Privacy
Policy

Who we are

Red Tail Den LLC ("Red Tail Den," "we," "our," "us") is a Florida limited liability company operating from Wildwood, Florida. It is the entity responsible for the personal information described in this policy — the "data controller," in the language of privacy law.

We do not sell your personal information. We never have and we don't intend to.

What this covers

This policy applies to every venture Red Tail Den LLC operates. Each is a trading name, not a separate company, and information collected by any of them is held by the same entity under the same practices:

• Craft — Evo Creative Studio, at evocreativestudio.com — branding, web design, print and social media.
• Cache — automated retail and vending.
• Haul — online commerce and resell.
• Territory — real estate.

It also covers redtailden.com itself, and any venture we launch after the date above.

What we collect

Information you give us

• Contact details — name, email, phone number and company name, submitted through a form, email or WhatsApp.
• Message content — whatever you write to us.
• Project and order materials — brand assets, copy, images, account access, delivery addresses.
• Billing details — billing name, billing address and the email associated with a purchase. See section 05 for card data.

Information we collect automatically

• Usage data — pages viewed, time on page, referring site, clicks, scroll depth.
• Device and connection data — IP address, browser, operating system, screen size, language.
• Cookies and similar technologies — see section 07.

Information from public sources

• Business listing data — business name, phone and address from public listings such as Google Maps and Google Business Profile, used for B2B outreach.

How we use it

• To deliver — produce the work, fulfil orders, communicate and support you afterward.
• To process payments — bill, issue receipts, handle refunds and prevent fraud.
• To respond to you — answer inquiries, quotes and support requests.
• For B2B outreach — introduce our services to business owners whose contact details are publicly listed.
• To improve our sites — understand what is useful and where the experience breaks down.
• For marketing measurement — see which campaigns work, in aggregate.
• To meet legal obligations — tax records, accounting and lawful requests.

We do not sell, rent or trade your personal information, and we do not share it with third parties for their own marketing purposes.

Payment information

Payments across all ventures are processed by Stripe, Inc., a PCI DSS Level 1 certified processor.

• Card details are transmitted directly to Stripe over an encrypted connection. They do not pass through, and are not stored on, our servers.
• Red Tail Den never sees or stores your full card number, CVC or expiration date.
• What we receive from Stripe: billing name, billing email, the last four digits, card brand, amount and whether the payment succeeded — the minimum needed to reconcile an invoice and issue a refund.
• Stripe processes your data as an independent controller under its own policy: stripe.com/privacy.

Who we disclose it to

We share information only with the service providers we need to run the business, and only what each one needs.

Other circumstances

• Legal requirement — where compelled by law, subpoena or court order.
• Protection of rights — to investigate fraud, enforce our Terms, or protect the safety of any person.
• Business transfer — if a venture or the company is sold or merged, data may transfer as part of the business. You would be notified before any change in how your data is handled.

Between our own ventures

All ventures are the same legal entity, so information is held by Red Tail Den LLC rather than transferred between separate companies. In practice we keep client records separated by venture and do not repurpose data from one venture to market another without your consent.

Cookies & tracking

Our sites use cookies and similar technologies in three categories:

• Strictly necessary — keep the site working and remember your session. These cannot be switched off.
• Analytics — Google Analytics, to understand how the site is used in aggregate.
• Advertising — Meta Pixel, to measure ad performance and reach relevant audiences.

How to control them

• Every major browser lets you block or delete cookies in its settings.
• Opt out of Google Analytics with the Google Analytics Opt-out Add-on.
• Manage Meta ad preferences in your Facebook Ad Preferences.
• We honor the Global Privacy Control (GPC) signal where your browser sends one.

SMS communications

• You may receive SMS from us if your business phone number is publicly listed. This is B2B outreach, not consumer marketing.
• Every message includes opt-out instructions. Reply STOP to unsubscribe — you get one confirmation and nothing further.
• Reply HELP, or email info@redtailden.com, for assistance.
• Message and data rates may apply, depending on your carrier plan.
• Mobile opt-in data and consent are never shared with third parties for their marketing purposes.

Full program terms are in Schedule A of our Terms.

How we protect it

• Encryption in transit — every site is served over HTTPS/TLS, enforced by permanent redirect.
• No card data at rest — payment credentials never touch our servers; Stripe handles them under PCI DSS Level 1.
• Access control — administrative access is limited to authorized personnel, protected by strong unique credentials and multi-factor authentication where supported.
• Security headers — our sites set X-Content-Type-Options, X-Frame-Options, Referrer-Policy and Permissions-Policy to reduce common attack surface.
• Data minimization — we collect only what we need and delete it when the purpose ends.
• Restricted files — databases, logs and configuration are blocked from public access at the server level.
• Vendor diligence — we use established providers with published security practices rather than rolling our own.

No system is perfectly secure, and we won't pretend otherwise. If a breach affects your personal information, we will notify you and the appropriate authorities without undue delay and, where required by law, within 30 days of discovery.

How long we keep it

When a retention period ends, data is deleted or irreversibly anonymized. You can ask us to delete your data sooner — see section 11.

Your rights

Wherever you live, we extend these rights to everyone:

• Access — get a copy of the personal information we hold about you.
• Correction — have inaccurate information fixed.
• Deletion — have your information erased, except what we must keep by law (tax records) or to honor your own request (the SMS opt-out list).
• Portability — receive your data in a portable, machine-readable format.
• Opt out — unsubscribe from SMS (reply STOP) or email marketing at any time.
• Object or restrict — object to processing based on legitimate interests, or ask us to limit it.
• No retaliation — we will never degrade your service or pricing for exercising any of these rights.

How to exercise them

Email info@redtailden.com with the subject "Privacy request". Tell us which venture you dealt with if you know. We verify your identity — usually by confirming you control the email or phone on file — and respond within 30 days. There is no charge.

California residents

Under the CCPA/CPRA you have the rights above plus the right to know the categories of personal information collected, the sources, the business purpose and the categories of third parties it is disclosed to — all set out in sections 03, 04 and 06. We do not sell or share personal information as those terms are defined under the CCPA, and have not done so in the preceding 12 months.

Children's privacy

Our ventures are intended for businesses and adults. We do not knowingly collect personal information from anyone under 18. If you believe a minor has given us information, email us and we will delete it promptly.

International visitors

We operate from the United States, and information we collect is processed and stored there. Data protection law in the U.S. may differ from that of your country. By using our sites or services, you understand your information will be processed in the United States.

If you are in the European Economic Area, the United Kingdom, or another region with comparable protections, we honor the rights in section 11 regardless of where you are, and rely on your consent or our legitimate interest in operating the business as the basis for processing. You may also lodge a complaint with your local supervisory authority.

Changes to this policy

We update this policy as our practices and ventures change. The "Last updated" date at the top always reflects the current version. If a change materially affects how we handle your information, we notify active clients by email before it takes effect.

Contact

Questions, or want to exercise a right? Reach us here — a person reads every message.