Privacy Policy

1. Introduction

This Privacy Policy explains in detail how we collect, use, disclose, process, and protect your personal information when you access our website or place an order. We are committed to ensuring that your personal data is handled in a secure, transparent, and lawful manner in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) where applicable. By using our website, you acknowledge and agree to the practices described in this Privacy Policy.

2. Website Infrastructure

This website is a self-hosted e-commerce store built on WordPress and powered by WooCommerce. The platform enables us to manage products, process transactions, maintain customer accounts, and operate our online store efficiently. Our website is hosted on secure server environments that include regular system updates, security patches, vulnerability monitoring, and server-level protections to minimize risks associated with unauthorized access or cyber threats.

3. Categories of Personal Data Collected

We may collect personal data that you provide directly to us, including but not limited to your name, billing address, shipping address, email address, phone number, and any information submitted through forms or customer support communications. This information is required to process transactions, deliver products, and provide customer service.

4. Automatically Collected Information

When you visit our website, certain information is automatically collected through cookies and similar technologies. This may include your IP address, browser type, operating system, device identifiers, time zone, pages visited, referring URLs, and interaction behavior. This information is used for analytics, security monitoring, fraud prevention, and improving website functionality.

5. Order and Transaction Information

When you place an order, we collect transaction-related information including the products purchased, order value, payment method selection, delivery preferences, and shipping details. This information is essential for fulfilling your order and providing post-purchase support.

6. Purpose of Data Processing

We process personal data for legitimate business purposes, including order fulfillment, payment processing, shipping coordination, customer service, fraud prevention, legal compliance, and website improvement. We do not sell or rent your personal data to third parties.

7. Customer Communication

We use your contact details to send transactional communications such as order confirmations, shipping notifications, and customer service responses. Where legally permitted, we may also send marketing communications, and you have the right to opt out of such communications at any time.

8. Payment Processing Providers

All payments on our website are processed securely through trusted third-party payment providers, including Stripe and PayPal. These providers operate independently and are responsible for processing payment transactions in accordance with their own security standards and privacy policies.

9. No Storage of Payment Credentials

We do not store, process, or have direct access to complete payment credentials. This includes credit card numbers, CVV/security codes, expiration dates, or banking details. All payment information is submitted directly to Stripe or PayPal through encrypted channels, ensuring that sensitive financial data never resides on our servers.

10. Payment Security Standards

Stripe and PayPal implement advanced payment security measures including PCI-DSS compliance, encryption, tokenization, fraud detection systems, and risk-based authentication. These technologies help ensure secure transaction processing and protect against unauthorized use.

11. Technical Data Security Measures

We implement industry-standard technical safeguards to protect your data, including SSL (Secure Socket Layer) encryption, HTTPS protocols, secure hosting environments, firewall protection, malware scanning, intrusion detection systems, and regular system monitoring. These measures are designed to protect data during both transmission and storage.

12. Organizational Security Measures

We also implement organizational controls such as internal policies, staff training, and access restrictions to ensure that personal data is handled securely. Only authorized personnel with a legitimate business need have access to personal information, and such access is limited and monitored.

13. Data Minimization and Accuracy

We collect only the personal data necessary for specific purposes and take reasonable steps to ensure that the data is accurate, complete, and up to date. Users may request corrections to their data where applicable.

14. Data Retention Policy

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy, including legal, accounting, and dispute resolution requirements. When data is no longer needed, it is securely deleted or anonymized.

15. Sharing of Personal Data

We may share personal data with trusted third-party service providers such as payment processors (Stripe, PayPal), shipping carriers, hosting providers, and analytics services. These providers are contractually obligated to protect your data and use it only for the purposes for which it was disclosed.

16. International Data Transfers

As we provide shipping services worldwide, your personal data may be transferred to and processed in countries outside your country of residence. This may include transfers to the United States or other jurisdictions. We implement appropriate safeguards to ensure that such transfers comply with applicable data protection laws.

17. Cookies and Tracking Technologies

We use cookies and similar technologies to improve user experience, analyze website performance, and enhance security. Cookies may store session data, preferences, and usage patterns. You can control or disable cookies through your browser settings.

18. GDPR and European Data Rights

If you are located in the European Economic Area, you have rights under the General Data Protection Regulation (GDPR). These rights include access to your data, correction of inaccurate data, deletion of data, restriction of processing, data portability, and the right to object to certain processing activities.

19. Legal Basis for Processing

We process personal data based on lawful grounds, including the necessity to perform a contract (such as fulfilling an order), compliance with legal obligations, legitimate business interests, and, where applicable, your consent.

20. Fraud Prevention and Risk Control

We implement fraud prevention and risk monitoring systems to protect both customers and our business. This includes reviewing transaction data, detecting suspicious activity, and cooperating with payment providers and financial institutions to prevent unauthorized transactions.

21. Children's Privacy

Our website is not intended for individuals under the age of 13. We do not knowingly collect personal data from children. If such data is identified, we will take appropriate steps to delete it.

22. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy to reflect changes in legal requirements, technologies, or business operations. Updates will be posted on this page, and continued use of the website constitutes acceptance of the revised policy.

23. Contact Information

If you have any questions about this Privacy Policy, your personal data, or how your information is handled, you may contact us using the details below:

Email: [email protected]

Phone: +1(641) 219-8710

Address: 318 5TH AVE SE, CEDAR RAPIDS, IA 52401

We will respond to your inquiry within a reasonable timeframe in accordance with applicable data protection laws.