, analytics/ads partners. We did not sell personal information for money.
11) GDPR/UK (EEA/UK Residents)
Legal bases: contract (processing orders, subscriptions), legitimate interests (security, analytics, improvements), consent (email marketing, certain cookies), legal obligation (tax/accounting).
Rights: access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. To exercise, email [email protected]. You may also lodge a complaint with your local supervisory authority. We may transfer data to the U.S.; we use appropriate safeguards where required.
12) Children
Our site is for adults (18+) and not directed to children under 13. We do not knowingly collect children’s data. If you believe a child provided data, contact us to delete it.
13) Do Not Track
Some browsers send DNT signals; we do not respond to DNT. For California GPC, see §10.
14) Third-Party Links & Services
We are not responsible for the privacy practices of third-party sites or services linked from our store. Review their policies (e.g., Stripe) before providing information.
15) Changes to This Policy
We may update this Policy from time to time. The “Last updated” date will change. Material changes will apply prospectively.
16) Contact Us
For privacy questions or requests, contact: [email protected]