privacy policy

REST ID is a clothing project with a public shop. This policy explains how we collect and use personal data when you browse the shop, place an order request, pay a manual invoice, or contact us.

For privacy questions or requests, contact team@restid.store.

When you place an order request, we collect the information needed to handle that order:

• name, email address, phone number, and your preferred contact route;
• optional WhatsApp, Telegram, or Instagram contact details if you choose those routes;
• shipping country, street address, district, city, region, and postal code;
• items, sizes, quantities, prices, totals, order number, and order status;
• optional order notes and customer-support messages.

The shop also stores your bag and most recent order confirmation in your browser local storage so the bag and confirmation pages can work. The site uses Vercel Web Analytics for aggregated page-view statistics. We do not use advertising pixels, cross-site ad tracking, or a newsletter signup in this codebase.

We use personal data to receive and confirm order requests, prepare and fulfill items, arrange shipping, send order and payment updates, respond to customer messages, prevent mistakes or abuse, maintain order records, and understand basic site performance.

Where privacy law requires a legal basis, we rely mainly on contract or pre-contract steps for order handling, legitimate interests for support, security, and operational records, legal obligations where records must be kept, and consent where you choose an optional contact channel or give us optional notes.

Order data is stored in REST ID's Supabase database. Order emails are sent through Resend and may be archived to REST ID's configured email archive address. Admin-only notifications and order-management actions may pass through Telegram for approved REST ID administrators. Your browser stores bag and confirmation data locally on your own device.

We share personal data only as needed to run the shop:

• Supabase, for order database hosting;
• Vercel, for website hosting and aggregated Web Analytics;
• Resend, for outbound order emails, inbound email webhooks, and email delivery status;
• Telegram, for admin-only order notifications and support workflows;
• PayPal, when we create or send a manual payment invoice;
• shipping or courier providers, when needed to deliver an order.

We do not sell personal data. We do not store payment card numbers in the REST ID application.

Some service providers may process personal data outside your country, including in the United States, the European Economic Area, the United Kingdom, Singapore, or other locations where they operate. Where required, we rely on the safeguards offered by those providers, such as standard contractual clauses or equivalent transfer mechanisms.

We keep order and support records for as long as needed to complete the order, provide customer support, handle returns or disputes, maintain accounting records, and meet legal obligations. Browser bag data remains on your device until you clear it or the browser storage is deleted. REST ID still needs to finalize a formal retention schedule; until then, deletion requests are reviewed case by case against order, tax, fraud-prevention, and dispute needs.

Depending on where you live, you may have rights to access, correct, delete, export, restrict, or object to the use of your personal data. You may also have the right to withdraw consent where processing is based on consent, and to complain to your local data protection authority.

To make a request, email team@restid.store. We may need to verify your identity before acting on a request.

We may update this policy when the shop, order process, service providers, or legal requirements change. The latest version will be posted on this page with a new update date.