Privacy Policy

1. Information We Collect

Information You Provide Directly

When you place an order, create an account, or contact us, we may collect:

• Full name and contact information (email address, phone number)
• Delivery and pickup addresses
• Order details and rental preferences
• Messages or inquiries you send us

We do not store payment card numbers. All payment processing is handled securely by Stripe (see Section 3).

Information Collected Automatically

When you visit our website, we automatically collect certain information including:

• IP address and approximate location
• Browser type and version
• Pages visited and time spent on each page
• Referring website or search query
• Device type and operating system

This information is collected via cookies and similar tracking technologies, including Google Analytics (see Section 4).

2. How We Use Your Information

We use the information we collect to:

• Process and fulfill your tote rental orders
• Schedule delivery and pickup of totes
• Send order confirmations, receipts, and rental reminders via email
• Respond to your questions and support requests
• Improve our website, services, and customer experience
• Analyze website traffic and usage patterns
• Comply with legal obligations
• Send marketing communications (only with your consent; you may opt out at any time)

3. Payment Processing (Stripe)

All payments on FlashTotes are processed by Stripe, Inc., a third-party payment processor. When you provide payment information, it is transmitted directly to Stripe using industry-standard TLS encryption. FlashTotes never sees or stores your full credit card number, CVV, or other sensitive payment data.

Stripe may collect and use your payment information in accordance with their own Privacy Policy, available at stripe.com/privacy. Stripe is certified as a PCI DSS Level 1 Service Provider.

4. Cookies and Google Analytics

We use Google Analytics to understand how visitors interact with our website. Google Analytics uses cookies — small text files stored on your device — to collect information such as page views, session duration, and traffic sources. This data is aggregated and anonymized; it does not personally identify you.

You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on. You can also control cookies through your browser settings.

We may also use essential cookies necessary for our website to function properly (e.g., session management). These cannot be disabled without affecting site functionality.

5. Email Communications (Resend)

We use Resend to send transactional emails, including order confirmations, rental reminders, and pickup notifications. When we send you an email, Resend may collect certain data (such as whether you opened the email) to help us improve our communications. We do not share your email address with Resend for any purpose other than delivering these messages.

6. How We Share Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information with:

• Service providers who assist us in operating our business (payment processors, email providers, analytics), bound by confidentiality agreements
• Local delivery partners who need your address to deliver and pick up totes
• Law enforcement or government agencies when required by law or to protect our legal rights
• Successors in the event of a merger, acquisition, or sale of assets (you will be notified in advance)

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, including providing services, maintaining business records, and complying with legal obligations. Order records are typically retained for seven (7) years. You may request deletion of your account and associated data at any time (subject to legal retention requirements).

8. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to certain exceptions)
• Opt-out of marketing: Unsubscribe from marketing emails at any time using the unsubscribe link in any email
• Data portability: Request a machine-readable copy of your data

To exercise any of these rights, please contact us at hello@flashtotes.com. We will respond within 30 days.

9. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you over the past 12 months
• Right to Delete: You may request deletion of personal information we have collected, subject to certain exceptions
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights
• Do Not Sell: We do not sell personal information. If this practice changes, we will provide a “Do Not Sell My Personal Information” option

To submit a CCPA request, contact us at hello@flashtotes.com or write to us at the address below.

10. Children's Privacy

Our services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately so we can delete it.

11. Security

We implement reasonable technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure. We encourage you to use strong, unique passwords and to contact us immediately if you suspect any unauthorized use of your account.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the “Last updated” date at the top of this page. We encourage you to review this policy periodically. Your continued use of our services after any changes constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: