Privacy Policy

1. Prototype status and what this policy covers

The Framatics site is currently a working prototype, published to demonstrate a product concept to prospective partners. It is not trading. There is no checkout, so we do not collect payment card details, billing addresses or shipping addresses, and no order history exists.

What the site actually collects today is limited to:

• an email address, and optionally a phone number, if you submit the signup form;
• a wishlist, which is stored only in your own browser and never reaches us;
• standard web and analytics data (IP address, browser and device type, pages viewed, referring site) collected by our ecommerce platform and by cookies.

The rest of this policy describes both what we collect now and what we will collect once the store operates. We are describing the full picture up front, including the sale and sharing of personal information in Section 6, rather than adding it quietly later. The version of this policy in force at the time you give us information is the version that governs that information.

2. Personal information we collect

“Personal information” means information that identifies, relates to, describes or can reasonably be linked with you. The categories below describe what we collect, why, and who receives it. Rows marked (planned) are not collected today because the store is not trading.

We do not knowingly collect sensitive personal information as defined by the California Consumer Privacy Act. We do not ask for government identifiers, precise geolocation, health, biometric, racial, religious or sexual-orientation data, and we do not sell or share it.

3. Where we get your information

• Directly from you, when you submit a form, sign up for emails or texts, contact us, or (once trading) place an order.
• Automatically, through cookies, pixels, web beacons and server logs when you visit the site, open our emails or interact with our advertising.
• From service providers and partners, such as our ecommerce platform, analytics and advertising providers, and any partner that runs a promotion with us.
• From public or commercially available sources, where permitted by law.

Information we receive from outside sources is handled under this policy. We are not responsible for the accuracy of information third parties give us, nor for their own privacy practices.

4. How we use your information

• To operate, secure, debug and improve the Services, and to develop new products.
• To send you marketing about products, launches, offers and promotions, where you have signed up or where the law otherwise allows it.
• To personalise what you see, including which teams and products are shown to you.
• To measure and improve advertising, including advertising shown to you on other sites.
• To respond to questions, support requests and feedback.
• To carry out research and analytics, which may involve combining the information described in Section 2.
• To detect, investigate and prevent fraud, abuse, security incidents and other unlawful activity, and to enforce our terms.
• To comply with legal obligations and to establish, exercise or defend legal claims.
• To disclose, sell or share personal information to third parties for their own marketing purposes, as described in Section 6.
• Once the store trades: to take payment, produce and ship orders, and handle returns, exchanges and guarantee claims.

We usually have more than one purpose for the same information. Our basis for using it varies by context and includes your consent, performing a contract with you, complying with law, and our legitimate interest in running the business.

5. How we disclose your information

We disclose personal information in the following situations. Disclosures to third parties for their own purposes are covered separately in Section 6.

• Service providers. Companies that run things on our behalf and may only use the information to do so: our ecommerce platform, hosting, analytics, email and SMS providers, payment processor, print and framing partners, shipping carriers, and professional advisers such as accountants and lawyers.
• Advertising and social media platforms. Partners that help us show and measure advertising. Depending on the technology used, this may be a sale or sharing. See Section 6.
• Business transfers. If we are acquired, merge, raise investment or sell assets, personal information may be disclosed as part of that process, including during negotiation.
• Legal and safety. In response to subpoenas, warrants, court orders or regulatory requests, and where we believe disclosure is necessary to investigate or prevent illegal activity, fraud or a threat to someone's safety, or to enforce our agreements.
• With your consent, in any other case you agree to.
• De-identified information. We may de-identify or aggregate information so it can no longer reasonably be linked to you, and use it for any purpose. We will keep it de-identified and will not attempt to re-identify it.

Anything you post to a public part of the Services, such as a published review, is public and may be read, copied and reused by anyone.

6. Sale and sharing of your personal information

Framatics sells and shares personal information. We are telling you plainly because several US state privacy laws define these terms broadly, and because you have the right to say no.

Under the California Consumer Privacy Act and comparable state laws, “sell” means disclosing personal information to a third party for money or other valuable consideration, and “share” means disclosing it for cross-context behavioural advertising. Neither term requires that money changes hands in the way you might expect.

