Privacy policy

This policy explains what Chai Rituals LLC (“we”, “us”) collects when you visit chairituals.co or buy from us, why we collect it, and what control you have over it. We are a small business in New Jersey, United States (Chai Rituals LLC, 2 Hearthstone Court, Upper Saddle River, NJ 07458), and you can reach us at any time at hello@chairituals.co.

What we collect

• Order information — your name, shipping address, email address, and what you ordered. We need all of it to take payment and put a box on a truck.
• Payment information — handled entirely by Stripe. Your card number never reaches our servers and we never see or store it. We receive only the last four digits, the card brand, and whether the charge succeeded.
• Mailing list — your email address, if you sign up. To give you a one-time welcome code we keep a customer record at Stripe with that email and the code. If you tick the box at checkout to hear from us, your name and email are added to the same list.
• Gift box pre-orders and waiting lists — your email, and for a gift box pre-order your name (if you give it) and how many boxes you want. We use this to plan how many to make and to write to you when they are ready.
• Corporate inquiries — your name, company, email, how many boxes, the date you need them and anything you add in the notes.
• Reviews — if you use the link in our review email: your star rating, a headline, your review and your first name, together with your order number and email so we know the review comes from a real order. We may publish your first name, rating and words on this site. We never publish your email or last name.
• Basic technical data — pages requested, approximate location by IP, browser and device type. Our host records this automatically, as essentially all web servers do, to serve the site and spot abuse.
• Anonymous site statistics — we use Vercel Web Analytics to count visits. It records the page, the site you came from, approximate location (country, region, city), browser, operating system and device type. It uses no cookies, its records are not tied to you or your IP address, and it recognizes a visit only by a hash of the request, which is discarded after 24 hours. We cannot use it to identify you.

We do not ask for, and have no use for, your date of birth, government identifiers, or financial account numbers.

How we use it

• To process, pack, ship, and support your order.
• To email you about that order: confirmation, tracking, problems, and one email about ten days after it ships asking for a review.
• To answer inquiries, hold gift box pre-orders, and tell you when something you asked about is ready.
• To show real customer reviews on the site.
• To understand, in aggregate, which pages people visit.
• To send marketing email, only if you asked us to, and only until you tell us to stop.
• To keep the records we are required to keep for tax and accounting.
• To detect and prevent fraud.

We do not use your information to build advertising profiles, and we do not run third-party advertising trackers on this site.

Who we share it with

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share the minimum necessary with the service providers that make the business run:

• Stripe — payment processing.
• Shippo and the carrier you are shipped by (currently USPS) — name and delivery address, to produce a shipping label.
• Vercel — website hosting and anonymous site statistics.
• Resend — to deliver order emails and our newsletter, and to hold our mailing list.

Each of these is bound to use your information only to provide that service to us. We may also disclose information if the law requires it, or to protect our rights, safety, or property.

Cookies

This site uses a small amount of browser storage to remember what is in your cart and whether you have already claimed a welcome discount. That is functional, stays on your device, and is not used to track you across other websites. Stripe sets its own cookies during checkout for fraud prevention. We do not use advertising cookies, and our site statistics use no cookies at all.

How long we keep it

Order records are kept for seven years, which is what tax and accounting rules require of us. Mailing list entries are kept until you unsubscribe. Pre-order, waiting list and inquiry details arrive in our email inbox; we keep them while the pre-order or inquiry is open and delete them if you ask. Published reviews stay up until you ask us to remove them. Server logs are kept for a short period and then discarded.

Security

The site is served entirely over HTTPS, payments are handled by a PCI-compliant processor, and access to order data is limited to the people who need it to fill orders. No system is perfectly secure, but we never hold card numbers, the data that makes a breach most serious.

Your rights

Wherever you live, you may ask us to show you what we hold about you, correct it, delete it, or stop emailing you. Email hello@chairituals.co and we will act within 30 days. We will not treat you differently for asking.

If you are a California resident, the CCPA/CPRA gives you the rights to know, delete, correct, and opt out of sale or sharing. As stated above, we do not sell or share personal information, so there is nothing to opt out of — but the other rights apply and the same email address serves them.

If you are in the EU or UK, we process your data to perform our contract with you (orders), on the basis of your consent (marketing), and on the basis of our legitimate interests (fraud prevention, security). You may also lodge a complaint with your local supervisory authority.

Children

This site is not directed at children under 13, and we do not knowingly collect their information. If you believe a child has given us information, email us and we will delete it.

Changes

If we change this policy we will update the date at the top. Material changes affecting how we use information you have already given us will be announced by email to our list.

Contact

Chai Rituals LLC, New Jersey, USA — hello@chairituals.co.