Privacy Policy

This policy explains what personal information Spec First (“we”, “us”) collects when you visit this website or buy from us, how we use it, who we share it with, and the choices and rights you have.

1. Who we are

Spec First is responsible for your personal information (the “controller” under data protection law). You can contact us about anything in this policy at:

2. Information we collect

Information you give us

• Orders: when you check out, you provide your name, email address, shipping address and phone number, which our shipping carriers may need to deliver your order. These details are encrypted before they are stored.
• Crypto payments: crypto payments are processed by NOWPayments. We receive the payment status and transaction details for your order (such as the amount, currency and transaction identifiers), but never your wallet’s private keys.
• PayPal payments: if you choose PayPal, you contact us through a ticket on our Discord server and pay a PayPal invoice we send you. Discord and PayPal process the information you give them under their own privacy policies.
• Messages: if you email us, we keep the content of your message and your contact details so we can reply.

Information collected automatically

• Shopping bag: a cookie that stores the items in your bag so they are kept between visits. See our Cookie Policy.
• Server logs: our hosting provider records technical information about each request, such as IP address, browser type, the page requested and the time, to deliver the site and protect it from abuse.

We do not use analytics, advertising or social media tracking on this website.

Do Not Track and Global Privacy Control: we do not track visitors across other websites, and we do not sell or share personal information, so there is nothing for these browser signals to switch off. The site works the same whether or not they are enabled.

3. How we use your information

• To process, ship and support your orders, including returns and refunds (necessary to perform our contract with you).
• To answer your questions and requests (our legitimate interest in providing customer service).
• To keep the website secure, prevent fraud and fix problems (our legitimate interest in running a safe store).
• To meet legal obligations, such as keeping tax and accounting records.

We will ask for your consent before using your information for anything else, such as marketing emails.

4. Who we share it with

We share personal information only with service providers that help us run the store, and only as needed:

• NOWPayments, which processes crypto payments. See NOWPayments’ privacy policy.
• PayPal, which processes payments for PayPal invoices.
• Discord, where PayPal orders are arranged through support tickets. Our staff also receive order alerts in a private Discord channel; these contain the order number, items and total, never your name or address.
• Vercel Inc. and our database provider, which host this website and store order records.
• Resend, which delivers our order emails and receives your name, email address and order details for that purpose.
• Shipping carriers, which receive your name, address and phone number to deliver your order.
• Professional advisers and authorities, where required by law or to protect our rights.

If our business is sold or reorganized, customer information may transfer to the new owner under this policy. We do not sell your personal information, and we do not share it for targeted advertising.

5. How long we keep it

We keep order records for as long as tax and accounting law requires, usually up to seven years. We keep messages for as long as needed to resolve your request. The shopping bag cookie expires after 30 days. Server logs are kept for a short period by our hosting provider.

6. International transfers

Our service providers may process your information in countries other than your own, including the United States and Canada. Where the law requires it, these transfers are protected by appropriate safeguards, such as the European Commission’s standard contractual clauses.

7. Your rights

Depending on where you live, you may have the right to:

• access the personal information we hold about you and get a copy of it;
• have inaccurate information corrected;
• have your information deleted;
• object to or restrict how we use it, and receive it in a portable format;
• withdraw consent at any time, where we rely on consent.

European Economic Area and United Kingdom: you may also complain to your local data protection authority.

California and other US states with privacy laws: you have the right to know what we collect and why, to delete and correct it, and to opt out of the sale or sharing of personal information. We do not sell or share personal information, so there is nothing to opt out of. We will not treat you differently for exercising any of these rights. You may use an authorized agent to make a request on your behalf.

Canada: you may also complain to the Office of the Privacy Commissioner of Canada.

To use any of these rights, email support@specfirst.net. We may need to confirm your identity first, usually by matching the email address on your order. We respond within 30 days, or sooner where the law requires.

8. Children

This store is not directed at children under 16, and we do not knowingly collect their personal information. If you believe a child has given us personal information, contact us and we will delete it.

9. Security

The website is served over an encrypted connection, your name, email, phone number and address are encrypted before they are stored in our database, access to order records is limited to authorized staff, and payments are handled by our payment providers rather than on this website. No method of transmission or storage is completely secure, but we work to protect your information and will notify you of a breach where the law requires.

10. Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed. If we make significant changes, we will tell you on this website or by email.