We disclose, or while the store is a prototype intend to disclose, personal information to:

• Third-party retailers and brands in the sports, apparel, memorabilia and fan-merchandise market, for those companies' own marketing purposes, so they can send offers and promotions that may interest a sports fan;
• Marketing, data and advertising partners, including partners who help build audiences and target advertising across other websites and apps.

When we disclose personal information to these companies for their own purposes, they act as independent controllers of that information. Their privacy policies, not this one, govern what they do with it, and we do not control their use of it.

Separately, our use of advertising and analytics cookies makes online identifiers and browsing activity available to third parties. That is treated as a sale or sharing under several state laws even where no payment is involved.

The categories we sell or share, or intend to, are:

You can opt out at any time, and we will not treat you any differently for doing so. The fastest route is the Do Not Sell or Share My Personal Information control in the Cookie Preferences panel, which opens from the link at the bottom of every page and takes effect immediately. Section 8 sets out the right and Section 9 gives the other routes.

We also honour opt-out preference signals such as Global Privacy Control. Where your browser sends that signal we treat you as opted out of the sale and sharing of your personal information without you having to set anything, and the Cookie Preferences panel shows you that it has been applied. The signal is read per browser, so sending it from one browser does not opt you out in another.

We do not sell or share the personal information of anyone we know to be under 16. See Section 10.

We do not sell or share sensitive personal information, and we do not use it for purposes beyond those permitted by the CCPA.

7. Cookies and tracking technologies

We and our partners use cookies, pixels, web beacons, clear GIFs, server logs and similar technologies to recognise your browser or device and record how you use the Services.

• Strictly necessary technologies keep the site working and secure, remember your cart and wishlist, and cannot be switched off.
• Analytics technologies tell us which pages and products people use, so we can fix and improve them.
• Advertising technologies let us and our partners show you advertising tailored to your interests here and on other sites, and measure whether it worked. These are the technologies that constitute a sale or sharing under Section 6.

You can control these through the Cookie Preferences link at the bottom of every page, which opens a panel with a switch for each of the optional categories above. Saving there applies your choice across the store, and you can change it again at any time. Strictly necessary technologies stay regardless, because the site cannot hold a cart or complete a checkout without them, and blocking them in your browser will stop those parts working.

We recognise browser-level opt-out signals, including Global Privacy Control. Recognition applies only to the browser or device that sends the signal, so you will need to set it on each one. Your choices are also stored per browser, so clearing your browser data clears them.

8. Your rights and choices

Depending on where you live, you may have some or all of the following rights. They are not absolute, and we may decline a request where the law permits.

• Opt out of sale and sharing. You can tell us to stop selling or sharing your personal information, including for targeted advertising. See Section 6 for what that covers.
• Know and access. You can ask what personal information we hold about you, where it came from, why we have it and who we disclosed it to, and ask for a copy.
• Delete. You can ask us to delete your personal information. We may keep what we need to meet legal obligations, resolve disputes, prevent fraud or enforce our agreements, and copies may persist in backups for a period.
• Correct. You can ask us to fix personal information that is wrong.
• Portability. Where required, we will provide a machine-readable copy.
• Limit use of sensitive personal information. We do not collect it, so there is nothing to limit, but the right stands.
• Object to automated decisions made without human involvement, where the law gives you that right.
• Non-discrimination. We will not deny you goods or services, charge you a different price, or give you a lower quality of service because you exercised a privacy right.
• Withdraw marketing consent. Use the unsubscribe link in any marketing email, or reply STOP to any marketing text. You may still receive service messages about an order or account.

9. How to exercise your rights

To opt out of the sale and sharing of your personal information, use the Cookie Preferences link at the bottom of any page. The panel it opens has a Do Not Sell or Share My Personal Information switch. It applies as soon as you save it, needs no account, and we do not ask you to identify yourself to use it.

For every other right, email framatics.us@gmail.com with “Privacy Request” in the subject line. Access, deletion, correction and portability need us to find your records, so they go through this route.

