Privacy policy.

What we collect

• Email address — only if you subscribe through the welcome offer or footer form.
• Order details — name, shipping address and order contents, handled through our hosted checkout provider when you buy. Card numbers go to the payment processor directly; we never see or store them.
• Research area — the anonymous category you pick at the entry gate. It is stored as a count, never linked to your name, email or order.
• Technical basics — standard server logs (IP, timestamp, page requested) kept briefly by our hosting provider for security and debugging.

How we use it

Emails are used to confirm and update orders, and send occasional news — batch COA releases, restocks and offers. Order details are used to fulfil and support your order. Aggregated, anonymous data (like research-area counts) helps us decide what to stock. We do not sell, rent or trade personal information for money. We do use analytics and advertising-measurement tools, described in section 04, and under California law sending browsing data to an advertising platform counts as “sharing” — which is why the opt-out in section 05 exists.

Your email choices

Every marketing email we send contains a one-click unsubscribe link, honoured immediately and automatically. Unsubscribing stops marketing email but not transactional messages about an order you have placed. To be removed entirely, email pepprzz1@gmail.com and we will delete you from the list.

Analytics and advertising measurement

This site loads Google Tag Manager, which runs two kinds of tag:

• Google Analytics 4 — which pages are visited, which products are viewed, added to the bag or taken to checkout, and basic device, browser and approximate-location information derived from your IP address. It sets the _ga cookie family.
• Meta Pixel and Conversions API — the same product and checkout events, sent to Meta so that advertising on Facebook and Instagram can be measured and audiences built. It sets the _fbp and _fbc cookies.

The events we send name the product, the size, the price and the page — never your name, email address, shipping address or anything you type into a form. Google and Meta process this data under their own privacy policies, and each keeps it on its own systems. If you opt out (section 05), Google Analytics runs without cookies or identifiers and the Meta pixel is not loaded at all.

Do Not Sell or Share My Personal Information

One click turns analytics and advertising measurement off for this browser. The choice is stored on your device only, takes effect immediately, and stays until you turn it back on here. If your browser sends the Global Privacy Control signal we honour it automatically, without you having to click anything.

Cookies and local storage

We use your browser’s local storage for the things a store needs to remember: the contents of your bag, that you have passed the age gate, a promo code you have applied, whether you have already seen the welcome offer, and your opt-out choice above. These stay on your device. The only third-party cookies on this site are the analytics and advertising-measurement cookies in section 04, and the opt-out stops them.

Who we share with

The service providers that make the store work: our checkout and payment provider (to process orders), our email delivery provider (to send the messages described above), our hosting and database providers (to run the site), and shipping carriers (to deliver packages). Each receives only what it needs for its job. Separately, the browsing and product-interest data described in section 04 goes to Google (analytics) and Meta (advertising measurement) unless you opt out. We may also disclose information where the law requires it.

Retention and security

Subscriber and order data is held in access-controlled databases; keys with write access are server-side only and never shipped to the browser. We keep personal data for as long as needed for the purposes above or as required for tax and legal records, then delete it.

Your rights

You can ask what we hold about you, ask us to correct it, or ask us to delete it — email pepprzz1@gmail.com from the address in question and we will act on it within 30 days. California residents can also opt out of the sharing described in section 04 using the control in section 05, and we will never treat you differently for doing so. Depending on where you live you may have additional statutory rights; we honour reasonable requests regardless of geography.

Changes and contact

If this policy changes materially we will update this page and the date at the top. Questions about privacy: contact us or pepprzz1@gmail.com.