Legal / Privacy
Your data,
handled with care.
We collect only what we need to process orders, improve the store and keep your account secure. We never sell your personal information.
What we collect
When you place an order we collect your name, email address, shipping and billing address, phone number and order details. Payment card data is handled directly by our payment processor and never stored on our servers.
We also collect basic technical information such as browser type, device type and pages viewed when you use the site.
How we use it
- To process, pack and deliver your order.
- To send order updates and respond to support requests.
- To prevent fraud and keep the store secure.
- To improve our products, pages and checkout experience.
- To send marketing emails if you have opted in. You can unsubscribe at any time.
Your rights
You can request a copy of your personal data, ask us to correct it, or ask us to delete it. California residents have additional rights under the CCPA, including the right to know and the right to delete. We do not sell personal information.
To make a request, use the contact page. We may need to verify your identity before acting.
How long we keep it
Order records are kept for as long as required for tax and accounting purposes. Marketing preferences are kept until you unsubscribe. Support emails are retained for two years so we can resolve follow-up questions.
Security
We use HTTPS across the site, restrict staff access to order data and review our providers regularly. No online system is completely secure, but we take reasonable steps to protect your information.
Children
The store is not intended for children under 13 and we do not knowingly collect their personal information. If you believe a child has provided data, contact us and we will delete it.
Contact
Privacy questions: use the contact page.
SurfPact Studio, Santa Cruz, California.