1. Introduction

This Privacy Policy ("Policy") describes how Docs Center Marketing ("D.C.M", "we", "our", or "us"), a business registered in the State of Nevada, United States, operating the website located at https://docscentermarketing.com and any related subdomains, mobile interfaces, or ordering platforms (collectively, the "Site"), collects, uses, discloses, retains, and safeguards personal information about visitors, account holders, customers, and email subscribers ("you" or "user").

We specialize in the online retail of model trains, radio-controlled vehicles, scale models, hobby tools, and related accessories from leading manufacturers. This Policy applies to personal information we process through the Site, our customer support channels, our order fulfillment operations, and our email communications sent through third party email service providers.

By accessing the Site, placing an order, creating an account, subscribing to our newsletter, or otherwise communicating with us, you acknowledge that you have read and understood this Policy. If you do not agree with any part of it, please discontinue use of the Site and refrain from providing personal information to us.

2. Scope and Applicability

This Policy applies to all personal information collected through the Site and any linked ordering, checkout, account management, and support functions offered by D.C.M. It applies whether you access the Site from within the United States or from another country to which we ship or provide services.

This Policy does not apply to third party websites, applications, payment processors, shipping carriers, analytics providers, or advertising platforms that we link to or integrate with, each of which is governed by its own privacy notice. We encourage you to review those notices before submitting personal information to any third party.

For purposes of applicable privacy laws, D.C.M is the "business" or "controller" that determines the purposes and means of processing personal information described in this Policy.

3. Categories of Personal Information We Collect

We collect the following categories of personal information, either directly from you, automatically through your use of the Site, or from limited third party sources:

• Identifiers, such as full name, billing address, shipping address, email address, telephone number, account username, and, where applicable, customer or order reference numbers.
• Commercial information, such as records of products purchased, obtained, or considered, order history, returns, refunds, wish lists, and customer service interactions.
• Financial and transaction information, such as payment card type, last four digits of the card, billing zip code, and transaction authorization details processed through our PCI compliant payment processors. We do not store full payment card numbers on our systems.
• Internet or other electronic network activity information, such as IP address, browser type, device identifiers, referring URLs, pages viewed, session duration, and interactions with the Site.
• Geolocation data, limited to approximate location derived from IP address for fraud prevention, shipping eligibility, and tax calculation.
• Communications data, such as the content of emails, chat messages, and support tickets exchanged with us, and metadata regarding delivery, opens, and clicks of our marketing emails where technically available.
• Inferences drawn from the above, such as product preferences and likely categories of interest, used to tailor recommendations and marketing content.

4. Sources of Personal Information

We collect personal information from the following sources: (a) directly from you when you create an account, place an order, subscribe to our newsletter, contact customer support, complete a form, or participate in a promotion; (b) automatically from your device and browser when you interact with the Site, through cookies, pixels, and similar technologies as described in Section 12; and (c) from service providers and business partners, such as payment processors, fraud prevention vendors, shipping carriers, email delivery providers, and analytics services.

We do not purchase, rent, or otherwise acquire email lists from third parties. Our mailing list is built exclusively through customer purchases and voluntary newsletter sign ups on the Site.

5. Purposes for Which We Use Personal Information

We use personal information for the following business and commercial purposes:

• To process, fulfill, ship, and deliver orders, including sending order confirmations, payment receipts, shipping notifications, tracking updates, and delivery confirmations.
• To create, authenticate, and manage user accounts, including verification emails, password resets, and security notifications.
• To provide customer service, respond to inquiries, process returns and refunds, and resolve disputes.
• To send transactional communications required for the operation of your order or account.
• To send promotional communications, newsletters, and offers to users who have voluntarily subscribed, with an option to unsubscribe in every message.
• To personalize your browsing and shopping experience, including product recommendations and saved preferences.
• To detect, prevent, and investigate fraud, unauthorized transactions, and abuse of the Site.
• To maintain the security, integrity, and performance of the Site and our systems.
• To comply with legal, tax, accounting, and regulatory obligations.
• To enforce our Terms and Conditions and to protect the rights, property, or safety of D.C.M, our customers, and third parties.

