Flat-rate $15 shipping · Ships within 24 hours · Discreet packaging

Privacy Policy

Effective date: 2026. This Privacy Policy applies to savagebrandmarketing.lovable.app and any successor domain operated by Savage Sequence LLC under the trade name Helix Reference Co. ("we", "us"). It is designed to comply with the EU General Data Protection Regulation (GDPR), UK GDPR, the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA), the California Invasion of Privacy Act (CIPA), Virginia CDPA, Colorado CPA, Connecticut CTDPA, Utah UCPA, Texas TDPSA, and the FTC Act.

1. Information we collect

  • Identifiers & contact: name, email, shipping address, phone (if provided).
  • Order & transaction data: items purchased, amounts, payment confirmation reference, sender handle (Venmo/PayPal/Zelle/Cash App).
  • Compliance acknowledgment: the fact and timestamp of your agreement to the age & research-use disclaimer.
  • Technical data: IP address, device/browser info, referrer, pages viewed, and cookie identifiers.
  • Communications: messages and attachments you send us.
We do not knowingly collect information from anyone under 21 or from children under 13.

2. How we use information (purposes & legal bases)

To process and ship orders, verify identity and eligibility, provide customer service, detect fraud, meet legal and regulatory obligations, and — with your consent — send service updates. Legal bases under GDPR: contract performance, legitimate interests, legal obligation, and consent (for optional cookies and marketing).

3. Disclosure of information

We share personal information only with (a) payment processors, (b) shipping and logistics carriers, (c) hosting and analytics providers acting as our processors, (d) legal, tax, or accounting advisors, and (e) government or law enforcement when required by law. We do not sell personal information for money, and we do not "share" it for cross-context behavioral advertising as defined by CCPA/CPRA.

4. Cookies, tracking & CIPA

See our Cookie Policy. We do not use session replay, wiretap-style analytics, chatbot recording, or third-party pixels that capture keystrokes or communications without your explicit opt-in consent. We honor the Global Privacy Control (GPC) signal as a valid opt-out of any sharing of personal information for targeted advertising. This is intended to comply with the California Invasion of Privacy Act (CIPA) and equivalent state wiretap laws.

5. SMS / text messaging — TCPA & A2P 10DLC consent

We do not send unsolicited marketing text messages. If you provide a mobile number and opt in, we may send transactional messages related to your order (payment confirmation, shipping updates). Message and data rates may apply; message frequency varies. Reply STOP to opt out or HELP for help. Consent to receive text messages is not a condition of purchase. Any SMS program we operate is registered under the A2P 10DLC framework and complies with the Telephone Consumer Protection Act (TCPA), CTIA Messaging Principles & Best Practices, and applicable state mini-TCPA laws (e.g., Florida & Washington). Mobile opt-in data and consent records are not shared with third parties or affiliates for marketing.

6. Your rights

Depending on your jurisdiction, you have the right to (a) know what information we hold, (b) access or receive a copy, (c) correct inaccurate data, (d) delete data, (e) opt out of sale/sharing and targeted advertising, (f) limit use of sensitive information, (g) withdraw consent, (h) lodge a complaint with your data protection authority, and (i) be free from retaliation for exercising these rights. To exercise a right, email orders@savagesequence.com. We will verify your identity and respond within 45 days (CCPA/CPRA) or one month (GDPR).

7. Data retention

We retain order, tax, and compliance records for at least 7 years to comply with financial and regulatory obligations. Optional analytics data is retained no longer than 26 months. On verified deletion request we delete or de-identify personal data not required by law to be retained.

8. Data security

We use TLS in transit, access controls, least-privilege administration, and encrypted storage where available. No system is 100% secure; in the event of a breach affecting your personal data we will notify you and applicable regulators as required by law.

9. International transfers

Data is processed in the United States. If you access the site from outside the U.S., you consent to the transfer and processing of your information in the U.S. under appropriate safeguards (e.g., Standard Contractual Clauses where required).

10. Children

The site and its products are restricted to users 21 years or older. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided information, contact us and we will delete it.

11. Changes

We may update this policy. Material changes will be posted here with a new effective date, and if required by law, notified to you directly.

12. Contact / Data Controller

Savage Sequence LLC, d/b/a Helix Reference Co. — Texas, USA. orders@savagesequence.com.