Tell us what you want us to do (opt out of sale and sharing, access, delete, or correct) and give us enough information to find you, normally the email address or phone number you gave us. We will use what you send only to verify and answer the request.

We will acknowledge your request and respond within the period the applicable law requires, generally 45 days, and we will tell you if we need longer.

An authorised agent may act for you. We will ask for proof that you gave them permission, and we may ask you to confirm it directly.

These two routes are the whole set. Cookie Preferences is reachable from the bottom of every page and is the self-service opt-out; the email address above covers every other right. We deliberately do not run a third, separate privacy page, because an opt-out you have to hunt for across several pages is worse than one control in a fixed place.

If you are not satisfied with our response, you may have the right to complain to your state attorney general or another supervisory authority.

10. Children's privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us personal information, email framatics.us@gmail.com and we will delete it.

We do not knowingly sell or share the personal information of anyone under 16. US state law requires opt-in consent before doing so, from the person themselves if they are 13 to 15 and from a parent or guardian if they are under 13. We do not seek that consent, so we do not sell or share their information at all.

11. California residents

If you are a California resident, the California Consumer Privacy Act gives you the rights listed in Section 8, and the following applies specifically to you.

• The categories of personal information we collect, the purposes we collect them for, and the categories of recipients are in the table in Section 2.
• The sources we collect from are in Section 3.
• The business and commercial purposes we use it for are in Section 4.
• The categories we sell and share, and who receives them, are in the table in Section 6.
• How long we keep it is in Section 13.

We do not have actual knowledge that we sell or share the personal information of residents under 16 years of age.

California residents may also ask, once per calendar year, for the categories of personal information we disclosed to third parties for their direct marketing purposes in the previous calendar year, and the identity of those third parties. Use the request route in Section 9.

If we operate a rewards or loyalty programme, it may be a financial incentive under the CCPA. Participation would be voluntary, no purchase would be required, and you could withdraw at any time. We would set out the terms and our good-faith estimate of the value of the information before you joined.

12. Other US state privacy rights

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws have rights that closely track those in Section 8, including the right to opt out of targeted advertising and the sale of personal data, and in most of those states the right to appeal a refused request.

If we refuse your request, we will tell you why and how to appeal. If your appeal is refused, you may contact your state attorney general.

We honour these rights regardless of which state you live in, because drawing lines between residents is more trouble than simply respecting the request.

13. How we protect your information

We use reasonable administrative, technical and physical measures designed to protect personal information from loss, misuse and unauthorised access. Payment card details, once the store trades, are handled by our payment processor and do not reach our systems.

No transmission over the internet and no method of electronic storage is completely secure, so we cannot guarantee absolute security. Please do not send us sensitive or confidential information through insecure channels.

If you hold an account, you are responsible for keeping your password confidential and for activity that happens under it. Tell us immediately at framatics.us@gmail.com if you think it has been compromised. Where the law requires it, we will notify you of a breach affecting your personal information.

14. How long we keep your information

We keep personal information for as long as we reasonably need it for the purposes in this policy. How long that is depends on the information and why we hold it:

• Marketing contact details: until you unsubscribe or ask us to delete them, and for a short period afterwards to honour the request.
• Order and tax records, once the store trades: for as long as tax, accounting and guarantee obligations require.
• Web logs and analytics: for a limited period, after which they are deleted or de-identified.

Where we no longer need information but deletion is impractical, in backups for example, we isolate it and stop using it.

15. Changes to this policy

We may change this policy. When we do we will update the “Last updated” date at the top and post the new version here.

Where a change is material, the version of this policy in force when you gave us your personal information generally governs that information. In particular, if we ever widen what we sell or share beyond Section 6, we will say so here before doing it.

If you do not agree with a change, stop using the Services and ask us to delete your information.

16. How to contact us

Framatics, Atlanta, Georgia, United States.

For any privacy question, complaint or request, email framatics.us@gmail.com. Put “Privacy Request” in the subject line if you are exercising a right, so it is routed correctly.