Privacy Policy

Who is responsible

Package Free, Inc., trading as Garden Gear Depot, 25 Bond Street, New York, NY 10012, United States, is responsible for the personal data described on this page. Contact: support@gardengeardepot.com.

What we collect and why

We process your contact details, order information, your messages to support and technical data in order to fulfill orders, provide support, prevent fraud and meet our obligations. Your IP address is also used locally to work out which country you are connecting from, so the store can apply the sales zones it is set up for. It is not used to place you precisely.

From the moment you arrive on the site, and without any action from you, we also record which pages and products you look at, what you add to the cart, when a checkout starts and when an order completes. We use that to measure our Meta advertising, attribute conversions and avoid showing you the same ad over and over. This is how the store pays for itself. You can ask us to stop by writing to us, or limit it from your browser.

Who receives your data

Stripe processes card payments and receives what it needs to take the payment securely. DigitalOcean hosts the site and its technical data. Resend receives your email address and the content strictly needed for confirmations and updates. Carriers and fulfillment partners receive only what is needed to deliver your parcel. Meta Platforms receives advertising events, through the Meta Pixel in your browser and through server-side conversions measurement from our own server: event ids, product ids, amount and currency, the _fbp and _fbc identifiers, IP address, browser, and for a confirmed purchase certain contact details that are normalized and then hashed. Garden Gear Depot never sends card numbers to Meta.

How long we keep it

Order and billing records are kept for the length of our commercial relationship, then archived for as long as tax and accounting rules require. Support requests are kept while we handle them, then for as long as they stay useful if a dispute comes up. Meta event payloads sit in a technical queue only until they are sent successfully or until retries stop, then they are deleted from that queue. Ids and technical statuses may be kept for deduplication and security.

Security

Access is limited to the people and providers who need it. The site runs on HTTPS, and the payment fields built into our checkout page are supplied by Stripe. Full card details go straight to Stripe and are never received or stored by Garden Gear Depot. Reasonable technical and organizational measures protect the rest.

Your choices and your rights

Wherever you live, you can ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, or tell us to stop using it for advertising measurement. Write to support@gardengeardepot.com and we answer within 30 days. Asking never changes the price you pay or the service you get.

We do not sell your personal information. We do share the advertising events described above with Meta, and you can tell us to stop at any time. You can also turn off personalized advertising in your Meta account settings and clear or block trackers in your browser, as explained in our cookie notice. Under applicable United States privacy law, including the consumer privacy statutes of certain states, you have these rights directly, and this same email address is how you use them. You can also raise a concern with the Federal Trade Commission at ftc.gov or with your state Attorney General, for example the New York Attorney General. Customers elsewhere have equivalent rights under their own law.

Where your data is processed

Orders are fulfilled from the United States. The company that operates the store is registered in the United States, and our providers, including Stripe for payments and our email and hosting providers, may process data in the United States and in other countries where they operate. Where personal data is transferred internationally we rely on the safeguards those providers put in place, including Standard Contractual Clauses where they apply.