Privacy Policy

This Privacy Policy explains what personal information City.Supply collects, how we use it, and the choices you have. It applies to visitors and customers of the Site.

Information we collect

• Account information — name, email address, and password when you register.
• Order information — items purchased, shipping address, and billing details processed by our payment provider.
• Communications — messages you send us and newsletter signups.
• Usage data — pages viewed, actions taken, device type, and IP address, collected via cookies and similar technologies.

How we use it

• To process orders, arrange shipping, and provide customer support.
• To send order confirmations, shipping updates, and — if you opt in — marketing emails.
• To detect fraud and secure our services.
• To improve the Site through analytics.

Sharing

We share data only with service providers who help us run the store, including:

• Stripe — payments processing.
• Supabase — database, authentication, and file storage.
• Resend — transactional and marketing email delivery.
• Shipping carriers — to deliver your order.

We do not sell your personal information. We may disclose information when required by law or to protect our rights.

Cookies

We use essential cookies to keep you signed in and remember your cart, and optional analytics cookies to understand how the Site is used. You can manage consent through the banner shown on your first visit.

Data retention

We keep account and order records as long as your account is active or as needed to comply with tax, accounting, and legal obligations.

Your rights

Depending on your location (including under GDPR and CCPA), you may have the right to access, correct, delete, or export your personal data, and to opt out of certain uses. To exercise any of these rights, contact us via the contact page.

Security

We protect data in transit with TLS and follow reasonable safeguards. No method of transmission over the internet is 100% secure — please use a strong, unique password.

Children

The Site is not directed to children under 13, and we do not knowingly collect data from them.

International transfers

Your information may be processed in countries other than your own. We rely on appropriate safeguards where required.

Changes

We may update this policy from time to time. The "last updated" date at the top reflects the most recent revision.