This policy covers cartelmasks.com, run by Cartel Masks, LLC. It says what we collect, why we collect it, and who else ends up seeing it. It's short, because we don't do much.
We collect what we need to print a mask and post it to you. There are no analytics, no advertising pixels, and no third-party trackers on this site — even the fonts are served from our own server rather than Google's. We have never sold anyone's data and we won't.
We never see your card details. The payment form on our checkout page is served directly by Stripe. Your card number goes from your browser to Stripe and never touches our server.
To take your payment, print your mask, post it to you, email you about that order, and keep the accounting records the law requires. That's the whole list.
Only the companies that make the order happen, and only the part each one needs:
Nobody else. We don't share, rent, trade or sell your information to advertisers, data brokers, or anyone at all.
Order records stay as long as we need them for support, refunds, and tax and accounting obligations. Ask us to delete you and we will, apart from anything the law says we must keep.
Email support@cartelmasks.com and you can ask us to show you what we hold on you, correct it, or delete it. Depending on where you live you may have these rights by law — we'll honour the request either way, and we won't treat you any differently for asking.
This shop isn't aimed at children and we don't knowingly collect anything from anyone under 13. If you think we have, email us and we'll erase it.
The site runs over HTTPS. Card data never reaches our server. No system is perfectly secure, but we hold as little as we can, which is the best protection there is.
If this policy changes we'll update the date at the top of this page.
Questions about any of this: support@cartelmasks.com.