Privacy Policy

Hermetic Modular LLC is a Washington limited liability company based in Seattle, King County, Washington (“Hermetic Modular,” “we,” “us,” or “our”). This Privacy Policy explains how we collect, use, share, and protect personal information when you visit hermeticmodular.com (the “Site”), subscribe to our newsletter, or purchase products from us.

You can reach us about this policy or any privacy question at hello@hermeticmodular.com. A mailing address is available on request.

We collect only the information needed to operate the Site, fill orders, communicate with you, and meet our legal obligations.

Information you provide

• Newsletter signups. Your email address when you join our mailing list.
• Orders. Your name, shipping address, billing address, phone number, email, and order details when you buy a product. Payment card information is entered directly into Stripe’s checkout and is never received or stored by Hermetic Modular.
• Correspondence. The contents of emails or messages you send us, including any information you choose to include.

Information collected automatically

• Technical and log data. Your IP address, browser type, device type, referring page, pages visited, and timestamps. This data is generated by your browser when you load the Site and is used for security, performance, and troubleshooting.
• Cookies and similar technologies. See Section 5.

We do not knowingly collect special-category personal information (such as health, biometric, or government identifier data), and we ask that you not send it to us.

• To process and fulfill orders, including shipping and returns.
• To send order confirmations, shipping notices, and service messages.
• To send the newsletter to people who have signed up for it.
• To respond to questions, support requests, and warranty claims.
• To operate, secure, and improve the Site.
• To detect and prevent fraud and abuse.
• To comply with tax, accounting, and other legal obligations.
• To measure how the Site is used so we can improve it.

We do not sell your personal information. We do not use your information for automated decision-making that produces legal or similarly significant effects.

We share personal information with the service providers listed below so that they can perform services on our behalf. Each provider has its own privacy practices, which apply when you interact with them directly.

• Stripe — payment processing and checkout. Stripe collects and processes your payment, billing, shipping, and contact information directly through its checkout.
• Brevo — newsletter delivery and transactional email. Stores your email address and engagement data for our mailing list.
• Lovable — connector gateway that forwards newsletter signups from the Site to Brevo.
• Cloudflare — hosting, content delivery, and bot protection for the Site. Receives request and IP data for routing, caching, and abuse prevention.
• Google Analytics (Google LLC) — measurement of Site traffic and usage patterns.
• Meta Pixel (Meta Platforms, Inc.) — advertising measurement and audience building for campaigns we run on Meta platforms.
• Reddit Pixel (Reddit, Inc.) — advertising measurement and audience building for campaigns we run on Reddit.

We may also disclose information to comply with applicable law, respond to lawful requests from public authorities, enforce our Terms of Service, protect our rights and the rights and safety of others, or in connection with a sale, merger, or reorganization of our business.

We and our service providers use cookies, pixels, and similar technologies on the Site for the purposes described below.

• Strictly necessary. Cookies set by Cloudflare for bot protection and security. These are required for the Site to operate.
• Analytics. Cookies and identifiers set by Google Analytics to measure aggregate Site usage.
• Advertising and measurement. The Meta Pixel and Reddit Pixel set cookies and identifiers used to measure advertising performance and to build advertising audiences.
• Checkout. Stripe sets its own cookies on the Stripe checkout domain when you proceed to pay. Those cookies are governed by Stripe’s privacy notice.

You can control cookies through your browser settings. Most browsers allow you to refuse or delete cookies; doing so may affect parts of the Site that rely on them.

• Order records. Retained for at least seven years to comply with U.S. tax, accounting, and consumer-law requirements.
• Newsletter list. Retained until you unsubscribe or ask us to remove your address.
• Support correspondence. Retained as long as needed to handle the matter and a reasonable period afterward to address follow-up questions.
• Technical and log data. Retained on a rolling basis by our hosting provider for security and troubleshooting.

We use commercially reasonable administrative, technical, and physical safeguards to protect personal information, including encryption in transit, restricted access, and reputable third-party processors. No system is perfectly secure, and we cannot guarantee absolute security.

Everyone

• Newsletter. Unsubscribe at any time using the link in any email, or email us at hello@hermeticmodular.com.
• Email us. You can ask to access, correct, or delete personal information we hold about you. We will respond within a reasonable time and consistent with applicable law.

California residents

If you are a California resident, you have rights under the California Consumer Privacy Act (as amended), including the right to know what personal information we have collected, the right to request deletion or correction, and the right to opt out of the sale or sharing of personal information for cross-context behavioral advertising. We do not sell personal information for money. Our use of the Meta Pixel and the Reddit Pixel may qualify as “sharing” for cross-context behavioral advertising under California law. You can opt out of this sharing by emailing hello@hermeticmodular.com with the subject line “Do Not Sell or Share.”

EEA, UK, and Swiss residents

If you are in the European Economic Area, the United Kingdom, or Switzerland, you have rights under applicable data protection law to access, correct, delete, restrict, or object to our processing of your personal information, and to data portability. The legal bases on which we rely are: performance of a contract (for orders), consent (for the newsletter), and legitimate interests (for site security, fraud prevention, and analytics). You may withdraw consent at any time. Personal information you provide will be transferred to and processed in the United States, where our service providers operate. You may lodge a complaint with your local supervisory authority.

The Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

The Site links to third-party sites, including GitHub, Stripe, and others. We are not responsible for the privacy practices of those sites. Their policies govern your interactions with them.

We may update this Privacy Policy from time to time. When we do, we will revise the “Effective” date at the top of this page. Material changes will be communicated through the Site or, where appropriate, by email.

Questions, requests, or complaints about this policy can be sent to hello@hermeticmodular.com. A mailing address is available on request.