Data Deletion

DATA DELETION POLICY
Hazard St.

Effective Date: June 24, 2026

================================================================================

1. OVERVIEW

Hazard St. ("we," "us," "our," or "Company") respects your privacy and is committed to transparency regarding the data we collect. This Data Deletion Policy outlines how we handle requests to delete your personal data in accordance with applicable privacy laws and Meta Platforms, Inc.'s ("Meta") requirements for Login with Facebook.

================================================================================

2. SCOPE OF THIS POLICY

This policy applies to:

- Users who log in via Facebook Login
- Users who connect their Facebook account to Hazard St.
- Any personal data we collect, store, or process in connection with such accounts

================================================================================

3. WHAT DATA WE COLLECT

When you use Facebook Login to access Hazard St., we may collect or receive the following information:

- Basic profile information (name, email, profile picture)
- Facebook ID and account authentication tokens
- Purchase history and order information
- Browsing behavior, preferences, and interactions with our store
- Communication records (emails, support inquiries)
- Payment information (processed securely via third-party processors)

================================================================================

4. HOW TO REQUEST DATA DELETION

4.1 SUBMISSION METHODS

To request deletion of your personal data, you may:

1. Email us at contact@hazardstreetapparel.com with the subject line "Data Deletion Request"
2. Send a message through our website's contact form
3. Use the Data Deletion Request form available on our website
4. Contact us via direct message on Instagram (@hazardstapparel)

4.2 INFORMATION REQUIRED

To process your request efficiently, please provide:

- Your full name
- The email address associated with your account
- Your Facebook ID or username (if available)
- A clear statement that you are requesting deletion of all personal data
- Any additional context or documentation to help us locate your account

================================================================================

5. WHAT HAPPENS TO YOUR DATA

5.1 DELETION TIMELINE

Upon receiving a valid data deletion request, we will:

1. Acknowledge receipt of your request within 5 business days
2. Verify your identity and account ownership
3. Delete your personal data from our active systems within 30 calendar days
4. Send you a confirmation email once deletion is complete

5.2 DATA DELETION SPECIFICS

Deletion includes:

- Account profile information
- Contact information (name, email, phone if provided)
- Order history associated with your account
- Browsing and interaction records
- Saved preferences and wishlist items
- Communication records from our servers

5.3 EXCEPTIONS TO DELETION

We may retain certain data even after deletion if:

- Required by law or legal obligation (e.g., tax records, compliance requirements)
- Needed to complete ongoing transactions or fulfill orders placed before the deletion request
- Necessary for fraud prevention, security, or legal proceedings
- Retained in anonymized or aggregated form (no longer tied to you as an individual)
- Already deleted from our primary systems but retained in backup archives (which we delete per our standard retention schedule)

================================================================================

6. META'S REQUIREMENTS

In compliance with Meta's Platform Policy for Login with Facebook, we maintain the following:

- A public Data Deletion Policy available to all users
- A straightforward mechanism for users to request data deletion
- Prompt acknowledgment and processing of deletion requests
- Compliance with Facebook's data deletion callback URL requirements (for server-to-server deletion validation)
- Regular review and updates to this policy

================================================================================

7. IDENTITY VERIFICATION

To protect user privacy and prevent unauthorized data deletion, we may ask you to verify your identity before processing your request. Verification methods may include:

- Confirming your registered email address
- Providing a recent order number or transaction ID
- Answering security questions set during account creation
- Confirming your Facebook account connection

================================================================================

8. YOUR RIGHTS

Under this policy and applicable privacy laws (including CCPA, GDPR, and TDPSA where applicable), you have the right to:

- Request deletion of your personal data
- Request information about what data we hold
- Disconnect your Facebook account from Hazard St.
- Opt out of marketing communications
- Appeal a denied deletion request

================================================================================

9. APPEALS

If we deny your data deletion request, we will provide a reason and explain any exceptions that apply. You may appeal our decision by responding to our denial email or contacting support@hazardst.com within 30 days. Appeals will be reviewed by a member of our team and you will receive a final decision within 15 business days.

================================================================================

10. CONTACT US

For questions, concerns, or to submit a data deletion request, please contact us:

- Email: support@hazardst.com
- Mailing Address: Hazard St., McKinney, Texas, United States
- Instagram: @hazardstcentral
- Response Time: We aim to respond to all inquiries within 5 business days

================================================================================

11. CHANGES TO THIS POLICY

We reserve the right to update this policy to reflect changes in our practices, technology, legal requirements, or Meta's platform requirements. We will notify you of significant changes by updating the "Effective Date" at the top of this page and, if necessary, by sending you an email. Your continued use of Facebook Login after changes constitute your acceptance of the updated policy.

================================================================================

12. DATA RETENTION SCHEDULE

Outside of deletion requests, we retain personal data according to the following schedule:

- Account information: Retained while your account is active; deleted 90 days after account closure or inactivity
- Order and transaction records: Retained for 7 years to comply with tax and legal requirements
- Email communications: Deleted 2 years after final interaction unless required for compliance
- Analytics and browsing data: Deleted 12 months after collection
- Backup and disaster recovery copies: Deleted per our standard retention schedule (typically 90 days)

================================================================================

13. DISCLAIMER

This policy is provided for informational purposes and constitutes our commitment to your privacy rights. While we strive to comply with all applicable laws and Meta's policies, we recommend that you also review our full Privacy Policy for comprehensive information about our data practices. If you have concerns about privacy or data protection, please contact us immediately.

================================================================================

Last Updated: June 24, 2026