Privacy policy

Last updated: January 20, 2025

My Store operates this store and website, including all related information, content, features, tools, products, and services, to provide the User with a customized shopping experience ("Services"). My Store is powered by Shopify technology, which allows us to offer the User our Services. This Privacy Policy describes how we collect, use, and disclose the User's personal data when visiting and using the Services, making purchases through them, or otherwise communicating with us. In the event of a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy shall apply to the collection, processing, and disclosure of the User's personal information.

Please read this Privacy Policy carefully. By using and accessing the Services, the User acknowledges that they are familiar with this Privacy Policy and understand the principles of collection, use, and disclosure of their data described herein.

Personal Information We Collect and Process

When we use the term "personal information," we refer to information that identifies the User or can reasonably be associated with them. Personal information does not include information collected anonymously or information that has been anonymized in a way that makes it impossible to identify the User or associate it with them. We may collect or process the following categories of personal information, including inferences drawn from them, depending on how the User uses the Services and their place of residence, and to the extent permitted or required by applicable law:

Contact information includes first and last name, address, billing address, shipping address, phone number, and email address.

Financial information includes credit card numbers, debit card numbers and financial account numbers, payment card data, financial account data, transaction details, payment methods, payment confirmations, and other payment data.

Account information includes username, password, security questions, preferences, and settings.

Transaction information includes items the User views, adds to cart, adds to wishlist, purchases, returns, exchanges, or cancels, as well as past transactions.

Communications with us include information provided in communications with us, such as when submitting inquiries to customer service.

Device information includes information about the User's device, browser, or network connection, IP address, and other unique identifiers.

Usage information includes information regarding the User's interactions with the Services, including how and when the User uses or navigates the Services.

Sources of Personal Information

We may collect personal information from the following sources:

Directly from the User, including when creating an account, visiting or using our Services, communicating with us, or otherwise providing us with personal information.

Automatically through the Services, including from the User's device when using our products or services or visiting our websites, as well as through the use of cookies and similar technologies.

From service providers, including when we work with them to operate certain technology and when they collect or process the User's personal information on our behalf.

From our partners or other third parties.

How We Use the User's Personal Information

Depending on how the User interacts with us and the Services used, we may use the User's personal information for the following purposes:

Providing, customizing, and improving the Services. We use the User's personal information to provide the Services, including to fulfill the contract with the User, process payments, fulfill orders, remember preferences and products of interest to the User, send account-related notifications, process purchases, returns, exchanges, or other transactions, create and maintain the User's account and manage it, organize shipping, enable returns and exchanges, enable publication of reviews, and create personalized shopping experiences, for example by recommending products related to the User's previous purchases. This may include using the User's personal information to personalize and improve the Services.

Marketing and advertising. We may use the User's personal information for marketing and promotional purposes, such as sending marketing, advertising, and promotional communications via email, text messages, or traditional mail, and to display online advertisements promoting products or services within our Services or on other websites, including based on items purchased or added to cart by the User or other User activities within the Services.

Security and fraud prevention. We use the User's personal information to authenticate their account, ensure secure payments and purchases, detect and investigate potentially fraudulent, illegal, dangerous, or malicious activities and take appropriate steps to combat them, and protect public safety and ensure the security of our services. If the User chooses to use the Services and register an account, they will be responsible for ensuring the security of their account credentials. We strongly advise against sharing usernames, passwords, and other authentication data with anyone.

Communication with the User. We use the User's personal information to provide customer service, respond to their questions, provide effective services, and maintain business relationships.

Legal reasons. We use the User's personal information to ensure compliance with applicable law or respond to legitimate legal processes, including requests from law enforcement or government agencies, and to conduct investigations or participate in evidentiary proceedings in civil matters, potential or actual litigation, or other adversarial proceedings, and to enforce or investigate potential violations of our terms or policies.

How We Disclose Personal Information

In certain circumstances, we may disclose the User's personal information to third parties for legitimate purposes, in accordance with this Privacy Policy. These circumstances may include:

In the case of Shopify, we may disclose data to vendors and other third parties that provide services on our behalf (e.g., IT management, payment processing, data analysis, customer service, cloud storage, fulfillment, and shipping).

In the case of business and marketing partners, to provide marketing services and display advertisements to the User. For example, we use Shopify to provide personalized advertising through third-party services based on the User's online activity across various merchants and websites. Our business and marketing partners will use the User's data in accordance with their own privacy notices. Depending on their place of residence, the User may have the right not to share their information for the purpose of displaying personalized advertisements and marketing based on online activity across various merchants and websites. The User may exercise their right to opt out of such data use here.

When the User directs us to disclose certain information to third parties, requests it, or consents to it, for example for the purpose of shipping products or in connection with the use of social media widgets or login integrations.

With our affiliated entities or within our corporate group.

In connection with a business transaction such as a merger or bankruptcy, to fulfill obligations under applicable law (including in response to court summons, search warrants, and similar requests), to enforce applicable terms of service or policies, and to protect and defend the Services, our rights, the User's rights, or the rights of others.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information regarding the User's access to and use of the Services in order to provide and improve them. Information provided within the Services will be transmitted to and shared with Shopify, as well as third parties that may be located in countries other than the User's country of residence, for the purpose of providing services to the User. Furthermore, to secure, develop, and improve our business, we use certain advanced Shopify features that include data and information obtained from the User's interactions with our Store, with other merchants, and with the Shopify platform. To provide these advanced features to the User, Shopify may use personal information collected during the User's interactions with our Store, with other merchants, and with the Shopify platform. In such circumstances, Shopify is responsible for processing the User's personal information, including responding to their requests to exercise their rights related to Shopify's use of their personal information for these purposes. To learn more about how Shopify uses personal information, and about any rights the User may have, please visit the Shopify Consumer Privacy Policy section. Depending on their place of residence, the User may exercise their applicable rights regarding their personal data here: Link to Shopify privacy portal.

