Privacy Policy

This policy describes how Standard Blanks ("we", "us") collects, uses, and shares information when you visit standardblanks.com or place an order with us.

Information We Collect

We collect the following categories of information:

• Account information: name, email address, and (optionally) business name and tax-exempt status.
• Order information: shipping address, items purchased, order history, and any return or support requests.
• Payment information: handled directly by Stripe; we never see your card number. We receive only a token reference plus the last four digits and card brand for receipt display.
• Site usage data: pages viewed, items added to cart, referrer URL, IP address, and basic device info.
• Communications: any email or message you send us, plus your email-preference choices.
• Support conversations: the support emails you send us and the replies we send back — and, when the chat widget is switched on, the messages you type into it and the replies. A chat session is identified by a server-issued cookie so a conversation can only be read back by the browser that started it.

How We Use Information

We use this information to:

• fulfill orders and arrange delivery through fulfillment partners,
• process payments, returns, and refunds,
• send order confirmations, shipping notifications, and customer-service replies,
• answer your support questions,
• measure and improve how well we answer them, using past support conversations,
• send marketing emails (only if you opt in; you can opt out at any time),
• operate, maintain, and improve the site, including aggregate analytics,
• detect and prevent fraud, abuse, and security incidents,
• comply with legal obligations.

How We Share Information

We share information only with service providers acting on our behalf, and only as needed to operate the business:

• Our fulfillment partners — the name, shipping address and phone number on your order, and its line items, so it can be picked, packed, and shipped.
• Payment processor (Stripe) — billing details and amount, for payment authorization, capture, and refunds. Your card number goes to Stripe directly; we never see it.
• Email and infrastructure providers — for sending transactional and marketing email and for hosting our site.
• Analytics provider — if you've accepted cookies, our product analytics service (based in the US) gets the pages you view and leave, what you click, the products you look at, what you add to your cart, how far you get in checkout, your device and browser, your referrer and campaign links, and your IP address, which it uses to estimate your general location. When you're signed in, that activity is linked to your account by an internal customer number, not your name or email, and so is a purchase we record on our servers. That makes it pseudonymous, not anonymous: we can connect it to you. Staff accounts are flagged and left out of our reporting. The provider keeps this data for its standard retention period. We don't record your screen or build heatmaps today, and we'd update this policy before we did. If you decline cookies, none of this is collected.
• Error monitoring — when something breaks, we send an error report so we can fix it. Those reports are about the failure, not about you, but they can incidentally carry the page URL you were on and your browser and device details. If you've accepted cookies, we also send a masked recording of the session around the error — form fields and text content are masked before it leaves your browser.
• Service providers that help us run customer support — your support messages and our replies, and the account, cart, and order details used to answer you. This covers support email today, and the chat widget when it's switched on. They process it only on our behalf.
• Sign-in providers — if you choose to sign in with an account you have elsewhere, that provider confirms who you are and shares your name and email address with us.
• Advertising platforms — if you've accepted cookies, we send hashed (SHA-256) versions of your email address and phone number alongside order value to measure which ads drive sales and to optimize ad spend. Recipients can only match these hashes against accounts they already have; they don't receive your name, shipping address, or what you ordered. If you decline cookies, we don't send this data at all.

We do not sell your personal information for money. Sharing hashed identifiers with advertising platforms for measurement and optimization may be considered "sharing" under the CCPA; you can opt out at any time by declining cookies on the cookie banner, which also stops the analytics above (or clearing the cookie_consent cookie and declining on the next visit). We also disclose information in response to lawful requests (subpoenas, court orders) when required by law.

Cookies and Tracking

We use cookies and similar technologies to keep you signed in, remember cart contents, and measure site performance. See our Cookie Policy for the full breakdown and your choices.

Support conversations

When you write to support@standardblanks.com, your messages are processed by service providers that help us run customer support. If you're signed in, the account, order, and cart details needed to answer you go with them. Live chat works the same way; it is switched off at the moment, and when it's on, everything in this section applies to it too. We don't sell any of it.

We do keep these conversations. We store them to answer your request and to measure and improve how well we answer support questions; we don't use them for anything else. Chat transcripts are deleted automatically 180 days after the last message in the conversation. Support email threads are kept with your account records instead, because they're part of your order history. Either way, deleting your account deletes the ones tied to it.

Please don't paste payment card numbers into a support message — we never need them there, and the payment form is the only place they belong.

When a chat conversation is handed to our team, we open a support ticket and save the recent conversation and the details looked up for it onto that ticket, so whoever picks it up doesn't make you start over.

Details we keep about your shop to help with support live in your account profile, where you can read, edit, or delete them. See our Terms of Service for what support answers do and don't commit us to.

Data Retention

We keep order records for as long as needed to support warranty, tax, and accounting obligations (typically 7 years). Account information is kept while your account is active and for a reasonable period after closure for legal and operational reasons.

Support chat transcripts are kept for 180 days from the last message in the conversation, and are then deleted automatically. Support email threads are kept with your account records. Deleting your account deletes both — see Support conversations above for why we keep them at all.

Your Rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, or to object to certain processing. California residents have additional rights under the CCPA/CPRA, including the right to know what categories of information we collect and the right to request deletion. To exercise any of these rights, email support@standardblanks.com.

Security

We use commercially reasonable safeguards — including TLS encryption in transit, hashed password storage, and least-privilege access controls — to protect your information. No system is fully secure; if we ever experience a breach affecting your information, we will notify you as required by law.

Children's Privacy

Our site is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

Changes to This Policy

We may update this policy from time to time. Material changes will be noted with an updated effective date.

Contact

Questions or concerns about your privacy? Email support@standardblanks.com.