6. Legal Bases for Processing

Where required by applicable law, we rely on the following legal bases to process personal information: (a) performance of a contract with you, including the sale and delivery of products; (b) compliance with legal obligations to which we are subject; (c) our legitimate interests, including operating and improving the Site, preventing fraud, and marketing our own similar products to existing customers; and (d) your consent, where consent is required, including for promotional email to non-customers and for certain cookies and tracking technologies.

You may withdraw consent at any time in the manner described in this Policy without affecting the lawfulness of processing based on consent before its withdrawal.

7. How We Share Personal Information

We do not sell personal information in the traditional sense and we do not share personal information for cross context behavioral advertising. We disclose personal information only in the following circumstances:

• To service providers who process personal information on our behalf under written contracts that restrict their use of the information to the services they provide to us, including payment processors, shipping carriers, warehouse and fulfillment partners, hosting providers, email delivery providers, analytics providers, customer support platforms, and fraud prevention vendors.
• To professional advisors such as lawyers, auditors, and accountants where necessary for the establishment, exercise, or defense of legal claims or the operation of our business.
• To government authorities, courts, or regulators where required by law, subpoena, court order, or other legal process, or to protect our legal rights.
• To a successor entity in the context of a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or a portion of our assets, subject to standard confidentiality obligations.
• With your direction or consent, for any other purpose disclosed at the time of collection.

8. Email Communications

We use one or more third party email service providers, which may include Mailgun and similar providers, to send transactional and marketing email on our behalf. These providers process recipient email addresses, message content, and delivery metadata such as opens, clicks, bounces, and complaints solely to provide email delivery services to us.

All outbound mail is authenticated using industry standard protocols including SPF, DKIM, and DMARC. Transactional emails include order confirmations, payment receipts, shipping notifications, account verification, password resets, and customer support updates. Promotional emails are sent only to users who have explicitly subscribed and include an unsubscribe link in every message.

We promptly process unsubscribe requests, honor list removal requests, and suppress invalid, bounced, or complained addresses in accordance with the CAN-SPAM Act and applicable anti-spam laws.

9. Payment Processing

Payments on the Site are processed by third party PCI DSS compliant payment processors, including the providers behind major credit and debit cards, PayPal, Apple Pay, and Google Pay. When you enter payment information at checkout, that information is transmitted directly to the payment processor over an encrypted connection.

We receive from the payment processor only the information we need to complete and support the transaction, such as the payment method type, the last four digits of the card, the billing zip code, and the transaction authorization result. We do not store full payment card numbers or full CVV codes on our servers.

10. Shipping and Delivery Partners

To fulfill your order we share your name, shipping address, telephone number where required, and order details with shipping carriers and fulfillment providers, including national and international carriers such as USPS, UPS, FedEx, and DHL, and any regional carriers or fulfillment providers we engage. These parties use that information solely to deliver your order, generate tracking updates, and resolve delivery issues.

For international shipments, your information may be shared with customs authorities and freight forwarders in the destination country as required to clear customs and complete delivery.

11. Marketing and Newsletter Subscriptions

We send promotional emails only to users who have voluntarily subscribed through the Site or who have purchased from us and have not opted out of similar product marketing where permitted by law. Every promotional email includes a clearly visible unsubscribe link that allows you to opt out of future marketing communications at any time.

Opting out of marketing communications does not affect our ability to send you transactional messages related to your account or your orders, which are necessary for the operation of the services you have requested.

12. Cookies and Similar Technologies

We and our service providers use cookies, web beacons, pixels, local storage, and similar technologies on the Site. These technologies fall into the following categories:

• Strictly necessary cookies, which are required for the Site to function, including shopping cart, checkout, login, and security features.
• Functional cookies, which remember your preferences, language, and region.
• Analytics cookies, which help us understand how the Site is used so we can improve it.
• Marketing cookies, which measure the effectiveness of our marketing campaigns and may be used to show relevant messages on the Site or on third party platforms.

You can control cookies through your browser settings and, where applicable, through the cookie banner or preference center offered on the Site. Rejecting some cookies may affect the functionality of the Site.

