Privacy policy

1. Who we are

Squish Season is a small retailer of seasonal squishy toys, shipping within the United States. We are the data controller for the information described here. You can reach us at squishseason@gmail.com.

2. What we collect

Information you give at checkout

• Full name and email address, so Stripe can send your receipt and we can send your order confirmation and tracking.
• Shipping address, so we can deliver your order.
• The items and quantities you bought.

These details are entered on Stripe's checkout page and passed to us with the order. We do not ask for a date of birth or an account password, and we never ask for card numbers or bank details on this website or by email.

Information stored on your device

Your cart contents and whether you have dismissed the storage notice are saved in your browser's local storage. This data stays on your device and is never sent to us. See the cookies and storage policy for details.

Information collected automatically

We do not use analytics, advertising pixels, session recording, social media buttons, or any other third-party tracking. The company that hosts this website may keep standard technical logs, such as IP address, browser type and the pages requested, to keep the site secure and available. We do not use these logs to identify or profile visitors.

Payment information

Payment is handled by Stripe on its own checkout page. Stripe processes your card or wallet details under the Stripe privacy policy; we only see that the order has been paid, the last four digits of the card, and the details listed above.

3. How we use it

• To confirm, pack and ship your order, and to answer your questions about it.
• To handle returns, refunds and complaints.
• To keep the records that tax and accounting law require.
• To prevent fraud and protect the website.

We do not send marketing emails and we do not sell, rent, or trade personal information. Where the law of your location requires a legal basis, we rely on performing our contract with you, our legitimate interest in running a safe store, and our legal obligations.

4. Who we share it with

• Shipping carriers receive your name and address to deliver the parcel.
• Stripe, our payment processor, receives your name, email, shipping address and payment details when you pay on its checkout page.
• Our email and hosting providers process data on our behalf so we can receive your request and run the site.
• Authorities, only where the law requires it.

5. How long we keep it

Order records, including the name, address and items on the order, are kept for as long as tax and accounting rules require, which is normally up to 7 years. Checkouts that are started but never paid leave no record with us. Cart data on your device stays until you clear it or your browser removes it.

6. Your rights and choices

Depending on where you live, you may have the right to access the personal information we hold about you, correct it, ask us to delete it, object to or restrict certain processing, or receive a copy in a portable format. To exercise any of these rights, email squishseason@gmail.com. We respond within 30 days and may ask you to confirm your identity first. We will never treat you differently for exercising your rights.

California residents: we do not sell or share personal information for cross-context behavioral advertising, and we do not use or disclose sensitive personal information other than to fulfill your order. You may request the categories and specific pieces of information we have collected about you, ask for deletion, and correct inaccurate information, using the contact details above.

Visitors from the EU, EEA, or UK: you may also lodge a complaint with your local data protection authority.

7. Children

Our products are toys, but this website and the order form are for adults. Orders must be placed by someone aged 18 or over. We do not knowingly collect personal information from children under 13. If you believe a child has sent us personal information, contact us and we will delete it.

8. Security

The site is served over HTTPS and collects the minimum needed. Card details are handled by Stripe, a PCI-certified payment processor, and are never stored by us. Please do not send card numbers or other sensitive details by email.

9. Changes and contact

If this policy changes, the new version is posted here with an updated date. Questions or requests: squishseason@gmail.com. We reply within 2 business days.