Encryption in transit. Our entire Site is served over secure HTTPS connections using TLS encryption. Information you submit — including login credentials, account details, and order information — is encrypted while traveling between your device and our systems.
Secure payment processing. We do not store full credit or debit card numbers on our own systems. All payments are processed through Shopify’s secure, PCI-DSS-compliant payment infrastructure and authorized third-party payment providers (such as Apple Pay, PayPal, Klarna, Affirm, and Afterpay). Card data is handled directly by these providers under the Payment Card Industry Data Security Standard (PCI-DSS).
Trusted platform. Our online store runs on Shopify, which maintains industry-standard security controls, continuous monitoring, and Level 1 PCI-DSS compliance for the underlying e-commerce platform. You can review Shopify’s security practices at https://www.shopify.com/security.
Access controls. Access to systems containing Personal Information is restricted to authorized personnel who need it to perform their job, and is protected by individual credentials and authentication. We limit access on a need-to-know basis.
Account protection. Your account is protected by a password that you create. We strongly encourage you to use a strong, unique password and to keep it confidential. You are responsible for all activity that occurs under your account credentials.
Data minimization and retention. We collect only the information we need to operate our store and fulfill your orders, and we retain it only as long as necessary for the purposes described in our Privacy Policy or as required by law.
Monitoring and risk screening. Together with our processor, we apply automated tools to help detect and prevent fraud, including temporary blocking of IP addresses or payment methods associated with repeated suspicious activity.