PRIVACY POLICY

This Privacy Policy applies to the digital platform, checkout systems, drop notification dispatches, and electronic communication channels owned and operated by cuSTARt LLC d/b/a TYPE SHIT ("Company," "we," "us"), located in New Orleans, Louisiana.

This policy explains the categories of personal data collected, our lawful business purposes for processing, and your individual rights under applicable state laws (including the California Consumer Privacy Act as amended by the CPRA, Virginia VCDPA, Colorado CPA, Texas TDPSA, and other state privacy frameworks).

We collect only the minimum necessary data to process allocations and deliver transmissions:

• Identifiers & Contact Information: First and last name, email address, physical shipping address, city, state, postal code, and optional telephone number provided during checkout or news subscription.
• Commercial Transaction History: Records of acquired specimens, sizing selections, manifest reference IDs, subtotal and shipping payments, and delivery method choices (Courier vs. Studio Pickup).
• Internet & Technical Activity: IP address, device type, browser specifications, and session states necessary for cart persistence and fraud prevention.
• Payment Information (Tokenized): We do not capture or store credit card numbers, CVVs, or bank logins. All payment details are processed directly via Square's encrypted iframe environment.

Your personal data is used solely for standard operational business purposes:

• Fulfilling orders, packaging limited specimens, and generating courier shipping manifests;
• Transmitting order confirmations, tracking numbers, and delivery dispatches;
• Sending release announcements and exclusive drop dispatches when affirmatively requested;
• Preventing automated bot purchases, unauthorized card usage, and fraudulent transactions;
• Complying with statutory tax, accounting, and commercial reporting obligations.

In strict adherence to the United States CAN-SPAM Act (15 U.S.C. § 7701), our email transmission practices comply with the following standards:

• Clear header information accurately identifying the sender as cuSTARt LLC or TYPE SHIT (or stylized [TYPE SHIT.]);
• Honest, non-deceptive subject lines regarding limited drops and archival issues;
• A conspicuous physical/registered postal address in every marketing transmission;
• A direct, single-click Unsubscribe mechanism honored within ten (10) business days.

Transactional messages (such as order confirmation receipts and shipping updates) will continue to be sent for active orders regardless of marketing subscription preferences.

We disclose limited personal data to vetted service providers bound by strict confidentiality and data protection agreements:

• Payment Processing: Square / Block, Inc. (PCI-DSS Tier 1 payment gateway);
• Shipping & Courier Partners: USPS, UPS, FedEx, or regional couriers to execute physical parcel deliveries;
• Email Dispatch Infrastructure: Secure cloud communications infrastructure for automated order receipts and news transmissions.

Residents of California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Texas (TDPSA), Connecticut, and other states with comprehensive data privacy laws have specific statutory rights:

• Right to Know & Access: Request disclosure of the specific pieces and categories of personal information collected about you over the preceding 12 months.
• Right to Deletion: Request the deletion of personal information maintained about you, subject to statutory exceptions (such as fulfilling orders or tax recordkeeping).
• Right to Correct: Request the correction of inaccurate personal records.
• Right to Non-Discrimination: We will never deny service, charge different prices, or alter product quality based on the exercise of your statutory privacy rights.

To submit a verified consumer privacy request, email wthecustart@gmail.com with the subject line PRIVACY DATA REQUEST. We will verify your identity against our order records and respond within 45 days.

Our Platform uses essential first-party cookies and session technologies necessary to maintain your shopping cart items, secure active checkout sessions, and remember your cookie acknowledgement preferences.

You can configure your web browser to reject cookies, though doing so may limit your ability to add items to cart or complete checkout allocations.

The Platform is directed exclusively to adult collectors eighteen (18) years of age or older. In accordance with the Children's Online Privacy Protection Act (COPPA), we do not knowingly solicit or collect personal information from children under thirteen (13) years of age. If we learn personal data has been submitted by a minor under 13, it will be deleted immediately.

cuSTARt LLC d/b/a TYPE SHIT operates exclusively within the United States. We do not market goods or target data subjects located in the European Union, European Economic Area, or United Kingdom under GDPR/UK-GDPR.

If you access this platform from outside the United States, you acknowledge and agree that your information will be transferred to, processed, and stored on servers located within the United States, which may have different data protection standards than your home country.