What we keep.

Who we are

This shop is run by Stanza Wagon LLC d/b/a Boom KO, out of Midwest. When this page says "we", that's who it means.

What we actually store

Not a general statement — this is the list.

If you order

• Your name, email, and phone number if you gave one
• The shipping address you typed
• What you bought, what you paid, and any note you left with the order
• The IP address and browser the order came from, to spot fraud

If you make an account

• Your email and name
• Your password, stored scrambled — we cannot read it, and nor can anyone who steals the database
• A shipping address, if you asked us to remember one

If you message us

• Your name, email, and what you wrote
• The IP address and browser it came from, which is how we keep spam off the form

If you join the mailing list

• Your email, and the IP address you signed up from
• You have to confirm by clicking a link, so nobody can sign you up for a laugh

If you leave a bag behind

• If you typed your email at checkout and didn't finish, we keep that email and what was in the bag, so we can send one reminder. One. Not a campaign.

What we never store

Your card number. The payment form on our checkout page belongs to Stripe, not us. Your card details go from your browser to Stripe directly. We get back a receipt and the last four digits, and that's all we ever see.

Who else gets your details

Three companies, each for one job, and none of them for marketing:

• Stripe handles the payment. They see your card; we don't.
• Printify and the printer they route your order to get your name, address, and what to print. They cannot print a shirt without it.
• Resend sends our email, so they handle your address to deliver it.

That's the lot. We don't sell your details, we don't rent them, and we don't hand them to advertisers.

Cookies

We use as few as we can get away with:

• A session cookie. Keeps your bag full while you browse and stops other sites submitting forms as you. The site cannot work without it.
• Analytics, if it's switched on, to count visits and see which designs people look at. It's set up not to identify you personally.

No advertising cookies, no retargeting pixels, nothing following you to other sites.

How long we keep it

• Orders we keep, because tax rules say we have to and because you may need the receipt years later.
• Messages from the contact form we keep while they're useful, then clear out.
• Mailing list details go the moment you unsubscribe. Every email we send has a link.
• Abandoned bags are short-lived and only ever produce one reminder.

What you can ask for

Whatever state you're in, we'll do all of this if you ask:

• Tell you what we hold about you
• Correct anything wrong
• Delete your account and what's attached to it — though we have to keep the bare order records for tax
• Take you off the mailing list, instantly, no questions

Ask through the contact form. We'll sort it, not send you a form to fill in.

Keeping it safe

The whole site runs over an encrypted connection. Passwords are hashed, never stored as text. Payment details never reach us in the first place. No shop can promise perfection, but we've kept the amount of your data in our hands as small as the job allows — which is the only protection that really holds.

Children

This shop isn't aimed at children, and we don't knowingly collect anything from anyone under 13. If you think we have, tell us and it's gone.

If this page changes

The date at the top changes with it. If we ever start doing something materially different with your details, we'll say so plainly rather than quietly editing a paragraph.