Privacy
This page says what we collect, why we collect it, who else sees it, how long we keep it, and how to make us delete it. It is written to be read, not to be survived.
Last updated 2026-08-25. Controller: Deep Cut Sodas LLC, 12 Ferry St, Newark, NJ 07105. Questions and requests: hello@example.com.
What we collect, and why
| Order details | Your name, email, delivery address, phone and what you bought. Collected because we cannot post a parcel to nobody. Lawful basis: performance of a contract. |
|---|---|
| Payment | We never see or store your card number. The card field belongs to a PCI DSS Level 1 payment processor and runs in their frame, not ours. We receive the last four digits, the card brand and whether the payment succeeded. |
| Email sign-ups | Your address, the date you consented, the exact sentence you agreed to, and a hash of the IP you consented from. Lawful basis: consent, which you can withdraw from any email. |
| Messages you send us | Whatever you write in the contact form, plus your address so we can reply. |
| Security records | Hashed IP addresses and hashed browser strings, used for rate limiting and fraud checks. They are one-way hashes with a secret key: we cannot turn them back into an IP address. Lawful basis: legitimate interest in not being defrauded. |
| Account, if you make one | Your email and your order history. You can sign in with a one-time link instead of a password. |
What we do not do
- We do not sell your data, and we do not share it with advertisers.
- We do not run third-party advertising or cross-site tracking pixels on this site.
- We do not store your card number, and we could not produce it if we were asked to.
- We do not put your email address, your phone number or your address in our logs.
Who else handles it
Running a shop means other companies touch some of this: the infrastructure that serves the site, the payment processor that takes the card, the service that sends your receipt, and the carrier that delivers the parcel. Each is contracted as a data processor, each is certified to at least SOC 2 Type II or PCI DSS Level 1 for the work it does, and none of them may use your data for their own purposes.
We name every one of them in our data processing agreement, which we will send to any customer or business buyer who asks. Write to hello@example.com.
How long we keep it
| Orders and invoices | 7 years, because tax law requires it, because tax law requires it. |
|---|---|
| Email list | Until you unsubscribe. After that we keep a one-way hash of your address forever, so that we never mail you again by accident. The address itself is deleted. |
| Contact messages | Two years, then deleted. |
| Security records | Twelve months. |
| Baskets you did not check out | Thirty days. |
Your rights
Wherever you live, you can ask us for a copy of everything we hold about you, ask us to correct it, or ask us to delete it. If you are in the EU, the UK, California or another place with its own privacy law, those laws give you those rights explicitly, and this is how you use them: email hello@example.com from the address you ordered with. We answer within thirty days.
Deleting your data removes your account, your addresses and your marketing record. It cannot remove an invoice we are legally required to keep; those rows stay, with your name on them, until the retention period above runs out.
Cookies
This site sets one cookie when you sign in, and one when you start a checkout. Both are strictly necessary, both are marked HttpOnly and Secure, and neither is used to track you anywhere else. Your basket is kept in your own browser's storage and never leaves it until you check out. There is no consent banner because there is nothing here to consent to.
Children
This shop is not for children and we do not knowingly collect anything from anyone under 16. If you believe a child has given us data, write to us and we will delete it.
Changes
If this policy changes in a way that affects what we do with data we already hold, we will email everyone on the list before it takes effect. The date at the top is the version you are reading.