13. Analytics Services

We use analytics services provided by reputable third party providers, such as Google Analytics, to understand aggregate usage patterns, measure the performance of the Site, and diagnose technical issues. These services may collect information such as IP address, browser type, pages viewed, and the time spent on each page.

Analytics providers are contractually restricted from using the information for their own independent purposes. Where required, we obtain consent for analytics cookies through our cookie banner.

14. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, including to provide the services, comply with our legal, tax, accounting, and reporting obligations, resolve disputes, and enforce our agreements.

Order and transaction records are retained for the periods required by applicable tax and commercial law. Account information is retained for the life of the account plus a reasonable period thereafter. Marketing subscription records are retained until you unsubscribe and for a reasonable suppression period thereafter to honor your opt out.

When personal information is no longer needed, we securely delete, anonymize, or aggregate it.

15. Data Security

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. These measures include encryption in transit using TLS, access controls, network segmentation, logging, vulnerability management, and regular security reviews.

No method of transmission over the Internet or method of electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us promptly of any suspected unauthorized use of your account.

16. International Data Transfers

We are based in the United States and our service providers may be located in the United States or in other countries. If you access the Site or provide personal information from outside the United States, your information may be transferred to, stored, and processed in the United States or in other countries whose data protection laws may differ from those in your jurisdiction.

Where required by applicable law, we implement appropriate safeguards for international transfers, such as standard contractual clauses or equivalent mechanisms.

17. Your Privacy Rights (General)

Subject to applicable law and reasonable verification of your identity, you may have the following rights with respect to your personal information: (a) to request access to and a copy of your personal information; (b) to request correction of inaccurate or incomplete information; (c) to request deletion of your personal information; (d) to request restriction of, or object to, certain processing; (e) to request portability of your personal information; and (f) to withdraw consent where processing is based on consent.

To exercise these rights, please contact us using the details in Section 25. We will respond within the timeframes required by applicable law.

18. California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA"), provides you with additional rights, including the right to: (a) know what personal information we collect, use, disclose, and sell or share; (b) request deletion of personal information subject to certain exceptions; (c) request correction of inaccurate personal information; (d) opt out of the sale or sharing of personal information for cross context behavioral advertising; (e) limit the use of sensitive personal information; and (f) not be discriminated against for exercising these rights.

We do not sell personal information for monetary consideration and we do not share personal information for cross context behavioral advertising as those terms are defined under the CCPA. To exercise your CCPA rights, please submit a request using the contact details in Section 25. You may designate an authorized agent to submit a request on your behalf, subject to verification.

19. Other State Privacy Rights

Residents of certain other U.S. states, including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws, may have rights similar to those described above, including the right to access, correct, delete, and port personal information, and to opt out of targeted advertising, sale, and certain profiling.

We honor these rights to the extent they apply to our processing of your personal information. To submit a request, please use the contact details in Section 25 and indicate your state of residence.

20. Children's Privacy

The Site is intended for a general audience and is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 without verified parental consent, we will promptly delete that information.

If you believe that we may have collected personal information from a child under 13, please contact us using the details in Section 25 so that we can take appropriate action.

21. Do Not Track and Global Privacy Control

Some browsers offer a "Do Not Track" signal. There is no consensus industry standard for how to respond to such signals, and we currently do not respond to Do Not Track signals. Where required by applicable law, we honor recognized opt out preference signals such as the Global Privacy Control ("GPC") as a valid request to opt out of the sale or sharing of personal information.

22. Third Party Links and Services

The Site may contain links to third party websites, services, and social media platforms that are not operated or controlled by us. This Policy does not apply to those third party services, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third party service before providing personal information to them.

23. Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this Policy and, where appropriate, provide additional notice through the Site or by email.

Your continued use of the Site after the effective date of the updated Policy constitutes your acceptance of the changes.

24. Complaints and Supervisory Authorities

If you have a concern about our handling of your personal information, please contact us first so that we may address it. You may also have the right to lodge a complaint with a competent data protection authority in your jurisdiction. For California residents, you may contact the California Attorney General.

25. Contact Us

If you have questions, concerns, or requests regarding this Policy or our privacy practices, please contact us at: