Privacy Policy

We collect information you choose to provide when you:

• Shop or place an order: name, email address, shipping address, order contents, payment status, and fulfillment history.
• Create an account: name, email address, password credentials handled by Firebase Authentication, saved shipping address, cart contents, and email preferences.
• Request custom pins: contact and organization details, project specifications, deadlines, notes, and uploaded artwork or reference files.
• Join the newsletter: email address, signup source, subscription status, and, when provided, first name.
• Contact or apply to work with us: the contact details and message or application materials you send.

Our hosting, security, authentication, and payment providers also process technical information needed to provide and protect their services. This can include IP address, browser and device information, user-agent, request timestamps, authentication events, payment activity, and fraud or security signals. We do not currently use website analytics, advertising pixels, or cross-site behavioral tracking.

• Provide accounts, carts, checkout, payment processing, and customer support.
• Process, ship, and communicate about orders, returns, and custom pin requests.
• Prevent fraud, abuse, unauthorized access, and other security incidents.
• Maintain business, tax, accounting, dispute, and legal records.
• Send marketing email only when you sign up or enable that preference. You can unsubscribe from any marketing email.

We use browser storage and similar technologies that are necessary to provide features you request:

• Shopping cart: your cart is stored in local storage so it remains available between visits. If you sign in, it is also synchronized to your Firebase account.
• Account session: Firebase Authentication uses persistent browser storage to keep you signed in until you sign out.
• Checkout: temporary session storage keeps checkout state during the current browser session.
• Payments and security: Stripe may use cookies, local storage, and device signals that are essential to process payments and detect fraud.

These technologies support the cart, login, checkout, payment, and security functions you request. We do not currently set nonessential analytics or advertising cookies, so there is no optional cookie category to accept or reject. If that changes, we will update this notice and add consent controls where required.

We disclose information only as needed to operate Lapel Love, complete your requests, protect the service, or comply with law. Our providers include:

• Google Firebase and Firebase App Hosting: website hosting, authentication, database, and private file storage.
• Stripe: payment processing, transaction security, and fraud prevention. Lapel Love does not receive or store your full card number.
• EasyPost and shipping carriers: address validation, shipping rates, labels, tracking, and delivery.
• Brevo: newsletter subscriptions and operational email notifications.
• Google Forms: collection of artist opportunity applications when you choose to open and submit the external application form.

We may also disclose information to professional advisers, authorities, or other parties when reasonably necessary to comply with law, enforce our terms, protect rights and safety, or complete a business transfer.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

We retain information only as long as reasonably necessary for the purpose collected and for legal, tax, accounting, fraud-prevention, warranty, dispute, and backup requirements. The period depends on the record:

• Account information is generally kept while the account is active and for a reasonable period after closure.
• Order and payment records may be kept after fulfillment when required for tax, accounting, chargeback, warranty, or legal purposes.
• Custom pin inquiries and uploaded files are kept while we evaluate or fulfill the project and for a reasonable follow-up and recordkeeping period.
• Newsletter contact information and subscription history may be retained after you unsubscribe with an opted-out status so we can honor your choice and avoid resubscribing you without permission.

Our providers may maintain records under their own retention schedules. We use access controls, encrypted connections, private storage, and other reasonable safeguards, but no internet transmission or storage system is completely secure.

You may ask to access, correct, or delete personal information we maintain about you. You may also unsubscribe from marketing at any time. We may need to verify your identity, and we may retain information when permitted or required by law.

California residents may have additional rights under the California Consumer Privacy Act if Lapel Love becomes subject to that law, including rights to know, correct, or delete information and to receive equal service for exercising privacy rights. Because we do not sell personal information or share it for cross-context behavioral advertising, there is currently no sale or sharing to opt out of.

Send a request to contact@lapellove.com with “Privacy Request” in the subject. An authorized agent may submit a request on your behalf, subject to verification.

Some browsers offer a “Do Not Track” setting. Because there is no agreed technical standard and we do not currently track visitors over time across third-party websites, the site does not respond differently to Do Not Track signals. Other parties do not collect personal information through Lapel Love for cross-site behavioral advertising. If our practices change, we will update this policy and honor legally required browser-based opt-out signals, including Global Privacy Control where applicable.

The Service is intended for a general audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you are under 18, you should use the Service only with the involvement and permission of a parent or legal guardian. If you believe a child under 13 has provided us with personal information, please contact us at contact@lapellove.com so we can review and delete it.

We may update this policy as our services or legal obligations change. We will post the revised policy here, update the effective date, and provide additional notice when a material change requires it.

Lapel Love LLC is the operator responsible for this website. Questions or privacy requests can be sent to contact@lapellove.com.