Privacy Policy

Why we collect data

Gila Labs. collects order data to fulfill orders and protect the store from fraud and abuse. This includes the products you choose, the shipping address, and any instructions you share so that your order can be prepared and delivered. No account is required to place an order.

How your data is used

Order information powers order confirmations, tracking updates, fulfillment, and fraud and abuse prevention. Your email address is used for promotional or restock emails only if you explicitly opted in at checkout. Order information is never repurposed for advertising or resale.

How your details are protected

Your name and shipping address are encrypted the moment your order is received, using a key our servers do not hold.

Your email address is protected differently, it is encrypted at rest, but with a key our server does hold, because the server needs to be able to email you about your order. Treat your address as unreadable to us in bulk; treat your email as readable when we need it.

To deliver your parcel, the person preparing it sees your decrypted address and gives it to the shipping carrier. No one else receives it.

Strict access policy controls

All data is protected by strict access policy controls. Internal staff and systems must pass authentication, logging, and need-to-know reviews before viewing order data, and every access is monitored for compliance.

No data sales

No data is sold. Your order history, contact information, and fulfillment details are never monetized or shared with advertisers or brokers. Payments are processed through our self-hosted BTCPay Server, which never receives your name or shipping address.

Retention & removal

Your name, address, and email are erased automatically once they are no longer needed. That happens after your order ships and its support window has passed, and in every case no later than a fixed maximum age, so an order that is abandoned, never paid, or never shipped does not keep your details indefinitely either. Order totals and item lists are retained for bookkeeping; those identify nobody on their own.

Erasure applies to our live records. A copy of your details may persist briefly in encrypted backups until those backups age out, so the effective period is somewhat longer than the live retention window.

If you ticked the box to receive restock and promotional emails, your email address is stored separately from your order for that purpose, along with the date you gave consent. It is kept until you ask us to remove it. Note that automated unsubscribe links are not live yet, until they are, contact us and we will remove you.