Privacy Policy
Effective November 1, 2026
Oops Clay Co (“we,” “us,” or “our”) makes and sells handmade clay pieces. This policy explains what personal information we collect through oopsclayco.com, how we use and share it, how long we keep it, and the choices you have.
1. Information we collect
- Orders — your name, email address, the items you buy, any coupon used, your delivery choice (local pickup or shipping), and your shipping address if your order is shipped.
- Payments — card payments are entered on Square’s secure checkout page. We never see or store your card number; Square tells us only whether the payment went through. If you choose cash at pickup, no payment information is collected online.
- Contact messages — your name, email address, subject and message when you use our contact form.
- Newsletter — your email address, if you sign up and confirm your subscription.
- Technical data — your IP address, browser type, and timestamps, recorded with orders, messages and sign-ups and in our server and security logs, to run and protect the site and prevent spam and fraud.
2. How we use your information
We use it to fill and deliver your order, arrange pickup, send order confirmations and updates, answer your messages, send the newsletter to people who asked for it, keep the site secure, and meet our tax and record-keeping obligations. We do not sell your personal information, and we do not share it for anyone else’s advertising.
3. How we share information
We share personal information only with the service providers we rely on to run the shop, and only what each one needs. We require them to use it only to provide services to us. We may also disclose information when the law requires it or to protect the safety, rights or property of our customers, the public, or Oops Clay Co.
Our service providers
These are the companies that process personal information for us (sometimes called “subprocessors”). We update this list when it changes.
| Provider | What they do for us | Information involved | Location |
|---|---|---|---|
| Firehouse 360 | Builds, hosts and manages this website for us, and provides Firehouse 360 Form Shield, the spam check on our contact form | Everything stored by the website, which Firehouse 360 can access only to run and support it. Form Shield receives your IP address and browser details, not the contents of your message. | United States |
| Namecheap | Server hosting, where the website and its database are stored, and domain-name registration | Everything stored by the website, held on their servers | United States |
| Cloudflare | Domain name service (DNS), network security and delivery of the site | Your IP address, browser details and the pages you request, which pass through their network | United States / global |
| Square | Processing card payments and refunds | Your payment details, entered on Square's own checkout page, plus your name, email address and order total. We never receive or store your card number. | United States |
| Proton (Proton Mail) | Our email: order confirmations, newsletters, and messages you send us | Your email address and the content of emails | Switzerland / EU |
| USPS, UPS or FedEx | Delivering orders you choose to have shipped | Your name and shipping address, and the package tracking number | United States |
| Google Fonts | The typefaces used on our pages | Your IP address and browser details when the fonts load | United States |
| Anthropic (Claude) | AI-assisted software development and troubleshooting of this website | Website data, only where needed to fix or test a problem | United States |
4. Cookies
We use only essential cookies: one session cookie that keeps your cart and forms working, and, if you confirm you are 18 or older to view our adult section and ask us to remember it, a cookie that remembers that choice for up to 30 days. Cloudflare, which protects the site, may set a short-lived security cookie to tell people from automated traffic. We do not use analytics, advertising, or tracking cookies, and we do not track you across other websites. Our site does not respond to “Do Not Track” signals, because there is no agreed standard for them.
5. How long we keep information
We keep order records for as long as we need them for tax, accounting and warranty or dispute purposes. Contact messages are kept while we are helping you and for a reasonable time afterward. Newsletter addresses are kept until you unsubscribe. When information is no longer needed, we delete or anonymize it.
6. How we protect information
We use secure connections (HTTPS) across the site, limit access to the people who need it, and keep security logs. Card payments never touch our servers. However, no website or method of storage is 100% secure, and we cannot guarantee absolute security. If a breach affects your personal information, we will notify you as Pennsylvania law requires.
7. Children
Our shop is for a general audience and is not directed to children. We do not knowingly collect personal information from children under 13. Our adult section is only for people 18 and older.
8. Your choices and rights
- Newsletter: unsubscribe at any time with the link in any newsletter email.
- Access, correction or deletion: contact us and we will review your request. We may need to keep order records the law requires us to keep.
- Depending on where you live, you may have other privacy rights; contact us to use them and we will respond as the law requires.
9. Changes to this policy
We may update this policy from time to time. We will post the new version here with a new effective date.
10. Contact us
Questions or requests? Email [email protected] or use our contact form.