Loading
Loading
How we collect, use and protect your personal information.
Placeholder — not a legal document
This page has no policy text yet. The headings below are a checklist of what has to be covered. Replace them with wording from a policy generator or a lawyer before the store takes a single real order.
The signup form takes name, email and optionally a phone number. Checkout will add billing and shipping addresses and order history. Square processes card details — the site never sees or stores a card number, and this section should say so plainly.
Fulfilling orders, sending order updates, and — only where consent was given — marketing email and SMS. List each purpose separately; a single catch-all sentence is what regulators object to.
Email opt-in and SMS opt-in are separate consents and must be described separately. Include how to withdraw each: unsubscribe link for email, STOP for texts.
Square (payments, customer records), the shipping carriers, and any email or analytics provider. Name them — 'trusted third parties' is not a disclosure.
Required only once analytics or advertising pixels are added. The site currently sets no tracking cookies, which is worth stating while it stays true.
Access, correction and deletion. Texas residents have rights under the TDPSA; EU and UK visitors under GDPR, which is in scope if the store genuinely ships worldwide as the branding claims.
A real monitored email address and the business's postal address. CAN-SPAM requires a physical address in marketing email regardless.
How updates are communicated, and a last-updated date that actually gets maintained.
Questions about this page? Get in touch.