Information we collect
- Poster and cart information: the selected trail, route snapshot, title, dates, names, saying, statistics, style, size, frame, quantity, and the cart saved in your browser.
- Checkout and order information: your name, email address, company when provided, delivery address, quoted shipping method and amount, order status, and identifiers used to reconcile payment and fulfillment.
- Trail requests and support: contact details, request text, and a GPX file when you choose to provide one, plus messages and evidence sent for customer support or a delivery claim.
- Technical and security information: limited request, browser, device, network, error, and security-event data generated when you use the site.
Trailmark does not receive or store complete card numbers or card security codes. Stripe collects and processes payment credentials on its hosted checkout.
How we use information
We use information to operate the cart and checkout, validate route and product data, calculate shipping, create and review print files, collect and reconcile payment, fulfill and support orders, handle cancellations and remedies, prevent fraud and misuse, troubleshoot the site, keep required business records, and comply with legal obligations.
Service providers and disclosures
- Cloudflare hosts and secures the storefront and stores protected order and print records.
- Stripe processes checkout, payment, receipts, refunds, fraud controls, and payment-related customer information.
- FinerWorks receives the delivery address, supplier product codes, and quantities needed to quote shipping and, after founder approval, produce and ship the paid order.
- Resend delivers trail-request and operational emails when that service is enabled.
- GitHub Actions runs the protected print-preparation workflow. It receives the poster design data required to render a paid order, but not card details, customer email, or delivery-address data.
We may also disclose information when reasonably necessary to comply with law, enforce our terms, investigate fraud or security incidents, protect customers or the public, or complete a business reorganization. We do not sell or rent customer personal information.
Browser storage and analytics
Trailmark stores the cart and checkout-attempt state in your browser so a configured poster is not lost between pages. The current storefront does not run cross-site advertising or sell browsing profiles. Stripe and Cloudflare may use their own necessary security, fraud-prevention, and service cookies under their policies.
Retention and security
We keep complete order contact, delivery, and poster-personalization information for up to 180 days after payment or order creation, and only as long as an order still needs fulfillment, support, dispute, fraud, or remedy review. After that period and a terminal order outcome, we remove direct customer information and retain a minimized accounting record for up to seven years. Local production packages are deleted 30 days after recorded delivery, cancellation, or refund.
Provider recovery copies expire under bounded backup windows and are not restored into ordinary use to bypass an approved deletion. A longer period may apply when reasonably required for an active dispute, legal hold, tax obligation, fraud investigation, or customer remedy.
We use access controls, HTTPS, private cloud storage, bounded service credentials, and payment-provider separation to protect information. No system can guarantee absolute security, so contact us promptly if you believe order information has been exposed or misused.
Your choices
You can clear the local cart through your browser, omit optional request fields, and ask us to access, correct, or delete personal information we control. Some records may need to be retained for payment, fraud, tax, accounting, dispute, or other legal obligations.
Send a request from the email address connected to the order to support@shoptrailmark.com. We may need to verify the request before acting.
Children and U.S. service
Trailmark is not directed to children under 13, and we do not knowingly collect their personal information. Launch ordering and shipping are limited to the contiguous United States and District of Columbia, and information is processed in the United States.
Policy changes
We may update this policy as the storefront, providers, or legal requirements change. The effective date at the top identifies the current version. Material changes will be posted before they apply when reasonably possible.