Privacy policy

The data controller is CRAMILLON LLC, 18974 North 91st Street, Scottsdale, Arizona 85255, United States, United States (Arizona). Privacy questions: hello@cramillon.com.

We collect the following data, for the following purposes:

• Order data (name, shipping address, email, phone if given, what you bought): to fulfil the contract, deliver the parcel and handle returns. Kept for as long as tax law requires us to keep records of sales.
• Payment data: handled entirely by our payment provider, Whop. We receive confirmation of payment and the last four digits of the card, never the full card number.
• Account data (email, marketing preference, cashback balance, order history): to run your account, on the basis of the contract with you. Kept until you delete your account.
• Marketing consent: if you opt in, your email address is used to send drop announcements and offers until you unsubscribe. Every email has an unsubscribe link.
• Technical data (IP address, browser, pages viewed): to keep the site secure and to measure how it is used, on the basis of our legitimate interest. Analytics cookies are only set with your consent (see Cookies).

Only with services needed to run the store, each bound by contract to protect it: our payment provider (Whop), the carrier delivering your parcel, our hosting provider (Vercel), our database and authentication provider (Supabase), our email provider, and, with your consent, analytics providers. We never sell personal data.

Some providers process data outside your country. Where that happens, transfers are protected by standard contractual clauses or an equivalent safeguard.

You can ask for a copy of your data, have it corrected or deleted, object to or restrict processing, take your data elsewhere, and withdraw consent at any time. Write to us and we will respond within one month. You also have the right to complain to your data protection authority.

Data is transmitted over encrypted connections and stored with access limited to people who need it. Card data never touches our servers.

We update this policy when our practices change. The current version is dated 2026-11-11.