Privacy Policy

When you order we collect your name, email address, shipping and billing address, phone number (if you provide one) and the contents of your order. When you contact support or leave a review we keep the message and any photos you send.

Checkout and payments are handled by Shopify. Card and wallet details are entered directly into Shopify's secure, PCI DSS compliant checkout and are processed by Shopify or its payment providers. We never receive or store your full card number, CVC or bank credentials — we only see the payment status, the last four digits, the card brand and the billing address needed for fraud checks and accounting.

Like most sites, our servers log your IP address, browser type, device type, referring page and the pages you view. We use this to keep the site secure, diagnose errors and understand which pages help people decide.

We use strictly necessary cookies to keep your cart and checkout session working, plus analytics and advertising cookies to measure which campaigns lead to orders. You can block or delete cookies in your browser; essential cookies are required for checkout to function. We honour Global Privacy Control and "Do Not Track" browser signals for advertising cookies where your browser sends them.

To process and ship your order, take payment, prevent fraud, provide support, honour the guarantee and warranty, send transactional emails (confirmation, tracking, program access), keep tax and accounting records, and — only with your consent — send marketing emails you can unsubscribe from in one click.

We share only what each provider needs to do its job: Shopify (checkout, payment processing, fraud prevention and order, inventory and fulfilment records), our shipping carriers (delivery address and contact details), our email provider (transactional and, where consented, marketing email), and our hosting and analytics providers. We may also disclose information where the law requires it or to protect our legal rights. We do not sell or rent your personal information, and we do not share it for cross-context behavioural advertising beyond the advertising cookies described above.

Order and transaction records are kept for as long as tax and accounting rules require (generally seven years). Support conversations are kept for up to three years. Marketing contact details are kept until you unsubscribe, and server logs are rotated regularly.

The site is served over TLS, payments run inside Shopify's PCI DSS compliant checkout, and access to order data is limited to the people who need it. No online service can promise absolute security, but if a breach ever affected your data we would notify you as required by law.

You can ask us to access, correct or delete your personal information, ask for a copy of it, opt out of marketing, or opt out of the sale or sharing of personal information (we do not sell it). US state privacy laws, including the CCPA/CPRA in California, give residents these rights, and we will not discriminate against you for using them. Email support@ironhaulco.com and we will respond within 45 days. We may need to verify your identity, and we may keep information we are legally required to retain, such as invoices.

Our products and site are intended for adults. We do not knowingly collect information from anyone under 16. If you believe a child has given us data, email us and we will delete it.

If we change this policy we will update the date at the top of this page. Questions, requests or complaints: support@ironhaulco.com (order-specific questions: orders@ironhaulco.com), Monday to Friday, 9am–6pm ET.