Privacy Policy
Last updated: September 3, 2026
Who we are
Pineclo LLC ("we," "us," "our") operates pineclo.com and is the data controller for the personal information described in this policy. We're a small business, and we collect as little about you as we can get away with while still being able to take an order, deliver it, and answer your email.
We don't have a designated Data Protection Officer — we aren't required to appoint one — but privacy questions go straight to a real person. Reach us at contact@pineclo.com.
Who this policy covers
Everyone who interacts with us: visitors browsing the site, people who enter an early-access code, subscribers to our email updates, and customers who place an order.
Information we collect
Information you give us:
- Name and email address — when you sign up for updates or message us through the contact form.
- Message content — whatever you write to us.
- Order and delivery details — the items and quantities you buy, plus the shipping address, email address, and name you enter at checkout.
- Payment details — your card number, expiry, and security code are entered on Stripe's checkout page and go directly to Stripe. They never reach our servers, and we never see or store them.
Information collected automatically:
- Technical data — your IP address, browser and device type, and operating system, used by our host to serve the site securely and block abuse.
- Approximate location — a rough city or region estimated from your IP address. Never precise GPS.
- Usage data — pages viewed and actions taken, such as adding an item to the cart or completing an order. This is only collected if you accept optional cookies.
What we don't collect. We do not ask for, receive, or store your date of birth, government identification numbers (such as a Social Security or passport number), precise GPS location, biometric data, or your full payment card number. If a form on our site ever asks you for any of these, it isn't ours — please tell us.
How we use your information, and why we're allowed to
- To process and deliver your order, send receipts, and handle any problem with it — necessary to perform our contract with you.
- To reply to your messages and provide support — necessary to perform our contract, or in our legitimate interest in answering people who contact us.
- To send marketing emails about new products and restocks — only with your consent, which you can withdraw at any time.
- To measure how the site and our advertising perform — only with your consent to optional cookies.
- To keep the site secure and prevent fraud and abuse — our legitimate interest in running a service that isn't being attacked.
- To keep records we're legally required to keep, such as sales and tax records — a legal obligation.
Third-party services
Running a shop this small means renting most of the machinery. Here's every outside company that receives any of your personal information, what they get, and why. They may only use it to provide the service to us — never for their own unrelated purposes.
| Service | Provider | What it's for | What it receives | Their policy |
|---|---|---|---|---|
| Stripe | Stripe, Inc. (US) | Taking payment, preventing fraud, issuing refunds | Name, email, billing and shipping address, payment card details, IP address | stripe.com/privacy |
| Cloudflare | Cloudflare, Inc. (US) | Hosting the site, security, bot protection, cookieless traffic counts | IP address, browser and device type, pages requested | cloudflare.com/privacypolicy |
| Formspree | Formspree, Inc. (US) | Delivering contact form and signup submissions to our inbox | Name, email, message content, IP address | formspree.io/legal/privacy-policy |
| Mailchimp | The Rocket Science Group LLC, an Intuit company (US) | Sending the email updates you subscribed to | Name, email, IP address, whether you open or click our emails | mailchimp.com/legal/privacy |
| Google Analytics | Google LLC (US) | Optional — measuring how the site is used | Cookie and device identifiers, shortened IP address, approximate location, browser and device info, pages viewed, on-site actions | business.safety.google/privacy |
| Meta Pixel | Meta Platforms, Inc. (US) | Optional — measuring our Facebook and Instagram advertising | Cookie and device identifiers, IP address, browser info, pages viewed, on-site actions and order value | facebook.com/privacy/policy |
| TikTok Pixel | TikTok Inc. (US) | Optional — measuring our TikTok advertising | Cookie and device identifiers, IP address, browser info, pages viewed, on-site actions and order value | tiktok.com/legal/privacy-policy |
Scroll the table sideways to see every column.
The three services marked Optional receive nothing at all unless you accept optional cookies. If you decline, their scripts are never even downloaded.
We may also disclose personal information if the law requires it — for example, in response to a valid legal request — or to a buyer if the business is ever sold, in which case this policy continues to apply to information collected before the sale.
Where your data lives, and how it's protected
Our site and the services above are hosted on servers in the United States. Data is encrypted in transit (the whole site runs over HTTPS) and encrypted at rest by our providers. Access is limited to the people who genuinely need it to run the business.
No system is perfectly secure, and we won't pretend otherwise. What we can promise is that we deliberately hold as little as possible — the most sensitive thing about your order, your card number, is one we never possess in the first place.
International transfers
If you're outside the United States, the information described here is transferred to and processed in the US, which may have different data protection laws than your own country. Where that transfer is from the UK or the European Economic Area, our providers rely on the European Commission's Standard Contractual Clauses or an equivalent approved safeguard.
How long we keep it
- Order records — seven years, because tax and accounting rules require it.
- Marketing subscribers — until you unsubscribe, plus a suppression record so we don't accidentally add you back.
- Contact form messages — up to two years after your question is resolved.
- Analytics data — retained by each provider under their own schedule; Google Analytics is set to delete visitor-level data after 14 months.
Cookies and tracking technologies
Cookies are small files a site stores on your device. Related technologies — pixels and web beacons — let a service recognise that a browser loaded a page or took an action. Here's exactly what we use.
