PRIVACY POLICY

CUSTOM32 respects your privacy. This Privacy Policy explains what personal information we collect, why we collect it, which third parties process it on our behalf, and your choices. We operate custom32.com for customers in Canada and apply practices consistent with PIPEDA and other applicable privacy laws.

We collect information you provide when you create an account, customize products, checkout, contact support, or submit a design inquiry. We may also collect limited technical data when you use our site.

• Account and profile: email, display name, first and last name, phone (optional), branded account ID, and authentication identifiers from Firebase Auth.

• Checkout and orders: cart contents, design approvals, order totals, promo codes, payment status, fulfillment status, and timestamps (including Terms of Service acceptance at checkout).

• Shipping and contact: name, email, phone, and Canadian shipping address collected through Stripe Checkout (and stored on your order for fulfillment).

• Customization choices: platform icon, handle text, fonts, spacing, materials, dimensions, imported artwork references, and other configuration data needed to manufacture your order.

• Support and inquiries: design-service form submissions (name, email, message, project type, optional attachment references).

• Technical data: IP address, browser type, device information, and page interaction data collected through Google Analytics (GA4) and standard server logs for security and service improvement.

Credit and debit card payments are collected and processed directly by Stripe, our PCI-compliant payment processor. Stripe collects billing contact details, shipping address, phone number, and card payment information in its hosted checkout flow.

CUSTOM32 does not store, process, or have access to your full payment card number on our servers. We receive payment status, transaction identifiers, and limited billing metadata needed to fulfil your order and comply with tax and accounting requirements.

We use trusted service providers to operate the store. They process data only as needed to perform their services:

• Stripe — payment processing, Canadian sales tax (GST/HST) calculation, and checkout contact collection.

• Resend — transactional email delivery (order confirmations, receipts, invoices, shipment updates, and account notices).

• Google Analytics (GA4) — aggregated traffic and navigation analytics.

• Firebase / Google Cloud Platform — authentication, database (Firestore), and file storage.

• Shipping carriers — name, shipping address, and contact details required to deliver physical orders.

Because our products are made to order, we store the design configuration you approve before payment so we can manufacture, email receipts, and support reorders.

• Social-handle decals: platform icon choice, handle text, text casing, style (default, boxed, two-color), font and weight, width, letter spacing, icon scale and gap, material selections, and quantity.

• Custom graphics: artboard dimensions, element layout (position, size, rotation), text content, font settings, imported SVG source data, filenames, and material assignments.

• Windshield banners: custom text, width, material, and quantity.

• Shop and cart lines: product selections, sizes, materials, styles, preview references, unit pricing, and design approval summaries.

• Signed-in customers: after payment, custom line items may be copied into your saved designs library linked to the source order.

CUSTOM32 does not set first-party marketing cookies. We use browser storage to preserve your experience between visits:

• localStorage — Guest cart items (`custom32-cart-v1`), social-handle customizer state (`guestDecalDesign`), custom graphics editor state (`guestCustomGraphicsDesign`), and email-link sign-in helper (`custom32-email-for-sign-in`). Guest design keys are cleared after a successful purchase.

• sessionStorage — Checkout progress (`custom32-checkout-resume`), dismissed site banner ID, and short-lived customizer session flags.

• Firebase Auth — The Firebase SDK may persist your sign-in session using browser storage mechanisms managed by Google.

We use personal information to:

• Process orders, manufacture custom products, and deliver shipments.

• Calculate tax, send transactional communications, and provide receipts and invoices.

• Operate your account, saved designs, and customer support requests.

• Prevent fraud, abuse, and chargeback misuse.

• Maintain mandatory tax, accounting, and dispute-resolution records.

• Improve our website and services through aggregated analytics.

When you request account deletion from your customer portal, we delete your Firebase Authentication record, Firestore user profile, saved designs, and email verification codes associated with your account.

Order history, payment records, and fulfillment details tied to completed transactions are retained after account deletion for legal, tax, accounting, and dispute-resolution purposes. Those records may still contain your email, shipping address, and approved design specifications from the time of purchase.

Design inquiry submissions and admin operational notes may be retained according to our support and business record needs.

We apply technical and organizational measures appropriate to our size and scope, including authenticated API routes, Firestore security rules, server-side order processing, and Stripe-hosted checkout. No method of transmission or storage is completely secure.

You may request access to, correction of, or deletion of account-related personal information by contacting INFO@CUSTOM32.COM, subject to legal and operational requirements (including retained order records described above).

Canadian privacy laws (PIPEDA) and, where applicable, international frameworks such as GDPR and CCPA may provide additional rights depending on your location.

Privacy questions or requests: INFO@CUSTOM32.COM.

CUSTOM32 — https://www.custom32.com

Principal place of business: 145 1/2 Church Street, Unit 5 - Office 788, Toronto, Ontario, M5B1Y4, Canada.