Privacy policy

Who we are

Scrollcore is a small online shop based in Mississauga, Ontario, Canada. We sell phone cases to customers in the United States. Questions about privacy: hello@scrollcore.ca.

What we collect

This site does not ask you to create an account.

• Identifiers and contact details: name, email address, and shipping address.
• Order details: product, colour, phone model, quantity, and order total.
• Payment details: entered on Stripe's checkout page and handled by Stripe. We do not receive or store your full card number, expiry, or security code.
• Messages: what you write when you email us.
• Technical data: like any website, our host receives standard request data such as IP address, browser type, and pages requested, which it uses to serve and secure the site.

We do not knowingly collect sensitive personal information as defined by US state laws.

How we use it

We use it to take payment, make your case, ship it to a US address, send order and tracking emails, handle returns and replacements, answer you, prevent fraud, and keep business and tax records. We do not use it for targeted advertising or profiling.

Who we share it with

We share personal information only with service providers that help us run the shop:

• Stripe, to process payments and prevent fraud. Stripe's privacy policy: stripe.com/privacy.
• Printful, our print and fulfilment partner, which receives your name, shipping address, and order details to print and ship the case. Printful's privacy policy: printful.com/policies/privacy.
• The shipping carrier that delivers your order.
• Vercel, which hosts this website and processes technical request data. Vercel's privacy policy: vercel.com/legal/privacy-policy.
• Our email provider, when you write to us.

We may also disclose information if the law requires it, or to protect our rights or prevent fraud. Some of these providers may process information outside your state or country, including in Canada and the United States.

Cookies and analytics

The Scrollcore site does not use advertising cookies or cross-site tracking. As of this version it does not run analytics. If we turn on privacy-focused site analytics, such as Vercel Web Analytics, we will update this page first. Stripe sets its own cookies on its checkout page for payment and fraud prevention.

We do not sell or share your information

We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined under California law and similar US state laws. We have not done so in the past 12 months. We honour Global Privacy Control (GPC) browser signals as an opt-out request. Because we do not sell or share, there is no separate opt-out needed, but you may email us to confirm.

Your US state privacy rights

Depending on where you live, including California, Virginia, Colorado, Connecticut, Utah, Texas, and other states with consumer privacy laws, you may have the right to:

• Know or access the personal information we hold about you, and get a copy.
• Correct inaccurate personal information.
• Delete personal information, subject to legal exceptions such as tax records.
• Opt out of the sale or sharing of personal information, targeted advertising, or profiling. We do none of these.
• Not be discriminated against for using these rights.

California residents also have the right to know the categories of personal information collected, its sources, the purposes, and the categories of third parties it is disclosed to. These are described above.

To make a request, email hello@scrollcore.ca. We will verify your request by matching it to your order details, and we respond within the time the law requires (generally 45 days). You may use an authorized agent. If we deny your request, you may appeal by replying to our decision; if you are not satisfied with the appeal, you may contact your state attorney general.

How long we keep it

We keep order records as long as needed to fulfil orders, handle returns, and meet tax and accounting obligations, and email records as long as needed to answer you.

Security

Card data stays with Stripe. We use reasonable safeguards, but no way of sending information over the internet is perfectly secure.

Children

This site is not directed at children under 13, and we do not knowingly collect their information.

Changes

If this policy changes, the new version will be posted on this page with a new date.