Privacy & returns

Who we are

Fourfold is an online shop, and it's Fourfold that looks after your data. For anything on this page, write to [email protected] and a person replies within 4 hours. How buying from us works is in our terms of sale.

What we collect

• Order details — your name, email, delivery address and what you bought. We cannot ship without these. If you give one, a phone number for the courier too; it's optional and used for nothing else.
• Your account, if you create one — your name and email, your password in a scrambled form we can't read back (an Argon2id hash), the addresses you save, the cart you keep there, and the orders you place while logged in. An account is optional: you can always order as a guest.
• If you continue with Google — Google tells us your name, your email address, that Google has confirmed the email is yours, and an ID number Google uses for you. We never see your Google password, and we ask for nothing else from your Google account.
• Payment information — handled entirely by PayPal, our payment processor. You pay with your PayPal account or type your card into PayPal's own fields; card numbers never touch our servers and we never see them. From PayPal we receive whether and when you paid, the amount, PayPal's reference for the payment and the fee PayPal charged us.
• If you sign up for our emails — your email address, when you signed up, and when you confirmed or unsubscribed. Nothing else.
• Usage data — pages viewed, rough location by country, device type, collected through Google Analytics 4 with IP anonymization switched on.
• Emails you send us — kept so we have the history when you write again.

What we do with it

• Pack and ship your order, and email you about it: once when your payment comes through, and once when it ships, with the tracking number.
• Show you where your order has got to on the tracking page. The order number and email you type there are used only to find that order, and the delivery address is never shown there. To stop people guessing, wrong guesses are counted against the internet address they came from for fifteen minutes, in memory only, then forgotten.
• Answer your questions and handle returns.
• Understand which pages work and which don't, in aggregate.
• Meet our tax and accounting obligations.

We do not sell, rent or trade your personal information. We do not send marketing email unless you explicitly ask us to.

Our emails

• About your order — two emails: one when your payment comes through (what you ordered and where it's going) and one when it ships (the carrier and tracking number). They come with every order, list or no list, and contain no advertising.
• The monthly email, only if you ask — new products, about once a month. Typing your address into the box at the bottom of our pages sends one email with a link; you're on the list only once you click it, and the link stops working after three days. If you never click it, nothing more comes, and the unconfirmed sign-up is deleted after 30 days.
• Leaving — every email from the list has a link that takes you off it straight away, or reply to any of them. We then keep only your address, marked unsubscribed, so it isn't written to again. Ask, and we'll delete even that.

Who else sees your data

• Our fulfillment partner gets your name and delivery address so the package can be packed and shipped. Nothing more.
• The carrier handling your package gets the same, plus your email for delivery notifications, and your phone number if you gave one.
• PayPal, our payment processor, gets your payment details directly from you, and from us your order's items, total and delivery address, so the payment is for exactly that order. Once the order ships, we give PayPal its tracking number too. What you enter on PayPal's pages is covered by the PayPal Privacy Statement.
• Our email provider sends our emails for us, so it handles your email address and what the email says (for an order email, what you ordered and where it's going). It may use them only to deliver our emails.
• Google receives anonymize analytics data, and — on the order confirmation page only — the delivery address you typed, in order to draw the map you asked for.
• Google, if you use "Continue with Google" — Google learns that you signed in to Fourfold. The sign-in page loads Google's sign-in script from accounts.google.com, which can set Google's own cookies under Google's privacy policy. The script only loads on the account page, and only when you're logged out.

The map on your confirmation page

After you order, we show a map of the address you entered. Two things worth knowing:

• Your address is held in your own browser's session storage, not in the page URL. It is not written into our analytics, our server logs or your browser history.
• To draw the map, the address is sent to Google Maps. If you would rather it wasn't, skip the map — your order is unaffected, and the confirmation works without it.

