Privacy Policy.

Effective September 11, 2026 Jurassic Tarantulas

1. Who this covers

This policy explains how Jurassic Tarantulas ("we", "us", "our") handles personal information collected through this website. It applies to this site and to orders and enquiries placed through it. It does not apply to other companies' sites we link to, or to anything you do on a third party's own platform.

Using this site or ordering from us means you accept this policy. It sits alongside our Terms & Conditions.

2. What we collect

Information you give us directly. When you order or contact us:

• Your name, email address and phone number.
• Your delivery address, and the ZIP code you enter for a shipping quote.
• What you ordered, and your order and enquiry history with us.
• Anything you choose to put in a message to us — including the experience level and species-interest fields on the enquiry form.

Information collected automatically. When you load a page:

• Standard server logs kept by our hosting provider — IP address, browser type, the page requested, and the time. These are ordinary security and reliability logs, not a profile of you.
• Your cart, which is stored in your own browser and never sent to us until you check out. See section 5.
• How you use the site, collected by Google Analytics — the pages you view, the animals and products you look at, what you add to your cart, whether you check out and what you buy, plus your device and browser type, your approximate location (worked out from your IP address) and the site that sent you here. See section 5.

What we do not collect. We do not ask for and do not want your date of birth, government ID, social security number, or any health or biometric information. We never receive your card number — see section 4.

3. How we use it

We use your information to run and grow the shop:

• To take, confirm, pack and ship your order.
• To quote shipping to your destination.
• To email you an order confirmation and a tracking number when it ships.
• To answer your questions and handle a live-arrival claim.
• To keep records we are required to keep for tax and accounting.
• To detect and prevent fraud and abuse of the site.
• To understand how visitors use the site, so we can improve it.
• To advertise the shop — including showing our ads to people who have visited the site before — and to measure how well those ads work.

We do not sell your personal information for money. We do use Google's advertising features, which give Google the site-activity data described in section 5 to use for advertising — see section 10 for what that means and section 9 to switch it off. We do not add you to a marketing list because you bought something. If we ever start a newsletter it will be opt-in, and unsubscribing will be one click.

4. Payment information

Checkout is handled by Stripe on its own secure pages. Your card number, expiry and security code go to Stripe, never to us — we cannot see or store them. What we receive back is the information we need to fulfil the order: that payment succeeded, the amount, and the billing and shipping details you supplied.

Stripe handles your payment data under its own privacy policy and PCI DSS obligations.

5. Cookies and local storage

This site uses Google Analytics, including its advertising features. It runs on every page of the shop and sets first-party cookies (named _ga, and _ga_ followed by an ID) so it can recognise a returning browser. It records the site activity listed in section 2.

With advertising features on, Google can connect that activity to people who are signed in to a Google account and have allowed it, so it can report on visitors across devices, and so we can show our ads to people who have visited the site. Google uses this data under its own policy — see how Google uses information from sites that use its services.

How to opt out. Use the Your Privacy Choices control in section 9 to switch off ad sharing on this browser, or turn on Global Privacy Control in your browser and we will honour it automatically. You can also turn off personalised ads in your Google Ads Settings, or stop Google Analytics on every site with Google's opt-out browser add-on.

We also use browser storage on your own device. Your shopping cart is saved in local storage so it survives a page refresh — it holds only item IDs, quantities and timestamps, no name, no address, no payment data. Prices and names are re-fetched live at every page load, so a stale price is never shown. We also remember whether you dismissed the announcement banner, and whether you opted out of ad sharing. None of that leaves your device.

When you go to checkout, we also save a copy of the items in your cart and their prices, so the order-confirmation page can report the purchase to Google Analytics. It is deleted as soon as that page loads; only the order reference is kept, until you close the tab, so refreshing the page doesn't count the order twice. Clearing your browser data deletes all of the above.

Our hosting and payment providers may set their own strictly necessary cookies for security, load balancing and fraud prevention.

6. Who we share it with

We share your information only with these providers, and only with the part each one needs:

• Stripe — to take payment and handle refunds and disputes.
• Google Firebase, our hosting and database provider — to run the site and store orders.
• The shipping carrier — your name, address and phone, to deliver the package or hold it for pickup.
• Formspree, our contact-form provider, and Resend, our email provider — to deliver what you send us and what we send you.
• Google Analytics and Google Ads — the site-activity data described in section 5, to measure how the site is used and to show and measure our advertising. Google may also use it for its own purposes under its own policy.

We may also disclose information where we are legally required to:

• In response to a valid subpoena, court order or lawful request.
• To establish or defend a legal claim, or to investigate fraud.
• To a buyer, if the business is ever sold or merged — in which case this policy continues to apply to information collected before the transfer.

7. How long we keep it

Order records are kept as long as tax and accounting law requires — generally seven years. Enquiries that never became an order are kept while they are useful to answer you and are cleared out periodically afterwards. Server logs are kept on our provider's own short retention schedule. Google Analytics data tied to a browser is kept for the period set in our Google Analytics account, and never more than 14 months.

When we no longer need something, we delete it or strip it of anything that identifies you.

8. How we protect it

The site is served over HTTPS. Order data lives in a hosted database with access rules that deny public reads and writes; the owner area is restricted to a single authenticated account. Payment credentials never reach our systems at all.

No system is perfectly secure, and we cannot guarantee absolute security. If a breach ever affects your personal information, we will notify you and the appropriate authorities as the law requires.

9. Your choices and rights

Wherever you live, you can ask us to:

• Tell you what we hold about you, and give you a copy.
• Correct anything that is wrong or out of date.
• Delete it — except where we are required to keep an order record for tax or legal reasons.
• Stop contacting you, other than about an order already in progress.

Email the address in section 15. We will respond within 30 days, and we will not treat you differently for asking. We may need to confirm who you are first, so that we do not hand your information to somebody else.

10. California residents

If you live in California, the CCPA/CPRA gives you the rights above plus the right to know the categories of information we collect and who we disclose them to — both set out in sections 2 and 6 — and the right not to be discriminated against for exercising them.

Sharing for advertising. The advertising features of Google Analytics (section 5) give Google identifiers (cookie IDs and IP address), your activity on this site and what you buy, which it can use for cross-context behavioural advertising. Under the CCPA that is "sharing", and it may also count as a "sale" even though no money changes hands. You can opt out at any time with the Your Privacy Choices control in section 9, and we treat a Global Privacy Control signal from your browser as a valid opt-out. We do not knowingly collect the personal information of anyone under 16.

11. Children's privacy

This site is not directed at children, and we do not knowingly collect personal information from anyone under 13. As set out in our Terms, ordering requires you to be 18 or to have a parent or guardian acting for you. If you believe a child has given us personal information, email us and we will delete it.

12. Do Not Track

Browsers can send a "Do Not Track" signal, but there is no agreed standard for responding to it, so we do not act on it. We do honour Global Privacy Control: if your browser sends it, ad sharing is switched off automatically, exactly as if you had used the opt-out in section 9.

13. Links to other sites

This site links to other places — our payment processor, and care resources. Once you follow a link you are on somebody else's site, governed by their privacy policy. We are not responsible for their practices, and a link is not an endorsement.

14. Changes to this policy

We may update this policy. The effective date at the top always tells you which version is current. If a change materially affects how we use information we have already collected from you, we will make that clear rather than quietly swapping the page.

15. How to reach us

For a copy of your information, a correction, a deletion request, or any question about this policy:

Jurassic Tarantulas
jurassictarantulas@gmail.com

You can also use our contact form, though email is better for anything involving your personal data.