Privacy Policy

We collect information you provide directly to us when you place an order, submit a bulk inquiry, or contact us. This includes your name, email address, phone number, shipping address, and payment information. We also collect information automatically when you visit our site, including your IP address, browser type, pages visited, time spent on pages, and referring URLs. This is collected through cookies and similar tracking technologies.

We use the information we collect to: • Process and fulfill your orders • Send order confirmations and shipping updates • Respond to inquiries and provide customer support • Send promotional communications (you may opt out at any time) • Improve our website and product offerings • Comply with legal obligations

We use cookies and similar tracking technologies to operate our site, understand usage, and measure the performance of our marketing. Cookies are small data files stored on your device. Categories of cookies we use: • Essential cookies: Required for the site to function (shopping cart, checkout, session management) • Analytics cookies: Measure how visitors use the site — Google Analytics 4 and Microsoft Clarity • Advertising cookies: Measure ad performance and enable retargeting — Meta Pixel and TikTok Pixel • Email marketing cookies: Identify subscribers for our newsletter — Klaviyo A cookie banner appears on your first visit. If you decline, we disable Google Analytics, Microsoft Clarity, Meta Pixel, and TikTok Pixel, and clear any existing tracking cookies in your browser. Your preference is stored locally so you are not asked again. You can also disable cookies through your browser settings; note that disabling all cookies may break parts of the site such as the cart.

We share your information with third-party service providers only as necessary to operate our business. These providers may process your information on our behalf under their own privacy policies: Stripe (payments): Processes all payment information. Card data is transmitted directly to Stripe and is never stored on our servers. stripe.com/privacy Supabase (database infrastructure): Hosts our order and inquiry records on U.S.-based servers. supabase.com/privacy Resend (transactional email): Sends order confirmations, shipping updates, and inquiry responses on our behalf. resend.com/legal/privacy-policy Klaviyo (email marketing): Manages our promotional email list, welcome sequences, and discount codes for users who sign up. klaviyo.com/legal/privacy Google Analytics 4 (site analytics): Measures traffic patterns, page views, and conversion events. policies.google.com/privacy Microsoft Clarity (session analytics): Records anonymized user sessions, click heatmaps, and scroll depth to help us improve usability. Clarity masks sensitive input fields by default. privacy.microsoft.com Meta Pixel (advertising): Measures the effectiveness of our Facebook and Instagram advertising and enables retargeting. facebook.com/privacy/policy TikTok Pixel (advertising): Measures the effectiveness of our TikTok advertising and enables retargeting. tiktok.com/legal/privacy-policy FedEx (shipping): Receives your shipping address to fulfill deliveries. fedex.com/en-us/trust-center/global-privacy-policy.html We do not sell your personal information to third parties. You may opt out of analytics and advertising cookies at any time using our cookie banner.

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, including for legal, accounting, or reporting requirements. Order records are typically retained for 7 years.

Depending on your location, you may have the following rights regarding your personal information: • Right to access: Request a copy of the personal data we hold about you • Right to correction: Request that we correct inaccurate data • Right to deletion: Request that we delete your personal data • Right to opt out: Opt out of marketing communications at any time • Right to data portability: Request your data in a portable format To exercise any of these rights, contact us at sales@paintsforboats.com.

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. All payment processing is handled by Stripe using industry-standard encryption.

Our site is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the effective date at the top of this page. Your continued use of the site after changes constitutes acceptance of the updated policy.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: PaintsForBoats.com Email: sales@paintsforboats.com