Privacy Policy

This Privacy Policy explains what information Temptation LLC (“Temptation,” “we,” “us”) collects when you visit or buy from https://temptation1717.com, why we collect it, who we share it with, and the choices you have. We keep data collection to what an order actually needs.

What we collect

We collect only what is needed to take an order, ship it, and support you afterward. We do not require an account — checkout is available as a guest.

• Contact details — your email address, and a phone number if you provide one, so we can send order confirmations, shipping updates, and support replies.
• Shipping and billing address — the name and postal address needed to produce and deliver your order.
• Order information — the items, sizes, quantities, and prices in your order (including preorders), plus its status, drop, and tracking.
• Payment information — card and payment details are entered directly with our payment processor, Stripe. Temptation never receives or stores your full card number. We receive only a confirmation of payment and limited details such as the last four digits and card brand.
• Technical and usage data — basic information your browser sends (such as IP address, device and browser type, and pages viewed) that keeps the site working and secure.

We do not knowingly collect more than this, and we do not buy or sell personal information.

Why we use it

• To process, produce, and deliver your order, and to take payment.
• To send transactional messages: order confirmations, shipping and tracking, and replies to your questions.
• To handle returns, replacements, and refunds where our policies allow.
• To keep the site secure, prevent fraud, and fix problems.
• To meet our legal, tax, and accounting obligations.

For visitors in regions that require a legal basis (such as the EEA and UK), we rely on performance of our contract with you (to fulfill your order), our legitimate interests (to run and secure the business), and legal obligation (tax and record-keeping). We do not send marketing email unless you ask us to; if we ever do, it will be with your consent and you can opt out at any time.

Who processes your data

We use a small set of trusted service providers to run the store. They process your information only to perform their service for us, under their own privacy and security terms. Temptation is a print-on-demand shop, so producing and shipping an order means sharing the order and shipping details with a print partner.

Stripe

Payment processing. Handles your card details directly and is PCI-DSS compliant. See stripe.com/privacy.

Printful

Print-on-demand production and fulfillment (our primary print partner). Receives your name, shipping address, and order details to produce and deliver your items. See the Printful privacy policy.

Supabase

Database and backend hosting. Stores your order records and related account data so we can process orders and support you. See the Supabase privacy policy.

Resend

Transactional email delivery (order and shipping notifications). Receives your email address and message content. See resend.com privacy policy.

Vercel

Website hosting and delivery. Processes basic request and log data to serve the site.

We may also disclose information if required by law, to enforce our terms, or to protect the rights and safety of our customers and the business. [NEEDS DEV: this list must match the live stack. Confirm whether any additional print partner (e.g. Printify) or analytics/marketing tool (e.g. a web-analytics provider, or an email marketing platform if opt-in marketing launches) is in use, and add or remove processors here to match before launch.]

Cookies

We keep cookies to a minimum. Temptation does not set advertising or marketing-tracking cookies. The site uses only what is needed to work — for example, keeping the items in your cart and keeping your session secure during checkout.

Our payment processor, Stripe, sets its own cookies during checkout to process payments and prevent fraud. Those are governed by Stripe’s privacy policy, linked above. You can block or delete cookies in your browser settings, though checkout may not work correctly without the essential ones. For the full breakdown, see our Cookie Policy.

How long we keep it

We keep order and transaction records for as long as needed to fulfill the order, provide support, and meet our legal, tax, and accounting obligations — typically several years as required by law. When information is no longer needed, we delete it or remove details that identify you. Data held by our processors is retained under their own schedules.

Your rights

Depending on where you live, you may have the right to access the personal information we hold about you, correct it, delete it, or ask us to stop certain uses. These rights are recognized under the EU/UK GDPR and the California Consumer Privacy Act (CCPA/CPRA), among others.

• Access and portability — request a copy of the information we hold about you.
• Correction — ask us to fix information that is wrong or out of date.
• Deletion — ask us to delete your information, subject to records we must keep by law.
• Opt out — we do not sell or share your personal information for advertising. If you receive any marketing email from us, every message includes an unsubscribe link.

To make a request, email us at the address below. We will not discriminate against you for exercising these rights, and we will respond within the timeframe the applicable law requires. We may need to verify your identity before acting on a request.

Marketing emails and your choices

We only send marketing or promotional email (such as drop announcements) to people who have opted in — for example, by subscribing or checking a box asking to hear from us. We do not add you to a marketing list just for placing an order; order confirmations and shipping updates are transactional and are sent regardless.

• Every marketing email includes a clear unsubscribe link and our physical mailing address, and we honor opt-out requests promptly.
• Unsubscribing from marketing does not stop transactional messages about an order you have placed.
• We identify who the message is from and do not use misleading subject lines or headers.

This reflects our practice under the US CAN-SPAM Act and, where it applies, consent-based marketing rules such as the GDPR and ePrivacy rules.

California privacy rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the CPRA, gives you specific rights over your personal information. In the last 12 months we collect the categories described in “What we collect” above (identifiers, contact and order information, payment confirmation data, and internet/usage data), for the business purposes described in this policy.

• We do not sell or share your personal information, and we have not sold or shared it, as “sell” and “share” are defined under the CPRA. We also do not use or disclose sensitive personal information for purposes that would require a “Limit the Use” option.
• Right to know / access — request the categories and specific pieces of personal information we have collected about you.
• Right to delete — request that we delete personal information we hold, subject to records we must keep by law.
• Right to correct — ask us to fix inaccurate personal information.
• Right to non-discrimination — we will not deny service, charge a different price, or provide a different quality of service because you exercised a right.

To exercise any of these rights, email us at the address below. You may use an authorized agent to submit a request on your behalf; we may ask for proof of that authorization and to verify your identity before we act.

EEA and UK privacy rights (GDPR)

If you are in the European Economic Area, the United Kingdom, or Switzerland, the GDPR (and UK GDPR) applies to our handling of your personal data. Temptation LLC is the controller of that data. We rely on these lawful bases:

• Performance of a contract — to take, produce, and deliver your order and provide support.
• Legitimate interests — to run, secure, and improve the store and prevent fraud, balanced against your rights.
• Consent — for optional marketing email and any non-essential cookies; you can withdraw consent at any time.
• Legal obligation — to meet tax, accounting, and record-keeping duties.

You have the right to access, rectify, erase, restrict, or object to processing of your data, the right to data portability, and the right to withdraw consent. You also have the right to lodge a complaint with your local data protection authority.

International transfers. We are based in the United States, and our providers (including Stripe, Printful, Supabase, Resend, and Vercel) may process your data in the US or other countries. Where we transfer personal data out of the EEA or UK, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an equivalent mechanism. [NEEDS CLIENT/DEV: confirm whether you actually accept EEA/UK orders. If sales are US-only, this section and the transfer language can be trimmed; if you ship to the EU/UK, an attorney should confirm your lawful-basis and transfer wording.]

Children

Temptation is intended for adults. The store is not directed to children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has given us their information, contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy as the business changes or the law requires. When we do, we will update the “Last updated” date at the top of this page. Material changes will be made clear on the site.

Contact us

Questions about this policy or your information? Reach Temptation LLC at: