PRIVACY
Privacy Policy
Disclaimer: These pages describe how this shop intends to operate. They are not a substitute for statute, regulation, or legal advice. UK/EU consumer and data-protection rights may give you protections that cannot be waived by these terms.
1. Who we are
Bear Witness Shop (also “Bear Witness”) is a US-based online retailer operated by Micheal Mozley (United States). Contact for privacy and support: mike@xtremerippleprotocol.online.
We are a US-based online retailer. Full business address is available on request and on order confirmation where provided. We do not publish a UK VAT number or company registration number on this site because none are on file for this shop.
2. What data we collect
- Order & shipping: name, email, phone (optional), delivery address, cart contents, amounts paid, order status.
- Payment metadata: depending on method — XRP / Xaman payment references and transaction hash, or Square checkout / payment identifiers. We do not store full card numbers on our servers.
- Technical: basic server logs (IP, user-agent, timestamps) needed to operate and secure the site.
- Optional prize-wheel: if you use the post-purchase or pre-checkout spin, related ticket/code metadata tied to your order.
3. Why we use it (purposes & lawful bases)
- Contract: take payment, fulfil and ship orders, provide order status, customer support.
- Legal obligation: tax, accounting, and consumer-law records where applicable.
- Legitimate interests: fraud prevention, security, improving reliability of checkout and fulfilment.
Where UK GDPR / EU GDPR applies to you as a customer in the UK or EEA, we rely on those bases for the corresponding processing.
4. Processors & recipients
We use service providers to run the shop. They process data only as needed to provide their service:
- Printful — print-on-demand manufacturing and shipping for made-to-order items (name, address, order line items).
- Square — card payment processing when you choose card checkout.
- Xaman / XRPL — XRP wallet payment flow when you choose XRP; ledger payments are public on the XRP Ledger.
- Hosting / VPS — storefront application and database hosting.
We do not sell your personal data.
5. International transfers
We and several processors are based in the United States. If you order from the UK or EEA, your data is transferred to the US (and may be processed in other countries where our processors operate) to fulfil your order. We take care to use reputable providers and limit data to what is needed.
6. Retention
Order and payment records are kept for as long as needed for fulfilment, support, dispute handling, and legal/accounting retention (typically multi-year for transactional records). Server logs are retained for a shorter operational period. You may ask us about the specific retention applying to your data.
7. Cookies
Essential cookies or local storage may be used for cart/checkout and security. We do not run third-party advertising trackers on the shop as a core feature. If non-essential analytics or marketing cookies are added later, we will update this notice and seek consent where PECR / ePrivacy rules require it.
Visitor counter: we set one first-party cookie, bw_visited, for one year, plus a matching flag in your browser's local storage, only to count unique visitors to the shop. It holds no personal data, is not shared, and is not used for advertising or to track you across other sites.
8. Your rights (UK GDPR / EU GDPR)
Depending on where you live, you may have rights to access, rectification, erasure, restriction, objection, and data portability, and the right to complain to a supervisory authority (in the UK: the ICO). To exercise rights, email mike@xtremerippleprotocol.online.
9. Contact
Privacy questions: mike@xtremerippleprotocol.online · Bear Witness Shop · United States.