Privacy Policy
| Topic | Rule |
|---|---|
| Personal data sold | none |
| Advertising or analytics tags | none |
| Request confirmed | within 1 business day |
| Request answered | within 45 days |
| Opt-out honored | within 15 business days |
| Order records kept | 5 years |
| Breach notice | within 45 days, under Ohio law |
Cookies with a purely functional job
The site sets only the cookies a store needs to work. The cart and checkout run on WooCommerce cookies. Stripe and PayPal set their own cookies inside the payment fields. Cloudflare, which protects the site, can set a short security cookie to filter bots. No advertising, analytics, or social media cookie is set. No cookie banner appears, because nothing optional runs. Browsers that send Global Privacy Control still get that choice recorded.
Scope with every Quirefox page and order
This policy covers quirefox.com, every order placed there, order emails, and support messages. JAIDEN LAURYN JONES FUNY LLC runs Quirefox and decides how this data is used. This version took effect on Oct 3, 2026. Any change is posted on this page with its new date.
Details with the customer as the source
Customers give the following at checkout or in messages:
- Name, email address, and phone number.
- Shipping and billing addresses.
- The garments, sizes, and prices in each order.
- Messages to support, with any photos attached.
- Privacy requests and the replies to them.
Checkout asks for a phone number because carriers use it for delivery problems.
Device data with an automatic source
Visiting the site sends some data automatically. That covers the IP address, the browser type, and the pages requested. The web server and Cloudflare record these in logs. Cart cookies record the garments placed in the cart.
Partner data with a payment or delivery source
From Stripe and PayPal come the approval or decline, the card network, the final four digits, and any fraud score. Carriers add delivery scans. The fulfillment partner adds the packing date and the hand-off to the carrier.
Uses with a link to an order
Personal data is used for these jobs only:
- Taking payment and sending the order.
- Sending the order, shipping, and refund emails.
- Answering messages and handling returns.
- Stopping fraud.
- Keeping tax and accounting records.
No marketing email is sent.
Recipients with a defined task
Each recipient gets only what its task needs. Packing and labels need the name, street address, phone number, and garments, so the fulfillment partner holds those. Delivery needs a name, a street address, and a phone number, which go to the carrier. Payment details go to Stripe or PayPal. Brevo delivers the order emails. The hosting company and Cloudflare keep the site online. Tax authorities and courts see data only when the law demands it.
Service providers with limited data
| Provider | Data category | Purpose |
|---|---|---|
| Fulfillment partner | identifiers, order contents | packing and shipping |
| Carrier | identifiers | delivery |
| Stripe, PayPal | identifiers, payment data | charging and refunds |
| Brevo | identifiers, order contents | order emails |
| Hosting company, Cloudflare | internet activity | running and protecting the site |
Each provider may use the data only for the purpose listed.
Customer data without a buyer
Quirefox sells no personal data to anyone. Customer data also never feeds ad targeting across other websites. The list of companies that have bought, or may buy, customer data from Quirefox is empty.
AI training without customer data
Language models and other AI systems are never trained on customer data from this store. Nobody receives that data for such training either, whether for money or free.
Sensitive data without collection
The store never asks for Social Security numbers, government IDs, health data, biometrics, or precise location. Card numbers stay with Stripe and PayPal.
Records with fixed retention periods
Invoices and payment logs are held longest, 5 years, so the books can be checked. Support email stays for 18 months. Server logs stay for 60 days. Once a period ends, the data is erased or made anonymous.
Safeguards with limited access
Card data never reaches the store’s server. Pages travel over HTTPS. Admin access to the store is limited to the owner. No system is completely secure, so any suspicious email that claims to come from Quirefox is worth forwarding to support.
Privacy rights with a 45-day answer
A customer can ask to see, correct, delete, or receive a copy of personal data. A customer can also opt out of any sale or sharing. The steps are short:
- Write Privacy request in the subject line.
- Send it to contact@quirefox.com from the email address on the order.
- Expect a confirmation within 1 business day.
- Expect the answer within 45 days. One extension of 45 more days is possible, with notice.
Agents may act for a customer who signs a written authorization. Any refusal can be challenged with a reply that has Appeal in the subject. The appeal is answered within 45 days.
California residents with CCPA rights
For Californians, these rights come from the CCPA and its CPRA amendments. In the past 12 months, the store collected identifiers, commercial information, and internet activity, from the sources listed above. Nothing in those categories was sold or shared. No sensitive personal information was collected either. Opting out is explained under Do Not Sell or Share My Personal Information, linked in the footer. Using a right never changes a price or the service.
Other states with similar laws
Nineteen states besides California had a consumer privacy law in force on Oct 3, 2026:
| State | In force since |
|---|---|
| Virginia | Jan 1, 2023 |
| Colorado | Jul 1, 2023 |
| Connecticut | Jul 1, 2023 |
| Utah | Dec 31, 2023 |
| Florida | Jul 1, 2024 |
| Oregon | Jul 1, 2024 |
| Texas | Jul 1, 2024 |
| Montana | Oct 1, 2024 |
| Delaware | Jan 1, 2025 |
| Iowa | Jan 1, 2025 |
| Nebraska | Jan 1, 2025 |
| New Hampshire | Jan 1, 2025 |
| New Jersey | Jan 15, 2025 |
| Tennessee | Jul 1, 2025 |
| Minnesota | Jul 31, 2025 |
| Maryland | Oct 1, 2025 |
| Indiana | Jan 1, 2026 |
| Kentucky | Jan 1, 2026 |
| Rhode Island | Jan 1, 2026 |
Residents of every other state, Ohio included, use the same request steps and get the same answer times.
Breaches with a 45-day notice limit
If a breach exposes personal data, affected customers get an email. Ohio Rev. Code 1349.19 requires that notice in the most expedient time possible and within 45 days of discovery. The email says what happened and what to do next.
Children without data collection
The store sells adult garments and is meant for adults. It does not knowingly collect data from children under 13. Data found to come from a child under 13 is deleted.
Email delivery with an EU provider
Brevo, the email service, is based in France. Order email data can be processed in the European Union. Stripe, PayPal, and Cloudflare are US companies.
Third-party sites with separate policies
Links to PayPal, Stripe, or a carrier lead to sites with their own privacy policies.
Linked pages with opt-out and contact details
Opting out has a separate explanation under Do Not Sell or Share My Personal Information. The Terms and Conditions cover the rest of the store’s rules.
Questions go to contact@quirefox.com or +1 (216) 243-0054. Support works from 8:30 AM until 5:30 PM ET, Monday through Friday, and answers within 1 business day. The Contact Us page has a form as well.