Privacy Policy

Effective date: [owner to confirm: date the policy takes effect]
Last updated: [owner to confirm: date of the latest change]

This policy explains what personal information Purple Orangutan Creatives LLC ("we", "us") collects through [owner to confirm: store web address] and when you contact us, why we collect it, who else handles it, how long we keep it, and the choices you have.

1. Who we are and how to contact us

We are Purple Orangutan Creatives LLC, the company behind Glitchee's merch store, located at [owner to confirm: business address].

For any question or request about your personal information, email [owner to confirm: email for privacy requests] or write to [owner to confirm: business address].

2. What we collect and how

Information you give us. When you email us or fill in a form on this site, we collect what you choose to give us, such as your name and email address and your message.

• When you order: your name, delivery address, phone number and email, what you ordered, the carrier's tracking events, and any photos or messages you send about a problem or a return.
• When you pay: your name, billing details and the amount. You type card details into the payment processor's secure checkout, not into our website; we see a payment confirmation and limited card details such as the card type and last four digits. The processor and the shop platform also use signals such as your IP address, device and browser, and whether your billing address matches the card, to spot fraud.
• When you join a drop list (for example "tell me when the hoodie drops"): your email address and when and where you signed up. [owner to confirm: email tool, once the box is connected]

Information collected automatically. When you visit this site, your browser sends our web host technical information such as your IP address, browser and device type, the pages you request and the time. The host uses it to deliver the site and protect it from abuse.

Pages with a YouTube video connect your browser to YouTube (Google) only when you press play. That gives YouTube your IP address and browser information, and it may set cookies. Our videos stay switched off until you click them, and they load from YouTube's privacy-enhanced domain.

Please do not send us card numbers or Social Security numbers by email or through a form.

3. Why we use it

• take and ship orders, send receipts and tracking, handle returns and refunds, and answer questions about an order;
• charge and report sales tax, keep accounting and tax records, and meet the law;
• stop fraud and settle a payment dispute with your card issuer, to whom we may send order, delivery and communication records;
• send the drop-list email you asked for;
• keep this site secure and stop spam and fraud; and
• protect our rights and resolve disputes.

If we want to use your information for a new purpose that does not fit these, we will tell you first.

4. Who we share it with

• Hosting: Cloudflare. Payments and checkout: Stripe. Stripe also uses payment information under its own privacy policy, for example to prevent fraud.
• Carriers and shipping software: [owner to confirm: carriers and shipping tool]. They get your name, address, phone and parcel details to deliver the order.
• Sales tax and accounting: [owner to confirm: tools]. They get order totals, delivery state and tax figures.
• Email: [owner to confirm: email provider and drop-list tool].
• Card issuers and banks: when a payment is disputed, we send the evidence they ask for.
• Professional advisers such as our accountant and lawyer, when we need their help.

We may disclose information when the law requires it, or when it is needed to protect someone's safety, our rights or to investigate fraud. If we sell or merge the business, customer records may pass to the new owner. We do not sell your personal information and we do not rent out customer lists.

5. Cookies, local storage and tracking

This site keeps your cart in your browser's local storage so it is still there on the next page. It runs no analytics or advertising tags. YouTube may set cookies once you press play on a video. The shop platform's checkout uses its own cookies to work and stay secure.

There is no agreed standard for browser "Do Not Track" signals, so this site does not change what it does when it receives one. This site runs no advertising tags, so a Global Privacy Control signal has nothing to switch off.

6. How long we keep it

• Order, shipping, return and refund records: [owner to confirm: period your accountant sets].
• Messages about an order: [owner to confirm: period, default 24 months] after the order.
• Drop list: until you unsubscribe.
• Website server logs: [owner to confirm: period, default 30 to 90 days].

7. How we protect it

We take reasonable steps to protect personal information, suited to a business of our size. This site uses encrypted connections (HTTPS), and we limit access to personal information to the people who need it. No website, email or storage system is completely secure. If a security breach affects your personal information, we will notify you as the law requires.

8. Your choices and rights

You can ask us to tell you what personal information we hold about you and give you a copy, correct information that is wrong, and delete your information. Email [owner to confirm: email for privacy requests]. We will respond within 45 days, and we will not charge you or treat you differently for asking. Every drop-list email has an unsubscribe link.

9. Children

[owner to confirm: who the store is for, and how orders from under-13s are handled; check with counsel, since the channel has young fans] We do not knowingly collect personal information from children under 13. If you believe a child has sent us personal information, contact us and we will delete it.

10. Changes to this policy

We may update this policy. We will post the new version on this page and change the "Last updated" date at the top.