Privacy policy

Information we collect

When you create an account or place an order we collect your email address, name, shipping address, and order history. Payment card details are collected and processed directly by our payment gateway and never touch our servers; we store only a transaction reference and the last four digits of your card. We also use cookies necessary for the site to function, such as your session and cart.

How we use it

We use your information to process and ship orders, provide order history and tracking, verify eligibility to purchase (including the 21+ requirement and state shipping restrictions), prevent fraud, and respond to support requests. We do not sell or rent your personal information to anyone.

Service providers

We share data only with services required to run the store: our database and authentication provider (Supabase), our payment gateway, and shipping carriers (who receive your name and address to deliver your order). Each provider processes your data only to perform its service.

Retention and deletion

Order records are retained as required for tax, payment-dispute, and regulatory purposes. You may request deletion of your account and associated personal data at any time; we will honor the request except where retention is legally required.

Security

Data is encrypted in transit, database access is restricted by row-level security, and payment information is handled exclusively by our PCI-compliant gateway.

Your choices

You can view your order history in your account, and you may contact us to access, correct, or delete your personal information.