Privacy Policy — Black T Factory

1. Introduction

Black T Factory LLC ("Black T Factory," "we," "us," or "our") respects your privacy and is committed to protecting it through this Privacy Policy. This Policy describes how we collect, use, store, and disclose information from and about you when you visit our website at blacktfactory.com (the "Site"), book our event printing services, or place orders at our on-site events.

By using our Site or services, you agree to this Privacy Policy. If you do not agree, please do not use our Site or services.

2. Information We Collect

We collect information about you in three ways: information you provide to us directly, information we collect automatically, and information we collect from third parties.

2.1 Information You Provide

When you book an event or place an order, we collect:

Contact information — name, email address, phone number, and event location
Event details — date, type of event, expected attendees, location, and special requirements
Billing information — billing address (payment card details are processed by our payment processor and never stored by us directly)
Custom artwork — designs, logos, photos, or other images you upload for printing
Communications — messages you send us through the Site, by email, or by text message

2.2 Information Collected Automatically

When you visit the Site, we automatically collect:

Device information — IP address, browser type, operating system, and device identifiers
Usage data — pages visited, time spent on pages, click paths, and referring website
Cookies and similar technologies — small data files stored on your device that help operate the Site (see Section 7)

2.3 Information from Third Parties

We may receive information about you from Stripe (payment processor), Twilio (SMS provider), Resend (email provider), and event hosts who book our services.

3. How We Use Your Information

We use the information we collect to:

Provide our event printing services, including processing bookings, fulfilling orders, and printing custom items
Process payments and prevent fraud
Send order confirmations, status updates, and pickup notifications via email and SMS
Communicate with you about your booking, event, or order
Improve our Site, services, and customer experience
Comply with legal obligations, including tax reporting and recordkeeping
Enforce our Terms of Service and protect our rights
With your consent, send marketing communications about future events or services

4. How We Share Your Information

We do not sell your personal information. We may share your information only in the following circumstances:

4.1 Service Providers

We share information with third-party service providers who perform services on our behalf, including:

Stripe — for payment processing and fraud prevention
Twilio — for sending SMS notifications
Resend — for sending email notifications and receipts
Supabase — for database hosting and storage
Replit — for application hosting
Google Workspace — for email and document services

These providers are contractually obligated to use your information only to provide services to us and to protect it appropriately.

4.2 Event Hosts

If you place an order at an event booked by a host, we may share aggregate order data with the event host (e.g., total number of items printed). We do not share your individual identity or specific order details with the host without your consent.

4.3 Legal Requirements

We may disclose your information if required by law, including in response to valid legal requests, to protect our rights, or to investigate fraud or violations of our Terms of Service.

4.4 Business Transfers

If we are involved in a merger, acquisition, or sale of all or part of our business, your information may be transferred as part of that transaction. We will notify you and any successor will be required to honor this Privacy Policy.

5. Data Retention

We retain your information for as long as needed to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. Specifically:

Order and booking records — retained for at least seven (7) years for tax and accounting purposes
Custom artwork files — retained for ninety (90) days after order completion, then deleted
Marketing communications data — retained until you unsubscribe or request deletion
Website analytics data — retained for up to twenty-four (24) months in aggregate form

6. Your Privacy Rights

6.1 Connecticut Residents

Under the Connecticut Data Privacy Act (CTDPA), you have the right to access, correct, delete, and receive a portable copy of your personal data. You may also opt out of the sale of personal data and targeted advertising (we do not engage in these activities). You may appeal a refusal to take action on a privacy request.

6.2 California Residents

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with similar rights to access, delete, and limit the sale of your personal information. We do not sell personal information.

6.3 How to Exercise Your Rights

To exercise any of these rights, contact us at the address in Section 11. We will respond within forty-five (45) days. We may need to verify your identity before processing your request.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to operate the Site. We use:

Essential cookies — required for the Site to function (e.g., session tokens that maintain your shopping cart)
Functional cookies — remember your preferences and improve your experience
Analytics cookies — help us understand how the Site is used

You can control cookies through your browser settings. Disabling essential cookies may prevent the Site from functioning correctly. We do not currently use third-party advertising cookies.

8. Children's Privacy

Our Site and services are not directed to children under the age of thirteen (13). We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe we have collected information from your child, please contact us and we will delete it promptly.

9. Data Security

We implement reasonable physical, technical, and administrative safeguards to protect your information, including:

Encryption of data in transit using TLS/HTTPS
Database-level access controls and row-level security
Restricted access to personal information on a need-to-know basis
Use of reputable, security-audited service providers (Stripe, Supabase, Twilio, Resend)

However, no method of transmission or storage is 100% secure. If we become aware of a data breach affecting your personal information, we will notify you in accordance with applicable law.

10. International Users

Our services are offered in the United States. If you access our Site from outside the United States, your information will be transferred to, stored, and processed in the United States. By using our services, you consent to this transfer.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at:

Black T Factory LLC
Email: privacy@blacktfactory.com
Website: blacktfactory.com
State of Connecticut, United States

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will post the revised Policy on the Site with an updated "Effective Date." If the changes are material, we will provide additional notice (such as via email or a banner on the Site).

Your continued use of our services after the revised Policy takes effect constitutes acceptance of the changes.