1. Scope
This policy applies to the Acme website and Acme’s custom sticker production service — customer accounts, artwork upload, proof review, order notifications, payment, production, and delivery. Acme names the providers that handle customer information in section 5, so a customer can see who is involved before ordering.
2. Information customers provide
When corresponding with Acme or using enabled ordering features, customers may provide names, business names, email addresses, telephone numbers, billing and shipping addresses, account credentials, order specifications, artwork files, proof comments and approvals, support messages, verified-order ratings, written reviews, optional customer photos, display-name choices, and review-publication consent.
Card details are entered on Stripe’s own payment page and are collected by Stripe, not by Acme. Complete payment-card numbers and security codes never reach Acme’s systems and are not stored there.
3. Information collected automatically
Acme’s hosting, security, and application providers may process basic technical information needed to deliver and protect the service, such as IP address, device and browser type, timestamps, requested pages, referring page, error logs, and security events. The customer storefront does not currently include advertising trackers or a cross-site advertising system.
4. How information is used
- Provide quotes, prices, accounts, checkout, proofs, production, fulfillment, shipping, reorders, and customer support.
- Verify transactions, prevent fraud and abuse, protect accounts, and secure the website.
- Verify delivered orders, moderate customer reviews, document publication consent, and publish an approved review, rating, photo, and chosen display name.
- Communicate about orders, proof approval, production status, delivery, policy changes, and support requests.
- Maintain business, tax, accounting, warranty, dispute, and compliance records.
- Improve products, production workflow, accessibility, reliability, and customer experience.
- Comply with law, enforce agreements, and protect Acme, customers, and others.
5. When information is disclosed
Acme discloses information to the service providers that run the website and fulfil orders. Today these are DigitalOcean (website hosting, database, and artwork file storage, in the United States), Stripe (card payment and fraud prevention), Resend (order and account email), and the United States Postal Service (delivery). Each receives only the information reasonably needed for its work. Acme will update this list when a provider changes.
If a customer authorizes publication of a review, the approved rating, review text, photo, verification label, and chosen display name become visible to website visitors. Acme does not publish the customer’s order number, legal name, email, delivery address, or other account details as part of the review.
Information may also be disclosed when reasonably necessary to comply with law or legal process; investigate fraud, abuse, security, or rights violations; protect safety or property; obtain professional advice; or complete a merger, financing, reorganization, sale, or transfer of the business. Acme does not currently sell personal information for money or use the storefront for cross-context behavioral advertising.
6. Artwork and production files
Artwork, proofs, production files, and order notes are used to quote, proof, manufacture, fulfill, support, and document customer orders. Acme does not receive ownership of customer artwork merely because it processes an order. Access is limited to the personnel and providers who need the files for these purposes. Acme keeps source artwork, approved proofs, and production files while they are still needed for them — an exact reorder and a later claim about an order both depend on the original files — and a customer may ask Acme to delete their artwork under section 9.
7. Retention
Acme retains information only as long as reasonably necessary for the purposes described here, including order fulfillment, exact reorders requested by customers, support, security, tax and accounting obligations, dispute resolution, and enforcement of agreements. Business, tax, and accounting records are kept for as long as the applicable law requires, which can be several years after an order is finished and can outlast the customer’s account.
8. Security
Acme uses reasonable administrative, technical, and physical safeguards appropriate to the information and service. Customer passwords are stored only as salted hashes, never as readable text. Customer artwork is held in private storage with no public link: a proof or artwork file is fetched by Acme’s server and delivered only to a request that has proved it is entitled to see it. Card details are entered on Stripe’s own payment page and are never sent to or stored by Acme. No internet transmission or storage system is guaranteed to be completely secure. Customers should use unique passwords and promptly notify Acme of suspected unauthorized account activity.
9. Privacy choices and rights
Depending on where a customer resides and subject to legal exceptions, the customer may have rights to request access, correction, deletion, portability, or restriction of personal information and to appeal or opt out of certain processing. Acme will verify requests as reasonably necessary and respond as required by applicable law. Acme will honor legally required browser-based opt-out preference signals if it later conducts processing to which those signals apply.
Acme sends no marketing email today; the email a customer receives is about their own account or order. If Acme introduces marketing email, every message will carry a way to unsubscribe. Transactional order, security, proof, and delivery messages may continue when necessary to provide the requested service.
10. Children
The service is intended for adults and businesses and is not directed to children under 13. Acme does not knowingly collect personal information from children under 13. If Acme learns that such information was collected, it will take reasonable steps to delete it.
11. United States processing
Acme is a United States business. Information may be processed and stored in the United States. Acme sells and ships within Texas. If Acme later begins serving jurisdictions that require additional notices, representatives, contracts, or transfer mechanisms, Acme will update this policy and its practices before doing so.
12. Changes and contact
Acme may update this policy when its services, providers, or legal obligations change. The revised policy will show a new “last updated” date, and Acme will provide additional notice when required by law.