Privacy
What we know about you, and why.
We collect what we need to take and deliver your order, and how the site is used so we can improve it. We don't sell your information, and we don't use advertising trackers.
Effective [TO CONFIRM: date legal review signs off]
01Who we are
[TO CONFIRM: legal entity name] operates Second Mint and is responsible for your information. Contact us at [TO CONFIRM: support email] about anything in this policy.
02What we collect
When you visit the site or place an order, we collect:
- Your name, email address and phone number.
- Your shipping and billing addresses.
- What you ordered, what you paid, and when.
- From our payment provider: the card brand, the last four digits, and whether the payment succeeded. We never receive or store your full card number or security code.
- When you visit, the IP address and browser details our hosting provider logs to keep the site running and secure.
- How you use the site, through Google Analytics: the pages and products you view, what you add to or remove from your cart, and how far you get through checkout. It is tied to a random identifier stored in your browser, never to your name, email address or payment details.
03Why we use it
We use your information only to:
- Take payment for your order and deliver it.
- Contact you about your order.
- Handle returns, refunds and questions you send us.
- Meet our legal, tax and accounting obligations.
- Prevent fraud and keep the site secure.
- Understand which products shoppers are interested in and where checkout gets in their way, so we can improve the shop.
04Who we share it with
Only the providers we need to run the shop, and only what each of them needs:
We don't sell or rent your personal information, and we don't share it for cross-context behavioral advertising. We will disclose information where the law requires it.
- Stripe, which processes payments.
- EasyPost, which verifies your shipping address and buys postage, and the carrier it books, which together receive your name and shipping address to deliver your order.
- Resend, which sends our emails and receives your name, email address and the details of your order to send your order confirmation.
- Google, which provides Google Analytics and receives how the site is used, as described above. It doesn't receive your name, email address, addresses or payment details, and we've turned off its advertising features.
- Our hosting and infrastructure providers, which store data on our behalf.
05What's stored in your browser
Your cart is saved in your browser's local storage so it survives a refresh. It stays on your device until you check out, although what you add and remove is reported to Google Analytics as described above.
Google Analytics sets its own cookies, which hold the random identifier that lets visits from the same browser be counted together. We don't use advertising cookies.
You can turn analytics off at any time with the "Turn off analytics" link at the bottom of every page. Your choice is remembered in that browser, and nothing is sent to Google Analytics while it's off. Browser extensions that block analytics work too.
Stripe's payment form may set its own cookies to help prevent fraud. Stripe's privacy policy explains them.
06Keeping it safe
Everything between your browser and our site is encrypted. Card details are handled by Stripe and never reach our servers, and access to order information is limited to the staff who fulfil orders.
07How long we keep it
We keep order and payment records for [TO CONFIRM: record retention period], because tax, accounting and chargeback rules require it.
08Your rights
You can ask for a copy of the information we hold about you, or ask us to correct or delete it, by contacting [TO CONFIRM: support email]. We'll confirm the request comes from the email address on your order before acting on it.
When we delete your information, we keep the financial record of an order, meaning what was bought, what was paid and when, because the law requires it, but remove your name and contact details from it.
Depending on the state you live in, you may have further rights under state privacy law. We won't treat you differently for exercising any of them.
09Children
Second Mint isn't intended for anyone under 18, and we don't knowingly collect information from children under 13.
10Changes to this policy
If we change this policy, we'll update the effective date at the top of this page. Changes don't reduce the protection given to information we already hold without telling you first.