Privacy Policy

AETHER operates the website calyron.store. We are committed to protecting your personal data and being transparent about how we use it.

We collect the following categories of data:

• Account data — name, email address, and password hash when you create an account, or your Google profile when you sign in with Google.
• Order data — shipping address, items purchased, order value, and fulfilment status.
• Payment data — we do not store card numbers. Payments are processed by Stripe, who hold payment data under their own PCI- compliant systems.
• Usage data — pages visited, referral source, browser type, and device type, collected via first-party analytics only. We do not use third-party advertising trackers.
• Wishlist & preferences — products you save and any preferences you set in your account.

We use your data to:

• Process and fulfil your orders
• Communicate order status, shipping updates, and support replies
• Maintain your account and wishlist
• Improve the site and product catalogue
• Send marketing emails only if you have opted in

We never sell your personal data to third parties. We do not use your data for behavioural advertising.

We share data with the following categories of service providers:

• Printify — receives your shipping address and order details to manufacture and dispatch your products.
• Stripe — processes card payments.
• Supabase — stores your account and order data in a secure PostgreSQL database hosted on AWS.
• Vercel — hosts the website and serves pages from a global CDN.
• Google — provides optional OAuth sign-in. If you use "Continue with Google", Google shares your name and email with us. Google's privacy policy governs their processing.

We use strictly necessary cookies to maintain your session (authentication token, shopping cart). We do not use advertising cookies or sell cookie data. You can clear cookies at any time via your browser settings — this will sign you out of your account.

Account data is retained for as long as your account is active. Order records are kept for 7 years for tax and legal compliance. You may request deletion of your account at any time (see Section 8).

Passwords are never stored in plain text — they are hashed using bcrypt via Supabase Auth. All data in transit is encrypted with TLS 1.3. Access to production databases is restricted to authorised personnel only.

Depending on your location you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and associated data
• Export your data in a portable format
• Opt out of marketing emails at any time via the unsubscribe link

To exercise any of these rights, email hello@calyron.store. We will respond within 30 days.

Our site is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

We may update this policy to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page shows when it was last revised. Material changes will be communicated via email to registered users.

For privacy-related enquiries contact our data team at hello@calyron.store.