Home  /  Privacy
Your data

Privacy policy

Last updated:

PHUMADE INC, trading as STRADA, of 1200 Riverfront Parkway, Suite 210, Chattanooga, TN 37402, is the controller of the personal information described here. Questions go to privacy@stradairon.com.

What we collect

Card details

Card details are entered into a field hosted by our PCI-DSS compliant payment provider and go directly to them. We never receive your full card number, and full card numbers are never stored on our systems or in our logs. The only card data retained against your order is the last four digits, the brand, and the expiry date — enough to identify the payment and issue a refund, and not enough to make a charge.

Why we use it

Who we share it with

Only the parties needed to fulfil your order: our payment provider, our shipping carriers, our email provider, and our accountants. Each is bound to use the data only for that purpose. We may also disclose information where we are legally required to.

We do not sell your personal information, and we never have. We do not share it with advertising networks or data brokers.

How long we keep it

Order records are kept for seven years to meet tax and accounting requirements. Marketing contact details are deleted within 30 days of you unsubscribing. Technical logs are kept for 90 days.

Cookies

We use cookies and local browser storage that are strictly necessary for the site to work — remembering the contents of your bag and any discount code you've applied. We do not run advertising or cross-site tracking cookies, so there is no consent banner to click through.

Your rights

You can ask us for a copy of the information we hold about you, ask us to correct it, ask us to delete it, or object to how we use it. Write to privacy@stradairon.com and we will respond within 30 days. We will not charge you for this and we will not treat you differently for asking.

If you are a California resident, you have specific rights under the CCPA/CPRA, including the right to know, the right to delete, and the right to opt out of sale — the last of which is moot here, since we don't sell data. Exercise them at the same address.

Security

The site is served over HTTPS. Access to order data is limited to staff who need it. Payment card data is handled entirely by our PCI-DSS compliant provider and never reaches our infrastructure.

Children

This site is not directed at children and we do not knowingly collect information from anyone under 16.

Changes

If we change this policy we update the date at the top. Material changes are emailed to subscribers.

Contact

PHUMADE INC · 1200 Riverfront Parkway, Suite 210, Chattanooga, TN 37402 · privacy@stradairon.com · (423) 555-0147