Information you give us:

• Contact and order details — name, email address, shipping and billing address, and phone number.
• Account information — your email and a password (stored only in hashed form; we never see your plain password).
• Order and design details — the products and custom desk/rack configurations you build, save, or purchase.
• Messages you send us through forms or email.

Information collected automatically:

• Basic device and usage data (such as browser type and pages viewed) needed to operate and secure the site.
• Cookies and local storage used to keep you signed in, remember your cart, and store your light/dark theme preference.

Payments are processed by Stripe. Your card details are entered directly with Stripe and handled under Stripe's security and privacy practices — Temple & Spark does not receive or store your full card number. We retain order and transaction records (amounts, dates, status) needed to fulfill orders and keep our books.

• To process, fulfill, and deliver your orders, and to calculate tax and shipping.
• To send transactional emails — order confirmations, shipping and tracking updates, and replies to your questions.
• To create and manage your account and your saved builds.
• To provide customer support and respond to your requests.
• To operate, secure, and improve the site, and to comply with our legal obligations.

We do not sell your personal information. We share it only with service providers who help us run the store, and only as needed:

• Stripe — payment processing.
• Resend — sending order and shipping emails on our behalf.
• Our hosting and infrastructure providers — to operate the website and backend.
• Shipping and delivery partners — to deliver your order.
• Legal and safety — when required by law, or to protect our rights, customers, or the public.
• Business transfers — if the business is sold or reorganized, information may transfer as part of that transaction.

We use a small number of essential cookies and local-storage items: a secure, http-only cookie to keep you signed in, a stored cart identifier, and your theme preference. We do not currently use third-party advertising or cross-site tracking cookies. Because the data we honor for privacy signals may evolve, we treat browser "Do Not Track" and Global Privacy Control signals consistent with applicable law.

If you are a California resident, you may have the right to request access to the personal information we hold about you, to request its deletion or correction, and to not be discriminated against for exercising these rights. We do not sell or "share" personal information for cross-context behavioral advertising. To make a request, email support@templeandspark.com; we will verify and respond as required by law. [Confirm CCPA/CPRA request handling and timelines with counsel.]

We keep personal information for as long as your account is active and as needed to provide the service, then for the period required to meet legal, tax, accounting, and dispute-resolution obligations. You can ask us to delete your account at any time.

We use reasonable administrative and technical safeguards to protect your information, including encrypted connections and hashed passwords. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

The site is intended for adults and is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

We may update this Privacy Policy from time to time; the "Last updated" date above reflects the latest version. Questions or requests? Email support@templeandspark.com, or write to us in Los Angeles, California. [Add a full business mailing address for formal notices.]