PRIVACY POLICY

 

Last updated: October 4, 2026

1. WHO WE ARE AND HOW TO CONTACT US

This Privacy Policy explains how Pinball Garage (“we,” “us,” or “our”) collects, uses, discloses, and processes personal information when you visit our website, contact us, create an account, place an order, or use our website features.

Business name: Pinball Garage

Contact person: Florian Knauer

For privacy questions or requests, please contact us using the details above.

“Personal information” generally means information that identifies, relates to, describes, or can reasonably be linked to an individual or household. The precise definition and rights available to you depend on the applicable law.

2. PERSONAL INFORMATION WE COLLECT

The information we collect depends on how you interact with our website. Categories may include:

• Identifiers and contact information, such as your name, email address, telephone number, delivery address, and account details.

• Order and transaction information, including products ordered, order numbers, order history, delivery details, and payment status.

• Customer communications, including messages sent by email, contact forms, WhatsApp Business, or other contact channels.

• Personalisation files, including images or other files you submit when requesting a personalised product.

• Internet and device activity, including IP address, browser type, operating system, pages viewed, referring page, access date and time, and cookie identifiers.

• Cookie, analytics, and advertising information collected through website technologies and third-party services, where enabled.

• Account information submitted when creating or managing a customer account.

Payment information may be processed directly by the relevant payment provider rather than stored by us.

3. SOURCES OF PERSONAL INFORMATION

We collect personal information:

• Directly from you when you browse our website, contact us, create an account, subscribe to a newsletter, or place an order.

• Automatically from your browser or device through server logs, cookies, and similar technologies.

• From service providers that help us host the website, process payments, deliver orders, analyse website usage, or prevent fraud and abuse.

• From payment or credit-check providers when you select a payment method that involves such checks.

4. HOW WE USE PERSONAL INFORMATION

We may use personal information to:

• Operate, maintain, secure, and troubleshoot our website.

• Respond to questions and customer-service requests.

• Create and administer customer accounts.

• Process, fulfil, ship, and support orders.

• Personalise products and fulfil personalisation requests.

• Process payments and help prevent fraud.

• Send newsletters and marketing communications where permitted by law.

• Analyse website performance where the relevant tools are enabled and legally permitted.

• Provide social-media features, videos, maps, and spam-prevention services.

• Maintain business records, enforce our terms, protect our rights, and comply with applicable legal obligations.

We will not use personal information for materially different purposes without providing any notice or obtaining any consent required by applicable law.

5. APPLICABLE U.S. PRIVACY LAWS

U.S. privacy law includes federal and state laws. Which laws apply depends on factors such as the location of the customer, the nature of the business, and applicable legal thresholds.

Depending on the circumstances, relevant laws may include the Federal Trade Commission Act, the CAN-SPAM Act governing commercial email, the California Consumer Privacy Act as amended by the California Privacy Rights Act, and similar state privacy laws.

This list does not mean every law applies to Pinball Garage. Applicability must be determined based on the business’s activities and legal obligations.

Because the business details currently identify Badboy Pinball as being located in USA General Data Protection Regulation  laws may continue to apply to certain activities. This U.S.-focused policy does not automatically replace those obligations.

6. WEBSITE LOGS, HOSTING, AND SECURITY

When you visit our website, our servers may automatically record information necessary to deliver and secure the website. This may include the page requested, date and time, data transferred, referring page, browser, operating system, and IP address.

We use this information to operate the website, diagnose technical problems, protect against malicious activity, and investigate suspected misuse.

Our hosting provider and authorised subcontractors may process website information on our behalf. The location of the hosting servers and the providers involved should be confirmed before publication.

We use HTTPS/TLS encryption to help protect information transmitted through our website. However, no method of electronic transmission or storage is completely secure.

7. COOKIES AND SIMILAR TECHNOLOGIES

Our website may use cookies and similar technologies to keep the website functioning, remember preferences, analyse traffic, enable embedded content, and support other features.

Some cookies are necessary for website functions. Other cookies, including certain analytics, advertising, social-media, video, and map technologies, may require consent depending on applicable law.

You can manage cookies through our website’s cookie-preference tool, if available, and through your browser settings. Blocking some cookies may affect website functionality.

Where required by law, we will obtain consent before setting or accessing non-essential cookies or similar technologies.

8. HOW WE DISCLOSE PERSONAL INFORMATION

We may disclose personal information to service providers when necessary for the purposes described in this policy.

These providers may include:

• Website hosting and IT providers.

• Communications providers, including WhatsApp Business.

• Payment providers, including Klarna and PayPal, if offered and selected.

• Shipping and fulfilment providers, including DHL or other carriers actually used.

• Suppliers and dropshipping partners involved in delivering products.

• Analytics and technology providers, including Google Analytics 4 and Google Tag Manager, where enabled.

• Social-media, video, map, and security providers, including Meta, YouTube, Google Maps, and Google reCAPTCHA, where enabled.

