Legal
Privacy Policy
How ManzanoHQ LLC collects, uses, and protects your data.
Last updated: November 2025
1. Introduction
This Privacy Policy explains how ManzanoHQ LLC (“ManzanoHQ”, “we”, “our”, “us”) collects, uses, and protects information across:
- manzanohq.com
- Manzanos PopShop (e-commerce)
- Newsletters and signup forms
- User accounts and profile dashboards
By using our website or services, you agree to the collection and use of information in accordance with this Privacy Policy.
2. Information We Collect
2.1 Information You Provide to Us
We collect information you provide directly, including:
- Email address (newsletter signup, account creation)
- Full name
- Shipping address
- Phone number
- Account profile details
- Profile picture
- Order details and purchase history
Payment information is processed by our payment processor and not stored in full by us (see “Payments” below).
2.2 Payments
Payments for Manzanos PopShop are processed by Stripe. Stripe may collect additional identifiers and billing information required to process the transaction securely.
We do not store your full card number, CVV, or other sensitive payment details on our own servers.
2.3 Uploaded Images
Users may upload a profile picture. You should only upload content that you own or have permission to use and that does not contain sensitive personal information.
2.4 Information Collected Automatically
At this time, ManzanoHQ does not actively use separate analytics, tracking cookies, or third-party marketing pixels on the site. If this changes, we will update this Privacy Policy to describe any additional automatic data collection.
3. How We Use Your Information
We use the information we collect to:
- Create and manage your Manzanos PopShop account
- Process and fulfill orders and deliveries
- Send transactional emails (order confirmations, receipts)
- Send newsletters when you subscribe
- Verify and suggest addresses via Google Maps services
- Respond to support requests and feedback
- Improve and secure our services
- Comply with legal, tax, and regulatory obligations
4. Legal Bases for Processing (GDPR)
If you are located in the European Economic Area (EEA), the United Kingdom, or similar jurisdictions, we process your personal data under the following legal bases:
- Contract: To create and manage your account and to fulfill your orders.
- Consent: For newsletters and certain notifications that you explicitly opt in to.
- Legitimate Interests: To prevent fraud, secure our services, and improve user experience.
- Legal Obligations: To maintain records required for tax, accounting, and regulatory purposes.
6. Children’s Privacy
Manzanos PopShop and related purchasing features are intended for adults (18+). We do not knowingly collect personal information from children under 13.
We plan to implement date-of-birth checks for account creation to help ensure that purchasing experiences remain adult-focused.
7. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Right to access the personal data we hold about you
- Right to correct inaccurate or incomplete data
- Right to request deletion of your data
- Right to restrict or object to certain processing
- Right to data portability (ability to obtain a copy of your data in a structured format, where applicable)
7.1 Account Deletion
You can request deletion of your account. When you delete your account, most profile-level information is removed or anonymized. However, certain order and transaction records may be retained where required for tax, accounting, or fraud-prevention purposes.
8. Data Retention
We retain your information for as long as necessary to:
- Provide services you have requested
- Maintain your account (until you delete it)
- Fulfill legal and tax obligations
- Resolve disputes and enforce agreements
Newsletter data is retained until you unsubscribe, at which point your email address is removed from our active mailing lists.
9. Data Security
We use reasonable technical and organizational measures to protect your data, including:
- Encrypted databases via Supabase
- HTTPS for data transmitted between you and our services
- PCI-DSS compliant payment processing through Stripe
While we strive to protect your personal information, no system can be 100% secure. We cannot guarantee absolute security of data transmitted over the internet.
10. International Transfers
ManzanoHQ LLC is based in the United States, and your information may be processed and stored in the United States or other countries where our service providers operate. By using our services, you consent to the transfer of your information to these locations.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we make changes, we will update the “Last updated” date at the top of this page. Your continued use of our services after any changes means you accept the revised policy.
12. Contact Us
If you have any questions about this Privacy Policy or how we handle your data, you can contact us at:
ManzanoHQ LLC
Email: manzanohq@gmail.com
Website: manzanohq.com