What we collect
We collect the minimum necessary to run the shop. Specifically:
- Order data — your name, email, shipping address, phone, and purchase details when you buy something.
- Account data — email + password if you create an account (optional).
- Newsletter — email address and preferences if you subscribe.
- Support correspondence — whatever you send to us via the contact form or email.
- Usage data — anonymized pageviews and interactions so we can understand what's working.
We don't collect data about you from third parties and we don't buy email lists or contact data.
How we use it
We use your data to (a) fulfill your order, (b) ship you products, (c) answer your questions, (d) send you the newsletter if you subscribed, and (e) improve the shop. That's the list.
Who we share it with
Limited service providers who help us run the shop. Specifically:
- Stripe — payment processing. They never see it directly from us; they tokenize on their servers.
- Shopify — the commerce platform hosting this site.
- UPS / USPS — shipping carriers, for label generation.
- Klaviyo — newsletter delivery.
- Google Analytics — anonymized usage stats, with IP anonymization enabled.
Each of these has their own privacy practices; we've reviewed them and require data-processing agreements.
Cookies & tracking
We use strictly-necessary cookies (login, cart, checkout) and anonymized analytics cookies. We don't use advertising cookies. You can opt out of analytics at any time via the cookie preferences link in the footer.
Your rights
Regardless of where you live, you can ask us at any time to:
- See what data we have on you (access).
- Correct anything that's wrong (rectification).
- Delete your data (erasure), with the caveat we'll keep order records as long as tax law requires.
- Receive your data in a machine-readable format (portability).
- Opt out of marketing email (one-click via any newsletter).
Email privacy@statesidefab.co and we'll process your request within 30 days.
Kids' privacy
We don't knowingly collect data from anyone under 13. If you're a parent or guardian and think we have data about your kid, email us and we'll delete it.
Retention
Order records: 7 years (US tax law). Account data: until you delete the account. Newsletter data: until you unsubscribe. Support emails: 2 years, then deleted.
Security
TLS 1.3 on the website. Payment data tokenized and handled by Stripe (PCI-DSS Level 1). Shopify infrastructure with industry-standard controls. We'd prefer to avoid incidents; if we have one, we'll notify affected customers within 72 hours.
Changes to this policy
We'll update this page when things change. Material changes will also be announced via newsletter. The "last updated" date at the top reflects the most recent revision.
Contact us
Privacy questions? Email privacy@statesidefab.co or write to us at PO Box 000042, Battle Creek, MI 49017. We'll respond within 5 business days.