Privacy Policy

Data we collect

• Cart contentsstored locally on your device (browser local storage). Never sent to us until you click "Proceed to Checkout".
• Order data (email, name, billing address, items, total) collected by Stripe during the hosted checkout. We receive a summary via webhook to fulfil your order.
• Contact form data (name, email, message) when you write to us via the contact page.
• Server logs (IP, user-agent, timestamps) retained for up to 30 days for security and debugging by our hosting provider Vercel.

Why we process it

• To process your order and deliver the goods.
• To respond to your messages.
• To comply with tax and accounting obligations.
• To keep the service secure.

Who has access

Your data is shared only with the processors strictly required to run the service:

• Stripe— payment processing.
• Vercel— hosting and CDN.
• Supabase— secure storage of order records (when configured).

We never sell your personal data and we do not run third-party advertising or tracking.

Retention

Order records are kept as long as required by EU tax law (typically 10 years). Contact form data is kept for up to 24 months and then deleted.

Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, port, or object to the processing of your personal data, and to lodge a complaint with your supervisory authority. To exercise these rights, write to hello@societyshuffle.art.

Cookies

See our cookies policy for the full list.