Information we collect
Accounts and contact details
When you create or use a passwordless account, we may collect your email address, name, business name, phone number, email-verification records, saved addresses, account preferences, and marketing-consent selection.
Orders, quotes, and support
We collect product configurations, quantities, prices, fulfillment selections, shipping addresses, order notes, quote-request details, proof decisions, communications, and order or refund status. We use this information to price, produce, deliver, support, and document transactions.
Uploaded artwork
Artwork files, filenames, file types, sizes, upload references, and their association with a cart, quote, account, or order are stored so we can review and fulfill the project. Artwork can contain personal information chosen by the customer, so customers should upload only material needed for the print job.
Payments
Payment details are entered on Stripe-hosted Checkout. Stripe processes the payment information. Pack Print Mail receives transaction identifiers, payment status, amounts, tax and refund information, and limited customer details needed to match payment to an order. We do not receive or store full card numbers in the storefront database.
Device, cookie, and security information
Our systems may process IP address information, browser or user-agent information, request timestamps, session identifiers, cart identifiers, and security events. Security logs may store a hashed version of an IP address and limited event metadata to support rate limiting, fraud prevention, account protection, and troubleshooting.
How we use information
- Authenticate customers and maintain sessions, carts, profiles, and saved addresses.
- Calculate prices and shipping, create orders, review artwork, prepare proofs, and coordinate production and delivery.
- Process payments, refunds, transaction reconciliation, and financial records.
- Send verification codes, quote confirmations, order communications, and service messages.
- Respond to questions, disputes, quality claims, privacy requests, and account-deletion requests.
- Protect the service through verification checks, rate limits, security logs, and fraud monitoring.
Providers and disclosures
We disclose information only as reasonably needed to operate the storefront, fulfill a request, protect the service, or comply with law. Current integrations include:
- Cloudflare for website delivery, Workers hosting, D1 database storage, R2 artwork storage, transactional email delivery, and Turnstile security checks.
- Stripe for hosted payment checkout, payment status, fraud and payment-security functions, receipts, and refunds.
- SinaLite for connected product information, production pricing, shipping estimates, and fulfillment when a mapped product is produced through that provider.
- Google Maps for the interactive store map on our Waxahachie local-services page. Loading the map allows Google to receive network and device information under its own privacy terms.
- Shipping carriers and other production or delivery partners involved in completing the selected fulfillment method.
Artwork and the contact, shipping, product, and order information needed for production may be transmitted to the production provider fulfilling the order. We do not put private artwork URLs in Stripe payment metadata.
We may also disclose information when reasonably necessary to comply with legal process, enforce our terms, prevent harm or fraud, or support a business transaction involving Pack Print Mail, subject to applicable obligations.
Cookies, local storage, and analytics
The storefront uses essential cookies for authentication, email-verification context, security, and cart continuity. The browser's local storage is also used to preserve cart contents. Disabling these technologies may prevent sign-in, cart, or checkout features from working correctly.
The codebase supports optional analytics adapters, but analytics collection runs only when analytics is enabled and the browser contains an affirmative analytics-consent preference. Analytics is currently disabled in the deployed storefront configuration.
Retention and account requests
We retain information for as long as reasonably needed to operate accounts and carts, fulfill orders and quotes, preserve artwork relationships, maintain business and tax records, resolve disputes, prevent fraud, and meet legal obligations. Retention periods vary by record type and context.
Signed-in customers can update profile and address information and can submit an account-deletion request from account settings. The current deletion-request process includes a seven-day safety period. Some transaction, payment, order, security, or legal records may need to be retained even after an account request is completed.
To request access, correction, or deletion assistance, email info@packprintmail.com. We may need to verify the request before acting on it.
Security
We use measures appropriate to the service, including HTTPS, passwordless verification, restricted server-side credentials, signed and secure cookies in production, access controls, request validation, rate limiting, webhook-signature verification, and security logging. No internet service or storage system can be guaranteed completely secure.
Changes and contact
We may update this policy as the storefront or its providers change. The date at the top identifies the current version. Questions can be sent to info@packprintmail.com or through our contact information.