Privacy Policy

WaxPax Studio LLC ("WaxPax") gathers and manages information when you access waxpaxstudio.com or interact with our services. This policy describes what we collect, how we use it, who we share it with, and the rights you have over it.

Information you provide

• Contact details: name, email, shipping and billing address, phone.
• Account credentials: username and a securely hashed password.
• Application and collector profile details you choose to share.
• Transaction records: items purchased, order totals, and payment confirmations.
• Anything you write to us in support or application messages.

Information collected automatically

When you use the Service we collect usage data through cookies and similar technologies: device and browser information, IP address, pages viewed, and interaction patterns.

Information from third parties

We receive information from the providers that help us operate, including our payment processor and analytics services, such as payment confirmations and aggregated usage data.

We use your information to:

• Fulfill orders, run drops and raffles, and ship pieces.
• Create and secure your account and verify certificates of authenticity.
• Provide support and respond to your requests.
• Detect, prevent, and address fraud and abuse.
• Send transactional messages and, where permitted, marketing you can opt out of.
• Improve the Service and comply with our legal obligations.

We use cookies and similar technologies for core functionality and analytics. Most browsers accept cookies by default, and you can set yours to remove or reject them. Blocking cookies may reduce some functionality of the Service.

We do not sell your personal information. We share it only with service providers acting on our behalf and where required by law:

• Payment processing, to charge your order and prevent fraud.
• Fulfillment and shipping partners, to deliver your pieces.
• Infrastructure, database, and email providers that run the Service.
• Analytics providers that help us understand and improve usage.
• Authorities or advisors where required by law or to protect our rights.

WaxPax relies on established providers to operate, including a payments provider for checkout, a hosted database and authentication platform for accounts and orders, and an email platform for transactional and marketing messages. Each processes your information under its own terms and security controls.

We use reasonable safeguards to protect your information, but no system is perfectly secure. We retain information for as long as your account is active and as needed to provide the Service, comply with the law, resolve disputes, and enforce our agreements.

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to restrict or object to certain processing, and to withdraw consent. You can also manage your communication preferences at any time. To make a request, contact us at studio@waxpaxstudio.com. We will respond as required by applicable law.

If you are a California resident, the California Consumer Privacy Act, as amended by the CPRA, gives you specific rights over your personal information. In the past 12 months we have collected the categories of personal information described in "Information We Collect" above for the business purposes described in "How We Use Your Information."

Subject to verification and legal limits, you have the right to:

• Know the categories and specific pieces of personal information we have collected about you, and the sources, purposes, and categories of recipients.
• Request deletion of the personal information we hold about you.
• Request correction of inaccurate personal information.
• Opt out of the sale or sharing of personal information, and limit the use of sensitive personal information.
• Not be discriminated against for exercising any of these rights.

We do not sell your personal information for money. We do not knowingly share personal information for cross-context behavioral advertising. If this ever changes, we will update this policy and provide a clear "Do Not Sell or Share My Personal Information" control before doing so.

To exercise these rights, contact us at studio@waxpaxstudio.com. We will verify your request before acting on it, and you may use an authorized agent where the law allows. We respond within the timeframes required by California law.

If you are in the European Economic Area, the United Kingdom, or Switzerland, the GDPR and equivalent laws apply to our processing of your personal information. For that processing, the data controller is WaxPax Studio LLC.

We rely on the following legal bases: performance of a contract, to create your account and fulfill orders, drops, and shipping; our legitimate interests, to secure the Service, prevent fraud, and improve what we offer; your consent, for non-essential cookies and marketing you can withdraw at any time; and compliance with our legal obligations.

Subject to applicable limits, you have the right to access, rectify, erase, restrict, or object to processing of your personal information, to data portability, and to withdraw consent without affecting prior processing. You also have the right to lodge a complaint with your local supervisory authority.

We operate from the United States, so your information is transferred to and processed there. Where required, we use appropriate safeguards, such as Standard Contractual Clauses, to protect international transfers. To exercise any right, contact us at studio@waxpaxstudio.com.

The Service is not directed to children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.

We operate from the United States. If you access the Service from elsewhere, your information may be transferred to and processed in the United States, where data-protection laws may differ from those in your country. Where required, we use appropriate transfer mechanisms.

We may revise this policy from time to time. When we do, we will update the effective date at the top of this page. Material changes will be communicated where required.

For privacy questions or to exercise your rights, contact us at studio@waxpaxstudio.com. The data controller is WaxPax Studio LLC.