Privacy policy

Section 1 - Information Collection

When you make a purchase from our store, we gather your personal details like your name, address, and email as part of the buying process. Additionally, when you browse our site, your IP address is automatically recorded, helping us understand your browser and operating system.

Email Marketing (if applicable): We may send you updates about our store, products, and promotions if you agree to receive them.

Text Marketing (if applicable): With your permission, we might send you text messages about our store, products, and updates such as checkout reminders. This system uses webhooks to facilitate messaging.

Section 2 - Obtaining Consent

How do you give consent?

By providing your personal information to complete transactions, verify your payment method, or arrange deliveries, we assume you consent to our use of your information for these specific purposes. If we request personal data for other reasons, such as marketing, we will seek your explicit consent or provide you with an option to decline.

How do you withdraw consent?

If you decide to change your preferences after opting in, you can withdraw your consent at any time by contacting us at theleeffa@gmail.com

Section 3 - Disclosure

We may share your personal data if required by law or if you breach our Terms of Service.

Section 4 - Shopify Hosting

Our store operates on the Shopify platform, providing us with the infrastructure to sell our products and services. Your data is securely stored on Shopify's servers behind firewalls.

Payments: If you use a direct payment method, Shopify securely stores your credit card information using PCI-DSS encryption. Your transaction data is stored only as long as needed to complete your purchase and is then deleted.

All direct payment gateways adhere to PCI-DSS standards, established by the PCI Security Standards Council, involving major brands such as Visa, Mastercard, American Express, and Discover.

These requirements help ensure secure handling of your credit card data. For more details, you can review Shopify’s Terms of Service and Privacy Statement.

Section 5 - Third-Party Services

Third-party providers collect, use, and disclose your data only as needed to perform services for us. However, certain providers, such as payment gateways, have their own privacy policies regarding the data we provide to them during transactions. We encourage you to review their policies for insights into how your data will be managed.

Please note that third-party providers may operate in jurisdictions different from yours or ours. This could subject your information to laws of those jurisdictions.

For example, if you are in Canada and your transaction is processed by a payment gateway in the United States, your data may be subject to U.S. laws, including the Patriot Act.

Once you leave our site or are redirected to a third-party site, you are no longer governed by our Privacy Policy or Terms of Service.

Links

If you click on links from our site, they may take you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.

Google Analytics: We use Google Analytics to understand who visits our site and what pages are viewed.

Section 6 - Security Measures

We take precautions to protect your personal data using industry best practices to prevent loss, misuse, unauthorized access, disclosure, alteration, or destruction.

When you provide credit card information, it is encrypted with SSL technology and AES-256 encryption. While no method is 100% secure, we follow PCI-DSS requirements and industry standards.

Section 7 - Cookies

Here is a list of cookies we use to enhance your experience. You can opt-out of cookies if you prefer.

• _session_id: Unique token, sessional, helps Shopify store session information.
• _shopify_visit: Persistent for 30 minutes, tracks visits for stats.
• _shopify_uniq: Expires at midnight, counts visits from a single customer.
• cart: Persistent for two weeks, stores cart information.
• _secure_session_id: Unique token, sessional.
• storefront_digest: Unique token, indefinite, determines visitor access.
• PREF: Set by Google, tracks store visits.

Section 8 - Age of Consent

By using our site, you confirm that you meet the legal age of majority in your location or have received permission from a guardian to use the site.

Section 9 - Privacy Policy Changes

We reserve the right to modify this policy at any time. Changes are effective immediately upon posting. If we make significant changes, we will notify you here so that you are aware of what information we collect, how we use it, and under what conditions we disclose it. In case of a merger or acquisition, your information may be transferred to the new owners to continue providing services.

Questions and Contact Information

For access, correction, amendment, or deletion of your personal data, to file a complaint, or for more information, contact our Privacy Compliance Officer at theleeffa@gmail.com