Last updated: [DATE]
This policy explains how [LEGAL ENTITY NAME] ("TheMerchCorporation", "we") collects and uses personal information when you use https://themerchcorporation.com.
1. What we collect
- Order information: name, shipping address, email, phone number, and (where required for customs) a tax ID.
- Your designs: the files you upload and how you place them on products.
- Payment information: handled by our payment processor, [Stripe]. We never see or store your full card number.
- Technical information: a session cookie that keeps your cart, your IP address and basic logs for security and fraud prevention.
- Communications: messages and photos you send us, for example with a problem report.
2. How we use it
- To make, ship and support your order, including reprints and refunds.
- To review uploads for print quality and for compliance with our Terms of Service, using automated tools and, where needed, a person.
- To prevent fraud and abuse, and to meet legal and tax obligations.
- To send transactional emails (order confirmation, shipping and support). We do not send marketing emails unless you separately opt in.
[LAWYER REVIEW] Legal bases (GDPR): performance of a contract (orders), legitimate interests (fraud prevention, content review), legal obligation (tax and records), and consent (optional marketing and cookies).
3. Who we share it with
- Printful, Inc. and other production partners: your name, address, phone, email and design files, so they can make and ship your order.
- Stripe: payment processing, fraud screening and tax calculation.
- Shipping carriers: your name, address and phone, for delivery.
- Service providers: file storage, email delivery, hosting and automated content-moderation services (which receive a copy of uploaded images to analyse them). [LIST PROVIDERS]
- Authorities: where required by law, including reporting illegal content.
We do not sell your personal information. [LAWYER REVIEW: CCPA "sale/share" analysis.]
4. International transfers
Our partners may process data in the United States, the EU and other countries where products are made. [LAWYER REVIEW: transfer mechanisms such as SCCs.]
5. Retention
Order records and print files are kept for at least [24 months] (longer where tax law requires). Uploads never used in an order are deleted after [90 days]. Review decisions are kept for [3 years] for intellectual-property and repeat-infringer handling.
6. Your rights
Depending on where you live, you can ask to access, correct, delete or export your personal information, or object to certain processing. Email [PRIVACY EMAIL]. You can also complain to your data-protection authority.
7. Cookies
We use one essential cookie to keep your cart and session. [If you add analytics or marketing cookies, describe them here and add a consent banner.]
8. Children
The site is not intended for children under 16, and we do not knowingly collect their data.
9. Contact
[LEGAL ENTITY NAME] · [POSTAL ADDRESS] · [PRIVACY EMAIL]