Information Collected
- Contact details you submit (name, email, and project details).
- Order request details shared through quote forms.
- Shipping addresses submitted for Shippo rate calculation and order fulfillment.
- Verified email, profile details, and saved shipping addresses when you create a customer account.
- Immutable order snapshots and Stripe payment/refund status used to provide private order history.
- Patch Builder design details and artwork files when you choose to save a private design draft.
- Basic technical data required to run and secure the website.
How Information Is Used
- Respond to quote requests and customer messages.
- Prepare estimates, communicate timelines, and complete service requests.
- Calculate shipping rates, process payments, and fulfill paid orders.
- Authenticate customer accounts, provide saved addresses, and safely link unowned past KM2 orders by verified checkout email.
- Maintain and improve website operations and reliability.
Data Sharing
Personal information is not sold. Information may be shared only with service providers required to operate the website or support business operations, including Stripe for payments and Shippo and selected carriers for shipping. Supabase stores account sessions, profiles, saved addresses, and private order records.
Data Retention
Submitted information is retained as needed for communication, records, and business operations, unless a longer retention period is required by law.
Account sessions use secure browser cookies. Saved-address edits do not change the shipping address stored with a past order. Stripe customer identifiers may be linked to one verified account so orders created across separate checkouts remain available in its history.
Saved Patch Builder drafts and their private artwork files are automatically removed after 30 days. A private design link is a capability link: anyone it is shared with can access that specific draft, so it should be shared only with people who need it.
To protect public forms and the Patch Builder from automated abuse, KM2 temporarily stores a one-way, non-reversible request identifier for a short period and removes expired records through daily cleanup. It is not used for marketing or customer profiling.
Your Choices
You can request updates or deletion of submitted personal information by contacting KM2 directly through the contact page.
Contact KM2