Data Collected

We collect data in two categories: essential data, which is necessary to operate the website and fulfill orders, and optional data, which we collect only with your consent.

Purpose of Data Collection

We use your data primarily to fulfill orders, process payments, ship products, manage your account, comply with legal requirements, and secure our website. These purposes are essential for providing the services you request.

With your consent, we may also use your data for marketing, such as sending promotional emails, providing personalized product recommendations, and delivering retargeting ads. We may analyze browsing and purchase behavior to improve website performance, conduct A/B testing, and offer a customized shopping experience. We also track your service history to provide efficient and personalized support. You have the right to decline these optional uses at any time.

Data Sharing

We share your personal data only when necessary. Payment information is shared with secure processors such as Stripe, PayPal, or Square, and may also be verified with banking services. Shipping information such as your name, address, and phone number is shared with USPS and our fulfillment partners to deliver your orders. Essential hosting and storage services may be provided by secure third-party cloud platforms.

With your consent, we may share limited and anonymized data with marketing partners. For analytics, we may use Matomo or other analytics services. We ensure that all third-party partners comply with strict privacy standards and use your data only for agreed purposes.

User Rights

You have the right to access your personal data, request corrections, and delete your account and associated data. You may also request a copy of your data in a portable format. You can opt out of marketing communications at any time.

If you are covered by CCPA, you also have the right to object to certain processing, restrict data usage, and be notified in case of a data breach. You can withdraw consent for optional data collection whenever you choose.

To exercise your rights, please contact us at [email protected].

Data Security

We take data protection seriously. We use SSL/TLS encryption for data transmitted through our website and encrypted storage for sensitive information. We apply role-based access controls and two-factor authentication for internal accounts. Security patches and regular vulnerability scans are applied to protect our systems.

On the organizational side, our staff undergoes privacy and security training. We minimize data collection by storing only what is necessary. We also have procedures to detect, investigate, and respond quickly to any potential data breach.

Data Retention

We retain your account data while your account remains active. If your account is inactive, we may retain your data for 3–7 years depending on legal or operational needs. If you delete your account, we complete the deletion process within 30 days.

We store order history for 7 years to comply with tax and legal obligations. Shipping data is retained for 2–3 years to provide warranty and support. Payment data is not stored by us and is handled directly by our payment processors.

Marketing data is retained until you unsubscribe, after which we delete your details within 30 days. Analytics data is generally stored for 2–4 years. Cookies expire between 30 days and 2 years depending on their type.

Cookies and Tracking

We use essential cookies to enable shopping cart functionality, manage user sessions, and secure your account. For more information on cookie usage, preference settings, and opt-out options, consult our Cookie Policy.

Regional Compliance

Notice to California Residents.

Contact and Governance

Email: [email protected]

If we make significant changes to this policy, we will notify you by email. All updates will take effect 30 days after notification, and the effective date will be clearly displayed at the top of this policy. If we introduce new ways of processing your data, we will request your consent again before applying those changes.

We communicate privacy information clearly through our website, account dashboard, and email templates. All team members are trained to handle privacy requests efficiently and securely.