Legal — Privacy Policy

Privacy Policy

Last updated: April 2026

Cardiff Research Lab (“CRL,” “we,” “us,” or “our”) operates cardiffresearchlab.com. This policy describes how we collect, use, and protect your personal information when you use our site or services.

Information We Collect

We collect information you provide directly:

• Name and email address — when you subscribe to our newsletter, register for a trip, or contact us.
• Phone number — when you register for an expedition.
• Shipping address — when you purchase prints or physical products.
• Payment information — processed by Stripe. We do not store card numbers or payment details on our servers.
• Messages and form submissions — when you use the contact form or field submission form.

How We Use Your Information

• To process and fulfill orders for prints and products.
• To process expedition registrations and collect deposits.
• To send expedition-related communications (logistics, reminders, documentation).
• To send the CRL newsletter, if you have subscribed. You can unsubscribe at any time via the link in any email.
• To respond to inquiries submitted through the contact form.

Third-Party Services

We use the following third-party services that may process your data:

• Stripe — payment processing for prints and expedition deposits. Stripe handles all card data and is PCI-DSS compliant. See stripe.com/privacy.
• Resend — transactional email and newsletter delivery. Your email address is stored in Resend to send and manage communications. See resend.com/privacy-policy.
• Printful — print-on-demand fulfillment. Your name and shipping address are shared with Printful to fulfill print orders. See printful.com/policies/privacy.
• Vercel — site hosting. Standard server logs (IP address, request path, timestamp) are retained for a limited period. See vercel.com/legal/privacy-policy.

Cookies

We use minimal cookies — only what Next.js sets for standard site functionality (session handling). We do not use advertising cookies, tracking pixels, or third-party analytics cookies. No data collected via cookies is sold or shared with advertisers.

Data Retention

We retain your information for as long as necessary to fulfill the purpose it was collected for — order fulfillment, trip logistics, or newsletter subscription. You may request deletion at any time (see below).

Your Rights

You have the right to access, correct, or delete the personal information we hold about you. To exercise any of these rights, contact us at hello@cardiffresearchlab.com. We will respond within 30 days.

Data Sales

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. Period.

Changes to This Policy

If we make material changes to this policy, we will update the “Last updated” date above. Continued use of the site after changes constitutes acceptance of the updated policy.

Contact

Questions about this policy: hello@cardiffresearchlab.com