Privacy policy

Who processes your data

The data controller is [OWNER: full name or business name, address]. For any data question, write to [OWNER: email].

What we collect

• Order: first name, last name, phone, email, delivery method, and for delivery by post your address, city and postal code. Also the note if you add one.
• Email list: your email address, only with your consent.
• Abuse protection: forms are checked by Cloudflare Turnstile, and we limit attempts per IP address, which we store only as a one-way hash.

Why

We use order data to confirm and ship your order and to contact you about it. We use your email-list address for the discount code and news about new boxes and sales; you can unsubscribe at any time.

How long

We keep order data for [OWNER: period, e.g. as required by sales record rules]. We keep your email-list address until you unsubscribe.

Who else sees the data

We don't sell your data. We use these services, which process it only on our behalf:

• Netlify (website hosting) and Neon (database, servers in the USA),
• Resend (sending emails),
• Telegram (notifying the owner about a new order),
• Cloudflare Turnstile (spam protection on forms),
• Uploadthing (product images) and Sentry (technical error reports),
• the postal service (parcel delivery).

Your rights

You can ask to see, correct or delete your data, and withdraw consent for the email list. Write to [OWNER: email].