Privacy Policy
Last updated: placeholder — replace before launch.
1. What we collect
Account info (name, email, phone, company), order info (briefs, uploaded files, shipping address), payment metadata from Stripe (we do not see card numbers), and basic analytics (page views, device).
2. How we use it
To fulfill your order, communicate with you about it, send transactional email, prevent fraud, and improve the Service.
3. Sharing
With Supabase (auth + database), Cloudflare R2 (file storage), Stripe (payments), Resend (email), Vercel (hosting), and our China-based manufacturing partner (artwork + ship-to address only). We do not sell personal information.
4. CCPA — California Consumer Privacy Act
California residents have the right to know what personal information we collect, request deletion, and opt out of sale. We do not sell personal information. Submit a privacy request.
5. Cookies
We use a strictly necessary cookie to remember your age verification (21+) for 30 days, plus optional analytics cookies you can decline.
6. Retention
Order records are retained for 7 years for tax and accounting. Account data is retained while your account is active and deleted within 30 days of a verified deletion request.
7. Contact
Privacy questions: privacy@customcalipacks.co.uk.
Placeholder copy — replace with attorney-reviewed final before launch.