Privacy Policy

We collect and use the following categories of personal information for the stated purposes:

• Email, account identifier, public profile and authentication records — from you and the PledgeBox account service — for account access, requested features and security.
• Items, quantities, order/Batch references, delivery name and address, and necessary phone/customs details — from you, order activity and delivery partners — to accept and deliver orders and keep required records.
• Personalisation instructions — from you, when ordering a customised item — to produce and deliver the item requested.
• Payment reference, amount, status and masked payment-method details — from Stripe and transaction activity — for payment, refunds, reconciliation and fraud prevention. Stripe handles your payment credentials directly; never send complete card numbers or security codes by email, public post or Support Case. See Stripe's Privacy Policy (stripe.com/privacy) for its own processing.
• Messages, fault descriptions, photos or video and parcel evidence — from you and authorised Case participants — for support, warranty and legal claims.
• Public name, profile image, posts, replies and project relationship — from you and your community activity — to display contributions and moderate abuse.
• Saved Projects and notice preferences — from you — for requested features and service notices.
• IP address, device/browser information, request time and security events — from use of the service — for security, troubleshooting and abuse prevention.
• Marketing-subscription and optional measurement choices — from you — for requested promotions and consented measurement only; see our Cookie Policy.

We identify required fields; without information necessary for an account, order or delivery, we may be unable to provide that function. Optional marketing or measurement is not required to purchase. We do not request government identifiers, precise device location, biometric identification or health information for ordinary account use.

Public posts, your chosen name, profile image and project badge can be seen by other people and search engines. Your login email is not your public display name. Keep order and payment details out of public discussions.

Support Cases are available to authorised participants only. A Creator assisting with a product defect or personalised order receives only the necessary evidence or production instructions, not your entire account history.

We disclose necessary information to providers supporting accounts, payment (Stripe), hosting, security, email delivery, fulfilment, shipping, customs, support and translation. Relevant Creators receive only the necessary production instructions or defect evidence for their own product.

We may disclose information to advisers or authorities where legally required, or in a business transfer subject to safeguards and required notice or consent.

We do not sell personal information, share it for cross-context behavioural advertising, or use it for targeted advertising across unrelated services. We do not upload customer lists to advertising platforms.

Optional measurement is off unless you enable it in Cookie Settings. See our Cookie Policy. We honour a recognised Global Privacy Control signal, and treat Do Not Track, as a request to keep optional tracking off; neither signal disables storage necessary for a function you request.

Our operator's contact address is in Hong Kong. Our team, providers and fulfilment partners may process information outside your home jurisdiction. Contact us for information about the countries and safeguards relevant to your information.

We retain the minimum records needed for each purpose, and a shorter mandatory legal limit takes priority over any figure below:

• Account/profile and saved items — until account closure, then removed from active systems within 30 days (except information needed for an existing order).
• Necessary accounting/tax transaction records — at least seven years from transaction completion, consistent with Hong Kong business-record requirements.
• Support Case text and outcome — three years after final resolution, unless a longer record is required by an ongoing claim or law.
• Support photos and video — normally deleted within 90 days after final resolution.
• Public contributions — until removed by you or through a valid request.
• Routine security/access logs — up to 90 days.
• Consent and privacy-request records — three years after withdrawal or final handling.

Depending on applicable law, you may request access, a copy, correction, deletion, portability, restriction or an objection to processing. You may withdraw consent without affecting earlier lawful processing.

Account deletion and a copy of your personal data are handled by writing to us — email support@pledgebox.com with the subject “Privacy request” and describe what you need. No purchase or new account is required. We use proportionate verification and acknowledge requests promptly.

You may complain to your competent authority, including the Hong Kong Privacy Commissioner (pcpd.org.hk), the UK ICO (ico.org.uk), or your local data-protection authority.

Rally is intended for adults and does not knowingly solicit children's personal information for accounts or marketing. A parent or guardian must handle a purchase where legal capacity requires it.

We limit access, apply appropriate security measures and investigate incidents. No system can guarantee absolute security. Automated payment or fraud checks may flag or decline a transaction; contact us to request human review of a decision that affects your order.

Each published version identifies its effective date. We notify you of material changes as required and obtain new consent where necessary.