Refund policy

PRIVACY POLICY

Last updated: [DATE]

[LEGAL NAME] operates STRAIGHT FACE. This page says what we collect, why we have it, who else sees it, how long we keep it, and how to make us delete it. It is written to be read, not survived. If any of it is unclear, write to [EMAIL] and we will explain it in plain words.

1. WHAT WE COLLECT

When you place an order
- Your name, shipping address, email address, and phone number if you give one.
- What you ordered: item, size, color, price.
- Confirmation that the payment succeeded, the card brand, and the last four digits. We never receive or store your full card number. That stays with the payment processor.

When you visit the store
- Pages viewed, the link or site that sent you, date and time, browser and device type, and an approximate location from your IP address. Approximate means city or region, not a street.
- Information stored in cookies. See section 6.

When you write to us or join the email list
- Your email address and whatever you write.

We do not collect your date of birth, government ID numbers, race, health, politics, or precise location. A t-shirt company has no use for any of it.

2. WHY WE HAVE IT

- To print your order and get it to your door.
- To send an order confirmation and a tracking number.
- To answer your email.
- To handle size exchanges, misprints, damaged items and refunds.
- To see, in aggregate, which pages people read and which they leave.
- To keep the accounting and tax records the law requires us to keep.
- To send marketing email, and only if you asked for it.

There is no other use. We do not build a profile of you, we do not make automated decisions about you, and we do not hand your information to advertising networks.

3. WHO ELSE SEES IT

We do not sell your information. We do not rent it, trade it, or hand it to data brokers. It goes to a short list of companies, each doing one specific job:

- [STORE PLATFORM] hosts this store, runs checkout, and stores the order records. Policy: [LINK]
- [PAYMENT PROCESSOR] handles payment, along with any alternative payment method shown at checkout, each run by the company behind it. They receive your payment and billing details directly. We receive a confirmation and the last four digits. Policy: [LINK]
- [PRINT PARTNER] prints and ships every order. They receive your name, shipping address, email for tracking, and the item you bought. Policy: [LINK]
- The shipping carrier for your order receives your name and address in order to deliver it.
- Our email service, used through the store platform, sends order confirmations, tracking, and any list email you subscribed to.

We will also disclose information when a valid legal order requires it. If that happens and we are allowed to tell you, we will.

If [LEGAL NAME] is ever sold or merged, customer records would transfer with the business. We would say so on this page and email anyone on our list as soon as we are permitted to.

4. HOW LONG WE KEEP IT

- Order and payment records: seven years. Tax, accounting and chargeback rules all reach back different distances, and seven years covers the longest of them.
- Email conversations: two years, then deleted.
- Marketing list: until you unsubscribe, which you can do from the bottom of any email we send.
- Analytics: kept by the store platform on their retention schedule. We read it in aggregate.

You can ask us to delete your information sooner. See section 7. The only thing kept after a deletion request is the minimum transaction record that tax and fraud law requires.

5. WHERE IT IS HELD

We run this store from the United States, and your order is printed and shipped from the United States. The companies in section 3 are not all American and do not all keep their servers here. Some of them are incorporated abroad or operate facilities in more than one country, which means your information may be stored or handled outside the United States. When it is, it is handled under the safeguards each company publishes in the policy linked above.

6. COOKIES

Cookies are small files the site stores in your browser. This store uses two kinds:

- Necessary cookies, which keep your cart working and let you check out. The store does not function without them.
- Analytics cookies, set by the store platform, which count visits and tell us which pages get read.

You can block or delete cookies in your browser settings, and where the store shows a cookie notice you can refuse the non-essential ones there. Refusing analytics changes nothing about your order. If your browser sends a Global Privacy Control signal, we treat it as an opt-out request under the laws that recognize it.

7. YOUR RIGHTS

Wherever you live, you can ask us to:
- tell you what we hold about you,
- send you a copy of it,
- correct it,
- delete it,
- stop emailing you.

Write to [EMAIL] from the address you ordered with, or give us the order number. We do not charge for any of it. We answer within thirty days, and if a request turns out to be complicated and the law gives us longer, we will write and tell you so before those thirty days are up. We may ask you to confirm something only you would know, and we will not ask for more than that takes.

If we turn a request down, we will say why. You can reply to that same email to appeal it. A person reads the appeal, not a form, and we answer it within forty-five days.

8. CALIFORNIA RESIDENTS

The California Consumer Privacy Act applies to companies above certain size thresholds, and a store this small is almost certainly below them. We are not going to use that as a reason to give Californians less. We honor the rights the statute grants and make the disclosures it asks for.

Categories of personal information collected since this store opened:
- Identifiers: name, email address, shipping address, phone number if given, IP address.
- Commercial information: what you bought and when.
- Internet activity: pages viewed on this site.
- Geolocation: approximate, city level, derived from IP.

We collect it for the purposes listed in section 2, from you directly and from your use of the site. We disclose it for business purposes to the service providers named in section 3, and we keep it for the periods in section 4.

We do not sell personal information. We do not share it for cross-context behavioral advertising. We do not collect sensitive personal information as the statute defines it, so there is nothing to limit. We have not sold or shared the personal information of anyone, at any age.

Your rights: to know, to access, to correct, to delete, to opt out of sale or sharing, to limit the use of sensitive information, and not to be treated differently for exercising any of them. You will not get worse prices or slower service for asking.

To exercise any of these, email [EMAIL] with "California request" in the subject line. An authorized agent may act for you with written permission we can verify.

9. CHILDREN

This store is not intended for anyone under sixteen, and we do not knowingly collect information from children. If you believe a child has given us information, write to [EMAIL] and we will delete it.

10. SECURITY

Checkout runs over an encrypted connection and is hosted by the payment processor, so card data never reaches our systems. The processors we use are PCI compliant. Access to order records is limited to the people who need it. No one can honestly promise a system is unbreakable, and we will not. If a breach ever affects your information, we will notify you and the authorities within the time the law requires.

11. CHANGES

If this policy changes, the date at the top changes with it. If a change is material, anyone on our email list hears about it before it takes effect.

12. CONTACT

[LEGAL NAME]
[MAILING ADDRESS]
[EMAIL]

One person reads that inbox. Every email gets answered, usually within one business day.