Privacy Policy

Dethorned ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website and use our services. Please read this policy carefully. By using our services, you consent to the practices described in this Privacy Policy.

1. Information We Collect

We collect personal information that you voluntarily provide to us when you place an order, create an account, or contact us. The types of personal information we collect include:

• Contact Information: Your name, email address, phone number, and shipping address.
• Payment Information: Credit card number, billing address, and other payment details necessary to process your transactions. Note that payment card data is processed directly by our payment processor (Stripe) and is not stored on our servers.
• Order Information: Details about the products you rent or purchase, rental dates, order history, and delivery preferences.
• Account Information: If you create an account, we store your login credentials (email and encrypted password) and account preferences.
• Communications: Records of your correspondence with us, including customer service inquiries and feedback.

We may also automatically collect certain information when you visit our website, including your IP address, browser type, operating system, referring URLs, and information about how you interact with our website. This information is collected through cookies and similar technologies.

2. How We Use Your Information

We use the personal information we collect for the following purposes:

• Order Fulfillment: To process and fulfill your rental and purchase orders, including shipping, delivery coordination, and returns processing.
• Payment Processing: To process payments and prevent fraudulent transactions.
• Customer Service: To respond to your inquiries, provide support, and resolve any issues with your orders.
• Order Communications: To send you order confirmations, shipping notifications, rental reminders, and other transactional communications.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.

We do not sell your personal information to third parties. We do not use your information for marketing purposes unless you have explicitly opted in to receive marketing communications from us.

3. Disclosure of Your Information

We may share your personal information with the following categories of third parties, solely for the purposes of fulfilling your orders and operating our business:

• Fulfillment Partners: We share your name, shipping address, phone number, and order details with our logistics and delivery partners to ensure your orders are delivered accurately and on time.
• Payment Processors: Your payment information is transmitted directly to Stripe, our PCI-DSS compliant payment processor, for secure transaction processing. We do not store your full credit card number on our servers.
• Service Providers: We may share information with trusted service providers who assist us in operating our website, conducting our business, or servicing you, provided those parties agree to keep this information confidential.
• Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency).
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction.

4. Method of Disclosure

When we share your personal information with third parties, we do so through the following secure methods:

• Encrypted API Transmissions: Data shared with fulfillment partners and payment processors is transmitted via encrypted API connections using TLS (Transport Layer Security) encryption.
• Secure Partner Portals: Fulfillment partners access order information through authenticated, secure portals with role-based access controls.
• Data Minimization: We only share the minimum amount of information necessary for each partner to perform their specific function. For example, delivery partners receive only the information needed for delivery, not your payment details.
• Contractual Obligations: All third-party service providers are bound by contractual obligations to maintain the confidentiality and security of your personal information and to use it only for the purposes for which it was disclosed.

5. Security Practices

We implement a variety of security measures to protect your personal information from unauthorized access, use, alteration, and disclosure:

• Encryption in Transit: All data transmitted between your browser and our servers is encrypted using TLS (Transport Layer Security). Our website is served exclusively over HTTPS.
• Encryption at Rest: Sensitive personal information stored in our databases is encrypted using industry-standard encryption algorithms.
• PCI-DSS Compliance: We use Stripe for payment processing, which is certified as a PCI Level 1 Service Provider, the most stringent level of certification in the payments industry. Your payment card data is handled directly by Stripe and never touches our servers.
• Access Controls: Access to personal information is restricted to authorized personnel who need it to perform their job functions. All access is logged and monitored.
• Secure Infrastructure: Our systems are hosted on secure cloud infrastructure with firewalls, intrusion detection systems, and regular security updates.
• Regular Security Assessments: We conduct regular security reviews and vulnerability assessments to identify and address potential security risks.
• Password Security: User passwords are hashed using strong, one-way cryptographic algorithms and are never stored in plain text.

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to maintaining appropriate safeguards.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. For rental orders, we retain order records for a minimum of seven (7) years for tax and legal compliance purposes. You may request deletion of your account and associated personal information by contacting us, subject to our legal retention obligations.

7. Your Rights

Depending on your location, you may have certain rights regarding your personal information, including:

• Access: The right to request a copy of the personal information we hold about you.
• Correction: The right to request that we correct any inaccurate or incomplete personal information.
• Deletion: The right to request that we delete your personal information, subject to certain exceptions.
• Data Portability: The right to receive your personal information in a structured, commonly used, and machine-readable format.
• Opt-Out:The right to opt out of marketing communications at any time by clicking the "unsubscribe" link in any marketing email or by contacting us.

To exercise any of these rights, please contact us using the information provided in Section 10 below. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. Cookies are small text files stored on your device that help us remember your preferences and understand how you use our website. We use:

• Essential Cookies: Required for the website to function properly, including maintaining your shopping cart and processing checkout.
• Functional Cookies: Used to remember your preferences and settings, such as your selected rental date.
• Analytics Cookies: We use Google Analytics to understand how visitors interact with our website so we can improve our services. Google Analytics sets cookies (such as _ga and _ga_*) that expire after two years. These cookies are only activated after you give explicit consent via the cookie banner shown on your first visit. You can withdraw consent at any time by clearing your browser cookies.

You can control cookies through your browser settings or via the consent banner. However, disabling certain cookies may affect the functionality of our website.

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will take steps to delete such information.

10. Contact Us

If you have any questions about this Privacy Policy, your personal information, or wish to exercise your privacy rights, please contact us at:

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the updated Privacy Policy on this page with a revised "Last updated" date. We encourage you to review this Privacy Policy periodically.

By using our website and services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein.