Privacy
Short version: we collect what is needed to send you a box and answer you afterwards. We never see your card, because there is no card.
Version of 25 August 2026. Draft for review — not yet reviewed by counsel.
What we collect
Only what an order needs:
- Your name and shipping address, so the box arrives.
- Your WhatsApp number, because that is where the order, the certificate and the tracking live.
- The order itself: what you bought, the lot you received, the amount and the date.
- Your email, only if you give it to us to receive the certificate that way.
We never receive, store or process card numbers, bank credentials or verification codes. Payment happens between your bank and ours through Zelle or ACH, and the only thing that reaches us is the confirmation that it cleared.
What stays in your browser
This site keeps two things on your own device, and neither of them travels to us:
- Your cart, so it survives a reload and a closed tab.
- Your language choice, English or Spanish, so you do not pick it again on every page.
They are stored in your browser's local storage. Clearing your browser data removes both. There are no advertising cookies and no third-party trackers on this site.
Why we collect it
To fulfil the order, to send you the certificate for your lot, to answer you afterwards, and to keep the sales records that tax and accounting rules require. Nothing else.
We do not build profiles, we do not score you, and we do not use your order history to decide what you get shown.
Who else sees it
- The carrier, which needs your name and address to deliver, and nothing else.
- WhatsApp, because the conversation happens on their platform under their own terms.
- Our bank, for the payment itself.
- A public authority, if a valid legal order requires it.
We do not sell, rent or trade your data with anyone, for any purpose, ever. There is no version of this business where that is a revenue line.
How long we keep it
Order records, including which lot went to which order, are kept for seven years, because that is what accounting and traceability require. If a lot ever has a problem, that record is how we find everyone who received it.
Conversations stay on WhatsApp for as long as the thread exists on both sides. Deleting your side does not delete ours, and vice versa.
Your rights
Write to the same WhatsApp number and you can ask us to:
- Tell you exactly what we hold about you.
- Correct anything that is wrong.
- Delete what we are not legally required to keep.
- Send you a copy of your own order history.
We answer within 30 days. If we cannot delete something, we tell you which rule is holding it and for how long.
Security, honestly stated
The site is served over HTTPS, order records sit behind authentication, and the number of people who can read them is small. That is a reasonable posture for a business this size, and it is not a guarantee. No one can honestly promise a breach is impossible; anyone who does is selling something.
If one ever happens and it affects you, you will hear it from us, in plain language, with what we know and what we do not.
Contact and changes
Privacy questions go to the WhatsApp number published on this site. If this policy changes, the date at the top of the page changes with it.
A person reads that thread. Nothing here is meant to be a wall.
Start with the certificate, not the price
Open any product, read its COA, then decide. That is the order we would want if we were buying.