Legal
Privacy Policy
What we collect, why we collect it, and what we will never do with it.
Last updated: July 29, 2026
The short version
We collect what we need to answer your questions and get your order to you. We don't sell your data, and we don't send email you didn't ask for. The rest of this page is the detail.
What we collect
When you place an order or contact us, we collect the information you give us — your name, email address, shipping address, and phone number. That is what we need to confirm the order and ship it.
If you apply to sell through us, the brand application form collects your business details and the answers you type into it.
When you browse the site, our host records standard technical information such as IP address, browser type, and the pages requested.
How we use it
- Confirming, processing, and shipping your order
- Sending order and shipping updates
- Answering your questions and support requests
- Reviewing brand and wholesale partnership applications
- Preventing fraud and abuse
Payment information
Orders placed on this site are confirmed by email before any payment is taken, so we do not collect card details through this website. When card checkout goes live it will run through a PCI-compliant payment processor, and full card numbers will go straight to that processor rather than to us.
Cookies and storage
Your cart is stored in your own browser's local storage so it survives a refresh. We do not use advertising or cross-site tracking cookies on this site. You can clear this at any time from your browser settings; the only thing you will lose is the cart.
Who else sees your data
We share information with the services that let us run the store, and only for that purpose:
- Vercel — website hosting
- Resend — sending and receiving form and order email
- Shipping carriers — they need the delivery address
We do not sell your personal information, and we do not share it with advertisers or data brokers.
Your rights
You can ask us what data we hold about you, ask us to correct it, or ask us to delete it. California residents have these rights under the CCPA and residents of the EU and UK have them under the GDPR — but we will honor the request wherever you live. Email us and we will take care of it.
Data retention
We keep order records as long as we need them for accounting and tax purposes, which is generally seven years. Application and enquiry email is kept only as long as it is useful, then deleted.
Changes
If we make a significant change to this policy we will post it here and update the date at the top of the page.
Questions
Email info@thesupplyforge.com with anything about your data or this policy.
