Privacy Policy

1. Information we collect

• Account information: name, email address, and password hash if you create an account.
• Order information: shipping address, phone number (optional), items ordered, order total, and payment method selected.
• Payment information: card payments are processed by our third-party processor. We receive only a payment confirmation and the last few digits of the card; we do not store full card numbers.
• Manual-payment references: for Zelle/Venmo orders we retain the order reference so we can match incoming payments.
• Technical information: IP address, browser/device type, pages visited, and timestamps, collected via server logs and standard analytics.
• Cookies and local storage: used to remember your age verification, cart contents, and login session.

2. How we use your information

• To process and ship your orders and provide customer support.
• To detect and prevent fraud, abuse, and other violations of our Terms.
• To operate, maintain, and improve the website.
• To comply with legal obligations (tax, recordkeeping, lawful requests).

3. What we do NOT do

• We do not sell or rent your personal information.
• We do not share your information for third-party advertising or marketing.
• We do not use your information to derive medical, therapeutic, or dosing recommendations.

4. Who we share information with

• Payment processors, strictly to complete your transaction.
• Shipping carriers, strictly to deliver your order.
• Hosting, database, and email providers who process data on our behalf under confidentiality obligations.
• Law enforcement or regulators, only when required by a valid legal process.

5. Data retention

Order records are retained for as long as required by applicable tax and business-record laws (typically 7 years). Account information is retained while your account is active and for a reasonable period after deletion to resolve disputes and comply with legal obligations. Analytics data is retained in aggregate form.

6. Security

We use industry-standard technical and organizational safeguards, including encrypted connections (HTTPS), access controls, and hosted infrastructure with row-level authorization on customer data. No system is perfectly secure; you use the site at your own risk and are responsible for keeping your account credentials confidential.

7. Your rights

• You may request a copy of the personal information we hold about you by emailing research@pricks.co.
• You may request correction of inaccurate information or deletion of your account, subject to record-retention obligations described above.
• Depending on your location, you may have additional rights under laws such as the California Consumer Privacy Act (CCPA) or the EU/UK GDPR. We will honor valid requests in accordance with those laws.

8. Children

This website is not intended for anyone under 21 years of age. We do not knowingly collect information from anyone under that age. If we learn we have collected such information we will delete it.

9. Changes to this policy

We may update this Privacy Policy from time to time. The current version is always the one posted on this page.

10. Contact

Privacy questions or requests: research@pricks.co.