Privacy Policy

We collect information you provide to us directly:

• Account information (name, email, phone if provided)
• Shipping and billing addresses for fulfilling orders
• Order history and preferences
• Communications you send to us
• For consignors: payout method details and identification documents required by our payment processors

We also collect information automatically:

• Device and browser information (IP address, user agent, screen size)
• Usage data (pages visited, items viewed, links clicked)
• Cookies and similar tracking technologies

Payment card details are entered on Shopify’s hosted checkout and processed by Shopify Payments — Sacrescent never sees or stores your full card number.

• To process and fulfill orders, including authentication, packing, shipping, and customer support
• To send transactional emails (order confirmations, shipping notifications, account notices)
• To send marketing communications, only with your consent — you can unsubscribe at any time
• To detect, prevent, and address fraud or technical issues
• To comply with legal obligations and enforce our Terms of Service

We share data with third-party service providers strictly as needed to operate the platform:

• Shopify — hosts checkout, processes payments, fulfills order data
• Resend — sends our transactional emails
• Clerk — handles account authentication
• AWS — hosts our application and databases
• Vercel — hosts our public website
• UPS / FedEx / USPS — fulfills physical shipments

We do not sell your personal information. (TODO: review under CCPA / CPRA “sale” definitions before launch.)

Depending on where you live (California, EU, UK, and others) you may have rights to access, correct, delete, or restrict the use of your personal information. To exercise these rights, email support@sacrescent.com. We’ll respond within 30 days.

California residents have specific rights under the California Consumer Privacy Act (CCPA / CPRA), including the right to know what personal information we collect and to request deletion. (TODO: detail CCPA-specific notice before launch.)

We use cookies for authentication (keeping you logged in), shopping cart persistence, and analytics. You can disable cookies in your browser, but some site functions may stop working. (TODO: link to Cookie Policy page once that exists.)

Sacrescent is not directed at children under 18 and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

We retain personal information as long as needed to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. Order records are retained for a minimum of seven years for tax and accounting purposes.

We use reasonable technical and organizational measures to protect your information, including TLS encryption in transit and bounded-cache authentication tokens. No system is perfectly secure; if you suspect your account has been compromised, contact us immediately.

We may update this policy occasionally. The “Last updated” date at the top reflects the most recent change. Material changes will be communicated via email when we have a way to reach you.

Questions about this policy? Email support@sacrescent.com.