Privacy policy

Effective August 14, 2026

This Privacy Policy explains how Punchplate, operated by CODL Storage Solutions LLC ("Punchplate," "we," "us," or "our"), collects, uses, discloses, and retains personal information when you visit punchplate.com, purchase a product, create an account, contact us, or exercise a privacy choice.

Information we collect

  • Contact and account information: email address, name, phone number if provided, account settings, and marketing preferences.
  • Order and delivery information: purchased items, order number, billing and shipping details, payment status, delivery method, tracking information, returns, refunds, and support history.
  • Payment information: payment and wallet providers process payment credentials. Punchplate does not store a complete payment-card number or security code in systems we control.
  • Device and usage information: IP address, browser and device information, pages viewed, interactions, cookie or similar identifiers, referral information, and security logs.
  • Advertising measurement information: ad-click identifiers, page and conversion events, transaction values, and, where enabled and permitted, contact identifiers used to measure advertising performance.
  • Information you send us: messages and files submitted for customer support or a privacy request.

Never send us wallet recovery words, passphrases, word-list numbers, shares, private keys, or photographs of a marked plate. Punchplate products are designed so that we do not need this material to fulfill an order or provide support.

How we use information

We use personal information to operate the storefront and customer accounts; process payment; fulfill, deliver, support, return, and refund orders; prevent fraud and protect our systems; communicate about an order, product-safety issue, warranty, or recall; maintain tax and business records; comply with law; improve the store; and, with any consent required by law, send marketing or measure advertising performance.

We do not use an email retained solely for an essential transaction, warranty, security, or product-safety purpose for marketing unless the customer has separately agreed to marketing.

When we disclose information

We disclose only the information reasonably needed to service providers that help us operate. These include Shopify, which hosts our commerce platform and customer accounts; payment processors and digital-wallet providers; shipping carriers and fulfillment services; email and customer-support services; security and fraud-prevention services; and professional advisers. These providers may process information under their own legal obligations and privacy notices.

We use OpenAI advertising measurement services to understand whether an ad contributed to actions such as starting checkout or completing an order. Where enabled and permitted, the measurement integration may receive ad-click identifiers, conversion-event and transaction details, device information, and contact identifiers. Advertising or analytics technologies are subject to applicable consent and opt-out controls.

We may also disclose information when required by law, to respond to lawful process, to protect customers or our rights, to investigate fraud or security incidents, or as part of a business transaction subject to appropriate safeguards. We do not sell customer recovery material, because we do not ask customers to provide it.

Cookies, advertising, and privacy signals

Our storefront and service providers use cookies or similar technologies for essential store functions, security, preferences, analytics, and advertising measurement. Available choices depend on location and device. Use the privacy or cookie controls shown on the storefront to change non-essential tracking choices. Where legally required, we honor recognized opt-out signals such as Global Privacy Control for covered processing.

Your choices

  • Account edits: sign in at account.punchplate.com to change your profile name, email, or saved delivery details.
  • Profile minimization: visit the Punchplate Privacy Center, then open your signed-in Profile to change the saved profile name to "Current Resident" and remove saved delivery addresses while keeping the login email.
  • Marketing: use the unsubscribe link in a marketing email. Transactional, warranty, security, or product-safety messages are not marketing messages.
  • Access, correction, portability, or erasure: sign in to your Punchplate Profile to use the available privacy controls. If you cannot sign in or need another type of privacy request, use our contact page or email hello@punchplate.com with the subject "Privacy request." We may need to verify the request.

Profile minimization is not complete erasure. A complete erasure request generally removes the account email as well as name, phone, and address information. Certain information may be retained when needed to finish a transaction, meet tax or legal obligations, prevent fraud, resolve disputes, protect security, or administer a warranty or product recall. If an exception applies, retained information is limited to that purpose and is not used for unrelated marketing.

Information held by services with which you have a separate relationship, such as a payment wallet or accelerated-checkout account, may require a separate request to that provider.

Retention

We retain personal information only for as long as reasonably necessary for the purpose collected, including order fulfillment, customer support, security, fraud prevention, tax and accounting duties, disputes, warranties, product-safety notices, and other legal obligations. Retention periods vary by record type and applicable law. We flag customer profiles for staff review when their most recent order becomes 90 days old, but that reminder does not override a required retention period. When information is no longer needed, we delete, redact, aggregate, or otherwise dispose of it securely.

Security

We use administrative, technical, and physical safeguards appropriate to the nature of the information. No method of transmission or storage is completely secure. You can reduce exposure by avoiding unnecessary personal information and never sending secret recovery material.

Children

Punchplate is not directed to children, and we do not knowingly collect personal information from children in violation of applicable law.

International processing

Our service providers may process information in countries other than the one where you live. Where required, they use legal mechanisms intended to protect transferred personal information.

Changes to this policy

We may update this policy to reflect changes to our practices, services, or legal obligations. The effective date at the top identifies the latest revision.

Contact

For privacy questions or requests, use our contact page or email hello@punchplate.com with the subject "Privacy request."