Legal
Privacy Policy
Effective 14 August 2026 · Last updated 14 August 2026
This policy explains what personal information SuiteStatic collects, why we collect it, who we share it with, and the choices and rights you have. SuiteStatic is operated by Suite Static ("we", "us").
Two different relationships. If you signed up for a SuiteStatic account to sell things, we handle your information as described here, and we decide how it is used.
If you bought something from a store that uses SuiteStatic, the merchant decides how your information is used and we process it on their instructions. This policy describes how we handle it, but the store you bought from has its own privacy policy, and requests about your order are usually best directed to them.
1. Information we collect
Information you give us
- Merchant account information: name, email address, business name, password (stored only as a salted hash), and the website domain you register.
- Store configuration: product details, shipping origin address, branding, email templates and similar settings you enter.
- Support correspondence: anything you send us by email.
Information we process for merchants
- Order information: customer name, email address, shipping address, items ordered, product options, order totals and shipping selection.
- Abandoned cart information: email address and cart contents where a shopper entered an email but did not complete checkout.
- Newsletter sign-ups collected through a merchant's store.
Payment information
Card details are entered directly on payment pages hosted by Stripe. We never receive, transmit or store card numbers, expiry dates or security codes. Our systems hold only Stripe identifiers, such as a customer or payment reference, which are meaningless without Stripe's own credentials. Card data is never written to our database.
Information collected automatically
- IP address, browser type, operating system, referring page and pages viewed.
- Aggregate store analytics we provide to merchants, such as visit counts and sales.
- Cookies and browser storage used to keep a shopping cart and to keep you signed in. We do not use third-party advertising or cross-site tracking cookies.
2. How we use information
- To provide the service: create and manage stores, process orders, calculate shipping, buy postage labels and send order email.
- To bill you for plan fees, transaction fees and postage.
- To prevent fraud, abuse and unauthorised access, and to secure the service.
- To provide support and respond to your messages.
- To comply with law, including tax, accounting and record-keeping obligations.
- To send service announcements. We send marketing email only where permitted, and every marketing message includes an unsubscribe link.
3. How we share information
We do not sell personal information. We share it only as described here.
| Who | Why |
|---|---|
| Stripe | Payment processing and card storage |
| EasyPost | Carrier rates, labels and tracking |
| USPS, UPS, FedEx | Delivery of shipments |
| Amazon Web Services (SES) | Sending transactional and marketing email |
| Supabase | Database hosting |
| Render | Application hosting |
| Netlify | Dashboard and static asset hosting |
We also share information:
- With the merchant whose store you ordered from, which is the point of the service.
- When the law requires it, such as a subpoena, court order or lawful government request, or to protect rights and safety.
- In a business transfer, such as a merger, acquisition or sale of assets. We will give notice before your information becomes subject to a different policy.
4. We do not sell or share your personal information
We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined under California law and comparable state laws. We have not done so in the preceding twelve months. We do not knowingly sell or share the personal information of anyone under sixteen.
5. Your privacy rights
Depending on where you live, you may have some or all of the following rights. We honour these requests for residents of every US state, regardless of whether that state has passed a privacy law.
- Know and access. Ask what personal information we hold about you, where it came from, why we collected it and who we disclosed it to.
- Delete. Ask us to delete personal information we hold about you.
- Correct. Ask us to fix personal information that is inaccurate.
- Portability. Receive a copy in a portable, machine-readable format.
- Opt out of sale, of sharing for cross-context behavioural advertising, and of profiling that produces legal or similarly significant effects. We do not carry out any of these activities.
- Limit the use of sensitive personal information. We do not collect sensitive personal information as defined by California law.
- Non-discrimination. We will not deny service, charge a different price or provide a lower quality of service because you exercised a privacy right.
How to make a request
Email eriewebdesigns@gmail.com with the subject line "Privacy Request". We will verify your identity, usually by confirming control of the email address associated with the information, before acting. An authorised agent may submit a request on your behalf with written proof of authorisation.
We respond within 45 days. If we need longer we will tell you within that period and may extend by a further 45 days.
If we refuse
You may appeal by replying to our decision with the word "Appeal". We will respond in writing within 60 days with our decision and the reasons for it. If we deny your appeal, you may complain to your state Attorney General.
Opt-out preference signals
We treat the Global Privacy Control (GPC) as a valid opt-out request where state law requires it. Because we do not sell or share personal information, there is nothing for the signal to switch off, but we honour it as a request either way.
6. How long we keep information
We keep account and order records for as long as your account is active and afterwards for as long as needed to meet tax, accounting, legal and dispute-resolution obligations, which is generally seven years for financial records. Abandoned cart records are kept for a limited period to support recovery email and can be deleted by the merchant at any time. When information is no longer needed we delete it or de-identify it.
7. Security
Traffic to our service is encrypted in transit with TLS. Passwords are stored only as salted hashes. Card data is held by Stripe and never enters our systems. Access to production data is limited to people who need it. Merchant data is separated by tenant so one store cannot read another's.
No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your personal information, we will notify you and the relevant authorities as required by applicable state breach notification laws, without unreasonable delay.
8. Children
SuiteStatic is not directed to children and is not intended for anyone under 13. We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, contact us and we will delete it.
9. Email
Transactional email — order confirmations, shipping notifications, receipts, security and billing notices — is part of the service and is sent whether or not you have opted into marketing.
Marketing email always contains a working unsubscribe link and our postal address, and we honour opt-outs promptly. Our postal address is 358 W 22nd Street, Erie, PA 16502.
10. If you are outside the United States
We operate in the United States and information we hold is processed there. Privacy laws in the United States may differ from those where you live. If you use the service, you understand that your information will be processed in the United States.
11. Changes to this policy
We may update this policy. When we do, we will change the "Last updated" date above, and for material changes we will give notice by email or in the dashboard before the change takes effect.
12. Contact us
Suite Static
358 W 22nd Street, Erie, PA 16502
eriewebdesigns@gmail.com