Privacy Policy (US + CA/CPRA ready)

Summary (TL;DR)

We collect information to provide and improve our store, process orders, and communicate with you. In certain US states (including California), you have additional privacy rights. You can opt out of certain data sharing and targeted advertising at any time.

1. Scope

This Privacy Policy covers personal information collected through our Site, checkout, support, and marketing channels (email/SMS/social ads). It doesn’t cover third‑party sites we don’t control.

2. Information we collect

• Identifiers: name, email, phone, shipping/billing address, IP address, device IDs.
• Commercial data: products viewed, cart, purchases, return history.
• Internet/technical data: cookies, analytics, log files, approximate location.
• Payment data: processed by Stripe and/or PayPal; we don’t store full card numbers.
• User submissions: reviews, survey responses, support messages, photos.
• Sensitive data: we don’t intentionally collect sensitive personal information. If provided, we’ll use it only as necessary and subject to additional limitations.

3. Sources

Directly from you, automatically from your device/browser, and from partners (e.g., analytics/ads, fraud prevention, address verification).

4. How we use information

• Fulfil orders and provide customer support;
• Personalise your experience and our marketing (with your choices);
• Detect/prevent fraud and secure our services;
• Comply with legal obligations.

5. Cookies & tracking

We use necessary, performance, analytics, and advertising cookies. Manage preferences via our Cookie Preferences link and your browser settings. We honour Global Privacy Control (GPC) signals for opt‑outs where required. See Cookie Policy for details.

6. Disclosures of personal information

We disclose information to service providers (hosting, payment, fulfilment, analytics, marketing). Where permitted by law, we may share data for targeted advertising or “sale”/“share” as defined under some state laws; you can opt out (see Your privacy choices below).

7. Your privacy choices & rights

Depending on your state, you may have rights to access, correct, delete, opt out of sales/sharing/targeted advertising, and limit use of sensitive data. You (or your authorised agent) can submit requests via https://untitledsquare.com/get-in-touch/ or privacy@untitledsquare.com. We’ll verify your request and respond within the timeframe required by law.

Opt‑outs: Use our Do Not Sell or Share My Personal Information link and our Cookie Preferences tool, or send a GPC signal and we’ll treat it as a valid opt‑out for the browser/device.

8. Data retention

We keep data only as long as necessary for the purposes described, unless longer retention is required by law (e.g., tax/audit).

9. Children

Our Site isn’t directed to children under 13, and we don’t knowingly collect their information. If we learn we have, we’ll delete it.

10. Security

We implement reasonable administrative, technical, and physical safeguards. No method is 100% secure.

11. International users

If you access the Site from outside the US, you consent to processing in the US, which may have different data protection laws.

12. State‑specific notices (California and others)

• California (CCPA/CPRA): see Your privacy choices & rights above. We provide (i) a Notice at Collection, (ii) two or more methods to exercise rights, and (iii) a Do Not Sell or Share link where applicable. We honour GPC signals.
• Colorado/Virginia/Connecticut/Utah/Texas/Delaware/Iowa/Montana/Oregon/etc.: we provide opt‑outs from targeted advertising and profiling where required and will not discriminate for exercising privacy rights.

13. Changes

We’ll update this policy as needed. Material changes will be highlighted on this page.

14. Contact

Privacy inquiries: privacy@untitledsquare.com