Privacy Policy

1. Information We Collect

1.1 Information Merchants Provide Directly

• Account information: name, business name, email address, phone number, billing address.
• Payment and billing details, processed through our integrated payment gateway partners (see Section 5).
• Store content: product listings, descriptions, pricing, branding assets, and storefront configuration.
• Communications you send to our support or sales teams.

1.2 Information Collected from End Customers (on Merchant Storefronts)

• Order information: name, shipping address, email, phone number, and order history.
• Design and customization data: artwork, images, and text uploaded through the product customizer.
• Payment information, processed directly through the payment gateway selected by the Merchant; PODStoreFront does not store full payment card numbers.

1.3 Information Collected Automatically

• Device and usage data: IP address, browser type, operating system, pages visited, and interaction data, collected via cookies and similar technologies.
• Log data: timestamps, error reports, and diagnostic information used to maintain and secure the Service.

2. How We Use Information

We use collected information to:

• Provide, operate, and maintain the Service, including storefront hosting, order processing, and print-ready file generation;
• Process payments and facilitate transactions through integrated payment gateways;
• Route orders to shipping carriers and print fulfillment partners connected to a Merchant's account;
• Communicate with Merchants regarding account activity, billing, updates, and support;
• Improve and personalize the Service, including analytics on storefront performance and product customization usage;
• Detect, investigate, and prevent fraud, abuse, and security incidents;
• Comply with legal obligations, including tax, invoicing (e.g., GST-compliant invoicing), and regulatory requirements.

3. Legal Basis for Processing (EEA/UK Users)

Where applicable data protection law requires a legal basis, we rely on: performance of a contract (providing the Service you signed up for), legitimate interests (improving and securing the Service), consent (for optional communications or cookies), and compliance with legal obligations.

4. How We Share Information

We do not sell personal information. We share information only in the following circumstances:

4.1 Third-Party Service Providers

We share information with providers who help us operate the Service, including:

• Payment gateways (e.g., Razorpay, Stripe, PayPal, PayTabs, Telr, Checkout.com, Square, Mollie, Adyen, Worldpay);
• Shipping and logistics partners (e.g., EasyPost, Shippo, Delhivery, ShipStation, and regional carriers);
• Print fulfillment and production partners connected to a Merchant's storefront;
• Cloud hosting, analytics, and customer support tool providers.

Each of these providers processes data under their own applicable terms and privacy practices, and only to the extent necessary to perform their function.

4.2 Between Merchants and Their Customers

When an end customer places an order on a Merchant's storefront, their order and design data is shared with that Merchant so the Merchant can fulfill the order and provide customer service.

4.3 Legal and Safety Reasons

We may disclose information if required by law, subpoena, or other legal process, or where we believe disclosure is necessary to protect the rights, property, or safety of PODStoreFront, our Merchants, end customers, or the public.

4.4 Business Transfers

If PODStoreFront or LP Cloud Lab is involved in a merger, acquisition, restructuring, or sale of assets, information may be transferred as part of that transaction, subject to this Policy or a policy providing at least equivalent protections.

5. Payment Information

PODStoreFront integrates with third-party payment gateways to process transactions. Full card numbers and sensitive payment credentials are handled directly by these gateway providers under their own PCI-DSS compliant systems; PODStoreFront does not store complete payment card details on its own servers.

6. Data Retention

We retain personal information for as long as necessary to provide the Service, comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. When you close your account, we will delete or anonymize personal information within a reasonable period, except where retention is required by law.

7. Data Security

We implement technical and organizational measures, including encryption in transit and at rest, access controls, and monitoring, designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. International Data Transfers

PODStoreFront and LP Cloud Lab operate across India, North America, and Europe. Information may be transferred to, stored, and processed in countries other than your own. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for cross-border transfers of personal data.

9. Your Rights

Depending on your location, you may have rights to:

• Access, correct, or delete your personal information;
• Object to or restrict certain processing;
• Request a copy of your data in a portable format;
• Withdraw consent where processing is based on consent;
• Lodge a complaint with a data protection authority.

To exercise these rights, contact us at connect@lpcloudlab.com. We may need to verify your identity before fulfilling a request. Merchants seeking to exercise these rights on behalf of their end customers should contact the relevant Merchant directly, as the Merchant is generally the data controller for their customers' order and design data, with PODStoreFront acting as a data processor on the Merchant's behalf.

10. Cookies and Tracking Technologies

We use cookies and similar technologies to operate the Service, remember preferences, and analyze usage. You can manage cookie preferences through your browser settings; disabling certain cookies may affect Service functionality.

11. Children's Privacy

The Service is not directed to individuals under the age of 18, and we do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without verified parental consent, we will take steps to delete that information.

12. Third-Party Links

The Service may contain links to third-party websites or services not operated by us. We are not responsible for the privacy practices of third parties, and we encourage you to review their privacy policies before providing any information.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the Platform or by email prior to taking effect. The "Last Updated" date at the top of this Policy reflects the most recent revision.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: