This policy explains what personal data Family Store collects, why, how long we keep it, and how you can access or remove it. It describes what the system actually does — if anything here ever looks wrong to you, tell us at support@family-store.online and we will fix either the policy or the software.

What we collect, and why

• Account details — email, first and last name, phone number. Used to identify you, secure your account, and contact you about orders.
• Delivery addresses — recipient name, phone, street address, city, province, postal code. Used to fulfil and ship your orders. A copy of the address used for each order is kept with that order permanently (so a later edit to your address book never rewrites a past delivery record).
• Order history — items purchased, prices, payment method, and order status. Kept as your purchase record and, in de-identified form, as our business sales record.
• Marketing preference — whether you have opted in to occasional product and offer emails. Off by default; changeable any time in Account → Profile.
• Login activity and security logs — last sign-in time, sign-in count, and an audit trail of account and administrative actions (including the IP address an action was taken from), used to secure accounts and investigate disputes or abuse.
• Site traffic — on the live production site, we use Vercel Analytics, a cookieless analytics service that reports aggregated page-view counts. It does not identify you individually and sets no tracking cookie.

What we never store

We never see or store your card or wallet payment details. Online payments are processed entirely by our payment partner, Safepay; our own systems hold only an opaque payment reference, never your underlying payment credentials.

Who we share it with

Safepay, to process online payments. Your delivery courier, to the extent needed to deliver your order (recipient name, address, and phone). We do not sell personal data, and do not share it with anyone else.

How long we keep it

We retain order records for up to 6 years for tax and business record-keeping, after which personal identifiers on the order are removed while the de-identified sale itself is kept for our own sales reporting. Security log entries that carry an IP address are retained for up to 90 days. Deleting your account (below) removes identifying information immediately, rather than waiting out these windows.

Your data, on demand

From Account → Profile, under "Your data":

• Export downloads a file containing your profile, saved addresses, and full order history, immediately, with nothing stored on our side afterward.
• Delete accounttakes effect immediately: your name, phone number, and marketing preference are cleared; your saved addresses are permanently deleted; the delivery details recorded on past orders are redacted to "Deleted Customer" (city and province are kept only for regional sales reporting — they do not identify you); sign-in to your account is permanently disabled; and every active session is ended immediately. Your email address itself stays on file, purely so the account cannot be silently recreated — it is never used to contact you again. Order totals, dates, and items purchased are kept as de-identified sales records, the same as for any other order past the 6-year mark above.

Marketing emails

We only send marketing email if you have opted in from Account → Profile. You can opt out there at any time.

Contact

Questions about this policy, or a request we haven't covered above: email support@family-store.online or see our Contact page. We respond within 5 business days — see our Complaints procedure.