Privacy Policy

1. Who we are

Locust Street Workwear Co. ("we", "us") is a sole-proprietor apparel manufacturer owned by Elizabeth Long, trading at 549 Locust Street, Albany, GA 31701, United States. We are the data controller for information collected through dev.brightedgewears.com. Contact us at abuse@dev.brightedgewears.com or 229-809-2659 with any privacy question.

2. What we collect

• Information you give us: name, email, phone, billing and shipping address, order contents, and anything you type into the contact form.
• Payment information: handled entirely by our PCI-DSS compliant payment processor. We receive only the last four digits, card brand and authorization result. We never see or store the full card number or CVV.
• Technical information: IP address, browser and device type, referring page, and pages viewed. Collected in server logs (always) and via analytics (only with consent).
• Correspondence: emails and call notes, kept so that the next person who picks up your file knows what was already discussed.

3. Why we use it

To take payment and ship your order; to answer your questions; to process returns, exchanges and warranty repairs; to keep accounting and tax records as US law requires; to detect fraud and abuse; and, where you have consented, to measure which pages of this site are useful. That is the complete list.

4. Legal bases

We process order data because it is necessary to perform our contract with you; log and fraud data under our legitimate interest in operating a secure store; tax and accounting records to comply with legal obligations; and analytics and marketing email strictly on your consent, which you may withdraw at any time.

5. Cookies and analytics

Essential cookies keep your cart and consent choice working and cannot be switched off. Analytics and advertising cookies are set only after you press "Accept all" in our banner. Choosing "Essential only" means no analytics or advertising identifier is written. Full detail, including retention per cookie, is in the Cookie Policy.

6. Who we share with

We share the minimum necessary with: our payment processor; shipping carriers (USPS, UPS); our email and hosting providers; and our accountant. Each is bound by contract to use the data only to provide that service. We do not sell personal information, and we do not share it for cross-context behavioral advertising. We disclose data to law enforcement only on a valid legal demand, and we tell you unless legally forbidden.

7. How long we keep it

Order and invoice records: seven years, as US tax rules require. Contact form messages: 24 months. Marketing consent records: for as long as you are subscribed plus 24 months. Server logs: 30 days. Analytics data: 14 months. Anything past those periods is deleted or irreversibly aggregated.

8. Your rights

Wherever you live, we will honor a request to access, correct, delete, or receive a copy of your data, and to opt out of marketing or the sale of data (which we do not do anyway). Residents of California (CCPA/CPRA), Virginia, Colorado, Connecticut and Utah have these rights by statute, including the right not to be discriminated against for exercising them. Email abuse@dev.brightedgewears.com with the subject line "Privacy request". We verify identity by matching the request against an existing order or by a confirmation email, and reply within 30 days.

9. Security

The site is served over HTTPS with TLS 1.3. Administrative accounts use two-factor authentication. Order data is encrypted at rest by our host, access is limited to three named employees, and paper records are shredded. No system is perfect; if we ever suffer a breach affecting your data we will notify you and the Georgia Attorney General as required by O.C.G.A. § 10-1-912.

10. Children

This site is intended for adults. We do not knowingly collect information from anyone under 16. If you believe a child has given us data, write to us and we will delete it promptly.

11. International visitors

Our servers and staff are in the United States. If you visit from outside the US, your information is processed in the US under US law.

12. Changes

If we change this policy materially we will post the new version here with a new effective date and, for anything significant, note it on the homepage for 30 days. Previous versions are available on request.

13. Complaints

Call or write to us first — we are small and we would like the chance to fix it. If you are not satisfied, you may complain to the Georgia Department of Law's Consumer Protection Division or the Federal Trade Commission.