Privacy Policy
This policy explains what personal information BuyMerch.co collects, how we use it, and the choices you have.
1. Information We Collect
When you place an order through a BuyMerch.co store, we collect the information you provide at checkout: your name, email address, phone number (if provided), shipping or pickup details, and any personalization text you request to be printed.
When an organizer sets up a store, we collect their name, email, organization information, and store configuration details. We also collect basic technical information such as browser type and pages visited when you use our site.
2. Payment Information
Payment is processed through Stripe. BuyMerch.co does not receive or store your full credit or debit card number. Stripe handles card data under its own PCI-compliant infrastructure. We only receive a confirmation that your payment succeeded and, where needed, the last four digits of your card for receipt purposes.
3. How We Use Your Information
We use the information we collect to:
- Process and fulfill your apparel order
- Send you order confirmations and shipping or pickup notifications
- Respond to support requests about your order
- Issue refunds or exchanges when applicable
- Remit fundraising proceeds to the organization that ran the store, when applicable
- Maintain and improve our stores and service
4. Who We Share Information With
We share your information only as necessary to complete your order and operate the Service:
- Stripe — to process your payment securely
- Shipping carriers — to deliver shipped orders and provide tracking
- Store organizers — limited order information (such as sizes and quantities) needed to coordinate pickup orders and track store progress
- Service providers — vendors that help us run our platform, under contractual obligations to protect your data
We do not sell your personal information. We only disclose information when required by law or to protect our rights.
5. Data Retention
We keep order records for as long as needed to provide the Service, handle support and refund requests, meet legal obligations, and maintain accurate reporting for stores and any fundraisers.
6. Your Privacy Rights
Depending on where you live, you may have the right to request access to, a copy of, correction of, or deletion of your personal information. To exercise any of these rights, submit a support ticket through our Support page with your request. We will verify your identity before acting on a request.
California residents: BuyMerch.co does not sell personal information as defined under the California Consumer Privacy Act (CCPA) and processes personal information for the business purposes described above.
7. Security
We take reasonable measures to protect your information, including using encrypted checkout through Stripe and limiting access to personal data to authorized personnel who need it to operate the Service. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
8. Children's Privacy
Our stores are intended for use by adults ordering apparel, including parents and supporters ordering on behalf of students. We do not knowingly collect personal information directly from children under 13. If you believe a child has provided us information, please contact us and we will delete it.
9. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date reflects the most recent revision. We encourage you to review this page periodically.