Privacy, with intention.

Effective date: July 15, 2026. This Privacy Policy explains how The Andrew Collective (“we,” “us,” or “our”) collects, uses, retains, and discloses information through andrewcollective.com. It also gives you a direct way to ask about or act on your information.

At or before collection

Notice at Collection

We collect the categories below when you choose to join the Founding List, contact us, sign in, place an order or preorder, request a return, or otherwise interact with a feature that asks for information. We use each category only for the stated purposes and compatible operational, security, or legal purposes.

Identifiers and contact information

Examples: Email address, name, mailing or shipping address, phone number, account identifier, and signup source or campaign labels submitted with your form.
Purposes: Founding List access and messages, identity or request verification, customer service, account access, fulfillment, and understanding which invitation led to a signup.

Commercial and transaction information

Examples: Products viewed during checkout, orders, preorders, prices, payment status, fulfillment, shipment, return, exchange, refund, and customer-service history.
Purposes: Accept and support transactions, fulfill orders, provide shipment updates, administer returns and refunds, prevent duplicate or fraudulent transactions, and maintain business records.

Payment and financial transaction data

Examples: Stripe transaction, customer, checkout, payment-intent, and payment-status identifiers. Stripe receives your complete payment-card details; we do not receive your complete card number.
Purposes: Complete payment, confirm status, reconcile transactions, issue authorized refunds, handle disputes or chargebacks, and prevent fraud.

Communications

Examples: Emails, privacy requests, support messages, return reasons, reviews, and other correspondence you choose to send.
Purposes: Respond to you, provide support, document decisions or consent, resolve issues, improve operations, and meet legal obligations.

Essential internet, device, and security data

Examples: IP address, request headers, browser or device information, authentication and security events, checkout events, and fraud-prevention signals processed by us or our infrastructure providers.
Purposes: Deliver the site, keep services and private areas secure, authenticate authorized users, prevent abuse, operate checkout, diagnose failures, and comply with law.

Local privacy preference

Examples: A necessary-only preference, preference version, and timestamp stored in your browser. We do not store your Global Privacy Control signal as a separate preference record.
Purposes: Remember the privacy choice shown on this device and present the correct notice when the preference version changes.

Sold or shared: We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

Sensitive information: We do not ask you to submit government identifiers, account passwords, precise geolocation, health data, or biometric information through the public site. Stripe independently processes payment credentials needed for checkout.

Retention: Founding List information is retained while your subscription or access relationship is active and, after an opt-out, as reasonably needed to honor that choice. Transaction records are retained for the order lifecycle and applicable tax, accounting, warranty, fraud-prevention, chargeback, dispute, and legal periods. Communications and requests are retained while active and as reasonably needed to document resolution or comply with law. Essential security and provider logs are retained for the shortest period reasonably needed for delivery, security, fraud prevention, and legal obligations, including provider-set retention periods. The local privacy preference remains until it is replaced, its version changes, or you clear browser storage.

Privacy choices and site technologies

Strictly necessary storage is always on. It supports security, authorized sign-in, checkout, fraud prevention, and remembering your privacy preference. Cloudflare, Google, and Stripe may use necessary cookies or similar technologies when their relevant hosting, authentication, security, or payment functions are used.

Optional analytics is off and not in use. The public site does not run optional analytics cookies, pixels, or a page-view tracker. Advertising technology is also off and not in use. We do not run behavioral advertising pixels, audience matching, or cross-site ad tracking.

The “Your Privacy Choices” control stores only your necessary-only preference, its version, and a timestamp in local browser storage. After you save a choice, the floating notice is removed. You can reopen the control at any time from “Your Privacy Choices” in the site or legal footer.

Global Privacy Control

When your browser sends a Global Privacy Control signal, our privacy control detects it and shows that it is honored. We treat the signal as a request to opt out of sale or sharing. Because we do not sell personal information, do not share it for cross-context behavioral advertising, and do not use optional advertising or analytics technologies, those activities remain off. Our site does not separately respond to legacy Do Not Track signals.

How we use and disclose information

We use information for the purposes in the Notice at Collection; to administer consented marketing and transactional messages; operate the site and private business systems; process orders, payments, fulfillment, returns, exchanges, refunds, and customer service; prevent fraud and abuse; maintain security; enforce terms; comply with law; and establish, exercise, or defend legal claims.

We disclose information only as reasonably needed to providers that perform those functions for us, including Cloudflare for hosting, security, storage, and transactional access email; Stripe for checkout and payments; Google for authorized Workspace sign-in and business email; shipping carriers for labels, tracking, delivery, and shipment notifications; and other fulfillment, communications, professional, or business-service providers we deliberately engage. We may also disclose information if required by law, to protect rights or safety, or as part of a merger, financing, acquisition, or sale of assets subject to appropriate safeguards.

Direct request method

Access, delete, correct, or opt out

You may ask us to provide access to information associated with you, delete it, correct inaccurate information, unsubscribe you from marketing, or confirm and apply an opt-out from any sale or sharing. We do not currently sell or share personal information for cross-context behavioral advertising.

Email info@theandrewcollective.com from the address associated with your request and say whether you want to access, delete, correct, or opt out. We may ask for limited information to verify your identity or authority. We may deny or limit a request where applicable law permits or requires, including to complete transactions, protect security, prevent fraud, maintain legally required records, or preserve legal claims.

Email a privacy request

California and other U.S. privacy laws

The California Consumer Privacy Act applies only to organizations that satisfy its statutory definitions and coverage thresholds. This Policy does not represent that The Andrew Collective currently meets those thresholds or that a particular privacy law applies to every request. We provide the notices and request method above as a privacy practice and will honor rights required by laws that apply to us and to the request. We will not treat you differently for making a good-faith privacy request.

Children and security

The site is not directed to children under 13, and we do not knowingly collect their personal information. We use reasonable administrative, organizational, and technical safeguards appropriate to the information and our operations, but no internet transmission or storage system can be guaranteed completely secure.

Changes and contact

We may update this Policy when our practices, services, or legal obligations change. The effective date above identifies the current version. If a change introduces a new category or materially different use, we will provide an updated notice at or before the relevant collection where required.

The Andrew Collective
18345 Ventura Blvd., Suite 414
Tarzana, CA 91356
info@theandrewcollective.com