Essential cookies. When you enter an early-access code, we store a single cookie so the shop stays unlocked on your device for 30 days. That's the whole point of entering the code, so it's set without consent, as the law permits. We also use your browser's local storage to remember what's in your cart and which cookie choice you made. None of this is shared with anyone.
Optional cookies. Analytics and advertising cookies are set only if you press Accept on the banner. Decline and nothing is loaded — not a reduced version, nothing. Every part of the site works either way, and we don't ask again on every page.
Changing your mind. Use the cookie settings link in the footer of any page, at any time, in either direction. Our banner offers a plain Accept and a plain Decline; we don't currently offer per-category toggles, because there's only one category to decide about.
Browser privacy signals. If your browser sends a Global Privacy Control signal — Brave, DuckDuckGo, and others do, and Firefox can be set to — we treat it as a decline automatically and don't show you the banner at all. You can still opt in explicitly through cookie settings if you want to.
Third-party cookies. If you accept, Google, Meta, and TikTok set their own cookies for the purposes in the table above. Separately, when you reach checkout, Stripe sets cookies on their own page to process the payment and detect fraud; those are covered by Stripe's privacy policy and are necessary for payment.
Marketing emails & unsubscribing
We only email you updates if you asked for them. Every marketing email we send includes an unsubscribe link at the bottom — one click removes you, and we won't email you again.
You can also opt out at any time by emailing contact@pineclo.com with "Unsubscribe" in the subject line, and we'll remove you promptly. Opting out of marketing doesn't stop essential messages about an order you've placed, such as payment receipts or shipping updates.
Your rights
Wherever you live, you can ask us to access the personal information we hold about you, correct it if it's wrong, delete it, or send you a copy in a portable format. You can also object to or ask us to restrict how we use it, and withdraw any consent you've given — including for marketing or cookies — without affecting anything we did lawfully beforehand.
If you're in the UK or the European Economic Area, these are your rights under Articles 15 to 22 of the GDPR, and you also have the right to complain to your national data protection authority if you think we've got something wrong. We'd appreciate the chance to fix it first.
If you're in California or another US state with a privacy law, you additionally have the right to know what we've collected and who we've disclosed it to, to delete it, to correct it, to opt out of targeted advertising, and not to be treated worse for exercising any of these rights. If we deny a request, you can appeal by replying to our response within 60 days and telling us why you think we got it wrong.
On "selling" and "sharing" your data. We have never sold personal information for money and have no plans to. But we want to be straight with you about something most policies fudge: if you accept optional cookies, our use of the Meta, TikTok, and Google advertising tools may count as "sharing" personal information for cross-context behavioral advertising under California law, and as "targeted advertising" under similar laws elsewhere. Declining optional cookies, or later switching to Decline in cookie settings, is a complete opt-out — as is a Global Privacy Control signal from your browser.
To exercise any right, email contact@pineclo.com. We may need to confirm a couple of details — usually the email address you used to order — so that we're not handing your information to someone else. We'll respond within 45 days, and usually much sooner.
Children's privacy
Pineclo is not directed at children under 13, and we don't knowingly collect information from them. If you believe a child has given us personal information, email us and we'll delete it.
Changes to this policy
We may update this policy as our practices change. We'll update the date at the top when we do, and if a change materially affects your rights we'll say so more prominently than a changed date.
Terms of Service
These terms govern your use of pineclo.com. By using the site, you agree to them.
Using this site
You may browse and use this site for personal, lawful purposes only. Please don't misuse the site, attempt to access it in unauthorized ways, or interfere with its normal operation.
Products & ordering
Pineclo is currently in early access. Product listings, prices, and availability are subject to change without notice. Orders are placed and paid for through our checkout, and you'll receive a payment receipt by email. We produce in small first-run batches, so in the rare case an item sells out before we can fulfil your order, we'll contact you and refund you in full.
Prices, shipping and tax. Prices shown on the site are in US dollars and exclude shipping and sales tax. You choose a shipping option at checkout, and any sales tax required for your delivery address is calculated and shown there before you pay — so the total you confirm is the total you're charged.
Intellectual property
The Pineclo name, logo, and site content are the property of Pineclo unless otherwise noted. Please don't reproduce or use them without permission.
Limitation of liability
This site and its content are provided "as is," without warranties of any kind. To the fullest extent permitted by law, Pineclo is not liable for any indirect, incidental, or consequential damages arising from your use of the site.
Changes to these terms
We may update these terms from time to time. Continued use of the site after changes means you accept the updated terms.
Returns & Refunds
All sales are final
Pineclo is currently in early access, producing in small first-run batches. All sales are final — we're not able to accept returns or exchanges for change of mind, sizing, or fit at this stage. Please check the product details and sizing information carefully before ordering, and get in touch if you have questions first.
Damaged, faulty, or incorrect orders
If your order arrives damaged, faulty, or isn't what you ordered, email contact@pineclo.com within 14 days of delivery with your order details and a photo, and we'll put it right — by replacement or refund. This does not affect any rights you have under applicable consumer protection law.
How refunds are issued
Where a refund is due, we issue it to the original payment method through Stripe. Refunds are usually processed within a few business days, and your bank may take a few days more to post it.
Questions
See our FAQ or contact us directly — we're happy to help.