πŸŒ‰βš‘ cop the tulay x framework sweater now! βš‘πŸŒ‰

Legal

Privacy
Policy

Last Updated: January 19, 2026 | Version 2.0

1 Introduction & Overview

Welcome to FRAMEWORK SUPPLY CO. ("Company," "we," "us," "our," or "FRAMEWORK"). We are committed to protecting your privacy and ensuring you have a positive experience on our website and mobile applications.

This comprehensive Privacy Policy explains how we collect, use, disclose, and protect your information when you visit our e-commerce platform, purchase our limited-edition streetwear products, interact with our customer support services, or engage with us across any digital touchpoint.

FRAMEWORK SUPPLY CO. specializes in curated, limited-edition streetwear designs with production capped at 500 units per design to ensure exclusivity and minimize duplication. This Privacy Policy applies to all information collected through our website, mobile applications, social media channels, email communications, and any other means through which you interact with FRAMEWORK SUPPLY CO.

2 Information We Collect

2.1 Information You Provide Directly

  • Account Registration Information: Name, email address, password, date of birth, phone number, and security questions when you create an account
  • Shipping & Billing Information: Physical addresses, phone numbers, and delivery preferences for order fulfillment and our Free Shipping program (orders over $150)
  • Payment Information: Credit card numbers, debit card details, digital wallet information, billing addresses, and payment transaction history. Payment processing is handled by PCI-DSS compliant third-party processors
  • Customer Communications: Messages, inquiries, feedback, product reviews, testimonials, and responses to surveys or questionnaires
  • Customer Support Data: Chat transcripts, email support correspondence, support ticket information, and call recordings with your consent for our 24/7 Support services
  • Social Media Profiles: If you link social media accounts or authenticate through social platforms
  • Preference & Interest Data: Style preferences, size information, notification preferences, wish lists, and product interest indicators
  • User-Generated Content: Photos, videos, comments, and social posts where you mention or feature FRAMEWORK products

2.2 Information Collected Automatically

  • Device Information: IP address, device type, operating system, browser type, device identifiers, mobile network information, and unique device IDs
  • Browsing Behavior: Pages visited, time spent on pages, click patterns, search queries, product views, cart contents (even if not purchased), and navigation patterns
  • Cookies & Similar Technologies: Session IDs, persistent cookies, web beacons, pixels, and similar tracking technologies to enhance user experience
  • Location Data: GPS coordinates (with permission), IP-based location inference, and geolocation data used for local delivery optimization and targeted marketing
  • Biometric Data: Fingerprint or facial recognition data if you use biometric authentication on our mobile app
  • Error & Performance Data: Crash reports, system logs, application performance metrics, and diagnostic information
  • Referral Data: Information about how you were referred to our platform (affiliate links, promotional codes, marketing campaigns)

2.3 Information From Third Parties

  • Social Media Platforms: Profile information when you authenticate through social networks
  • Payment Processors: Transaction verification, fraud detection results, and payment status
  • Shipping & Logistics Partners: Delivery status, tracking information, and carrier data
  • Marketing & Analytics Partners: Aggregate behavioral data, market research insights, and performance metrics
  • Data Brokers & Aggregators: Publicly available information for verification and risk assessment purposes
  • Business Partners: Co-marketing partners, affiliates, and strategic collaborators may share customer information with your consent

3 How We Use Your Information

Core Operations

  • β€’ Processing and fulfilling orders
  • β€’ Managing 30-day money-back guarantee
  • β€’ Account management
  • β€’ Transactional communications
  • β€’ Identity verification
  • β€’ Fraud prevention

Customer Support

  • β€’ 24/7 support services
  • β€’ Inquiry responses
  • β€’ Service quality improvement
  • β€’ Staff training

Marketing

  • β€’ Promotional communications
  • β€’ New product launches
  • β€’ Personalized recommendations
  • β€’ Market research

Security & Compliance

  • β€’ Fraud detection
  • β€’ Security audits
  • β€’ Legal compliance
  • β€’ Terms enforcement

4 Data Security & Protection

Technical Safeguards

TLS/SSL encryption, AES-256 encryption at rest, multi-layered firewalls, role-based access control, OAuth 2.0 authentication, and regular security scanning.

