Privacy policy

1. Who is responsible

BrownGlobal Holdings LLC operates GSN Shop and is responsible for store information. Contact media@gsnmedia.app for store privacy requests, or admin@brownglobal.app for BrownGlobal account or legal questions. GSN ID account settings are managed at accounts.gsnmedia.app.

2. Information we handle

Browsing and security systems receive technical information such as IP address, browser, request timing and errors. Your bag stores product, size, color and quantity on your device. If you choose GSN ID sign-in, we receive identity information authorized in that flow, such as account identifier, verified email and basic profile. Support messages contain information you send.

When ordering opens, processing will require contact, delivery, product, payment-status and fulfillment information. Checkout is currently closed; browsing or adding to a bag does not create a paid order. Payment details are handled by the processor rather than asking you to email full card numbers.

3. Purposes and legal bases

Information provides requested bag and account functions, support, security and store maintenance. Orders require information to perform the purchase contract, deliver products and address refunds. Appropriate records meet tax, accounting and legal obligations. Where legal bases are required, we rely on contract, legal obligations and proportionate legitimate interests for service operation and security, or consent where required. You may object to relevant legitimate-interest processing.

4. Information sharing

Authorized personnel and service providers receive information needed for their roles, including Lovable Cloud and its infrastructure for hosting and store data, Supabase-based services and GSN ID for sign-in, and payment and email services when used. For an order, Printify, the selected print provider and carriers receive details needed to manufacture and deliver it. Payment providers handle payment data under their applicable notices. Print providers do not receive your entire GSN account or unrelated purchase history.

Necessary disclosures may meet legal duties, investigate fraud, protect rights or facilitate a business transfer with appropriate protections and notice. We do not sell personal information or share it for cross-context behavioral advertising. Marketing requiring consent needs a separate choice, not acceptance of sale terms.

5. Browser storage

Necessary browser storage keeps your bag and sign-in working. Clearing it may empty your local bag or sign you out; it does not delete server records. Non-essential tracking requiring consent must not run before that choice. Google Fonts requests for site typography disclose ordinary connection information to Google.

6. Retention, security and transfers

We retain information for account operation, support, fulfillment, fraud prevention and applicable accounting, dispute or legal-retention periods, then delete or de-identify it, subject to lawful holds and backup cycles. Access controls and reasonable safeguards reduce risk but cannot guarantee absolute security. Providers may process data in the United States and other countries; legally required transfer safeguards must be in place where applicable.

7. Your rights

Depending on location, you may request access, correction, deletion, portability or restriction, object to processing or withdraw optional consent. Contact us and identify the store or GSN ID account concerned. We verify requests proportionately without routinely requesting identity documents. Some records must remain for legal duties or an order dispute. You may complain to your local data-protection regulator. Optional marketing can be unsubscribed from separately from essential order messages.

8. Children and policy changes

The store is not directed to children under 13; we do not knowingly collect their information for accounts. A parent or guardian should make purchases for a child. Contact us about a child's information so we can investigate and act appropriately. Material changes are dated with additional notice or consent where required; a revised notice does not authorize an incompatible new use of previously collected data.