Privacy Policy

Who operates the site

The site is operated by Zatreon Dizadare, a sole proprietor doing business as Grandeur Excellence. For the purposes of the EU and UK General Data Protection Regulation and similar laws, Zatreon Dizadare, doing business as Grandeur Excellence, is the controller of personal information described in this policy. Questions and requests can be sent to contact@grandeurexcellence.com or through the contact form.

Summary

• The site sets no cookies of its own and runs no analytics, advertising, or tracking scripts.
• Personal information is collected mainly when you place an order (your name, email address, phone number, and shipping address) or send a message through the contact form.
• Card details are entered on the payment processor’s secure checkout page and are never received or stored by the site.
• Personal information is used to process, produce, ship, and support your order, to keep the site secure, and to meet legal obligations.
• Personal information is not sold, is not shared for cross-context behavioral advertising, and is not used for targeted advertising or profiling.

Information collected

Information you provide

• Order and contact details. When you check out, the payment processor collects your name, email address, phone number, shipping address, and billing details, and makes the order details available to the site so the order can be fulfilled.
• Order selections. The virtue, hoodie color, size, and thread colors you choose.
• Payment information. Card numbers and other payment credentials are entered directly on the payment processor’s page. The site receives only limited payment status information, such as whether a payment succeeded.
• Correspondence. If you email the site or use the contact form, your email address, name, and the content of your message. See Contact form.

Information collected automatically

• Technical request data. Like any website, the site’s hosting and security provider processes technical information when your browser requests a page, including your IP address, browser and device type, the page requested, the referring page, and the date and time. This information is used to deliver pages, protect the site against abuse, and diagnose errors, and it may appear briefly in operational logs.
• Network error reports. Your browser may send the hosting provider a report if a page fails to load because of a network error. These reports contain technical connection details and are used only to keep the site reliable.
• On-device storage. The site stores a few small items in your browser’s local and session storage, such as music player state and preferences. These items stay on your device and are not sent to the site’s servers. See the Cookie Policy.

Information not collected

The site does not offer accounts, does not knowingly collect sensitive personal information (such as government identifiers, precise geolocation, health information, or biometric data), and does not use analytics or advertising tools.

Contact form

The contact form asks for your name, email address, a topic, and your message. For a licensing request it also asks which beat you are interested in, and for order help it optionally asks for an order number. A hidden field that people leave empty helps filter automated spam.

• Why it is used. To read and answer your message, handle the order or licensing request it describes, and keep a record of the conversation (performance of a contract, steps taken at your request, and legitimate interests in responding to inquiries).
• How it is delivered. When you send the form, its contents are emailed to contact@grandeurexcellence.com through Cloudflare’s email service, with your email address set as the reply address so the answer comes straight to you. The message is then held by the site’s email provider like any other email. No automatic reply is sent, and your address is not added to any mailing list.
• Spam and abuse protection. The form uses Cloudflare Turnstile, a privacy-focused security check that loads from challenges.cloudflare.com on the contact page only. To tell people from automated programs, Turnstile processes technical signals such as your IP address and browser characteristics, under Cloudflare’s privacy policy, and it is not used for advertising. The site also limits how many messages one IP address can send in a short period; for this, a one-way hash of the IP address is held for about one minute.
• What is kept. The site does not store form messages in a database. The email is kept as correspondence, for up to three years after the last contact. Operational logs record that a message was sent and its topic, but not its content, and are kept for short periods.

Sources of information

Personal information is obtained from you directly; from the payment processor, which provides checkout details for your order; from the production and fulfillment partner and shipping carriers, which provide order status and delivery information; and from the hosting provider, which processes technical request data.

How information is used

• To process payments, produce and ship your order, and send order, shipping, and delivery communications (performance of a contract).
• To send transactional emails about your order, namely an order confirmation and a shipping notification with tracking details (performance of a contract). The email address given at checkout is used for these order and shipping notifications only. It is not added to any mailing list and is not used for marketing.
• To respond to questions, handle replacement and refund requests, and provide customer support (performance of a contract and legitimate interests).
• To secure the site, prevent fraud and abuse, and keep the site working (legitimate interests in operating a safe and reliable site).
• To keep business, tax, and accounting records and comply with legal obligations (legal obligation).
• To establish, exercise, or defend legal claims (legitimate interests).
• To remember optional preferences on your device, only with your permission (consent, which can be withdrawn at any time).

The site does not use personal information for automated decision-making that produces legal or similarly significant effects. The payment processor may use automated tools to screen payments for fraud under its own privacy policy.

How information is disclosed

Personal information is disclosed only as needed to operate the site and fulfill orders, to the following categories of recipients:

• Payment processor, to process payments, prevent fraud, and issue receipts and refunds.
• Print-on-demand production and fulfillment partner, which receives your name, shipping address, email address, phone number, and order selections to embroider, pack, and ship your hoodie and to provide delivery updates.
• Shipping carriers, through the fulfillment partner, to deliver your order.
• Hosting, content delivery, and security provider, which serves the site and processes technical request data.
• Email service providers, which receive and deliver email sent to the site’s address. Transactional order and shipping emails, and contact form messages, are sent through Cloudflare’s email service, which receives your email address, name, and the details included in the message only to deliver it.
• Security check provider, Cloudflare Turnstile, which processes technical signals on the contact page to protect the form from automated abuse.
• Professional advisers, such as accountants and lawyers, under duties of confidentiality.
• Authorities and others where required by law, such as to respond to a valid legal request, enforce the Terms, or protect the rights, property, or safety of any person.
• A successor, if the business or its assets are sold, transferred, or reorganized, subject to this policy.

