Privacy policy

Effective date: October 20, 2026

This Privacy Policy explains how The Binder Base collects, uses, shares and protects your personal information when you visit our online store at https://binderbase.myshopify.com (the "Store"), buy from us, or contact us. The Store is operated by The Binder Base ("The Binder Base", "we", "us" or "our"), a business based in Texas, USA. For data protection law purposes, we are the "controller" (or "business") responsible for your personal information.

We keep things simple: we collect what we need to sell you products, deliver your files, run the Store and, only if you ask, send you news. We don't sell your personal information for money.

If you have questions, email us at help@thebinderbase.com.

1. Information we collect

Information you give us

Order and checkout details: your name, email address, billing address, phone number (if you provide it), and, for physical products, your shipping address.
Payment information: payments are handled by Shopify and its payment partners. We see limited details such as the card type, the last four digits, the expiry date and the billing address, but never your full card number.
Account details: if you create an account, your login email, name and order history.
Messages: what you send us by email, contact form, chat or social media, including any order number, photos or files you attach.
Custom order content: text or images you send us to make a custom product.
Marketing preferences: whether you've signed up for our emails or texts.
Reviews: reviews, ratings or photos you choose to post.

Information collected automatically

When you use the Store, Shopify and the tools we use may automatically collect:

Device and usage information: IP address, browser type, device type, operating system, language, referring website, pages viewed, products viewed and added to cart, and the date and time of visits.
Approximate location: country or region, worked out from your IP address (used for currency, tax and fraud checks).
Download information: when and how often your download links are used, and from which IP address, so we can deliver files, resend links and prevent link sharing.
Cookies and similar technologies: see Section 5.

Information from others

Shopify and payment processors: order confirmation, payment status and fraud-risk signals.
Social media and advertising platforms: if you interact with us on Instagram, TikTok or similar platforms, or click one of our ads, we may receive basic information such as your username or which ad you clicked, in line with your settings on those platforms.

2. How we use your information

Purpose	Examples	Legal basis (EEA/UK)
Process and deliver your order	Take payment, send your download link and receipts, ship physical items	Performance of a contract
Customer support	Resend files, answer questions, help with printing	Performance of a contract; legitimate interests
Protect our files and the Store	Prevent fraud, chargeback abuse, unauthorised sharing and resale of files; enforce our Terms and Conditions	Legitimate interests; legal obligations
Run and improve the Store	Fix problems, understand which products are popular, improve layouts and guides	Legitimate interests; consent where required for cookies
Marketing emails and texts	New releases, restocks and offers, only if you opt in	Consent (you can withdraw at any time)
Advertising	Show relevant ads and measure how they perform	Consent where required
Legal and accounting	Keep tax and transaction records, respond to lawful requests	Legal obligations

We don't use your information for automated decision-making that has legal or similarly significant effects on you, apart from automated fraud screening by Shopify and payment processors at checkout. If an order is blocked by fraud screening, you can contact us to have it reviewed by a person.

3. How we share your information

We share personal information only as needed to run our business:

Shopify, our e-commerce platform, which hosts the Store and processes order, customer and checkout data on our behalf. See Shopify's privacy policy at https://www.shopify.com/legal/privacy.
Payment processors, such as Shopify Payments (with Stripe), PayPal, Apple Pay and Google Pay, to process payments and prevent fraud. They handle your payment details under their own privacy policies.
Digital delivery providers, the Shopify app we use to host files and send download links: Shopify Digital Downloads.
Email and messaging providers, to send order emails and, if you opt in, marketing: Shopify Email.
Analytics and advertising partners, to understand Store traffic and measure ads: Shopify Analytics and Shopify's marketing and personalised advertising features.
Shipping carriers and print partners, for physical products only, to make and deliver your order.
Professional advisers, such as accountants and lawyers, when needed.
Authorities and others when required, if the law requires it, to respond to valid legal requests, or to protect our rights, our customers or others, including to stop fraud or the unauthorised sharing of our files.
Business transfers, if our business is sold, merged or reorganised, in which case the new owner would be bound by this policy.

These service providers may only use your information to provide services to us, except where they act as independent controllers under their own privacy policies (for example, payment processors and Shopify for some fraud and platform purposes).

We do not sell your personal information for money. Under some US state laws, letting advertising partners collect information through cookies or pixels for targeted ads can count as "selling" or "sharing". If we use those tools, you can opt out as described in Sections 8 and 9.

4. Email and text marketing

We only send marketing emails or texts if you've opted in, for example by ticking a box at checkout or signing up on the Store. Order emails, such as receipts and download links, are not marketing and will still be sent.

You can unsubscribe at any time by clicking "unsubscribe" in any marketing email, replying STOP to a text, or emailing help@thebinderbase.com. Message and data rates may apply to texts.

5. Cookies and similar technologies

Cookies are small files saved on your device. We and Shopify use them to:

make the Store work (strictly necessary), for example to keep items in your cart, run checkout and keep the Store secure;
remember your preferences, such as language and currency;
measure and improve the Store (analytics); and
show and measure ads (marketing), if we use advertising tools.

Where the law requires it (for example in the EEA and UK), we ask for your consent before using non-essential cookies, through the cookie banner on the Store. You can change your choices at any time through the cookie banner or your browser settings. Blocking some cookies may stop parts of the Store, such as the cart or checkout, from working.

