Privacy Policy

This Privacy Policy describes how Craft and Love ("Site", "we", "us" or "our") collects, uses and discloses your personal information when you visit the Site, use our services or make purchases at craftandlove.com ("Site") or otherwise communicate with us (collectively, the "Services"). For purposes of this Privacy Policy, "you" and "your" refer to you as the user of the Services, whether you are a customer, website visitor or another person whose information we collect under this Privacy Policy.

Please review this Privacy Policy carefully. By using any of the Services, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree to this Privacy Policy, please do not use any of the Services.

General information

The administrator of your personal data is Craft and Love stationery from Tetiana Kolomiiets, with its registered office at: st. Jana Kilińskiego 1/32, 80-452 Gdańsk, Poland, NIP: 6751783307, REGON: 525496078.

In all matters relating to the processing of your personal data, you can contact us:
- by mail to the address: Craft and Love, st. Jana Kilińskiego 1/32, 80-452 Gdansk , Poland ;
- by e-mail to: support@craftandlove.com.

We will try to respond as soon as possible, no later than within 14 days, unless a shorter period is required by law.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes in our practices or for other operational, legal or regulatory reasons. We will update this Privacy Policy on the Site, update the “Last Updated” date, and take any other steps required by applicable law.

How we collect and use your personal information

To provide the Services, we collect and have collected over the last 12 months personal information about you from a variety of sources, as described below. The information we collect and use varies depending on how you interact with us.

In addition to the specific purposes described below, we may use the information we collect about you to communicate with you, provide the Services, comply with legal obligations, enforce the Terms of Service, and protect or defend the Services, our rights, and the rights of users or others.

What personal information do we collect?

The types of personal information we collect about you depend on how you interact with our Site and use our Services. When we use the term “personal information,” we are referring to information that identifies, relates to, describes, or is reasonably likely to be associated with you. The following sections describe the categories and specific types of personal information we collect.

Data collected directly from you

Information you directly provide to us through our Services may include:

• Basic contact information including name, address, telephone number, email address.
• Order information including name, billing address, shipping address, payment confirmation, email address, phone number.
• Account information including username, password, security questions.
• Information about your purchases, including products you browse, add to your cart, or add to your wish list.
• Customer support information, including information you choose to include in your communications with us, such as when sending a message through the Services.

Certain features of the Services may require you to directly provide certain information about yourself. You can choose not to provide this information, but doing so may prevent you from using or accessing those features.

Data collected using cookies

We also automatically collect certain information about your interaction with the Services (“Usage Data”). We may use cookies, pixels, and similar technologies (“Cookies”) to do this. Usage Data may include information about how you use our Site and your account, including information about your device, browser, network connection information, IP address, and other information relating to your interaction with the Services.

Data obtained from third parties

Finally, we may obtain information about you from third parties, including vendors and service providers who may collect information on our behalf, such as:

• Companies that support our Site and Services, such as Shopify.
• Our payment providers who collect payment information (e.g. bank account number, credit or debit card information, billing address) to process payments, to fulfil orders and to provide products or services you have requested, to perform a contract with you.
• When you visit our Site, open or click on emails we send you, or interact with our Services or advertisements, we or third parties we work with may automatically collect certain information through online tracking technologies such as: pixels , web beacons , software developer kits , third party libraries and cookies.

Any information obtained from third parties will be treated in accordance with this Privacy Policy. We are not responsible or liable for the accuracy of information provided to us by third parties and are not responsible for the policies or practices of third parties. For more information, see the section below, Third Party Websites and Links.

How we use your personal information

• Providing Products and Services. We use your Personal Information to provide you with the Services and perform our contract with you, including to process payments, fulfill orders, send you notifications in connection with your account, purchases, returns, exchanges or other transactions, create, maintain and generally manage your account, arrange for shipping, facilitate returns and exchanges and allow you to post reviews.
• Marketing and Advertising. We use your personal information for marketing and promotional purposes, such as sending you marketing, advertising and promotional communications via email, text message or postal mail and displaying advertisements for products or services. This may include using your personal information to better tailor the Services and advertising on our Site and other sites.
• Security and Fraud Prevention. We use your personal information to detect, investigate, or take action regarding possible fraudulent, illegal, or malicious activity. If you choose to use the Services and register an account, you are responsible for maintaining the confidentiality of your account access information. We strongly recommend that you do not share your username, password, or other access information with anyone else. If you believe your account has been compromised, please contact us immediately.
• Communicating with you. We use your personal information to provide you with customer support and to improve our Services. This is in our legitimate interest to be responsive to you, to provide effective services to you and to maintain our business relationship with you.

Cookies

Like many websites, we use cookies on our Site. For detailed information about the cookies we use to power our store using the Shopify platform, please see https://www.shopify.com/legal/cookies . We use cookies to power and improve our Site and our Services (including remembering your actions and preferences), to conduct analytics, and to better understand how you interact with the Services (our legitimate interest in administering, improving, and optimizing the Services). We may also allow third parties and service providers to use cookies on our Site to better tailor services, products, and advertising on our Site and other sites.

Most browsers automatically accept cookies by default, but you can choose to remove or reject cookies through your browser controls. Please note that removing or blocking cookies may negatively impact your user experience and may cause some Services, including certain features and general functionality, to not function properly or to become unavailable. Additionally, blocking cookies may not completely prevent us from sharing information with third parties, such as our advertising partners.

