Privacy policy

Last updated 4 September 2026. This policy explains what personal information
Guardian Way LLC collects when you use guardianway.store, why we collect it, how long we keep it, who we
share it with and what you can ask us to do about it.

1. Who is responsible for your information

Guardian Way LLC, 4595 S Cinder Cove Ave, Meridian, ID 83642, United States, is
responsible for the personal information described here. You can reach us about anything in this policy
at legal@guardianway.store.

2. What we collect, and why

Information you give us

When you place an order we collect your name, delivery address, billing address, email address and
telephone number. We need these to take the order, deliver it, and contact you if something about it
changes. When you contact us we keep the message and our reply so we have the history if you write
again. If you create an account we store the email address and a hashed password — never the
password itself.

Payment information

Card details are entered into our payment processor and are handled by them. We do not receive or
store your full card number, expiry date or security code. What we do receive back is a confirmation of
the outcome, the last four digits, the card type and the billing postcode, which is what lets us match a
payment to an order and answer a query about it.

Information collected automatically

Like most websites we log the IP address, browser type and pages requested. We use that for security,
for diagnosing faults and for understanding which pages are actually read. We use a small number of
cookies: one to keep your shopping cart between pages, one to keep you signed in if you have an account,
and one to remember whether you have dismissed the cookie notice. These are necessary for the site to
work. If we later add analytics or advertising cookies, we will ask first.

3. Our lawful basis for using it

We process order and delivery information because it is necessary to perform the contract you entered
into when you bought something. We process security logs and fraud checks because we have a legitimate
interest in protecting the site and preventing fraudulent transactions. We keep transaction records
because tax and accounting law requires it. Where we rely on consent — for a marketing email, for
example — you can withdraw it at any time.

4. Who we share it with

We share the minimum necessary, and only with organisations that need it to do a job for us:

• our payment processor, to take and reconcile payment and to handle any chargeback;
• the carrier delivering your parcel, which receives your name, address and phone number;
• our web host and email provider, which store the data on our behalf;
• our accountant, for transaction records;
• a professional adviser or a public authority, where we are legally required to disclose.

We do not sell your personal information, and we do not share it with anyone for their own
marketing. If our business were ever sold or merged, customer records could transfer to the
buyer, who would be bound by this policy until they told you otherwise.

5. How long we keep it

Order and transaction records are kept for seven years, which is the period our tax obligations
require. Correspondence is kept for three years so we can pick up an old thread. Account records are
kept until you ask us to close the account. Server logs are kept for ninety days. Marketing consent
records are kept for as long as the consent stands, plus two years so we can show when it was given and
withdrawn.

6. How we protect it

The site is served over HTTPS. Access to order data is limited to the people who need it, protected
by individual accounts and multi-factor authentication. Passwords are stored hashed. We keep the
platform and its components patched. No system is perfect, and we will not claim otherwise: if a breach
affects your information we will tell you and the relevant authority as the law requires, and we will
tell you what we know rather than the least we can get away with.

7. Your rights

You can ask us to give you a copy of the information we hold about you, to correct it if it is wrong,
to delete it where we are not required to keep it, to restrict what we do with it while a dispute is
resolved, or to provide it in a portable format. You can object to processing we carry out on the basis
of legitimate interest. You can withdraw consent to marketing at any time, either by the unsubscribe
link or by writing to us. We will respond within thirty days and we will not charge you.

If you are a California resident, you have the right to know what personal information is collected,
to request deletion, to correct inaccurate information, and not to be discriminated against for
exercising those rights. We do not sell or share personal information as those terms are defined under
California law, and we do not process sensitive personal information for inferring characteristics.

8. Children

This site is not directed at children and we do not knowingly collect information from anyone under
16. If you believe a child has given us information, write to us and we will delete it.

9. International transfers

We operate in the United States and our service providers store data in the United States. If you
order from outside the country, your information will be transferred here.

10. Changes to this policy

If we change this policy, the date at the top changes with it. If a change materially affects how we
use information we already hold, we will tell account holders by email rather than rely on you noticing.

11. How to contact us or complain

Write to legal@guardianway.store or to Guardian Way LLC,
4595 S Cinder Cove Ave, Meridian, ID 83642. We would rather hear from you directly
and fix it. You also have the right to complain to your state attorney general or the Federal Trade
Commission.