PRIVACY POLICY

This is placeholder content. Replace it with a real privacy policy before launch — ideally reviewed by a solicitor or a service like Termly/iubenda, since actual legal requirements depend on where your customers are located (UK GDPR, EU GDPR, CCPA, etc.).

At minimum, a real policy needs to cover: what personal data is collected (name, email, shipping address, payment metadata via Stripe), why it's collected, how long it's kept, which third parties it's shared with (Stripe for payments, Supabase for storage, any email/analytics provider), and how a customer can request deletion or access to their data.

Contact: [add a real contact email before launch]