1. Who this covers
This policy explains how Jurassic Tarantulas ("we", "us", "our") handles personal information collected through this website. It applies to this site and to orders and enquiries placed through it. It does not apply to other companies' sites we link to, or to anything you do on a third party's own platform.
Using this site or ordering from us means you accept this policy. It sits alongside our Terms & Conditions.
2. What we collect
Information you give us directly. When you order or contact us:
- Your name, email address and phone number.
- Your delivery address, and the ZIP code you enter for a shipping quote.
- What you ordered, and your order and enquiry history with us.
- Anything you choose to put in a message to us — including the experience level and species-interest fields on the enquiry form.
Information collected automatically. When you load a page:
- Standard server logs kept by our hosting provider — IP address, browser type, the page requested, and the time. These are ordinary security and reliability logs, not a profile of you.
- Your cart, which is stored in your own browser and never sent to us until you check out. See section 5.
What we do not collect. We do not ask for and do not want your date of birth, government ID, social security number, or any health or biometric information. We never receive your card number — see section 4.
3. How we use it
We use your information only to run the shop:
- To take, confirm, pack and ship your order.
- To quote shipping to your destination.
- To email you an order confirmation and a tracking number when it ships.
- To answer your questions and handle a live-arrival claim.
- To keep records we are required to keep for tax and accounting.
- To detect and prevent fraud and abuse of the site.
We do not sell your personal information, we do not share it for cross-context behavioural advertising, and we do not add you to a marketing list because you bought something. If we ever start a newsletter it will be opt-in, and unsubscribing will be one click.
4. Payment information
Checkout is handled by Stripe on its own secure pages. Your card number, expiry and security code go to Stripe, never to us — we cannot see or store them. What we receive back is the information we need to fulfil the order: that payment succeeded, the amount, and the billing and shipping details you supplied.
Stripe handles your payment data under its own privacy policy and PCI DSS obligations.
5. Cookies and local storage
This site sets no advertising or tracking cookies. There are no ad pixels, no cross-site trackers, no analytics scripts, and no third-party marketing scripts.
We use browser storage for two things, both on your own device. Your shopping cart is saved in local storage so it survives a page refresh — it holds only item IDs, quantities and timestamps, no name, no address, no payment data. We also remember whether you dismissed the announcement banner at the top of the page. Neither leaves your device, and clearing your browser data deletes both. Prices and names are re-fetched live at every page load, so a stale price is never shown.
Our hosting and payment providers may set their own strictly necessary cookies for security, load balancing and fraud prevention.
6. Who we share it with
We share your information only with the service providers who make an order possible, and only with the part each one needs:
- Stripe — to take payment and handle refunds and disputes.
- Google Firebase, our hosting and database provider — to run the site and store orders.
- The shipping carrier — your name, address and phone, to deliver the package.
- Formspree, our contact-form provider, and Resend, our email provider — to deliver what you send us and what we send you.
We may also disclose information where we are legally required to:
- In response to a valid subpoena, court order or lawful request.
- To establish or defend a legal claim, or to investigate fraud.
- To a buyer, if the business is ever sold or merged — in which case this policy continues to apply to information collected before the transfer.
7. How long we keep it
Order records are kept as long as tax and accounting law requires — generally seven years. Enquiries that never became an order are kept while they are useful to answer you and are cleared out periodically afterwards. Server logs are kept on our provider's own short retention schedule.
When we no longer need something, we delete it or strip it of anything that identifies you.
8. How we protect it
The site is served over HTTPS. Order data lives in a hosted database with access rules that deny public reads and writes; the owner area is restricted to a single authenticated account. Payment credentials never reach our systems at all.
No system is perfectly secure, and we cannot guarantee absolute security. If a breach ever affects your personal information, we will notify you and the appropriate authorities as the law requires.
9. Your choices and rights
Wherever you live, you can ask us to:
- Tell you what we hold about you, and give you a copy.
- Correct anything that is wrong or out of date.
- Delete it — except where we are required to keep an order record for tax or legal reasons.
- Stop contacting you, other than about an order already in progress.
Email the address in section 15. We will respond within 30 days, and we will not treat you differently for asking. We may need to confirm who you are first, so that we do not hand your information to somebody else.
10. California residents
If you live in California, the CCPA/CPRA gives you the rights above plus the right to know the categories of information we collect and who we disclose them to — both set out in sections 2 and 6 — and the right not to be discriminated against for exercising them.
We do not sell or share personal information as those terms are defined by the CCPA, and we have not done so in the preceding twelve months. We do not knowingly collect the personal information of anyone under 16. Because we do not sell or share, there is no "Do Not Sell or Share My Personal Information" link to offer — but you are welcome to email us to confirm that.
11. Children's privacy
This site is not directed at children, and we do not knowingly collect personal information from anyone under 13. As set out in our Terms, ordering requires you to be 18 or to have a parent or guardian acting for you. If you believe a child has given us personal information, email us and we will delete it.
12. Do Not Track
Browsers can send a "Do Not Track" signal, and there is no agreed standard for responding to it. We do not track you across other websites in the first place, so there is nothing for the signal to switch off.
13. Links to other sites
This site links to other places — our payment processor, and care resources. Once you follow a link you are on somebody else's site, governed by their privacy policy. We are not responsible for their practices, and a link is not an endorsement.
14. Changes to this policy
We may update this policy. The effective date at the top always tells you which version is current. If a change materially affects how we use information we have already collected from you, we will make that clear rather than quietly swapping the page.
15. How to reach us
For a copy of your information, a correction, a deletion request, or any question about this policy:
Jurassic Tarantulas
jurassictarantulas@gmail.com
You can also use our contact form, though email is better for anything involving your personal data.