How we disclose personal information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes in accordance with this Privacy Policy. Such circumstances may include:

• With vendors or other third parties who perform services on our behalf (e.g. IT management, payment processing, data analysis, customer support, cloud storage, fulfillment and shipping).
• With business and marketing partners, including Shopify, to provide services and advertise to you. Our business and marketing partners will use your information in accordance with their own privacy notices.
• Where you directly request or otherwise provide consent for us to disclose certain information to third parties, for example for the purposes of sending you products or through social media widgets or login integrations, with your consent.
• To our subsidiaries or within our corporate group, in our legitimate interest in running a successful business.
• In connection with a commercial transaction such as a merger or bankruptcy, to comply with legal obligations (including in response to subpoenas, search warrants and similar requests), to enforce the Terms of Use of the Services, and to protect or defend the Services, our rights, and the rights of our users or others.

Over the last 12 months, we have disclosed the following categories of personal information and sensitive personal information (marked with *) about you for the purposes described above in the sections “How we collect and use your personal information” and “How we disclose your personal information”:

Category:

• Identifiers, such as basic contact details and certain order and account information.
• Commercial information such as order information, purchase information and customer support information
• Internet or similar network activity, such as Usage Data

Recipient categories:

• Vendors and third parties who perform services on our behalf (such as internet service providers, payment processors, customer support partners and data analytics providers)
• Business and Marketing Partners
• Subsidiaries

We do not use or disclose sensitive personal information to draw conclusions about you.

User Generated Content

The Services may allow you to post product reviews and other user-generated content. If you choose to submit user-generated content to any public area of ​​the Services, that content will be public and accessible by anyone.

We do not control who will have access to the information you choose to share with others, and we cannot guarantee that those who have access to this information will respect your privacy or maintain its security. We are not responsible for the privacy or security of any information you make publicly available, nor for the accuracy, use, or misuse of information you disclose to or receive from third parties.

Third Party Websites and Links

Our Site may contain links to websites or other online platforms operated by third parties. If you click on links to sites not affiliated with or controlled by us, you should read their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness or reliability of the information contained on such sites. Information that you provide on public or semi-public platforms, including information that you share on third-party social media platforms, may also be visible to other users of the Services and/or users of such third-party platforms, without limitation as to its use by us or by any third party. Our inclusion of such links does not imply any endorsement of the content of such platforms or their owners or operators, unless disclosed on the Services.

Data regarding children

The Services are not intended for use by children, and we do not intentionally collect any personal information about children. If you are the parent or guardian of a child who has provided us with personal information, you may contact us using the contact details provided below to request that we delete it.

As of the effective date of this Privacy Policy, we have no actual knowledge that we “share” or “sell” (as defined under applicable law) the personal information of anyone under the age of 16.

Security and storage of your data

Please note that no security measures are perfect or impenetrable, and we cannot guarantee “perfect security.” Furthermore, no information you send to us is secure during transmission. We recommend that you do not use unsecure channels to send sensitive or confidential information to us.

How long we retain your personal information depends on various factors, such as whether we need the information to maintain your account, provide the Services, comply with legal obligations, resolve disputes, or enforce other applicable agreements and policies.

Your rights and choices

Depending on where you live, you may have some or all of the rights listed below regarding your personal information. However, these rights are not absolute, may only apply to certain circumstances, and in some cases we may be able to refuse your request as required by law.

• Right of access/information. You may have the right to request access to the personal data we hold about you and to determine how it is used and processed. Please note that access to certain information may be restricted under privacy laws and regulations. You may access your personal data by obtaining a copy of your personal data or by requesting information about the personal data we hold about you.

• Right to rectification. If we hold incomplete or inaccurate information about you, you may have the right to have that information corrected or supplemented.
• Right to Erasure/Right to Be Forgotten. You may have the right to request that we delete your personal information from our systems, in certain circumstances. We may not be able to delete your personal information where we need to keep it for legal reasons or other legitimate interests.
• Right to restrict processing. You may have the right to request that we restrict the processing of your personal data, in certain circumstances, for example if you believe that we are processing incorrect personal data or the processing is unlawful.
• The right to data portability. In some jurisdictions, you may have the right to receive your personal data in a structured, commonly used and machine-readable format and to transmit that data to another party responsible for processing (where technically feasible).
• Right to object. In some cases, you may have the right to object to the processing of your personal data for legitimate reasons.
• Right to withdraw consent. If we process your personal data based on your consent, you have the right to withdraw your consent at any time. Withdrawing consent will not affect the lawfulness of processing that took place before your consent was withdrawn.

You may exercise any of these rights where indicated on our Site or contact us using the contact details set out below.

We will not discriminate against you for exercising any of these rights. We may need to collect information from you to confirm your identity, such as your email address or account information, before we can meaningfully respond to your request. Subject to applicable law, you may designate an authorized agent to make requests on your behalf to exercise your rights. Before we accept such a request, we will require that the agent provide evidence that you have authorized them to act on your behalf, and we may ask you to directly confirm your identity. We will respond to your request in a timely manner, consistent with applicable law.

Complaints

If you have a complaint about how we process your personal data, please contact us using the contact details provided below. If you are not satisfied with our response to your complaint, depending on where you live, you may have the right to appeal our decision by contacting us using the contact details provided below, or to refer your complaint to your local data protection authority.

International Users

Please note that we may transfer, store and process your personal information outside of the country in which you reside, including in the United States. Your personal information is also processed by employees and service providers and partners in these countries.

If we transfer your personal data outside of Europe, we will rely on recognised transfer mechanisms such as the European Commission's Standard Contractual Clauses or equivalent contracts issued by a competent authority in the UK, where appropriate, unless the transfer is to a country that has been recognised as providing an adequate level of protection.

Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us: support@craftandlove.com.