Cookies and similar storage

• Strictly necessary — your cart and your in-progress order are kept in your browser's local and session storage, and so is the one-time code that lets that browser tab pay for the order; it's gone when you close the tab. Without these the shop cannot work.
• Paying — the payment page loads PayPal's script from paypal.com, which can set PayPal's own cookies under PayPal's privacy statement. It loads only on the payment page.
• Addresses you save as a guest — if you check "Save this address for later" without logging in, the address is kept in your browser's local storage on that device (up to three), so your next checkout here can fill it in. It isn't sent to us until you place an order. Remove it any time with "Forget saved addresses on this device" at checkout, or by clearing this site's data in your browser.
• Orders you ask us to remember for tracking — if you check "Remember this order on this device" on the tracking page, that order's number and email are kept in your browser's local storage on that device (up to five), so you can check it again with one tap. They aren't sent anywhere until you track the order. Remove one any time with its "Forget" button, or by clearing this site's data in your browser.
• Whether you've joined our emails — once you confirm, your browser remembers it on that device (local storage), so the sign-up box says you're on the list instead of asking again. Unsubscribing on that device removes it.
• Staying logged in — if you log in, one cookie (ff_session) keeps you signed in for up to 30 days. It holds a random code, not your details; page scripts can't read it, and it is only ever sent to our own server. Logging out deletes it.
• Analytics — Google Analytics 4 sets cookies to count visits. You can block them in your browser, use a tracker blocker, or turn on Do Not Track, and the site will still work normally.

We set no advertising or cross-site tracking cookies.

How long we keep it

Order records: seven years, because tax law requires it. Support emails: three years. Analytics: fourteen months, then automatic deletion.

Our email list: while you're on it. Unconfirmed sign-ups: 30 days. After you unsubscribe, only your address, marked unsubscribed, until you ask us to delete it.

Accounts: until you delete them. Account › Account details › Delete my account removes your details, saved addresses and saved cart immediately. Orders you placed stay on record for the seven years above, but are no longer linked to you.

You can also remove delivered and canceled orders from the order history in your account. That hides them from your account; the order record itself stays for the seven years above.

Your rights

Wherever you live, you can ask us to show you what we hold, correct it, delete it, or send it to you in a portable file. If you're in the UK, EU or EEA, that's your right under GDPR. If you're in California, that's your right under CCPA, including the right not to be discriminated against for exercising it.

Email [email protected]. We answer within 4 hours and complete the request within 30 days, free of charge. If we've handled it badly, you can complain to your national data protection authority.

Security

The site is served over HTTPS. Payment details are handled exclusively by our PCI-compliant processor. Access to order data is limited to the people who need it to ship your package.

Account passwords are stored only as Argon2id hashes, so nobody here can read them, and repeated wrong guesses are slowed down. An account shows only the orders placed while logged in to it, plus earlier guest orders made with its email once Google has confirmed that email belongs to you. Knowing your email is not enough to see your orders.

Children

This shop is not aimed at anyone under 16, and we don't knowingly collect their data. If you believe a child has given us information, email us and we'll delete it.

Returns and refunds

To start anything below, email [email protected] with your order number. A person replies within 4 hours, 9am–9pm EET, seven days a week.

If something's wrong with it

If your order arrives damaged, doesn't work, isn't what you ordered, or is missing a part, email us a photo within 30 days of delivery (a short video if a photo can't show the problem). We'll send a free replacement or refund you in full. You don't need to send anything back.

If you change your mind

• Send it back within 30 days of delivery, unused (trying it for fit is fine) and in its box.
• Email us first and we'll tell you where to send it. Please don't post anything back before we reply, or we can't match it to your order.
• The return postage is yours. A tracked service is worth it: we can only refund what reaches us.
• Once it arrives, we refund what you paid for it, within 14 days. If you send back the whole order, the shipping you paid comes back too.

If it doesn't arrive

If the tracking stops moving, or your order hasn't arrived by the latest date we gave you, email us. We'll chase it with the carrier, and if it's lost we'll send a new one or refund you in full. If the tracking says it was delivered but you can't find it, check with your neighbors and your local post office first, then write to us and we'll take it up with the carrier.

Canceling an order

Until your order goes to our supplier, you can cancel it yourself: in your account, or on the tracking page with your order number and email. If you've already paid, you get every cent back, the same way you paid, usually within a few days. Once it's with our supplier or on its way, it can't be stopped, but you can send it back as above once it arrives.

How refunds are paid

To the card or account you paid with, in US dollars, the amount you were charged. Your bank may take a few business days to show it.

Your legal rights

This adds to your rights under the law where you live; it doesn't take any away. In the UK and the EU, for example, you can cancel an online order within 14 days of delivery for any reason.

Changes

If this page changes materially we'll update the date at the top and, for anything significant, say so on the home page.