Administrative Safeguards

Background checks for employees, documented security policies, regular training, vendor security assessments, and data minimization principles.

Physical Safeguards

Secure data centers with 24/7 monitoring, environmental controls, video surveillance, and secure document destruction.

Important: While we implement comprehensive security measures, no method of transmission over the internet is completely secure. You are responsible for maintaining the confidentiality of your account credentials.

5 Cookies & Tracking Technologies

Cookie Type Purpose
Essential Required for authentication, account security, and basic functionality
Performance Measure website performance and user engagement
Functional Remember preferences, language settings, and login information
Marketing Track conversions, enable retargeting, and personalize ads
Analytics Collect aggregated usage data for optimization

You can control cookie preferences through your browser settings. You may also opt out via the Network Advertising Initiative (NAI) or Digital Advertising Alliance (DAA).

6 Third-Party Information Sharing

We share your information with trusted third parties who assist us in operating our platform:

Payment

Stripe, PayPal

Shipping

USPS, UPS, FedEx

Email

SendGrid, Mailchimp

Analytics

Google Analytics

Marketing

Meta, Google, TikTok

Support

Zendesk, Intercom

Hosting

AWS, Google Cloud

Security

MaxMind, Sift

All third parties are contractually bound by Data Processing Agreements (DPAs) and required to maintain equivalent data protection standards.

7 International Data Transfers

FRAMEWORK SUPPLY CO. operates globally. Personal data may be transferred to countries with differing data protection laws. We rely on:

  • Standard Contractual Clauses (SCCs)
  • Data Processing Agreements
  • Adequacy Decisions
  • Explicit Consent

For EU–US data transfers, we rely on appropriate legal mechanisms and provide an EU-specific privacy addendum upon request.

8 Your Privacy Rights

General Rights

  • β€’ Right to Access
  • β€’ Right to Correction
  • β€’ Right to Deletion
  • β€’ Right to Withdraw Consent
  • β€’ Right to Opt-Out
  • β€’ Right to Data Portability

GDPR Rights (EU)

  • β€’ Right to Restrict Processing
  • β€’ Right to Object
  • β€’ Right to Complain
  • β€’ Rights Against Automated Decisions

CCPA Rights (California)

  • β€’ Right to Know
  • β€’ Right to Delete
  • β€’ Right to Opt-Out of Sale
  • β€’ Right to Correct
  • β€’ Right to Non-Discrimination

How to Exercise Your Rights

Email: [email protected]
Response time: 45 days

9 Data Retention Periods

Data Type Retention Period
Account Information Until deletion or 5 years after last activity
Transaction & Order Data 7 years
Payment Information Deleted after transaction completion
Marketing Preferences Until opt-out
Cookies & Analytics Up to 2 years
Support Tickets & Chat 3 years
User-Generated Content Until deleted
Fraud/Security Logs 2 years

Personal data is removed from active systems within 30 days of account deletion request, subject to legal and operational exceptions.

10 Children's Privacy

We do not knowingly collect information from children under 13. If discovered, we will obtain parental consent, restrict data use, or delete the account.

For users aged 13–18, we apply age-appropriate protections including limited tracking and restricted marketing communications.

11 Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be communicated via:

  • Email notifications
  • Website notices
  • Dashboard alerts
  • Affirmative consent where required by law

12 Contact Information

Privacy Inquiries

Email: [email protected]

Mailing Address

FRAMEWORK SUPPLY CO.
Privacy & Data Protection Department

Security Certifications

PCI-DSS Level 1 ISO/IEC 27001 SOC 2 Type II GDPR Compliance

By using FRAMEWORK SUPPLY CO., you acknowledge that you have read, understood, and agree to this Privacy Policy.

Last Updated: January 19, 2026

Policy Version: 2.0

Next Review: January 19, 2027