Puffy Roll Privacy Policy
Effective Date: April 17, 2025
1. Information Collection
Personal Data
When you place an order through Puffy Roll, we collect:
- Contact Information: Full name, email address, phone number
- Shipping Details: Delivery address, country, postal code
- Order Information: Products purchased, sizes, quantities, order value
- Device Data: IP address, browser type, operating system
Payment Processing
All payments are processed through Stripe. We do not store credit card numbers or full payment details on our servers. Stripe's privacy policy is available at stripe.com/privacy.
2. Use of Information
We use collected information to:
- Process and fulfill your international orders
- Communicate about order status, shipping updates, and customer service inquiries
- Screen for potential risk and fraud
- Improve and optimize our website and services
- Comply with legal obligations (tax, customs, etc.)
Marketing: We do not use customer data for third-party marketing. Transactional emails (order confirmations, shipping updates) are sent directly through our platform.
3. Data Sharing & Disclosure
Service Providers
We share necessary information with:
- Shipping carriers (UPS, FedEx, DHL, etc.) for order delivery
- Payment processors (Stripe) for transaction completion
- Customs authorities for international shipments as legally required
Legal Compliance
We may disclose information when required by law, such as in response to subpoenas or to comply with international trade regulations.
4. International Data Transfers
As an international e-commerce business, your data may be transferred to and processed in:
- The United States (where our servers are located)
- Countries where our shipping carriers operate
- Your local customs jurisdiction
We implement standard contractual clauses and security measures to protect your data during these transfers.
5. Data Retention
We retain order information for:
- Active use: 3 years from last purchase (for customer service purposes)
- Legal compliance: 7 years for tax and financial records
Shipping addresses are anonymized after 3 years of inactivity.
6. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate information
- Request deletion of your personal data (subject to legal limitations)
- Object to processing of your data
- Receive your data in a portable format
7. Security Measures
We implement appropriate technical and organizational measures including:
- SSL/TLS encryption for all data transmissions
- Regular security audits of our systems
- Limited access controls to customer data
- Secure payment processing through PCI-DSS compliant providers
8. Policy Updates
We may update this policy periodically. Material changes will be:
- Posted on this page with an updated effective date
- Communicated via email for significant changes affecting active customers