Privacy policy

Who we are

Doin the Does is the sticker and art shop of artist Joe Fox, at dointhedoes.com. This policy explains what personal information the shop handles, why, and who else it passes through. Questions about any of it can go to josephashtonfox@gmail.com.

The shop trades as Doin the Does, from Jersey City, New Jersey, and is responsible for the information described here. It operates in the United States and is subject to United States and New Jersey law. Our full business address is on our terms of service.

What we collect when you order

To take and fulfil an order we collect your email address, your shipping address, and the contents of your order. Orders, prices and payments are held by Square, our payments and commerce provider, not in a database of our own.

You do not need an account to buy anything. Ordering as a guest collects the same information and nothing more.

Square keeps a customer record under the email address you order with, whether or not you have an account, so that repeat orders from the same address are recognised as the same buyer. If you make an account later using that address, the orders you already placed are attached to it.

Card details never reach us

Card numbers, expiry dates and security codes are captured by Square's payment form and sent directly to Square. They never touch our servers and we cannot see or store them. Our own payment request carries only a single-use token, an order id, and a key that stops the same payment being taken twice — it does not even carry an amount, because the server re-reads the order from Square and charges that total.

The same applies to Apple Pay, Google Pay and Afterpay, which hand Square a token in the same way.

What we collect if you make an account

Accounts are optional and run on Supabase. Creating one stores your email address and, if you set a password, a hashed form of it — never the password itself.

Your profile can hold a name, phone number and address, so checkout can fill itself in. Every one of those fields is optional and you can edit or empty them at any time from your account page.

Saved items store only which products you saved and when. An account is linked to its Square customer record by an internal identifier so that past orders and future ones belong to the same person.

Signing in with Google

If you choose "Continue with Google", Google tells us your name, email address and profile picture — the same information shown to you on Google's own consent screen before you agree. We never receive your Google password, and we ask for no further access to your Google account.

Cookies and local storage

Signing in sets a session cookie so you stay signed in between pages. It is required for accounts to work and is removed when you sign out.

Your basket is kept in your browser's local storage, not on our servers. Clearing your browser data clears your basket.

We use Vercel Web Analytics to count page views. It is cookieless and does not build a profile of you or follow you to other sites.

Who else sees your information

Four processors, each for one job: Square handles the catalogue, orders and payments; Supabase stores accounts, profiles and saved items; Google provides optional sign-in; Vercel hosts the site and provides analytics.

We do not sell your personal information, and we do not share it for advertising.

How long we keep it

Account information is kept until you ask us to delete it.

Order records are kept for seven years, so that we can meet US tax and accounting record-keeping requirements. They are held by Square rather than by us. Deleting your account does not delete them — a completed sale is a business record, and we are required to be able to produce it.

Your choices

You can view and change your profile from your account page, remove saved items at any time, and ask us to delete your account and the information attached to it by emailing josephashtonfox@gmail.com.

Whatever the law requires of a shop this size, you can ask us to show you what we hold about you, to correct it, or to delete it. Email josephashtonfox@gmail.com and we will. The one thing we cannot delete on request is a completed order record, for the reason given above.

Children

This shop is not aimed at children and we do not knowingly collect information from them. If you believe a child has given us personal information, email josephashtonfox@gmail.com and we will remove it.

Changes to this policy

If this policy changes, the date at the top changes with it. Material changes to how your information is used will be announced on this page before they take effect.