Privacy policy

Privacy Policy

Last updated: September 10, 2026

This Privacy Policy describes how CoreForm (operated by Pandax LLC, "we", "us", "our") collects, uses, shares and protects your personal information when you visit or make a purchase from getcoreforms.com (the "Site"), and the choices you have about that information. It applies together with our Terms of Service, Cookie Preferences and Do Not Sell or Share My Personal Information pages.

1. Information We Collect

Information you provide

  • Order information: name, billing and shipping address, email address, phone number, and the products you purchase.
  • Payment information: handled directly by our payment processors (Shopify Payments, PayPal, Affirm). We receive only a confirmation of payment and the last four digits of your card; we never receive or store your full card number.
  • Account information: if you create a customer account, your login email, order history and saved addresses.
  • Communications: messages you send to support, reviews you submit, survey responses and newsletter sign-ups.

Information collected automatically

  • Device and usage data: IP address, browser type, operating system, referring URLs, pages viewed, products viewed, time on site and interactions with the Site.
  • Cookies and similar technologies: see Section 6 and our Cookie Preferences page.

Information from third parties

  • Payment and fraud-screening providers (payment confirmation, risk signals).
  • Shipping carriers (tracking and delivery status).
  • Advertising and analytics platforms, when you arrive via an ad or link.

2. How We Use Your Information

  • To process, fulfill and deliver your orders, send order confirmations, shipping updates and digital products.
  • To provide customer support, handle returns, refunds, warranty claims and Shipping Protection claims.
  • To screen orders for fraud and protect the security of the Site.
  • To send marketing emails and SMS only if you have opted in; you can unsubscribe at any time using the link in any message or by contacting us.
  • To measure and improve the Site, products and advertising, including through analytics and A/B testing.
  • To show you relevant ads on other platforms (see Section 4 and your opt-out options).
  • To comply with legal obligations, enforce our Terms of Service and resolve disputes.

3. Legal Bases (where applicable)

Where required by law, we process your information based on: performance of a contract (fulfilling your order), your consent (marketing, non-essential cookies), our legitimate interests (site security, fraud prevention, improving our services), and legal obligations (tax, accounting, consumer protection).

4. How We Share Your Information

We do not sell your personal information for money. We share it only with service providers and partners who need it to operate the Site and fulfill your orders:

  • Shopify Inc. — our e-commerce platform, which hosts the Site and stores order data. See Shopify's Privacy Policy.
  • Payment processors — Shopify Payments, PayPal, Affirm (Shop Pay Installments).
  • Fulfillment partners and shipping carriers — to pack and deliver your order (name, address, phone, order contents).
  • Digital delivery and tracking apps — to deliver e-books and provide order tracking.
  • Email and SMS providers — to send transactional and, with your consent, marketing messages.
  • Analytics and advertising platforms — Google (Analytics, Ads, YouTube), Meta (Facebook/Instagram), TikTok and similar services, which may receive device identifiers and browsing activity via cookies or pixels. This sharing may be considered a "sale" or "sharing" for targeted advertising under some state laws; you can opt out on our Do Not Sell or Share My Personal Information page.
  • Legal and safety — when required by law, subpoena or court order, or to protect our rights, customers or the public.
  • Business transfers — if CoreForm is involved in a merger, acquisition or sale of assets, your information may be transferred as part of that transaction, subject to this policy.

5. Marketing Communications

We send marketing emails or texts only to customers who have opted in. Every marketing email includes an unsubscribe link; reply STOP to any text to opt out of SMS. Opting out of marketing does not affect transactional messages about your orders. Message and data rates may apply to SMS.

6. Cookies and Tracking Technologies

We use cookies, pixels and similar technologies for essential site functions (cart, checkout, security), performance analytics, and advertising. You can manage non-essential cookies on our Cookie Preferences page and through your browser settings. We honor the Global Privacy Control (GPC) browser signal as an opt-out of sale/sharing where required by law.

7. Data Retention

We keep order records for as long as needed to provide our services and meet legal, tax and accounting obligations (generally 7 years). Account information is kept until you ask us to delete it. Marketing data is kept until you unsubscribe. Analytics data is retained according to each provider's settings, typically 14–26 months.

8. Data Security

The Site is served over HTTPS, and payment data is processed by PCI DSS Level 1 certified providers. We limit access to personal information to staff and partners who need it, and we use industry-standard safeguards to protect it. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your Privacy Rights

Depending on where you live, you may have the right to:

  • Know / access the personal information we hold about you.
  • Correct inaccurate information.
  • Delete your personal information, subject to legal exceptions (for example, records we must keep for tax purposes).
  • Opt out of the sale or sharing of personal information for targeted advertising.
  • Limit the use of sensitive personal information (we do not collect sensitive personal information as defined by the CPRA).
  • Not be discriminated against for exercising these rights.

To exercise these rights, email support@getcoreforms.com with the subject "Privacy Request", or use the Do Not Sell or Share page. We will verify your identity by matching the details you provide against our records, and respond within 45 days (extendable by a further 45 days where permitted, with notice). You may designate an authorized agent to make a request on your behalf; we may require proof of authorization.

California residents (CCPA/CPRA)

In the preceding 12 months we have collected the categories of personal information listed in Section 1 (identifiers, commercial information, internet activity, and geolocation inferred from IP address) for the purposes in Section 2, and disclosed them to the categories of recipients in Section 4. We do not knowingly sell or share the personal information of consumers under 16. You may submit requests up to twice in a 12-month period free of charge.

Other U.S. states

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana and other states with comprehensive privacy laws have similar rights, including the right to appeal a decision on your request by replying to our response email.

Residents outside the United States

We ship only within the United States. If you access the Site from outside the U.S., your information is transferred to and processed in the United States, where privacy laws may differ from those of your country.

10. Children's Privacy

The Site is intended for adults. We do not knowingly collect personal information from anyone under 16. If you believe a minor has provided us information, contact us and we will delete it.

11. Third-Party Links

The Site may link to third-party websites and services, including social media and payment providers. Their privacy practices are governed by their own policies, which we encourage you to read.

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. The "Last updated" date at the top shows when it was last revised. Material changes will be announced on the Site or by email where appropriate.

13. Contact Us

Related Policies