Privacy policy

1. Who we are

Melrose Companies LLC, doing business as Melrose Machine Works ("we", "us", "our") operates melrosemachineworks.com (the "site") from 45 29th St., San Francisco, CA 94110. This policy explains what personal information we collect when you visit the site, join our list, or place an order, and what we do with it. Contact: support@melrosemachineworks.com.

2. Information we collect

• Email address: when you join our list for drop invitations and updates. Our email provider records whether you open our emails and which links you click, so we can see what is useful. To keep bots and automated sign-ups off our list, and for no other purpose, we record the IP address you sign up from and delete it after 30 days. Our hosting provider also checks each sign-up for signs of automation.
• Order information: name, email, shipping and billing address, and phone number if you provide it, collected through Stripe Checkout. Stripe processes payment details under its own privacy policy and uses checkout data for its own fraud prevention. We do not receive your full card number.
• Product registration: the serial number of the pen shipped with each order.
• Messages: anything you send us by email, such as support or warranty requests.
• Technical information: our hosting provider automatically logs basic request data, such as IP address, browser type, and pages requested, for security and reliability. These logs are kept for up to 30 days. We also use Vercel Web Analytics, which counts page views, referrers, country, and device type without cookies, and does not identify you or follow you to other sites. Stripe collects device information during checkout to prevent fraud.

We do not use advertising pixels or tracking cookies. Stripe may set cookies on its checkout pages for security and fraud prevention.

3. How we use it

• To send drop invitations, purchase links, and updates you signed up for.
• To process, ship, and support your order.
• To verify warranty claims.
• To keep our site and checkout secure.
• To see which pages are used, so we can improve the site.
• To meet tax and accounting requirements.

We do not sell, rent, or share your personal information with advertisers or data brokers, and we do not track you across other websites. Our analytics do not identify you or follow you across sites, so we do not respond differently to browser Do Not Track signals.

4. Who we share it with

Only service providers that help us run the store:

• Stripe, for payments and fraud prevention.
• Vercel, which hosts our site, and Squarespace, which manages our domain.
• Supabase, which hosts our database.
• Plunk, which sends our emails.
• Shipping carriers, for delivery.

We may also disclose information if required by law, or to protect our rights, such as sharing order and delivery records with Stripe or a card issuer to respond to a payment dispute. If our business is sold or merged, your information may transfer to the new owner under this policy.

5. Email

Every marketing email includes a one-click unsubscribe link. Order and warranty emails are sent whether or not you are subscribed.

6. How long we keep it

• List emails: while you are subscribed. When you unsubscribe, or our emails to you stop being delivered, we stop emailing you right away and delete your address from our records and our email provider within 30 days. Backup copies are overwritten within a further 7 days. If you report one of our emails as spam, we keep a hashed version of your address, scrambled one way so it can't be turned back into the address, so we never email you again.
• Order records: for 7 years, to meet tax and accounting requirements.
• Serial registrations: for the life of the warranty, so we can verify claims.

7. Your choices

You can ask us to show, correct, or delete your information by emailing support@melrosemachineworks.com. We verify requests by replying to the email address on your order or on our list, and respond within 30 days.

When you ask us to delete your information, we remove you from our list and delete your messages right away. Order records we must keep for tax purposes are kept for the required period and then deleted. We can also keep your pen's serial number and purchase date with your name and contact details removed, so the warranty still works without identifying you.

8. Visitors from the EU and UK

We are based in the United States, and your information is processed there. Where a provider moves your data out of the EU or UK, the transfer relies on standard contractual clauses or the EU-U.S. Data Privacy Framework. We use your email address for our list based on your consent, which you can withdraw at any time by unsubscribing. We process order information to fulfill your purchase and to meet legal obligations, and technical and analytics information based on our legitimate interest in keeping the site secure and understanding how it is used. You also have the right to receive your data in a portable format, to object to or restrict processing, and to complain to your local data protection authority.

9. Security

We protect your information with access controls and encrypted connections, and we collect only what we need to run the store.

10. Children

You must be 18 or older to order. Our site is not directed to children under 13, and we do not knowingly collect their information. If we learn we have, we will delete it.

11. Changes

We will post any changes on this page and update the effective date. If we change how we use your email address, we will email you before the change takes effect.