Privacy Policy — Leo's Mugs

1. Who We Are

Leo's Mugs ("we", "us", "our") operates the website at leosmugs.com. We sell personalised ceramic mug wraps — either as a printed and shipped product, or as a downloadable high-resolution PNG file. Questions about this policy can be directed to support@leosmugs.com.

2. What Data We Collect

Download orders — we collect no personal information. Payment is processed by Stripe; we never see your card details. The only data stored is a temporary session token in your browser to deliver your file.

Print & ship orders — to fulfil your order we collect:

First and last name
Shipping address (street, city, state/region, postcode, country)
Email address (for order and shipping notifications)
The photo and design you upload to create your mug wrap

Payment card details are collected and processed entirely by Stripe. We do not store or handle card numbers.

3. How We Use Your Data

To process and fulfil your order
To communicate order status and shipping updates
To respond to support requests

We do not use your personal data for marketing, profiling, or any purpose beyond fulfilling your order.

4. Third Parties

We share data with the following service providers solely to fulfil your order:

Stripe — payment processing. Stripe is PCI-DSS compliant and handles all card data. See stripe.com/privacy.
Printify — print production and order fulfilment. Your shipping address, email, and mug design are transmitted to Printify to produce and ship your order. See printify.com/privacy-policy.

We do not sell, rent, or share your data with any other third parties.

5. Data Retention

Order metadata (name, address, email) is retained within Stripe and Printify in accordance with their own retention policies. We do not maintain a separate database of customer records. Uploaded photos are stored temporarily on Printify's servers to produce your order and are subject to Printify's retention policy.

6. Your Rights (GDPR — EU & UK Visitors)

If you are located in the European Union or United Kingdom, you have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data ("right to be forgotten")
Object to or restrict processing of your data
Request a portable copy of your data

To exercise any of these rights, email us at support@leosmugs.com. We will respond within 30 days.

7. Your Rights (CCPA — California Residents)

If you are a California resident, you have the right to:

Know what personal information we collect and how it is used
Request deletion of your personal information
Opt out of the sale of your personal information (we do not sell personal information)
Non-discrimination for exercising your privacy rights

To submit a request, email support@leosmugs.com with "CCPA Request" in the subject line.

8. Cookies & Browser Storage

We do not use tracking cookies or advertising pixels. We use your browser's IndexedDB storage solely to temporarily hold your mug wrap design between the customiser and the download page. This data never leaves your device and is deleted immediately after your file is delivered.

9. Security

All data is transmitted over HTTPS. Payment data is handled exclusively by Stripe using industry-standard encryption. We do not store payment card information.

10. Changes to This Policy

We may update this policy from time to time. The effective date at the top of this page will reflect any changes. Continued use of the site after an update constitutes acceptance of the revised policy.