Privacy Policy

1. Information we collect

When you place an order, we collect your name, email address, phone number, and shipping address. If you create an account, we also store your login credentials (handled securely by our authentication provider, never as plain text). We don't collect or store your payment card details — those go directly to Stripe.

2. How we use your information

We use your information to process and ship your order, send order and account-related emails (confirmations, shipping updates), provide customer support, and — where you've allowed it — send marketing communications as described below.

3. Marketing communications (email & SMS)

Email. By purchasing from us, you agree that we may send you promotional emails about products, restocks, and offers, in addition to order-related messages. You can unsubscribe from promotional email at any time using the "unsubscribe" link in any marketing email — this won't affect order or account emails, which we'll always need to send.

SMS. We only send promotional text messages to customers who explicitly opt in via the checkbox at checkout — placing an order alone does not enroll you in SMS marketing. Message and data rates may apply, and message frequency varies. You can opt out at any time by replying STOP to any text, or by contacting us directly.

4. Who we share information with

We don't sell your personal information. We share it only with the service providers that make the store work:

• Supabase — hosts our database, authentication, and product image storage.
• Stripe — processes payments and handles your card details directly.
• Resend — sends our transactional and marketing emails on our behalf.

Each of these providers has its own privacy policy governing how it handles data on our behalf.

5. Cookies

We use a cookie to keep you signed in between visits if you have an account. We don't use third-party advertising or tracking cookies.

6. Data retention

We keep order records as long as needed for accounting, tax, and customer support purposes. If you have an account, you can ask us to delete it at any time (see below).

7. Your rights

You can ask us to access, correct, or delete the personal information we hold about you, or ask what we have on file, by emailing hotvitality@gmail.com. We'll respond within a reasonable time.

8. Children's privacy

The Site isn't directed at children, and we don't knowingly collect personal information from anyone under 18.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the date at the top of this page.

10. Contact

Questions about this policy or your data? Reach us at hotvitality@gmail.com or see our Contact page.