Privacy Policy

1. What Information Do We Collect?

Personal information you disclose to us

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, participate in activities on the Services, or contact us.

Personal Information Provided by You. The personal information we collect depends on the context of your interactions with us and may include:

• Names
• Phone numbers
• Email addresses
• Mailing / delivery addresses
• Passwords and login credentials

Sensitive Information. We do not process sensitive personal information.

Payment Data. We may collect data necessary to process your payment if you make purchases, such as your payment instrument number and security code. All payment data is securely handled and processed by our third-party payment processor, Stripe. You may review their privacy notice at stripe.com/privacy.

Application & Device Data. If you use our application(s), we may collect information regarding your device (such as mobile device ID, model, operating system, IP address, and browser type) to provide notifications and support app functionality.

2. How Do We Process Your Information?

We process your personal information for a variety of reasons, depending on how you interact with our Services:

• To facilitate account creation and authentication: Managing your user account and keeping it in working order.
• To deliver and facilitate delivery of services: Providing you with requested box delivery, storage, pickup, and retrieval services.
• To communicate with you: Sending administrative updates, order status notifications, billing receipts, and changes to terms and policies.
• To fulfill and manage your orders: Processing payments, invoices, returns, and box requests through the Services.
• For security and fraud prevention: Protecting our website, app, facility, and users from malicious or unauthorized activity.
• To comply with legal obligations: Responding to legal requests and enforcing applicable terms and laws.

3. When and With Whom Do We Share Your Personal Information?

We may share your personal information in specific situations:

• Third-Party Service Providers: We share data with vendors and service providers who perform services for us (such as payment processing via Stripe, cloud database hosting, and mapping/delivery routing services).
• Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business.
• Legal Requirements: We may disclose information where required by law, subpoena, or to protect the safety, rights, or property of Fort Lox, our users, or others.

4. Do We Use Cookies and Other Tracking Technologies?

We use cookies and similar tracking technologies to deliver security, essential web functions, session persistence, payment fraud prevention, and performance analytics.

• Strictly Necessary: Supabase authentication tokens, Next.js framework session cookies required for core site operation.
• Payment & Security: Stripe (__stripe_mid, __stripe_sid) for fraud prevention and secure transactions.
• Functional Storage: Browser local storage for temporarily remembering items during checkout.
• Analytics: Google Analytics (_ga, _gid) to help us measure and improve website performance.

For more comprehensive details regarding cookies, please review our dedicated Cookie Policy.

5. How Long Do We Keep Your Information?

We keep your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or legal requirements). When we have no ongoing legitimate business need, we will securely delete or anonymize your information.

6. How Do We Keep Your Information Safe?

We have implemented appropriate organizational and technical security measures designed to protect the security of any personal information we process. However, despite our safeguards, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure.

7. Do We Collect Information From Minors?

We do not knowingly solicit data from or market to children under 18 years of age. By using the Services, you represent that you are at least 18 years old.

8. What Are Your Privacy Rights?

Depending on where you are located, you may have rights under applicable data protection laws, including the right to request access to and receive a copy of your personal information, request corrections or erasure, or restrict processing.

To exercise these rights, please email us at fortloxstorage@gmail.com.

9. Controls For Do-Not-Track Features

Most web browsers and mobile operating systems include a Do-Not-Track ("DNT") setting you can activate to signal your privacy preference. No uniform standard for recognizing DNT signals has been finalized, so our Site does not currently alter its practices in response to DNT signals.

10. Do United States Residents Have Specific Privacy Rights?

If you are a resident of California, Virginia, Colorado, Connecticut, Utah, or other states with comprehensive privacy laws, you may have specific statutory rights regarding access, portability, correction, and deletion of your personal data.

11. Do We Make Updates To This Notice?

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Last updated" date and becomes effective upon posting.

12. How Can You Contact Us About This Notice?

If you have questions or comments about this notice, you may email us or write to:

13. How Can You Review, Update, or Delete Your Data?

To request to review, update, or delete your personal information, please submit a request by contacting us at fortloxstorage@gmail.com.