Privacy
Privacy
The short version: we collect what is needed to make and deliver your order, and nothing else. We do not sell your data to anyone, and we do not run advertising trackers on this site.
Who is responsible
The Russian Archaeologist is the data controller. Our business address is 5036 Dr Phillips Blvd, Suite 234, Orlando, FL 32819. Questions or requests: support@russianarch.com.
What we collect, and why
- Your name and delivery address: to deliver the order. Without it there is no order.
- Your email address: to send the order confirmation and tracking, and to answer you if you contact us.
- What you bought and what you paid: to fulfil the order and to keep the accounting and tax records we are legally required to keep.
- What is in your cart, while you are shopping: the item codes, the quantities and the delivery country you pick. They are sent to our server to get a shipping price, and saved there when you start checkout so the payment can be matched back to the right order.
- Basic server logs: IP address and request details, kept briefly, to keep the site running and to deal with abuse.
We do not receive or store your card number. That goes directly to Stripe and never touches our servers.
The legal basis
Performing the contract you entered into when you ordered; complying with our legal obligations for tax and accounting records; and our legitimate interest in keeping the site secure and working.
Who else sees it
- Stripe: payment processing. They handle your card details and receive your name, email and billing address.
- Printful: our fulfilment partner. They receive your name and delivery address so the parcel can be packed and posted.
- Mailgun: delivers our order confirmations and tracking emails. They receive your email address and the contents of those messages. We have switched off their open and click tracking, so those emails contain no tracking pixels or rewritten links.
- The carrier handling your parcel.
That is the entire list. We do not share your details with anyone else, and we never sell them.
Where your data goes
Our suppliers are based in the United States and process data there. If you are in the UK or EU, that means your data leaves your country. Those transfers rely on the European Commission’s Standard Contractual Clauses, and on the UK Addendum to them where the transfer is from the United Kingdom.
How long we keep it
Order records for seven years, because tax law requires it. Support emails for two years. Server logs for 30 days. The basket saved when you start checkout is deleted after seven days if it never became an order.
Your cart
The cart itself is kept in your own browser’s local storage, so it survives you closing the tab. We do not need an account for it and we cannot see what is sitting in it.
Two things do reach us. Pricing the delivery is one: when the cart changes, or you choose a delivery country, the item codes, the quantities and that country are sent to our server, which asks the carrier what the parcel costs. Placing the order is the other: when you press checkout, that same basket (item codes, quantities and prices) is written down on our side so the payment coming back from Stripe can be matched to the right items. Neither of those carries your name or your address. We have no address for you until you type one on Stripe’s own checkout page.
Cookies and counting visits
This site sets no advertising cookies and no analytics cookies. Stripe sets its own cookies on its checkout pages, which are covered by Stripe’s privacy policy.
We do count page views, using analytics software we run on our own server rather than a third-party service. When an order is completed it also records that a sale happened and the amount, but not who placed it. It stores no cookies and nothing that identifies you personally, it does not follow you to other sites, and the numbers are not shared with anyone or sold.
Your rights
You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Email support@russianarch.com and we will respond within 30 days.
Deletion has one limit: we cannot delete an order record we are legally required to keep for tax purposes until that period is up.
If you are in the UK or EU and think we have handled your data badly, you can complain to your national data protection authority. In the UK that is the Information Commissioner’s Office.
Children
This store is not intended for children under 16, and we do not knowingly collect their data.
Changes
If this policy changes materially we will say so here, with the date below.
Last updated 14 September 2026