Privacy Policy

We use your information to:

• Process and fulfill your orders, including shipping and returns
• Communicate with you about your orders, account, and customer service requests
• Personalize your shopping experience and product recommendations
• Send newsletter emails (only if you subscribe — you can unsubscribe anytime)
• Improve our website, products, and services through analytics
• Detect and prevent fraud, abuse, and security issues
• Comply with legal obligations

We do not sell your personal information. We share data only with:

• Stripe — payment processing (PCI-compliant, your card details never touch our servers)
• Printful — order fulfillment (name, shipping address, and product details needed to print and ship your order)
• Brevo — email delivery (order confirmations, newsletter, contact form responses)
• Google Analytics — website analytics (only if you accept cookies; data is anonymized)
• Legal authorities — if required by law, court order, or to protect our rights and safety

Each third-party service has its own privacy policy governing how they handle your data. We recommend reviewing their policies.

We take reasonable measures to protect your personal information:

• Passwords are hashed using industry-standard algorithms (bcrypt)
• Payment data is handled entirely by Stripe — we never store full card numbers
• HTTPS encryption for all data in transit
• Access to personal data is restricted to authorized personnel only
• Regular security reviews and dependency updates

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Depending on your location (e.g., GDPR/CCPA), you may have the right to:

• Access — request a copy of your personal data
• Rectify — correct inaccurate or incomplete data
• Delete — request deletion of your personal data
• Export — receive your data in a portable format
• Object — opt out of certain processing activities
• Withdraw consent — revoke cookie or marketing consent at any time

To exercise any of these rights, please contact us. We will respond within 30 days.

We retain your personal information only as long as necessary to fulfill the purposes outlined in this policy:

• Account data is retained while your account is active
• Order data is retained for 7 years for tax and legal compliance
• Newsletter subscriptions are retained until you unsubscribe
• Contact form messages are retained for 2 years
• Analytics data is anonymized and retained for 26 months

You can request early deletion of your account and associated data at any time (subject to legal retention requirements for order records).

Our Services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such data, please contact us and we will promptly delete it.

Your information may be transferred to and processed in countries other than your own, including the United States. We take reasonable steps to ensure your data is protected in accordance with this policy and applicable law, including using services that provide adequate safeguards for international data transfers.

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. We will notify you of significant changes via email or a notice on the website. Your continued use of the Services after changes take effect constitutes acceptance of the updated policy.

If you have any questions about this Privacy Policy or how we handle your data, please contact us.