PRIVACY POLICY

Introduction

10 Fathoms Deep ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website or make a purchase. This policy is designed to comply with applicable laws, including the Nevada Revised Statutes Chapter 603A (NRS 603A), which governs the security and privacy of personal information collected online from Nevada residents, as well as the General Data Protection Regulation (GDPR) for users in the European Union, and other relevant data protection laws. If you are in the EU, we process your data based on legal bases such as consent, contract performance, or legitimate interests.

Legal Basis for Processing

We process personal data under the following legal bases:

Consent: Where you have given clear consent for specific purposes (e.g., marketing emails).
Contract Necessity: To fulfill orders and provide services.
Legitimate Interests: For fraud prevention, website analytics, and improving our services, provided these do not override your rights.
Legal Obligation: To comply with laws or respond to authorities.

Information We Collect

We may collect the following types of information, which may include "covered information" as defined under NRS 603A (e.g., first and last name, physical address, email address, telephone number, or other identifiers that allow contact), as well as personal data under GDPR:

Personal Information: Name, email address, billing/shipping address, and payment information provided during purchases or account creation.
Non-Personal Information: Browsing data, such as IP address, browser type, and pages visited, collected via cookies or similar technologies.
User-Provided Content: Information you provide in forms, reviews, or communications with us.

How We Use Your Information

We use your information to:

Process and fulfill orders, including shipping and payment processing.
Communicate with you about your orders, promotions, or customer service inquiries.
Improve our website and services through analytics and user feedback.
Comply with legal obligations or protect our legal rights.
For marketing and advertising, including via third-party tools like Facebook/Meta for targeted ads (where consented).

Sharing Your Information

We may share your information with:

Service Providers: Third parties that assist with payment processing, shipping, or website analytics. For example:
- Stripe for payment processing. We use Stripe for payments, analytics, and other business services. Stripe may collect personal data, including via cookies and similar technologies, such as transactional data and device identifying information. Stripe uses this to operate and improve its services, including for fraud detection, loss prevention, authentication, and analytics. You can learn more about Stripe and read its privacy policy at https://stripe.com/privacy.
- USPS for order fulfillment via Ground or Flat Rate shipping.
- IONOS for website hosting, ensuring compliance with their data protection standards.
- Facebook/Meta for advertising, integrations, or social features (e.g., Facebook Pixel for tracking conversions and retargeting). We may share data like email addresses or browsing behavior for personalized ads. For details on Meta's data handling, see https://www.facebook.com/privacy/policy/.
Legal Authorities: When required by law or to protect our rights, safety, or property. We do not sell your personal information to third parties for monetary consideration, as defined under NRS 603A or CCPA. However, if we were to engage in such sales in the future, we would provide notice and an opt-out mechanism in compliance with applicable laws (e.g., GDPR, CCPA, NRS 603A). Data may be transferred to third countries (e.g., the US), where data protection laws may differ; we ensure appropriate safeguards like standard contractual clauses.

Opt-Out Rights (Nevada Residents and Others)

Under NRS 603A, Nevada residents have the right to opt out of the sale of their covered information. Since we do not currently sell covered information, no opt-out is necessary. If our practices change, we will update this policy and provide a designated method (e.g., email or online form) for submitting verified opt-out requests. For questions, contact us at ian.adams@10fathomsdeep.com.
EU residents under GDPR may withdraw consent or object to processing at any time.

Cookies and Tracking

We use cookies to enhance your browsing experience, analyze site traffic, and personalize content. This may include third-party cookies from providers like Facebook/Meta for advertising. You can manage cookie preferences through your browser settings or our cookie banner.

Data Security

We implement reasonable security measures to protect your information, such as encryption for payment processing, in compliance with NRS 603A's requirements for data collectors, PCI DSS for payments via Stripe, and GDPR standards. However, no online system is completely secure, and we cannot guarantee absolute security.

Data Retention

We retain personal data only as long as necessary for the purposes outlined (e.g., order fulfillment, legal compliance). We do not sell data and only keep invoice records as required for accounting, tax, and legal purposes, typically up to 7 years. Other data, such as browsing information, is anonymized and deleted after a short period (e.g., 30 days).

Your Rights

Depending on your location, you may have the right to:

Access, correct, or delete your personal information.
Opt out of marketing communications or data sales/sharing.
Request information about how your data is used or shared.
Under GDPR: Rectification, erasure (right to be forgotten), restriction of processing, data portability, object to processing, and lodge a complaint with a supervisory authority. To exercise these rights, contact us at ian.adams@10fathomsdeep.com. We may require verification of your identity.

Third-Party Links

Our website may contain links to third-party websites, including IONOS, Stripe, or Facebook. We are not responsible for the privacy practices or content of these sites. Please review their policies.

Children's Privacy

Our services are not intended for individuals under 16. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated effective date. We encourage you to review this policy regularly.

Contact Us

For questions about this Privacy Policy, please contact:
Email: ian.adams@10fathomsdeep.com

Effective Date: August 9, 2025