Skip to content
Cielo Gold

Privacy policy

Short version: we collect what we need to answer you and to ship what you bought, we do not sell or share it, and there are no advertising trackers on this site. Last updated 2026.

This site is operated by Merch Troop LLC, Fullerton, California, which is the data controller for everything described below.

What we collect

When you send an enquiry: the name, email address and — only if you choose to give it — the phone number you type into the form, plus your message and which listing you were looking at.

When you buy: your name, shipping address, email address and order details. We never receive your card number. Card payments are processed entirely by Stripe on Stripe's own systems; the card details are typed on their page, not ours, and never touch our servers. For a bank wire we receive whatever your bank puts on the transfer.

Automatically: our web server keeps standard request logs — IP address, page requested, timestamp, browser user agent — as every web server does. They are used for security and for diagnosing faults, and nothing else.

What we do not do

Who else sees your information

Only the services that are actually required to complete what you asked for:

We will also disclose information where the law actually requires it — a valid legal order, or a fraud investigation involving a transaction on this site.

How long we keep it

Enquiries that do not become orders are kept for two years and then deleted. Order records are kept for seven years because tax and anti-money-laundering rules on high-value goods require it. Server logs roll off within 90 days.

Your rights

Ask us and we will tell you what we hold about you, correct it if it is wrong, or delete it — except where an order record must be retained for the reasons above. Use the contact form and say what you want; there is no special process and no charge.

California residents. Under the CCPA and CPRA you have the right to know what personal information we have collected, to have it deleted, to correct it, and to opt out of its sale or sharing. There is nothing to opt out of, because we do not sell or share personal information and have not in the preceding twelve months. Exercising any of these rights will never get you worse service or a worse price.

Security

The whole site is served over HTTPS. Payment card data never reaches our infrastructure. Access to order and enquiry records is limited to the two people who run the business.

Children

This is not a site for children and we do not knowingly collect information from anyone under 16.

Changes

If this policy changes materially we will update the date at the top. We will not quietly start collecting something this page says we do not.

Contact

Any privacy question goes to the same place as everything else: the contact form, answered by a person the same business day. If you need to reach Merch Troop LLC in writing, ask through the form and we will give you a postal address.