This Privacy Policy explains how [Company legal name] ("Prison Pals", "we", "us" or "our") collects, uses, shares and protects personal information when you use prisonpalsbc.com (the "Site"), shop our merchandise, join the Taste Club, request an event or contact us. The Site is intended for adults 21 and older located in the United States.
Information we collect
Information you give us
- Contact and event requests: name, email, phone number, inquiry type, message and event details such as preferred date and number of guests.
- Taste Club: your email address and confirmation that you are 21+ and accept our Terms and this Privacy Policy, with the date of that confirmation.
- Account and orders: name, email, password (stored only in protected, hashed form by our authentication service), shipping and billing addresses, phone number and order history.
- Payments: payments are processed by our payment provider. We receive limited information such as payment status and the last digits of the card, not the full card number.
Information collected automatically
- Usage and device data: pages visited, referring page, time of visit, browser, operating system and device type.
- IP address and approximate location: your IP address and the country, region and city inferred from it by our network provider.
- Visitor and session identifiers: random identifiers stored in your browser so we can count visits and sessions. See our Cookie Policy.
- Security signals: our security provider may process technical signals to detect bots and abuse when you submit forms.
How we use information
We use personal information to:
- respond to your messages and event requests;
- create and manage accounts, process orders, payments, shipping, returns and customer service;
- send Taste Club emails and other communications you asked for;
- understand how the Site is used and improve it;
- protect the Site, prevent spam, fraud and abuse, and verify that visitors are 21 or older;
- comply with legal obligations and enforce our Terms & Conditions.
How we share information
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share personal information only with:
- Service providers that help us run the Site and business, such as hosting and content delivery, security and bot protection (Cloudflare), email delivery, payment processing and shipping carriers (such as UPS). They may use the information only to provide services to us.
- Event partners when needed to organize an experience you booked.
- Authorities and others when required by law, to protect our rights or the safety of others, or in connection with a merger, sale or reorganization of our business.
Data retention
We keep personal information for as long as needed for the purposes described in this policy, including to provide services, keep business and tax records and resolve disputes. Site analytics records, including IP addresses, do not have a fixed deletion date and are kept until we delete them. You may ask us to delete your information as described below.
Your choices and rights
- Marketing emails: you can unsubscribe at any time using the link in our emails or by contacting us.
- Access, correction and deletion: you can ask us for a copy of your personal information, to correct it or to delete it.
- Account: you can update your account details from your account page.
Depending on your state of residence (for example California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon or Florida), you may have additional rights, such as the right to know what personal information we collect, to request deletion or correction, to opt out of the sale or sharing of personal information or targeted advertising, and to not be discriminated against for exercising your rights. We do not sell personal information or use it for targeted advertising.
To make a request, email us at [Contact email]. We will verify your request before acting on it and respond within the time required by law. You may use an authorized agent where the law allows. If we deny your request, you may appeal by replying to our decision.
Global Privacy Control and Do Not Track
Because we do not sell personal information or use it for targeted advertising, there is nothing to opt out of. We treat Global Privacy Control signals as a valid opt-out request where required by law.
Age restriction
The Site is not intended for anyone under 21. We do not knowingly collect personal information from anyone under 21, and never from children under 13. If you believe someone under 21 has provided us with personal information, please contact us and we will delete it.
Security
We use reasonable administrative, technical and physical safeguards, such as encrypted connections (HTTPS), access controls and bot protection. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Third-party links
The Site may link to third-party sites, such as Instagram, Facebook, WhatsApp and maps. Their privacy practices are governed by their own policies.
Changes to this policy
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new "Last updated" date.
Contact
For privacy questions or requests, contact:
[Company legal name]
[Company address]
Email: [Contact email]
Phone: [Phone number]