Privacy Policy

Responsible business

Q-Free America Inc. · Registration 20191897062. 4660 LaJolla Village Drive, Ste 500 , San Diego , CA , 92122. Email [email protected]; phone +1 757-546-3401. This is the correspondence and authorized postal/courier return address, not a walk-in collection counter.

This notice covers this storefront and order correspondence. Your bank, network operator and carrier have separate privacy practices. We do not receive your operator account activity merely because you buy a physical transponder here.

Data collected

Checkout requests name, email, phone, street address, city, state, ZIP, optional notes and agreement. The order record includes items, variants, quantities, prices, totals, submission time and reference. A server session holds the cart, checkout draft, security token and order key. Do not include sensitive personal data or banking credentials in notes.

Purposes and disclosure

We use this information to respond, confirm hardware compatibility, agree payment, arrange delivery, handle returns and protect against unauthorized or duplicate checkout. Necessary delivery details may be shared with a carrier. Payment correspondence is direct; this website does not collect card numbers or banking logins. We do not sell order data or use it for targeted advertising.

Storage and retention

The shop session expires absolutely 12 hours after creation, not 12 hours after the last activity. Expired session files are removed on subsequent site requests. Order requests are kept for up to 365 days and removed on later requests after expiry; no hourly deletion task is claimed. Correspondence required for an unresolved dispute or legal obligation may be retained longer for that specific need.

Security and browser storage

Orders are stored outside public web content with restricted file permissions. Necessary session cookies use HttpOnly and SameSite=Lax, and Secure on HTTPS. Only necessary cart/security storage and a store-specific preference are used. No optional analytics, advertising pixels or external font calls are installed. Hosting infrastructure may process security logs under its own controls. No internet system can be promised perfectly secure.

Your requests and California rights

Contact us to request access, correction or deletion and identify the relevant order reference. We verify proportionately without requesting a password or full identity document by default. We aim to respond within 30 calendar days; if a law requires a different timeline we follow it and explain any lawful retention exception. We do not discriminate for exercising applicable rights. California privacy information is available at https://oag.ca.gov/privacy/ccpa and complaints at https://oag.ca.gov/contact/consumer-complaint-against-business-or-company.

Updates and contact

If the data practices change, this page will be updated. Review the Cookie Policy for browser controls and contact us using the identity above for a privacy request. This policy does not claim that statutory business thresholds have been independently determined.