Privacy Policy

Tommy Labs ("we", "our", "us") respects your privacy. This Privacy Policy explains what information we collect when you use tommylabs.store (the "Site"), how we use it, and the choices you have. By using the Site, you agree to the practices described here.

1. Information We Collect

• Order information: When you make a purchase, we collect your name, email address, shipping address, and order details.
• Payment information: Payment processing is handled by Stripe. We do not see or store your full card number, CVV, or bank details. Stripe may retain payment data under its own Privacy Policy.
• Custom order inquiries: If you submit a custom order request, we collect your name, email, and the details of your idea.
• Technical data: Our hosting provider (Cloudflare) and analytics may automatically collect basic technical information such as IP address, browser type, device type, and pages visited, to keep the Site secure and working correctly.

2. How We Use Your Information

• To process and fulfil your orders (including printing, packaging, and shipping).
• To communicate with you about your order, including status updates and delivery notifications.
• To respond to custom order requests and customer service inquiries.
• To maintain the security and performance of the Site.
• To comply with legal obligations.

3. What We Do NOT Do

• We do not sell, rent, or trade your personal information to third parties.
• We do not use your data for advertising profiles or ad targeting.
• We do not store your full payment card data.

4. Sharing With Third Parties

We share information only with service providers who need it to operate the Store:

• Stripe — payment processing (see their privacy policy).
• Shipping carriers (e.g., USPS, UPS, FedEx) — name and shipping address to deliver your order.
• Cloudflare — hosting, CDN, and security (see their privacy policy).

We may also disclose information if required by law, or to protect our rights, safety, or property.

5. Data Retention

We retain order records as long as needed to fulfil the order and to comply with tax and accounting obligations (typically several years). Custom order inquiries are kept for as long as needed to respond and complete any project. You may ask us to delete your data at any time, subject to legal retention requirements.

6. Cookies & Storage

• We use browser storage (localStorage) to remember the contents of your shopping cart on your device.
• The Site does not use third-party advertising cookies.
• Cloudflare may set necessary cookies to provide security features and performance optimization.

7. Your Rights

Depending on where you live, you may have rights under applicable law (including GDPR or state privacy laws) to:

• Access, correct, or delete the personal information we hold about you.
• Object to or restrict certain processing.
• Request a copy of your data in a portable format.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, contact us at support@tommylabs.store. We will respond within the timeframe required by law.

8. Children's Privacy

The Site is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.

9. Data Security

We take reasonable measures to protect your information: the Site is served over HTTPS, payment processing is handled by PCI-DSS-compliant Stripe, and access to customer data is limited to what is needed to operate the Store. No method of transmission or storage is 100% secure, but we work to protect your data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the latest revision. Continued use of the Site after changes constitutes acceptance.

11. Contact