Privacy Policy

1. Data and purposes

We use name, contact details, email, delivery address, order/refund history, and device or access data for checkout, payment, delivery, support, fraud prevention, and legal compliance. We do not directly store full card details; payment providers process them.

2. Processors and international transfers

We use Stripe for hosted payment processing; Vercel Inc. for hosting and performance measurement; and PostHog US Cloud for product and checkout analytics and masked session replay. With consent, we use Meta advertising measurement. Data may be provided to payment and delivery providers as needed and may be processed outside your country, including in the United States.

3. Analytics and advertising choices

We do not load optional analytics or advertising scripts before a choice. If analytics is rejected, we do not use PostHog. For essential store operations and measurement-coverage checks, we may keep only first-party daily product-page request counts without storing cookies, IP addresses, user agents, referrers, query strings, or user/session identifiers. A random delivery ID used only to suppress duplicate retries is deleted within 24 hours and is not linked across requests or sessions. In consented replay, all inputs and designated sensitive text are masked and network bodies and headers are not recorded. You can change your choice using Manage privacy at the bottom of the page.

4. Retention

We retain order, payment, and delivery records for periods required by applicable law. We target no more than 12 months for analytics events and 30 days for session replay; a provider plan's shorter default may apply. Other data is deleted when no longer needed or after a valid deletion request.

5. Rights and contact

Subject to applicable law, you may request access, correction, deletion, restriction, or withdrawal from marketing. Contact makim@ironact.net.

Data Protection Officer: being appointed. Contact: makim@ironact.net

6. Changes

We publish changes on this page.