Privacy policy

Last updated: July 13, 2026

Who we are

mmmahjong boutique sells handcrafted mahjong sets, mats, and related goods at this website. For anything privacy-related, contact us at [email protected].

What we collect

When you place an order, we collect and store:

• Contact details — your first and last name and email address, so we can confirm your order and reach you about it.
• Shipping address — street address, city, state, and ZIP code, so we can deliver your order.
• Order details — the items you purchased, quantities, and totals, plus a payment confirmation ID and receipt link from Square.

What we never collect: your card number. The card form on our checkout page is rendered and secured by Square, our payment processor, inside a frame Square controls. Your credit or debit card details go directly to Square — they are never sent to, seen by, or stored on our site. We receive only a one-time payment authorization and confirmation that payment succeeded. Square's handling of your payment information is described in Square's privacy policy.

Your shopping cart is saved in your own browser's local storage on your device. It is not sent to us until you check out, and you can clear it anytime through your browser.

We do not use analytics services, advertising trackers, or tracking cookies.

How we use your information

• To process, fulfill, and ship your order
• To send order confirmations and respond to questions about your order
• To keep records we're required to keep for accounting, tax, and fraud-prevention purposes

We do not use your information for marketing emails unless you separately ask us to, and we never sell or rent your personal information to anyone.

Who we share it with

Only the minimum needed to complete your order:

• Square — processes your payment and issues your receipt.
• Shipping carriers — receive your name and address to deliver your package.
• Legal requirements — we may disclose information if required by law, court order, or to protect against fraud.

How long we keep it

We keep order records — including your name, address, and purchase details — for as long as needed for accounting, tax, warranty, and dispute purposes. If you'd like your personal details removed sooner, email us and we'll honor the request wherever the law allows.

How we protect it

Payments are handled entirely by Square's PCI-compliant systems. The order information we do store is kept in a private database that is not publicly accessible, and we limit what we collect in the first place — the less we hold, the less can go wrong.

Your choices and rights

You can email us at any time to:

• Access a copy of the personal information we hold about you
• Correct anything that's inaccurate (for example, a shipping address)
• Delete your personal information, subject to records we must keep by law

California residents have these rights under the California Consumer Privacy Act (CCPA), including the right not to be discriminated against for exercising them. We do not sell personal information as defined by the CCPA, so there is nothing to opt out of. Whatever state you're in, send requests to [email protected] and we'll respond within 45 days.

Children

Our store is intended for adults. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us information, contact us and we will delete it.

Changes to this policy

If our practices change — for example, if we add email marketing or analytics — we will update this page and revise the "Last updated" date above. Meaningful changes will be noted prominently at checkout.

Contact