Privacy Policy
Last updated: September 24, 2026
Bay Shore Relics LLC ("we", "us") sells one-of-a-kind vintage 35mm railroad slides from bayshorerelicsllc.com. There are no customer accounts here, and we collect as little as possible. This policy explains what we collect, why, who helps us process it, and your rights — including rights under the EU/UK GDPR and California law.
Information we collect
- Browsing our site. Our own statistics beacon counts
page views and shop activity (listing views, add-to-cart, checkout starts)
on our own server. It uses a random ID stored in your browser's local
storage (
bsr-vid) — no cookies, no IP addresses stored with these counts. Google Analytics 4 and Microsoft Clarity are used only if you accept cookies (see the Cookie Policy); nothing from them loads otherwise. Our host and security provider, Cloudflare, processes standard technical data (such as IP address) to deliver the site securely and block attacks — see Cloudflare's privacy policy. - Your cart. Lives only in your own browser (localStorage) as a list of slide IDs. It never leaves your device except as part of your checkout, and we can't see it.
- Checkout and orders. Payment is processed by PayPal — we never see or store your card or bank details. When you check out, your order (name, email, shipping address, items, and totals) passes through our own secure server (Cloudflare Workers, USA) so we can verify the exact shipping and any Wisconsin sales tax with PayPal before capturing payment. We keep the resulting order record — name, address, items, amounts, and transaction ID — to ship your slides, handle returns, and keep the tax and business records the law requires. PayPal handles your payment details under the PayPal Privacy Statement.
- Mailing list. Launch-list signups go directly to our own system (our Commerce Manager, hosted on Cloudflare Workers in the USA) — no third party handles your address. Mailing-list addresses are used only for new-arrival notices — unsubscribe any time with the link in any email or by contacting us.
- Email. Order and customer emails are handled through Gmail (Google) under Google's Privacy Policy.
- Shipping. To print your label we share your name and delivery address with USPS.
Why we use it (lawful bases under GDPR)
- Contract — fulfilling your order, shipping, and handling returns.
- Legal obligation — tax and business record-keeping.
- Consent — mailing-list emails and third-party analytics cookies. You can withdraw consent any time (unsubscribe link, or the "change your choice" buttons on the Cookie Policy page).
- Legitimate interests — keeping the shop secure and preventing fraud, and understanding aggregate shop activity with our own first-party statistics. We balance these against your privacy and keep the data minimal.
Who we share it with
We don't sell, rent, or share your information for anyone else's marketing — ever. Processors who handle data only to run the shop:
- PayPal (payments) — USA
- Cloudflare (hosting, security, order processing) — USA
- GitHub (website hosting) — USA
- Google (Gmail; Google Analytics only with your consent) — USA
- Microsoft (Clarity session analytics only with your consent) — USA
- USPS (shipping labels) — USA
We also disclose information if the law requires it (for example, a valid legal order) or to protect against fraud.
International transfers
We are based in the United States, and our processors listed above are US-based, so your information may be transferred to and processed in the United States. Where you are in the EEA, UK, or Switzerland, these transfers are safeguarded by the EU–US Data Privacy Framework and/or Standard Contractual Clauses, as applicable with each processor.
How long we keep it
- Order and tax records: at least 7 years (US tax law).
- Contact messages: up to 2 years.
- Mailing list: until you unsubscribe.
- Aggregate shop statistics: up to 36 months.
- Analytics cookies (if accepted): per the Cookie Policy.
Your rights (EU / UK / EEA)
Under the GDPR you have the right to access your data, correct it, erase it, restrict or object to its processing, receive a portable copy, and withdraw consent at any time. To exercise any of these, email hello@bayshorerelicsllc.com — we'll respond within one month. You also have the right to complain to your national data protection authority (a list is published by the European Data Protection Board; in the UK, the ICO).
Your rights (California)
Under the CCPA/CPRA, California residents have the right to know what personal information we hold, to delete or correct it, and to opt out of any "sale" or "sharing" of it. We do not sell or share your personal information as those terms are defined, so there is nothing to opt out of — but you can still request to know, delete, or correct your information at hello@bayshorerelicsllc.com, and we will never discriminate against you for exercising these rights. We honor authorized-agent requests with your written permission.
Your choices
Clear your browser storage any time to empty your cart and reset display settings. Use the cookie banner or the Cookie Policy page to change your analytics choice. Ask us to remove you from the mailing list and we'll do it promptly.
Children
This shop isn't directed at children under 13, and we don't knowingly collect their information. If you're under 16 in the EEA/UK, please have a parent or guardian handle any mailing-list signup.
Changes
If this policy changes materially, we'll post the new version here with an updated date and note the change on this page for at least 30 days.
Contact
Bay Shore Relics LLC
1794 Allouez Ave Ste C PMB 116
Green Bay, WI 54311-6281, USA
Email: hello@bayshorerelicsllc.com
Phone: (920) 267-2480