Privacy Policy

Who is responsible

The Q Foundation · Registration 20228125607. 755 E 19th Ave Apt 339, Denver, CO 80203, US. Email [email protected]; phone +1 4155523242. This address accepts correspondence and authorized postal or courier returns; returns need advance contact.

This notice covers this storefront and its order correspondence. Banks and delivery carriers handle information under their own practices. We do not sell personal order data or use it for targeted advertising.

What is collected

Checkout asks for name, email, phone, street address, city, state, ZIP, optional notes and agreement. The order includes its reference, submission time, items, variants, quantities, prices and totals. The server session stores the cart, draft form, security token and duplicate-prevention key. Do not put sensitive health information, banking credentials or payment-card numbers in the notes field.

Why we use it

We use these details to respond to your request, confirm the textile selection and amount, arrange delivery, manage returns and prevent unauthorized or duplicate submissions. Necessary delivery details may be shared with a carrier. Payment instructions and refund verification are handled in direct correspondence; this website does not collect card numbers or bank logins. Hosting providers may process technical security logs as part of operating infrastructure.

Retention

The shop session expires absolutely 12 hours after creation, not after 12 hours of inactivity. Expired session files are cleaned on later site requests. Order requests are retained for up to 365 days and removed on subsequent requests after expiry. No hourly deletion job is claimed. Correspondence needed for an unresolved dispute or legal obligation may be kept longer for that particular purpose. A deletion request is assessed against those limited needs.

Storage and protection

Order files are stored outside public web content with restrictive permissions. Session cookies are HttpOnly and SameSite=Lax, with Secure on HTTPS. A store-specific browser preference remembers your cookie decision for up to 180 days. Fonts are served locally; no advertising pixels, optional analytics or social embeds are installed. No internet service can promise perfect security.

Access, correction and complaints

Contact us to request access, correction or deletion, or to ask about a disclosure. We aim to acknowledge within 5 business days and provide a substantive response within 30 calendar days, subject to applicable law. We may need proportionate identity confirmation but do not ask for a banking password. State privacy rights depend on the law and its applicability; this notice does not claim certification. For an unresolved concern, the Colorado Attorney General provides https://coag.gov/file-complaint/ and the FTC provides https://reportfraud.ftc.gov/. This shop is intended for adults arranging purchases, not for collecting children’s information.