Privacy Policy

Who we are

This site is run by TODO: business legal name (e.g. Brown Broom LLC, or your full name if a sole proprietor) ("Brown Broom", "we", "us"). You can contact us at TODO: customer email address (e.g. studio@yourdomain.com) or by post at TODO: business mailing address (a PO box or registered-agent address is fine).

What we collect

• When you order: your name, email address, shipping address, the items you buy, and a phone number for the courier. Payments are handled by Stripe, our payment processor, on its own secure checkout page. We never see or store your card number. Stripe's use of your data is covered by its own privacy policy.
• If you join the mailing list: your email address and the date you signed up.
• If you write to us: your message and contact details.
• Automatically: our hosting provider keeps standard server logs (IP address, browser type, pages requested, time) to run and secure the site. We don't use analytics, advertising cookies or tracking pixels.
• On your own device: your cart and a display preference are saved in your browser's local storage so they're still there when you come back. This data stays on your device and is never sent to us. You can clear it at any time through your browser settings.

How we use it

We use this information to make and deliver your order, send order and shipping updates, answer your messages, prevent fraud, keep records required by law, and, only if you've asked us to, send the mailing list. You can unsubscribe from any marketing email with one click.

Who we share it with

We share only what each company needs to do its job for us:

• Stripe, our payment processor, to take payment;
• our print and fulfilment partner, which receives your name, shipping address and order details so it can make and ship your piece;
• shipping carriers, to deliver your order;
• our email provider (if you join the list) and our website host.

We do not sell your personal information. We do not share it for cross-context behavioural advertising. We may disclose information if the law requires it, or to protect our rights or someone's safety.

How long we keep it

We keep order records for as long as tax and accounting law requires, usually up to seven years. We keep mailing-list addresses until you unsubscribe, and messages for as long as we need them to help you.

Your choices and rights

You can ask us to tell you what personal information we hold about you, or to correct or delete it, by emailing TODO: customer email address (e.g. studio@yourdomain.com). Depending on where you live, including California and other US states with privacy laws, you may have further rights. We'll respond within the time the law requires, and we won't treat you differently for using them. We don't track you across other websites, so there's nothing to opt out of there. We honour Global Privacy Control and Do Not Track signals.

Children

This site isn't directed at children under 13, and we don't knowingly collect their information. If you think a child has given us information, contact us and we'll delete it.

Security

The site is served only over HTTPS, and we limit access to personal information to the people and companies that need it. No system is perfectly secure, but we take reasonable steps to protect your data.

Changes

If we change this policy, we'll post the new version here with a new effective date.