Privacy Policy

This Privacy Policy describes how AFFBIRD LLC ("we", "us", "our") collects, uses, discloses and safeguards your information when you visit our website, place an order, or otherwise interact with our services. We are a business operating in the United States and we handle personal information in accordance with applicable U.S. federal and state privacy laws, including the California Consumer Privacy Act (CCPA/CPRA) where it applies.

By using this website you consent to the practices described in this policy. If you do not agree, please do not use the site.

1. Information We Collect

We collect information that you provide directly, information collected automatically, and information received from third parties.

• Information you give us: your name, email address, phone number, billing address, order details, project requirements, and any message you send us through a form, email or chat.
• Account information: if you create an account, your name, email address and a securely hashed password. We never store passwords in plain text.
• Payment information: when you pay, your card number, expiry date and security code are entered on our checkout page and transmitted directly to our payment processor. We do not store full card numbers on our servers. We retain only the card brand, the last four digits, the payment reference and the transaction status so we can identify and support your order.
• Automatically collected information: IP address, browser type and version, device type, operating system, referring URL, pages viewed, and the date and time of your visit.
• Cookies and similar technologies: see our Cookie Policy for full details.

2. How We Use Your Information

• To process, fulfil and deliver the services you order, and to send order confirmations and status updates.
• To process payments and prevent fraudulent transactions.
• To respond to your enquiries, provide customer support and manage your account.
• To send administrative messages such as invoices, receipts and service notices.
• To improve our website, services and customer experience.
• To send marketing communications where you have opted in (you may unsubscribe at any time).
• To comply with legal obligations and enforce our agreements.

3. Legal Bases for Processing

Where required, we process personal information on the basis of: performance of a contract (to deliver the services you ordered), your consent (for marketing and non-essential cookies), our legitimate business interests (fraud prevention, service improvement), and compliance with legal obligations.

4. Payment Processors and Third Parties

We share the minimum information necessary with trusted third parties who help us operate the business. These include:

• Payment processors — Stripe, PayPal, Authorize.Net, Square, Braintree, 2Checkout, Adyen, Razorpay and Coinbase Commerce — to authorise and settle your payment. Each processor receives your payment details and billing address and handles them under its own privacy policy and PCI-DSS obligations.
• Banking partners — for Bank Transfer / ACH orders, your bank details are used solely to reconcile the transfer.
• Hosting and infrastructure providers who store our website and data on our behalf.
• Analytics and email providers who help us understand site usage and communicate with you.
• Professional advisers and authorities where we are legally required to disclose information.

We do not sell your personal information. We do not share it with advertisers for their own marketing purposes.

5. Data Retention

We keep personal information only as long as necessary for the purposes described above. Order and transaction records are typically retained for up to seven (7) years to satisfy tax, accounting and legal requirements. Account data is retained while your account is active and for a reasonable period afterwards. You may request deletion of your data as described in section 8.

6. Data Security

We use industry-standard safeguards, including TLS/SSL encryption in transit, hashed passwords, access controls, and secure server configuration. Card data is handled by PCI-DSS-compliant processors. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we take reasonable steps to protect your information.

7. International Transfers

We are based in the United States and process information there. If you access the site from another country, you understand that your information will be transferred to and processed in the United States, where data-protection rules may differ from those in your country.

8. Your Rights and Choices

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your information, subject to legal retention requirements.
• Opt out of marketing communications at any time.
• California residents: request disclosure of the categories of information collected, and opt out of any "sale" or "sharing" (we do not sell or share personal information as defined by the CCPA/CPRA).

To exercise any of these rights, email us at support@affbird.org. We will verify your request and respond within the timeframe required by law.

9. Children's Privacy

Our services are intended for adults and businesses. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

10. Third-Party Links

Our site may link to third-party websites. We are not responsible for their privacy practices and encourage you to read their policies.

11. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top shows when it was last revised. Material changes will be posted on this page.

12. Contact Us

If you have questions about this Privacy Policy or how we handle your information, contact us:

• AFFBIRD LLC
• 329 Newburgh Ave, Buffalo, NY 14215-2801
• Email: support@affbird.org
• Phone: +1 (747) 231-0584