Plain-English version: we collect what we need to send your jar and answer your emails. We don't sell your data. We don't track you across the internet for advertisers. The full policy is below.
InkLube ("we", "us") operates inklube.com. This policy explains how we collect, use, and protect personal information when you use our site, place an order, or contact us.
Order information: name, shipping address, billing address, email, phone (optional), and the items in your order. We need this to fulfill orders.
Account information: if you create an account, we store the email and password (hashed). You can delete your account anytime from /my-account.
Payment data: processed by our payment provider (Stripe / PayPal). We never see or store your card number.
Site analytics: aggregated, anonymized traffic data via privacy-respecting analytics (page views, referrers). No personal profile is built.
Cookies: a session cookie for your cart, and a cookie if you opt into our newsletter. That's it. No advertising trackers.
To fulfill your order, ship it, answer your questions, send transactional emails (order confirmation, shipping updates), and — only if you opt in — send you our newsletter.
We don't sell your data. We don't share it with advertisers. We don't use it to retarget you on Facebook or Instagram. The only third parties we share data with are: our payment processor (Stripe), our shipping carrier (USPS), and our email service for transactional emails (Postmark).
You can request a copy of all data we have on you, ask us to correct it, or ask us to delete it. Email contact@inklube.com. We respond within 30 days. If you're in California (CCPA) or Europe (GDPR), you have additional rights described in those laws.
We keep order records for 7 years (tax law). We keep account data until you delete your account. We delete contact form submissions after 12 months.
Our site runs on HTTPS. Account passwords are hashed with bcrypt. Payment data is tokenized by Stripe and never touches our servers. We've never had a data breach. If we ever do, we'll notify affected users within 72 hours.
Our site is not directed at children under 13. We don't knowingly collect data from minors.
If we update this policy, we'll change the date at the top and notify newsletter subscribers. Continued use of the site means you accept the updated policy.
Questions about this policy? Email contact@inklube.com.
Card payments are processed by Stripe rather than by us, so your card details never touch our servers — their handling of that data is covered by Stripe's legal terms.
This privacy policy covers inklube.com and nothing else. If a link takes you off the site, the privacy policy of whoever runs that site applies instead of ours, which is worth remembering when you follow a payment or social link away from here.
Most people never read a privacy policy, so here is the practical summary of ours. When you place an order we need a name, an address, an email and a payment authorisation. The address goes to the carrier, the payment goes to the processor, and the email is how we tell you the parcel has shipped. That is the entire necessary set. Everything beyond it is optional.
If you subscribe to the newsletter we keep your email address and nothing else, and the unsubscribe link works immediately rather than after a fortnight. If you create an account we keep your order history so you do not have to retype an address. If you only browse, we do not build a profile on you for advertisers.
We do not sell personal information, and we do not share it for cross-context behavioural advertising. We use analytics to see which pages get read, which is aggregate rather than individual. If you would like a copy of what we hold, or you would like it deleted, email us and we will do it — there is no form to fill in and no retention argument.
This privacy policy is reviewed when something about the site actually changes rather than annually as a formality, and the date at the top reflects the last real change. Anything not covered here is worth asking about directly.