Privacy

When you submit a form on this site (order, sample, contact brief, design brief, booking, payment, complaint, or feedback) we collect what you type into it: your name, brand, email, phone, order details, and any files you attach. If you open a portal account we also keep your account details and the requests you place through it. In the background we only measure our ads, as section 07 explains.

Public form submissions are forwarded to Google Apps Script endpoints and land in Google Sheets operated by the F21 team, who are notified by email. Portal accounts, portal requests, and files you upload in the portal are stored in our database and private file storage with Supabase, in the EU (Ireland); files are only reachable through short-lived links issued to you or the F21 team. The site itself runs on Vercel. We do not sell your data and we do not share it outside the team that serves you, the providers named here, and Meta for measuring our ads (section 07).

If you create a portal account with email, we store your name, email, phone, brand, and country, plus a securely hashed password, using Better Auth. A session cookie keeps you signed in; it exists only to make your account work, not to track you. Each session records the IP address and browser type it was opened from, so we can spot misuse of your account.

If you choose Continue with Google or Continue with Facebook, that provider shares your name, email address, and profile picture with us, and nothing else. We never see your Google or Facebook password, we cannot post on your behalf, and we do not read your contacts or friends list. A Facebook sign-in still has to confirm its email address with us before the portal opens.

Account emails, such as the link that verifies your address, are sent from customersupport@factory21.co through our email provider, Resend. We only email you about your account, your requests, and your orders.

The payment page collects your transfer reference and a screenshot of your bank or InstaPay transfer so a human can verify it. We never ask for, collect, or store card numbers on this site.

We use the Meta Pixel and Meta's Conversions API to see which of our Instagram and Facebook ads bring people to Factory 21. On our public pages and in your portal account, Meta may receive the page you viewed, your browser and IP address, and Meta's own cookies (_fbp, _fbc). When you create an account, send an order, sample or design request, or book a meeting, and as your order moves on (our team calls you, prices your order, or receives your deposit), we also tell Meta that it happened, with your email, phone number and account ID in hashed (scrambled) form, so Meta can match it to an ad you saw. We never send Meta prices, amounts, screenshots, your designs or what you ordered, and our team's pages are never measured. Meta handles this under its own privacy policy (facebook.com/privacy/policy). You can limit it in your Meta ad settings, and an ad or tracker blocker stops the part that runs in your browser. We also keep one cookie of our own, f21_src, for 90 days: the campaign tags of the ad or link that brought you, saved with your account when you sign up. Apart from these, the only cookie is the portal sign-in session. When something breaks, a technical error report goes to our monitoring service, Sentry, without your IP address and without screen recordings. To stop abuse, our forms and sign-in count requests per IP address for a short window.

Files, specs, artwork, and designs you send us remain yours. We do not reuse your work or show it publicly without your written permission.

We keep your details for as long as you have a portal account or an open order with us, and afterwards for as long as we need them to answer questions about past orders. Payment and invoice records are kept as long as the law requires.

You can see, correct, or delete what we hold about you. You can change your phone number from your portal account page at any time; for anything else, email customersupport@factory21.co and a human will handle it.

Email customersupport@factory21.co from the address on your account with the subject Delete my data. We will delete your portal account, the requests and files stored with it, and your details in our order sheets within 30 days, and confirm by email. The only exception is payment and invoice records we are legally required to keep. What we already sent Meta (hashed, see section 07) is handled under Meta's own policy. If you signed in with Facebook, you can also remove Factory 21 under Facebook Settings, Apps and Websites; that stops Facebook sharing anything further with us, and the email above removes what we already hold.