NAF's Privacy Policy
1. What We Collect (And Why)
We collect information to make the shop work. This includes:
- Identifiers: Your name, email, and physical address so we can ship your gear.
- Payment Info: Handled entirely by Stripe. We see the last four digits of your card; we don’t see your CVV or full numbers.
- Device Data: Your IP address and browser type, mostly so we can see which of our jokes are landing and which ones aren’t via analytics.
2. How We Use Your Data
We use your info for the following “Legal Bases” under 2026 Data Laws:
- Contractual Necessity: To fulfill the order you just placed.
- Legal Obligations: To make sure you aren’t on a government sanctions list (seriously, that’s a thing).
- Legitimate Interests: To improve the site and prevent people from committing fraud against us.
3. Sharing Your Data
We don’t sell your data for a quick buck. We share it with these specific “Service Providers” only to run the business:
- Printful: They get your name and address so they can actually print and ship your items.
- Stripe: They handle the money. They are the “Controller” of your credit card data.
- Analytics: We use basic tracking to see how people find us.
4. Your Rights (The Legal Rights Section)
Depending on where you live (California, EU, UK, etc.), you have the following rights:
- Right to Know/Access: You can ask us what we have on you.
- Right to Delete: You can ask us to wipe your data (unless we need it for tax or fraud records).
- Right to Opt-Out: You can tell us to stop tracking your “commercial preferences.”
5. California, EU, & UK Residents
We comply with the CCPA/CPRA and GDPR. We are the “Controller” of your account info, and Printful is our “Processor.” If you want to exercise your rights, email us. If you’re in Europe, you have the right to complain to your local data authority, but we’d prefer you talk to us first.
6. Retention & Security
We keep your data as long as your account exists or as long as the tax man says we have to (usually 7 years for financial records). We use “Reasonable Organizational Measures” to keep your data safe, but remember: the internet is a wild place. Set a strong password.
7. Contact Us
If you have questions or want your data deleted, email us at: info@iamnotafan.com. We’ll get back to you within 30 days (standard legal window), because we have lives too.