• Professional advisers, government authorities, or other parties where disclosure is necessary to comply with law, respond to lawful requests, protect rights or safety, or handle legal claims.

• A successor or transaction party in connection with a proposed or completed business sale, merger, or reorganisation, subject to applicable law.

We limit disclosures to what is reasonably necessary for the relevant purpose, subject to applicable law.

9. WHATSAPP BUSINESS AND OTHER ENQUIRIES

If you contact us through WhatsApp Business, we may use your telephone number, name, and the information you provide to respond to your message.

If your enquiry concerns an order, we may request details such as your order number or delivery information so that we can identify the transaction.

WhatsApp and its affiliated companies may process information under their own terms and privacy policy. Information may be processed or transferred in countries other than your own.

You can review WhatsApp’s privacy policy at:

https://www.whatsapp.com/legal/privacy-policy

If you contact us by email or through a contact form, we use the information you provide to respond and, where relevant, to handle a potential or existing transaction.

10. CUSTOMER ACCOUNTS

If you create a customer account, we use the information you submit to create and administer the account, provide account functions, and support your orders.

You may request account deletion by contacting us using the details in Section 1.

We may retain certain information where necessary to complete transactions, resolve disputes, prevent fraud, maintain business records, or comply with applicable legal requirements.

When information is no longer necessary or legally required, we will delete, de-identify, or otherwise dispose of it in accordance with applicable law.

11. NEWSLETTERS AND MARKETING

11.1 Newsletter subscriptions

If you subscribe to our newsletter, we use your email address to send the updates you requested.

We may send a confirmation email to verify your subscription.

You can unsubscribe at any time by using the unsubscribe link in a marketing email or by contacting us.

We will process opt-out requests as required by applicable law. We may retain limited information about your request to ensure that your preferences are respected.

11.2 Marketing to existing customers

We may send marketing messages about our products or services where permitted by applicable law.

Commercial emails will include the disclosures and functioning opt-out mechanism required by the CAN-SPAM Act where applicable.

We will honour opt-out requests and will not continue sending marketing communications where doing so would violate applicable law.

12. ORDER FULFILMENT AND PERSONALISATION

12.1 Personalisation files

If you submit an image or other file to personalise a product, we use it to produce and fulfil the product you requested.

Where necessary, the file may be shared with a production or fulfilment provider.

We will not use the file for unrelated purposes unless disclosed to you or permitted by law.

Personalisation files will be retained only for as long as necessary for the relevant purpose, subject to any applicable legal or operational retention requirements.

12.2 Payment, delivery, and suppliers

To process and fulfil an order, we may share relevant information with payment providers, delivery carriers, suppliers, and dropshipping partners.

The information shared may include your name, delivery address, contact details, and order information, depending on what is necessary for the relevant task.

12.3 Delivery services

If we use DHL or another delivery carrier for your order, we may share your name and delivery address with that carrier.

Where necessary and permitted by law, we may also share your email address or telephone number to arrange a delivery appointment or provide delivery notifications.

13. PAYMENT PROVIDERS

Our website may offer payment services from providers such as Klarna and PayPal. The available payment methods may vary by location and checkout configuration.

When you select a payment method, the relevant provider may receive information needed to process the transaction, such as your name, billing or delivery address, transaction details, and payment information.

If you select a deferred-payment, instalment, invoice, or similar payment option, the provider may request additional information and conduct fraud, identity, or creditworthiness checks under its own terms and applicable law.

Payment providers may process personal information according to their own privacy policies.

Please confirm which payment providers and methods are actually available to U.S. customers before publishing this section.

14. GOOGLE ANALYTICS AND GOOGLE TAG MANAGER

Our website may use Google Analytics 4 and Google Tag Manager to understand how visitors use the website and to manage website tags and analytics technologies.

Depending on their configuration, these services may collect information such as IP address, browser and device information, pages viewed, and interactions with the website.

Google may process information on servers in the United States or other countries.

Where required by law, these services will be activated only after the necessary consent has been obtained. You may change your preferences through the website’s cookie-preference tool, if available.

You can review Google’s privacy information at:

https://policies.google.com/privacy

https://policies.google.com/technologies/partner-sites

Features such as demographic reporting, Google Signals, and User-ID analysis should only be described as active if they are enabled on our website.

15. SOCIAL MEDIA, VIDEOS, MAPS, AND SPAM PREVENTION

15.1 Facebook and Instagram

If Facebook or Instagram plugins are enabled, activating them may cause your browser to connect to Meta’s systems and disclose information such as your IP address, browser information, device information, and the page you are visiting.

If you are logged into your social-media account, the provider may associate your interaction with that account.

Review Meta’s privacy policy at:

https://www.facebook.com/privacy/policy/

15.2 YouTube

If we embed YouTube videos, your browser may send information to Google or YouTube when the video or embedded content loads or plays.

If you are logged into a Google account, the provider may associate activity with that account.

