We store contact information, delivery addresses, order details, policy acceptance records, and payment provider references needed to quote, fulfill, support, and audit orders.

Sensitive card data should be handled by the configured payment provider. This application stores provider references, status, and redacted webhook payloads only.

Signed-in customers can review orders, manage delivery addresses, and adjust notification preferences from their account area.

Order, payment, refund, delivery, audit, tax, and policy acceptance records may be retained where needed for accounting, fulfillment, dispute handling, fraud prevention, legal obligations, and operational audit trails.