Third-Party Websites and Links

The Services may contain links to websites and other online platforms operated by third parties. If the User transfers to websites not associated with or controlled by us, they should review their privacy and security policies and other rules and conditions. We do not guarantee the privacy or security of such websites, nor are we responsible for them. This includes, but is not limited to, the accuracy, completeness, and reliability of information found on those websites. Information that the User provides in public or semi-public areas, including information shared on third-party social media platforms, may also be visible to other users of the Services and/or users of those third-party platforms without restrictions on their use by us or the third party. Our inclusion of such links does not in itself constitute endorsement of the content on such platforms or their owners or operators, except as explained in the Services.

Children's Data

The Services are not intended for use by children. We do not knowingly collect any personal information about children below the age of majority in the User's jurisdiction. If the User is a parent or guardian of a child who has provided us with their personal information, the User may contact us using the contact details below to request its deletion. As of the effective date of this Privacy Policy, we do not have actual knowledge of "sharing" or "selling" (as defined by applicable law) personal data of individuals under the age of 16.

Security and Retention of User Data

Please note that no security measures are perfect or impenetrable, and we cannot guarantee "complete security." Furthermore, any information transmitted to us may not be secure during transmission. We advise against using insecure channels to transmit sensitive or confidential information to us.

How long we retain the User's personal information depends on various factors, such as whether we need that information to operate the User's account, provide the Services to the User, comply with legal requirements, resolve disputes, or enforce other applicable contracts and policies.

User Rights and Choices

Depending on their place of residence, the User may be entitled to all or some of the following rights related to their personal information. However, these rights are not absolute, may apply only in certain circumstances, and, in some cases, we may reject the User's request to the extent permitted by law.

Right of access/information. The User may have the right to access the personal information we hold about them.

Right to erasure. The User may have the right to request the deletion of personal information we hold about them.

Right to rectification. The User may have the right to request the correction of inaccurate personal information we hold about them.

Right to data portability. The User may have the right to obtain a copy of the personal information we hold about them and to request its transfer to a third party in certain circumstances and with certain exceptions.

Right to opt out of the sale or sharing of data for targeted advertising. Depending on their place of residence, the User may have the right to opt out of the "sale" or "sharing" of their personal information for purposes deemed "targeted advertising," as defined by applicable law. The User may exercise their right to opt out of such data use here. If the User visits our website with the Global Privacy Control opt-out preference signal enabled, depending on where the User is located, we will automatically treat this as an opt-out request for the device and browser used to visit this website. If we can associate the device sending the signal with a Shopify account, we will also apply the opt-out request to that account. More information about Global Privacy Control can be found at https://globalprivacycontrol.org/. We do not recognize "Do Not Track" signals other than Global Privacy Control that may be sent from the User's web browser or device.

Managing communication preferences. We may send the User promotional emails, and the User may opt out of receiving them at any time using the unsubscribe option displayed in our emails. If the User opts out, we may still send non-promotional emails, for example regarding their account or orders placed.

If the User is a resident of the United Kingdom or the European Economic Area and is subject to exceptions and limitations provided by local law, in addition to the rights described above, they may exercise the following rights:

Objection to data processing and restriction of processing: The User has the right to ask us to stop or restrict the processing of their personal information for certain purposes.

Withdrawal of consent: In cases where we need the User's consent to process their personal information, the User has the right to withdraw that consent. If the User withdraws consent, this will not affect the lawfulness of any processing based on their consent before its withdrawal.

The User may exercise any of these rights where indicated in the Services or using the contact details below. To learn more about how Shopify uses the User's personal information and the rights that may be available to them, including rights related to Shopify's data processing, please visit https://privacy.shopify.com/.

We will not discriminate against the User for exercising any of these rights. We may need to verify the User's identity before proceeding with their request, in accordance with applicable law. Under applicable regulations, the User may authorize a representative to submit requests on their behalf to exercise their rights. Before accepting such a request from a representative, we will require proof that they have been authorized by the User to act on their behalf, and we may also ask the User to directly confirm their identity. We will respond to the User's request within the timeframe provided by applicable regulations.

Complaints

For complaints regarding the way we process personal data, please contact us using the contact details below. Depending on their place of residence, the User may have the right to appeal our decision by contacting us using the contact details below, or to file a complaint with the local data protection authority. A list of relevant EEA data protection supervisory authorities can be found here.

International Data Transfers

We may transfer, store, and process the User's personal information outside their country of residence.

If we transfer the User's personal information outside the European Economic Area or the United Kingdom, we rely on recognized data transfer mechanisms, such as the European Commission's Standard Contractual Clauses or equivalent agreements issued by the relevant supervisory authority in the United Kingdom, unless the data is transferred to a country that has been recognized as providing an adequate level of protection.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will publish the revised Privacy Policy on this website, update the "Last Updated" date, and notify the User of changes in accordance with applicable law.

Contact

Email: wintercrochet@wp.pl