Review Google’s privacy policy at:

https://policies.google.com/privacy

15.3 Google Maps

If we embed Google Maps, Google may receive information such as your IP address and information about the page displaying the map.

Google may process this information under its own privacy policy.

Review Google’s privacy policy at:

https://policies.google.com/privacy

15.4 Google reCAPTCHA

We may use Google reCAPTCHA to help distinguish human visitors from automated traffic and reduce spam, abuse, and malicious access.

The service may process IP address, browser and device information, and interaction data.

Where required by law, we will obtain consent before enabling technologies that require it.

Review Google’s privacy policy at:

https://policies.google.com/privacy

These sections apply only to services that are actually installed and enabled on our website.

16. INTERNATIONAL DATA TRANSFERS

We and our service providers may process personal information in countries other than the United States or the country in which you live, including Germany, other European countries, and the United States.

Privacy laws in those countries may differ from those in your jurisdiction.

Where required by applicable law, we will use an appropriate transfer mechanism and take any additional steps required for the transfer.

17. RETENTION OF PERSONAL INFORMATION

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including providing products and services, maintaining records, resolving disputes, preventing fraud, and meeting legal obligations.

The retention period depends on the type of information, the reason it was collected, our operational needs, and applicable law.

When information is no longer needed, we will delete it, de-identify it, or securely dispose of it unless retention is legally required or otherwise permitted.

18. U.S. STATE PRIVACY RIGHTS

Depending on your state of residence, the nature of our business, and whether the relevant law applies, you may have some or all of the following rights:

• The right to know or access personal information we have collected about you.

• The right to request correction of inaccurate personal information.

• The right to request deletion of personal information, subject to legal exceptions.

• The right to obtain a portable copy of certain personal information, where required.

• The right to opt out of certain processing, including the sale of personal information, targeted advertising, or certain profiling, where applicable.

• The right to limit certain uses of sensitive personal information under laws that provide this right.

• The right not to be unlawfully discriminated against for exercising your privacy rights.

• The right to appeal a decision on a privacy request where provided by applicable law.

The availability and scope of these rights vary by state and are subject to legal exceptions.

To submit a privacy request, contact us at mail@pinball-garage.com with the subject line “Privacy Request.”

Please state your request and the state in which you reside. We may need to verify your identity or authority to make the request.

We will respond within the timeframe required by applicable law and explain any denial where required.

You may use an authorised agent where permitted by applicable law. We may request proof of authorisation and verification of your identity.

Where applicable law provides an appeal right, you may appeal a denial by replying to our decision with “Privacy Appeal” in the subject line.

19. SALE, SHARING, AND TARGETED ADVERTISING

Some U.S. state privacy laws define “sale” broadly and may treat certain disclosures for targeted advertising as “sharing” or targeted advertising, even when no money changes hands.

Whether our website’s use of analytics, advertising, social-media plugins, or other third-party technologies qualifies as a sale, sharing, or targeted advertising depends on the actual configuration and applicable law.

Before publishing this policy, we must determine whether our practices fall within these definitions.

If applicable law requires an opt-out mechanism, we will provide the required method, which may include a “Do Not Sell or Share My Personal Information” link.

Where required, we will also process recognised opt-out preference signals, such as Global Privacy Control.

20. CHILDREN’S PRIVACY

Our website is not described as being directed to children.

We do not knowingly collect children’s personal information in circumstances where parental consent or other protections are required without following applicable law.

If you believe a child has provided personal information inappropriately, please contact us at sales@badboypinball.com so that we can review the matter.

If our website is directed to children or knowingly collects children’s information, this section must be revised to address applicable laws, including the Children’s Online Privacy Protection Act (COPPA), where relevant.

21. DO NOT TRACK AND PRIVACY PREFERENCE SIGNALS

Some browsers offer “Do Not Track” settings, but there is no single standard response to these settings across all websites.

Certain state laws require covered businesses to recognise specific opt-out preference signals, such as Global Privacy Control, in defined circumstances.

Our website’s actual handling of these signals must be confirmed before this policy is published.

22. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy to reflect changes in our practices, service providers, website features, or legal requirements.

When we make changes, we will update the “Last updated” date at the beginning of this policy and provide any additional notice required by law.

23. CONTACT US

For questions about this Privacy Policy or to submit a privacy request, please contact:

Pinball Garage

193 SAN PABLO CT, MARINA 93933 CA
Tel. +1 (813)324-9942
Email: sales@badboypinball.com

Before publishing this policy, we will confirm that these contact details remain current and that our actual data practices match the statements made in this policy.

IMPORTANT NOTICE BEFORE PUBLICATION

This policy is a U.S.-focused draft and is not a guarantee of legal compliance. Pinball Garage is identified in the original policy as being located in Germany. U.S. wording alone does not remove obligations under the GDPR or German law.

Before publishing, confirm which U.S. state privacy laws apply, which vendors and payment methods are actually used, how cookies and advertising technologies are configured, and whether required opt-out mechanisms are in place. Consider having a qualified U.S. privacy lawyer review the policy.