Shopify's cookie list is available at https://www.shopify.com/legal/cookies.

Do Not Track and Global Privacy Control. We honour Global Privacy Control (GPC) signals as a request to opt out of the "sale" or "sharing" of personal information where the law requires it. Our Store does not respond to "Do Not Track" browser signals, because there is no common standard for them.

6. How long we keep your information

We keep personal information only as long as we need it:

Order and transaction records: for as long as tax and accounting laws require, usually up to 7 years after the order.
Download records: for as long as your download access is active and for a reasonable period afterwards to support resends and resolve disputes.
Customer support messages: up to 3 years after our last contact, unless they relate to an ongoing issue.
Marketing data: until you unsubscribe or ask us to delete it, after which we keep a minimal suppression record so we don't email you again.
Account data: until you close your account or ask us to delete it, subject to the records above.
Analytics and cookie data: in line with the cookie and tool settings, usually no more than 26 months.

When information is no longer needed, we delete or anonymise it.

7. How we protect your information

We use trusted, secure providers (Shopify's checkout is PCI DSS compliant) and limit access to personal information to the people who need it to run the Store. No method of storage or transmission over the internet is completely secure, so we can't guarantee absolute security. If we become aware of a data breach that affects you, we'll notify you and the authorities as the law requires.

8. Your rights

Depending on where you live, you may have the right to:

access the personal information we hold about you and get a copy;
correct information that is wrong or incomplete;
delete your personal information;
restrict or object to certain uses, including direct marketing (you can always object to marketing);
data portability, meaning a copy of your information in a common, machine-readable format;
withdraw consent at any time, where we rely on consent (this doesn't affect anything we did before you withdrew); and
not be discriminated against for exercising your rights. We won't charge you different prices or give you a worse service because you made a privacy request.

Some rights have limits. For example, we may need to keep order records for tax purposes even if you ask us to delete them, and we can't keep download access active for an order once its records have been deleted.

EEA and UK residents (GDPR and UK GDPR)

You have the rights listed above. The legal bases we rely on are listed in Section 2. You also have the right to complain to your local data protection authority. In the UK, that is the Information Commissioner's Office (ico.org.uk). We'd appreciate the chance to sort out your concern first, so please contact us at help@thebinderbase.com.

California and other US state residents (including CCPA/CPRA)

If you live in California or another US state with a comprehensive privacy law (such as Colorado, Connecticut, Virginia, Utah, Texas or Oregon), you have the right to:

know what personal information we collect, use, disclose, sell and share, and the categories of sources and recipients;
access, correct and delete your personal information;
opt out of the "sale" or "sharing" of personal information, and of targeted advertising;
limit the use of sensitive personal information (we don't collect sensitive personal information for purposes that would give rise to this right); and
not be discriminated against for exercising these rights.

Categories we collect (CCPA terms) are identifiers (name, email, address, IP address); customer records (billing and shipping details, limited payment details); commercial information (products bought and order history); internet or network activity (browsing and download activity); approximate geolocation; and inferences (for example, which products you might like). We collect these from you, from your device and from the service providers listed in Section 3, for the purposes in Section 2. We disclose them for business purposes to the categories of recipients in Section 3. We keep them for the periods in Section 6.

In the past 12 months we have not sold personal information for money. If we use advertising cookies or pixels, we may have "shared" identifiers and internet activity with advertising partners for targeted advertising. We do not knowingly sell or share the personal information of consumers under 16.

To opt out, use our data sharing opt-out page, enable Global Privacy Control in your browser, or email help@thebinderbase.com.

9. How to make a privacy request

Email help@thebinderbase.com with the subject line "Privacy request" and tell us which right you want to use. To protect you, we'll verify your identity, usually by asking you to confirm details from your order or to reply from the email address on your order. You can use an authorised agent; we'll ask for proof that they're allowed to act for you, and we may still need to verify your identity directly.

We'll respond within the time the law requires: within one month for GDPR and UK GDPR requests, and within 45 days for US state requests. Either period may be extended where the law allows, and we'll tell you if that happens. Requests are free, unless they are clearly unfounded or excessive.

If we turn down your request, you can appeal by replying to our decision with the subject line "Privacy appeal". We'll respond to your appeal within the time the law requires. If you're still not satisfied, you can contact your state Attorney General or local data protection authority.

10. Children

The Store is not directed at children under 13, or under 16 in the EEA and UK, and we don't knowingly collect personal information from them. Purchases must be made by an adult (see our Terms and Conditions). If you believe a child has given us personal information, contact us at help@thebinderbase.com and we'll delete it.

11. International transfers

We are based in the United States, and our service providers, including Shopify, may process your information in other countries, including the United States, Canada and countries in the European Union. These countries may have different data protection laws from yours. When we transfer personal information out of the EEA or UK, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or an adequacy decision (including the EU-US Data Privacy Framework, where the recipient is certified).

12. Links to other sites

Our Store may link to other websites and social media platforms. Their privacy practices are their own, and we encourage you to read their privacy policies.

13. Changes to this policy

We may update this Privacy Policy from time to time, for example when we add new tools or products. We'll post the new version here and update the effective date. If the changes are significant, we'll give you more prominent notice, such as an email or a notice on the Store.

14. Contact us

For any privacy question or request:

The Binder Base
Email: help@thebinderbase.com