Privacy Policy

Who we are (controller). The Illustrated Bartender LLC, a Wyoming single-member limited liability company ('TIB', 'we'), is the data controller for personal data processed via theillustratedbartender.com. Contact: see the Legal Notice page (registered-agent mailing address; email contact preferred).

What we collect. (a) Email list: your email address, optional first name, consent state and timestamp, signup source and context, and UTM campaign parameters. (b) Orders: order and shipping details are collected and processed by Shopify (our checkout provider) and shared with our fulfillment partner (Printful) to produce and deliver your order; payments are processed by Stripe/Shopify Payments — we never receive or store card numbers. (c) Analytics and device data: usage events, approximate location, and device information via Google Analytics 4 and (if enabled) Meta Pixel — only after you consent. (d) Cookies and similar technologies, as described below. We do not knowingly collect any other personal data, and the founder unlock page stores no personal data.

Why we process it (legal bases). Marketing emails: your consent (double opt-in — you confirm by email before you are subscribed), withdrawable at any time. Orders and delivery: performance of a contract. Analytics and measurement: your consent (EU/UK) and/or our legitimate interest in understanding and improving the Site, always subject to your cookie choices. Security, fraud prevention, and legal compliance: legitimate interests and legal obligations.

Cookies and consent. Non-essential tags (analytics, advertising) are blocked until you consent, using Google Consent Mode v2 and a consent banner (CookieYes, geo-aware, once configured). You can change or withdraw your cookie choices at any time via the consent banner/settings. Essential functionality (like remembering your consent choice) uses strictly necessary storage.

Who we share data with (processors and partners). EmailOctopus (email list hosting, UK/EU), Shopify (checkout and order management), Stripe / Shopify Payments (payments), Printful (print-on-demand fulfillment — receives your name and shipping address to deliver your order), Cloudflare (hosting, security, bot protection), Google (Analytics), and Meta (Pixel, only if enabled and consented). Each acts under its own terms and data-processing agreements. We do not sell your personal information, and we do not share it for cross-context behavioral advertising without your consent.

International transfers. We are US-based; some providers process data in the US, EU, or UK. Where data moves across borders from the EU/UK, we rely on appropriate safeguards such as the EU–US Data Privacy Framework and/or Standard Contractual Clauses as implemented by our providers.

Retention. List data is kept while you are subscribed and for a short period after unsubscribe (suppression records are kept so we never email you again). Unsubscribes are permanent and timestamped. Order data is retained by Shopify/Stripe per their terms and by us as needed for tax, accounting, and legal obligations. Analytics data is retained per the configured GA4 retention period.

Your rights (EU/UK — GDPR and UK GDPR). You have the right to access, rectify, and erase your data; to restrict or object to processing; to data portability; and to withdraw consent at any time (without affecting prior processing). To exercise them, contact us via the Legal Notice details or reply to any of our emails. You also have the right to complain to your local supervisory authority.

Your rights (US states — CCPA/CPRA and similar). Depending on your state, you may have rights to know/access, delete, correct, and opt out of 'sale' or 'sharing' of personal information, and to non-discrimination for exercising them. We do not sell your personal information. To exercise these rights, contact us via the Legal Notice details.

Marketing emails. We use double opt-in: you are only subscribed after you click the confirmation link we email you. Every marketing email we ever send will include a working one-click unsubscribe link and our postal address. We will not send marketing email until the unsubscribe mechanism is verified live. Unsubscribing is immediate and permanent.

Children. The Site discusses alcohol culture and is not directed to children or to anyone under the legal drinking age in their jurisdiction. We do not knowingly collect data from minors; if you believe a minor has provided data, contact us and we will delete it.

Security. The Site is served over HTTPS with strict security headers; list signups are processed server-side; secrets are stored in server-side environment variables; payment card data never touches our systems. No method is 100% secure, but we design so the sensitive parts are handled by specialists (Stripe, Shopify, Cloudflare).

Changes. We will post any changes here with a new effective date; material changes to how we use your data for marketing will be consented, not assumed.

Effective date: [set at go-live].