POLICY DRAFT
Privacy without theater.
This draft describes the intended data boundaries. It requires the legal business identity, contact address, processors, retention periods, and jurisdiction decisions before activation.
Data we intend to use
Contact and delivery details needed to process an order; payment identifiers from hosted payment providers; fulfillment and shipment events; support records; release-notification consent; and security/audit records.
Payment data
Raw card details are not stored by this application. Stripe and PayPal will process payment through their supported hosted experiences when configured.
Minimization
Order access does not expose personal data through public, enumerable URLs. Sensitive routes use no-store cache headers and operational logs must redact personal data.