Privacy Policy

1. Information We Collect

We collect only the minimum personal information necessary to provide you with our Services.

a) Information You Provide Directly

• First name
• Last name
• Email address

This information is collected when you create an account, make a purchase, or contact us.

b) Payment Information

When you purchase our products or services, payment processing is handled by our third-party payment processor(s). We do NOT directly collect, store, or process your full credit card number, debit card number, or bank account details. Our payment processor(s) handle this data subject to their own privacy policies and PCI-DSS compliance standards.

c) Information Collected Automatically

When you visit our Site, certain information is collected automatically, including:

• IP address
• Browser type and version
• Operating system
• Pages visited, time and date of visit, time spent on pages
• Referring website addresses
• Device identifiers
• Cookies and similar tracking technologies (see Section 4)

2. How We Use Your Information

We use your personal information for the following purposes:

• To create and manage your user account
• To process transactions and payments
• To send transactional emails necessary for your account, including account verification, password reset emails, purchase confirmations, and service-related notices
• To analyze website usage and improve the functionality of our Site (via Google Analytics)
• To protect the security and integrity of our Site (via Google reCAPTCHA)
• To comply with applicable legal obligations
• To enforce our Terms of Service

We do NOT use your information to:

• Send marketing or promotional emails
• Display advertisements
• Conduct remarketing or retargeting campaigns
• Sell or rent your personal information to third parties

3. Third-Party Services

We use the following third-party services that may collect or process certain information:

a) Google Analytics

We use Google Analytics to analyze how users interact with our Site. It uses cookies to collect information such as how often users visit the Site, what pages they visit, and usage patterns. We use this information solely to improve our Site. Google Analytics collects your IP address, which may be anonymized. We do not send any personally identifiable information (PII) such as your name or email to Google Analytics.

You may opt out by installing the Google Analytics Opt-Out Browser Add-on. Learn more: Google Privacy Policy.

b) Google reCAPTCHA

We use Google's Invisible reCAPTCHA to protect our Site from spam and abuse. reCAPTCHA collects hardware and software information and sends it to Google for analysis. Your use of reCAPTCHA is subject to Google's Privacy Policy and Terms of Service.

c) Payment Processor(s)

We use third-party payment processors to handle all payment transactions. These processors collect and process your payment data directly. We do not have access to or store your full payment card information.

d) Email / Transactional Email Service

We use a third-party email delivery service to send transactional emails. These services process your email address and name solely for the purpose of delivering emails on our behalf.

4. Cookies and Tracking Technologies

Our Site uses cookies — small text files stored on your device — and similar tracking technologies.

Types of cookies we use:

• Essential Cookies: Required for the Site to function properly (e.g., authentication, session management).
• Analytics Cookies: Used by Google Analytics (with your consent) to understand how visitors interact with the Site.
• Security Cookies: Used by Google reCAPTCHA to protect against bots and spam.

We do NOT use advertising cookies, remarketing cookies, or any cookies for the purpose of serving ads.

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Site. See our Cookie Policy for full details.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our Services. Specifically:

• Account data (name, email): Retained while your account is active and for a period after account deletion to allow for account recovery and comply with legal obligations.
• Payment / transaction records: Retained as required by applicable tax and accounting laws.
• Analytics data: Subject to Google Analytics' own retention settings and policies.

When your personal information is no longer needed, we will securely delete or anonymize it.

6. Data Security

We implement reasonable and appropriate technical and organizational security measures to protect your personal information. These measures include:

• Encrypted data transmission (HTTPS/TLS)
• Secure password hashing
• Access controls and authentication
• Regular security reviews

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

7. Your Rights Under the GDPR

If you are located in the European Economic Area (EEA), the United Kingdom (UK), or Switzerland, you have the following rights under the GDPR:

a) Legal Basis for Processing

We process your personal data on the following legal bases:

• Performance of a Contract: To create your account, process payments, and provide our Services.
• Legitimate Interest: To analyze Site usage via Google Analytics and protect our Site via reCAPTCHA, where these interests are not overridden by your data protection rights.
• Legal Obligation: To comply with applicable laws and regulations.

b) Your GDPR Rights

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure ("Right to Be Forgotten"): Request deletion of your personal data, subject to applicable legal retention requirements.
• Right to Restrict Processing: Request that we restrict the processing of your personal data under certain circumstances.
• Right to Data Portability: Receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: Object to processing of your personal data based on legitimate interests.
• Right to Withdraw Consent: Where processing is based on consent, withdraw consent at any time.
• Right to Lodge a Complaint: Lodge a complaint with your local Data Protection Authority (DPA).

To exercise any of these rights, contact us at: [email protected]. We will respond within 30 days.

c) International Data Transfers

If your data is transferred outside the EEA/UK, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission.

8. Your Rights Under the CCPA and CPRA

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).

a) Categories of Personal Information Collected

In the preceding 12 months, we have collected:

• Identifiers: First name, last name, email address, IP address
• Internet or electronic network activity information: Browser type, pages visited, referring URLs, device information (collected via Google Analytics)

b) Sale and Sharing of Personal Information

We do NOT sell your personal information. We do NOT share your personal information for cross-context behavioral advertising purposes.

c) Your CCPA/CPRA Rights

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete: Request deletion of your personal information, subject to certain exceptions.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt Out of Sale/Sharing: We do not sell or share your personal information, so this right does not apply.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

To exercise your rights, contact us at: [email protected]. We will verify your identity before processing your request and respond within 45 days.

d) Authorized Agent

You may designate an authorized agent to submit requests on your behalf. We may require verification that you authorized the agent to act on your behalf.

9. CalOPPA Compliance

In accordance with the California Online Privacy Protection Act (CalOPPA):

• Users can visit our Site anonymously (without creating an account).
• Our Privacy Policy link includes the word "Privacy" and is easily accessible.
• Users will be notified of any Privacy Policy changes on our Privacy Policy page.
• Users can change their personal information by logging into their account or by emailing us.

Regarding "Do Not Track" (DNT) Signals:

We honor Do Not Track signals. When a DNT browser mechanism is in place, we will not track your activity across third-party websites. We do not engage in third-party tracking, remarketing, or ad targeting.

10. Children's Privacy

Our Site and Services are not intended for individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under the age of 13, we will take steps to delete that information promptly.

If you believe we may have collected information from a child under 13, please contact us immediately at: [email protected]

11. Third-Party Links

Our Site may contain links to third-party websites or services that are not operated by us. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. When we do, we will revise the "Last updated" date at the top of this page.

If we make material changes, we will notify you by email or by posting a prominent notice on our Site prior to the change becoming effective.

Your continued use of the Site and Services after the posting of changes constitutes your acceptance of such changes.