Privacy policy
TODO(michael): this is draft copy written as a starting point, not legal advice. Read it end to end, correct anything that does not match how you actually operate, and delete this banner before launch.
Last updated: TODO: date
What we collect
- Order information: name, email, phone, shipping address, and the organization name, role, and organization contact you provide at checkout.
- Payment information: handled entirely by Stripe. We never see or store your card number.
- Messages: anything you send through the contact or wholesale forms.
Why we collect it
To fulfil your order, and to verify that it is going to a legitimate organization. The organization name, role, and contact details exist for that verification and nothing else. See order verification.
Who we share it with
- Stripe — payment processing and order records.
- Resend — sending order and contact emails.
- Vercel — website hosting.
- The shipping carrier — the address needed to deliver your order.
We do not sell your information, we do not share it for advertising, and we do not run third-party tracking or advertising scripts on this site.
How long we keep it
Order records live in Stripe for as long as required for accounting and tax purposes. TODO(michael): state how long you keep contact form emails.
Your choices
Email info@secuflag.com to ask what we hold about you, to correct it, or to request deletion. We will respond within a reasonable time. TODO(michael): if you need to comply with a specific state privacy law, have this section reviewed.
Cookies
This site sets no tracking cookies. Your cart is stored in your own browser's local storage and is never sent anywhere except when you start checkout. Stripe sets its own cookies on the checkout page it hosts.
Questions about this policy? Contact us.