Privacy Policy

Who We Are

Umbrella Merch Store is operated by Allied Medias (JFA Realty, Title Union LLC, and Great Florida Lending Inc). This policy explains how we collect, use, and protect your personal data when you shop with us.

For data-related questions, contact us at privacy@umbrellacompanies.com.

Data We Collect

• Contact information: name and email address
• Shipping address: street, city, state, postal code, country
• Payment data: processed and stored by Stripe — we never see or store raw card details
• Order history: items purchased, quantities, prices, Stripe payment intent IDs
• Cart contents: stored locally in your browser only (not on our servers) until checkout
• Account credentials: email and hashed password if you create an account (via Supabase Auth)

Why We Use Your Data

• To process and fulfill your order (legal basis: contract performance)
• To communicate order status and shipping updates (contract performance)
• To process payments securely via Stripe (contract performance)
• To comply with legal obligations such as tax records (legal obligation)
• To improve the store and resolve disputes (legitimate interest)

Third Parties We Share Data With

• Stripe — payment processing. Your billing details and payment method are transmitted directly to Stripe under their Privacy Policy.
• Supabase — database and authentication hosting. Data is stored on Supabase-managed servers. See their Privacy Policy.
• Printful — print-on-demand fulfillment. Your name and shipping address are passed to Printful to produce and ship your order.
• Google Fonts— typography. Fonts are loaded from Google servers, which may log your IP address per Google's Privacy Policy.

We do not sell your data to any third party.

Data Retention

• Order records are retained for 7 years to satisfy tax and accounting requirements.
• Account data is retained until you request deletion.
• Cart data in your browser has no expiration — you can clear it at any time via your browser settings.

Your Rights (GDPR)

If you are in the European Economic Area, you have the right to:

• Access — request a copy of all data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — request deletion of your personal data (subject to legal retention requirements)
• Restriction — ask us to limit how we process your data
• Portability — receive your data in a machine-readable format
• Objection — object to processing based on legitimate interest

To exercise any right, email privacy@umbrellacompanies.com or use the Contact page. Authenticated users can also use the account dashboard to export or delete their data directly.

Cookies & Local Storage

See our full Cookie Policy for details on what is stored in your browser.

Changes to This Policy

We may update this policy. Material changes will be announced on this page with a revised "Last updated" date. Continued use of the store after changes constitutes acceptance.