Effective Date: July 24, 2025
Last Updated: July 24, 2025
At BankedDown, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, share, and protect your data when you visit our website or purchase our firefighter-themed stickers and merchandise.
1. Information We Collect
Information You Provide:
- Account Information: Name, email address, password (encrypted)
- Order Information: Billing address, shipping address, phone number
- Payment Information: Credit card details (processed securely through our payment processor – we don’t store full card numbers)
- Communications: Messages you send us via email or contact forms
- Optional Information: Department affiliation, years of service (if voluntarily provided)
Information Collected Automatically:
- Device Information: Browser type, IP address, operating system, device identifiers
- Usage Data: Pages visited, time spent on site, referring website, search terms
- Cookies and Similar Technologies: Session cookies, preference cookies, analytics cookies
- Location Data: General geographic location based on IP address
2. How We Use Your Information
We use your personal data for the following purposes:
- Order Fulfillment: Process and ship your orders, send order confirmations
- Customer Service: Respond to inquiries, handle returns/refunds
- Marketing: Send promotional emails (only with your consent)
- Site Improvement: Analyze usage patterns to enhance user experience
- Security: Prevent fraud and protect our website
- Legal Compliance: Meet tax, accounting, and other legal obligations
3. Legal Basis for Processing (GDPR)
For customers in the European Economic Area, we process your data based on:
- Contract: To fulfill your orders and provide services
- Consent: For marketing communications and non-essential cookies
- Legitimate Interests: For fraud prevention, security, and business operations
- Legal Obligations: To comply with applicable laws
4. Data Sharing and Disclosure
We share your information only in these circumstances:
- Service Providers:
- Payment processors (Stripe, PayPal)
- Shipping carriers (USPS, UPS, FedEx)
- Email service providers
- Web hosting and analytics services
- Legal Requirements: When required by law, subpoena, or court order
- Business Transfers: In case of merger, acquisition, or sale of assets
- With Your Consent: When you explicitly agree to sharing
We NEVER sell your personal information to third parties.
5. Data Retention
We retain your data for:
- Order Information: 7 years for tax and accounting purposes
- Account Information: As long as your account is active plus 2 years
- Marketing Data: Until you unsubscribe or request deletion
- Cookies: Session cookies expire when you close your browser; persistent cookies expire after 1 year
6. Your Rights and Choices
For All Customers:
- Access: Request a copy of your personal data
- Correction: Update inaccurate information
- Deletion: Request we delete your data (subject to legal requirements)
- Opt-Out: Unsubscribe from marketing emails
- Cookie Preferences: Manage cookies through your browser settings
Additional Rights for EU/UK Residents (GDPR):
- Data Portability: Receive your data in a structured format
- Restriction: Limit how we process your data
- Object: Object to certain processing activities
- Automated Decision-Making: Right not to be subject to automated decisions
Additional Rights for California Residents (CCPA/CPRA):
- Know: What personal information we collect, use, and share
- Delete: Request deletion of personal information
- Opt-Out: Of sale of personal information (we don’t sell data)
- Non-Discrimination: Equal service regardless of privacy choices
7. Cookies and Tracking Technologies
We use cookies to:
- Essential: Enable basic site functionality
- Performance: Understand how visitors use our site
- Functionality: Remember your preferences
- Marketing: Show relevant ads (only with consent)
You can control cookies through your browser settings. Disabling cookies may affect site functionality.
8. Data Security
We implement industry-standard security measures:
- SSL encryption for data transmission
- Secure servers with restricted access
- Regular security audits and updates
- PCI DSS compliance for payment processing
- Employee training on data protection
However, no method is 100% secure. We cannot guarantee absolute security.
9. International Data Transfers
If you’re outside the United States, your data may be transferred to and processed in the US. We ensure appropriate safeguards are in place for such transfers in compliance with applicable laws.
10. Children’s Privacy
Our website is not intended for children under 13. We don’t knowingly collect data from children. If we discover we’ve collected information from a child, we’ll delete it immediately.
11. Third-Party Links
Our site may contain links to other websites. We’re not responsible for their privacy practices. Please review their policies before providing personal information.
12. Updates to This Policy
We may update this policy periodically. We’ll notify you of significant changes via email or website notice. Continued use after changes constitutes acceptance.
13. State-Specific Rights
Residents of certain states may have additional rights:
- Nevada: Right to opt-out of sale (we don’t sell data)
- Virginia, Colorado, Connecticut, Utah: Various access and deletion rights
- Other States: As new laws take effect, we’ll update this policy
14. Contact Us
For privacy questions, requests, or concerns:
Data Protection Officer
BankedDown
Email: privacy@bankeddown.com
Response Time: Within 30 days for most requests
15. Do Not Track
We currently don’t respond to “Do Not Track” browser signals, as there’s no industry standard. However, you can use browser settings to control cookies.
16. Consent
By using our website, you consent to this Privacy Policy. For specific processing activities requiring explicit consent (like marketing emails), we’ll ask separately.