Service providers are permitted to use personal information only to perform services for the site or as their own privacy policies allow for their independent services, such as fraud prevention by the payment processor.

No sale or sharing of personal information

Personal information is not sold, and it is not shared for cross-context behavioral advertising, as those terms are defined under the California Consumer Privacy Act and similar state laws. It is not processed for targeted advertising or for profiling in furtherance of decisions that produce legal or similarly significant effects. This has been true for at least the past twelve months. See Your Privacy Choices.

How long information is kept

• Order and payment records are kept for as long as needed to fulfill the order, handle replacements and refunds, and meet tax, accounting, and legal obligations, generally up to seven years after the order.
• Correspondence, including contact form messages, is kept for up to three years after the last contact, or longer if needed for a legal claim.
• Technical logs are kept by the hosting provider for short periods, generally days to weeks, unless needed to investigate a security incident.
• On-device storage remains in your browser until it expires or you clear it.

Service providers keep information according to their own retention policies and legal obligations.

Security

Reasonable administrative, technical, and physical safeguards are used to protect personal information, including encrypted connections (HTTPS), a strict content security policy, restricted access to service accounts, and payment handling through a processor certified to the Payment Card Industry Data Security Standard. No method of transmission or storage is completely secure, and absolute security cannot be guaranteed.

International transfers

The site is operated from the United States, ships only to addresses in the United States, and is intended for visitors in the United States. Personal information is processed in the United States and in other countries where service providers operate. Where personal information from the European Economic Area, the United Kingdom, or Switzerland is transferred, it is protected by appropriate safeguards, such as the EU–U.S. Data Privacy Framework where a provider is certified, or standard contractual clauses.

Children

The site is not directed to children under 13, and the shop is intended for adults. Personal information is not knowingly collected from children under 16. If you believe a child has provided personal information, contact contact@grandeurexcellence.com so it can be deleted.

Privacy rights in the United States

Residents of certain states, including California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia, have rights under state privacy laws. These requests are honored for all visitors in the United States, whether or not a particular law applies. Subject to legal exceptions, you may request to:

• Know and access the personal information collected about you, including the categories, sources, purposes, and recipients, and receive a copy in a portable format.
• Correct inaccurate personal information.
• Delete personal information, except where it must be kept, for example to complete an order or meet tax obligations.
• Opt out of the sale or sharing of personal information, targeted advertising, and profiling. None of these activities take place, but you may still submit a request.
• Limit the use of sensitive personal information. Sensitive personal information is not collected or used for purposes that require this right.
• Not be discriminated against for exercising these rights.

An authorized agent may submit a request on your behalf with written permission signed by you; the agent’s authority and your identity may need to be verified.

Additional information for California residents

In the preceding twelve months, the following categories of personal information, as defined by the California Consumer Privacy Act, have been collected for the business purposes described above, and disclosed only to the service providers and recipients listed in this policy:

• Identifiers such as name, email address, phone number, postal address, and IP address.
• Customer records such as name, address, and phone number (California Civil Code § 1798.80).
• Commercial information such as products purchased.
• Internet or network activity such as technical request data.

No category was sold or shared for cross-context behavioral advertising. No financial incentives are offered in exchange for personal information. Under California’s “Shine the Light” law, personal information is not disclosed to third parties for their own direct marketing purposes.

Rights in the EEA, UK, and Switzerland

If data protection laws of the European Economic Area, the United Kingdom, or Switzerland apply, you have the right to access, rectify, or erase your personal information; to restrict or object to its processing, including processing based on legitimate interests; to data portability; and to withdraw consent at any time without affecting earlier processing. You also have the right to lodge a complaint with your local data protection authority.

How to make a request

Email contact@grandeurexcellence.com with the subject “Privacy request” and describe the request. To protect your information, your identity will be verified by matching details you provide, such as the email address and order information used at checkout. Requests are answered within 45 days, or within one month where the GDPR applies. Where permitted, this period may be extended once when reasonably necessary, and you will be told why.

Appeals

If a request is declined, you may appeal by replying to the decision or emailing contact@grandeurexcellence.com with the subject “Privacy appeal” within a reasonable time. Appeals are decided within 60 days, or sooner where the law of your state requires. If the appeal is denied, you may contact the attorney general of your state.

Global Privacy Control and Do Not Track

The site honors the Global Privacy Control (GPC) signal as a valid request to opt out of the sale or sharing of personal information and of targeted advertising for the browser that sends it. Because none of those activities take place, no further change is needed, and a detected signal is acknowledged in the privacy notice. Because the site does not track visitors across other websites, it responds to Do Not Track signals in the same way it treats all visitors.

Third-party sites and services

Checkout takes place on the payment processor’s secure page, and shipping updates may come from the fulfillment partner or carriers. Their handling of your information is governed by their own privacy policies. Links to other websites are provided for convenience, and the site is not responsible for their practices.

Changes to this policy

This policy may be updated from time to time. The “Last updated” date shows when it last changed. Material changes will be highlighted on the site before they take effect.

Contact

Zatreon Dizadare, a sole proprietor doing business as Grandeur Excellence
Email: contact@grandeurexcellence.com
Website: grandeurexcellence.com