Privacy policy

Who runs this site

btlstore.com is run by BTL (Bring the Light), a small business in Oregon, USA. Questions about privacy: hello@btlstore.com.

What I collect

When you order: your name, shipping address, email, what you bought and, for QR stickers, the link you want encoded. If you tick the box at checkout, I also record that you'd like occasional emails about new products and sales.

Payment details: handled entirely by Stripe. I never see or store your card number.

When you browse: anonymous usage data, such as pages viewed, device type, approximate location (country or region) and how you arrived at the site.

When you email me: your email address and whatever you write.

How I use it

To fulfill and ship your order, send receipts and tracking, answer questions, handle returns, and prevent fraud. Browsing data is used to understand which pages work and improve the shop. If you opted in, I may email you about new products or sales. You can unsubscribe at any time by replying to any email.

Who it's shared with

Only the services needed to run the shop:

Stripe (payments and receipts), Shippo and USPS (shipping labels and delivery), Cloudflare (website hosting, email forwarding and cookie-free visitor statistics), Google Analytics and Microsoft Clarity (anonymous usage statistics and click heatmaps), and Google (email).

I don't sell or rent your information, and I don't share it with anyone else unless required by law.

Cookies

Google Analytics and Microsoft Clarity use cookies to count visits and see how pages are used. Clarity masks anything you type. You can block these cookies in your browser settings or with an ad blocker, and the shop works the same. Stripe sets its own cookies on its checkout page to process payment and prevent fraud.

How long it's kept

Order records are kept as long as needed for taxes, returns and accounting (generally up to 7 years). Analytics data is kept for up to 14 months. You can ask me to delete your information at any time, unless I'm required to keep it.

Security

The whole site uses encrypted HTTPS connections. Payments go through Stripe, which is PCI-compliant. Order details are stored only in Stripe, Shippo and my email, each protected by login and two-factor authentication.

Your choices

Email hello@btlstore.com to see, correct or delete the information I have about you, or to stop marketing emails. I'll respond within 30 days.

Children

This shop isn't directed at children under 13, and I don't knowingly collect their information.

Changes

If this policy changes, the updated version will be posted here with a new date.