Effective date: May 18, 2026. This is a starter privacy policy intended to be reviewed and customized by Physiverse before publication. Consult a qualified attorney for jurisdiction-specific compliance (GDPR, CCPA, etc.).
Who we are
Physiverse (“we”, “us”, “our”) operates the website physiverse.com, where we sell optomechanical hardware. We are based in San Diego, California, United States. You can reach us at hello@physiverse.com.
Information we collect
We collect the following categories of personal information:
- Contact and order information: name, email, billing and shipping address, phone number — provided by you at checkout or via our contact form.
- Payment information: handled directly by Stripe. We do not store your full card number on our servers. Stripe receives card data via their hosted fields.
- Technical information: IP address, browser type, pages visited, referrer — collected automatically via standard web logs.
- Communications: messages you send to us via the contact form or email.
How we use it
- To process orders, payments, and shipping.
- To respond to inquiries you send via the contact form.
- To send transactional email (order confirmations, shipping notifications).
- To maintain security, prevent fraud, and comply with legal obligations.
Third parties we share data with
- Stripe — payment processing. Subject to Stripe’s privacy policy at stripe.com/privacy.
- Brevo — transactional email delivery. Subject to Brevo’s privacy policy at brevo.com/legal/privacypolicy.
- DigitalOcean — web hosting infrastructure. Subject to DigitalOcean’s privacy policy.
- Shipping carriers — when fulfilling orders, we share recipient name and address with the carrier.
Cookies
We use cookies that are strictly necessary for the operation of the cart and checkout (provided by WooCommerce). We do not use third-party advertising or analytics cookies at this time.
How long we keep your data
We retain order records for as long as required for tax and accounting purposes (typically 7 years in the US). Contact-form submissions are kept up to 2 years unless you request earlier deletion.
Your rights
You may request access to, correction of, or deletion of your personal data by emailing hello@physiverse.com. If you are in California, the EEA, or the UK, you may have additional rights under applicable law (CCPA, GDPR).
Security
We use HTTPS for all traffic. Payment data is transmitted directly to Stripe and never persisted in our databases. Access to our servers is restricted.
Changes to this policy
We may update this policy from time to time. The effective date at the top will reflect the latest revision.
Contact
Questions about this policy or your data? Email hello@physiverse.com.