Privacy Policy

This policy explains what personal information FlipVault LLC collects when you use flipvault.com, why we collect it, who we share it with, and the choices you have. We keep data collection to what we genuinely need to run the store.

1. Information we collect

• Order information: name, email address, shipping and billing address, phone number, and the contents of your order.
• Account information: email address, password (stored only as a salted hash), saved addresses, order history and wishlist.
• Payment information: handled directly by Stripe. We receive only a payment confirmation, the card brand and the last four digits.
• Support correspondence: messages you send us and our replies.
• Technical and usage data: IP address, browser and device type, pages viewed and referring URLs.
• Marketing preferences: your email address if you subscribe to our newsletter, and whether you open or click our emails.

2. How we use your information

• To process, pack, ship and track your orders, and to handle returns and refunds.
• To provide customer support and answer your questions.
• To detect and prevent fraud, abuse and chargeback misuse.
• To send order and shipping notifications (these are transactional and cannot be opted out of while an order is active).
• To send marketing emails where you have subscribed — you can unsubscribe from any email.
• To understand how the Site is used so we can improve it.
• To meet our legal, accounting and tax obligations.

3. Legal bases

Where applicable law requires a legal basis, we rely on: performance of a contract (processing your order), legitimate interests (fraud prevention, improving the Site), consent (marketing email, non-essential cookies), and legal obligation (tax records).

4. Cookies and similar technologies

We use strictly necessary cookies and local storage to keep your bag, wishlist and theme preference working, and to keep you signed in. We may use analytics cookies to understand aggregate traffic patterns. You can block or delete cookies in your browser settings; the store will still work, but your bag may not persist between visits.

5. Payment data handling (Stripe)

Card payments are processed by Stripe, Inc., a PCI-DSS Level 1 certified provider. Your card details are transmitted directly to Stripe and are never stored on FlipVault's servers. Stripe processes this data as an independent controller for fraud-prevention and compliance purposes; see Stripe's own privacy policy at stripe.com/privacy.

6. Third-party services

• Stripe — payment processing and fraud screening.
• Shipping carriers (USPS, UPS, FedEx) — we share your name, address and phone number so your parcel can be delivered.
• Email service provider — order notifications and newsletters.
• Hosting and infrastructure providers — operating the Site and storing order records.

We do not sell your personal information, and we do not share it with advertisers for their own marketing.

7. Data retention

Order and transaction records are kept for seven years to meet tax and accounting requirements. Account data is kept until you ask us to delete your account. Newsletter subscriptions are kept until you unsubscribe. Support emails are kept for three years. Analytics data is retained in aggregate form.

8. Your rights

Depending on where you live, you may have the right to access a copy of your data, correct inaccurate data, delete your data, object to or restrict certain processing, withdraw consent, request data portability, and — for California residents under the CCPA/CPRA — to know what is collected and to opt out of "sale" or "sharing" (we do neither). We will never discriminate against you for exercising these rights.

To make a request, email privacy@flipvault.com. We respond within 30 days and may ask you to verify your identity first.

9. Security

We use TLS encryption in transit, hashed passwords, access controls and least-privilege practices for staff accounts. No system is perfectly secure, but we take breaches seriously and will notify affected customers and regulators where required by law.

10. Children

The Site is not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child has provided us data, contact us and we will delete it.

11. International transfers

We operate in the United States and our service providers may process data there. If you contact us from outside the US, your data will be transferred to and processed in the US under appropriate safeguards.

12. Changes to this policy

We will post any changes on this page and update the "last updated" date. Material changes affecting how we use your data will also be emailed to subscribers.

13. Contact us about privacy

FlipVault LLC — Privacy, 1420 SE Division St, Portland, OR 97202, United States.
Email: privacy@flipvault.com