Privacy Policy
HearthstoneCrafts.com is committed to safeguarding the privacy and personal data of all individuals who visit our website and use our services. We adhere strictly to the principles of the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws to ensure transparency, security, and fairness in the processing of your personal information. This Privacy Policy outlines how we collect, use, store, and protect your personal data and explains your rights under data protection legislation.
1. Commitment to Privacy and Data Protection
At HearthstoneCrafts.com, we respect your privacy and take the protection of your personal data seriously. We process your data transparently and lawfully and implement technical and organizational measures to keep your information secure. This policy outlines our practices and affirms our unwavering commitment to your privacy.
2. Scope of This Policy and Data Controller Role
This Privacy Policy applies to all users and visitors of HearthstoneCrafts.com and covers all personal data processed through our website or related services. For the purposes of data protection legislation, HearthstoneCrafts.com is the “data controller” responsible for the processing of your personal information.
If you have any questions regarding your data or this policy, you may contact us at: [email protected].
3. Categories of Data We Process
We collect and process the following categories of personal data, depending on your interactions with our services:
a. Usage Data
Includes details regarding how you access and use the website, such as browser type and version, IP address, operating system, referral sources, session behavior, and activity timestamps.
b. Account Data
Includes your full name, mailing address, email address, phone number, and other identifying information you provide when you create an account or complete a checkout.
c. Profile Data
Includes information you add or which is inferred from your use of the website, including product preferences, purchase history, interaction behavior, and account activity.
d. Communication Data
Includes support inquiries, correspondence history, submitted forms, survey responses, and all other communications between you and our team, including through email and customer support channels.
e. Technical Data
Includes information about the device(s) you use to access our website, including unique device identifiers, system and application software, settings, and general configuration data.
f. Transaction Data
Includes payment data (processed via secure third-party payment platforms), delivery information, order history, billing addresses, and transactional correspondence related to your purchases.
g. Preference Data
Includes information concerning your marketing preferences, product interests, opt-in or opt-out statuses, and choices regarding cookies and direct communications.
4. Legal Bases for Processing Personal Data
We rely on various legal grounds to lawfully process your personal data:
– Performance of a Contract: To fulfill purchase orders, deliver products, manage accounts, and provide customer service.
– Legitimate Interests: To improve our services, monitor website performance, and prevent fraud or security threats.
– Consent: For direct marketing communications, optional cookies, and promotional offers, where you have clearly agreed to such processing.
– Compliance with Legal Obligations: For compliance with applicable laws, regulatory requirements, and legal defense purposes.
5. Your Rights Under Data Protection Law
As a data subject, you have several rights with respect to your personal data, including:
– Right to Access: You may request a copy of the personal data we hold about you.
– Right to Rectification: You may request that any inaccurate or incomplete personal data be corrected or updated.
– Right to Erasure: You may request the deletion of your personal data, subject to lawful exceptions.
– Right to Restrict Processing: You may request that we limit the use of your personal data in certain circumstances.
– Right to Data Portability: You may request a copy of your data in a commonly used, machine-readable format for transmission to another provider.
To exercise any of these rights, please contact us at [email protected].
6. Security Measures
We take appropriate security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These include:
– Encryption of sensitive data in transit and at rest
– Role-based access control mechanisms
– Data redundancy and daily secure backups
– Mandatory data protection training for authorized personnel
Despite these measures, no internet-based platform can guarantee complete security. We encourage users to take appropriate steps to protect their own systems and credentials.
7. International Data Transfers
Personal data collected through HearthstoneCrafts.com may be transferred to and processed in countries outside your own, including countries not recognized for having adequate data protection laws. In such cases, we rely on approved Standard Contractual Clauses and other lawful mechanisms to ensure appropriate safeguards are in place.
8. Data Retention
We will retain your personal data only for as long as is necessary for the purposes set out in this policy, or as required by applicable law. More specifically:
– Usage and Technical Data: Retained for up to 24 months for analytics and performance monitoring.
– Account and Transaction Data: Retained for as long as you maintain an account and up to 7 years thereafter to meet legal obligations.
– Communication and Profile Data: Retained for the duration of your relationship with us, plus 2 years for reference.
– Preference Data: Retained until updated or revoked by you.
9. Cookie Policy
Our website uses cookies and similar technologies to enhance user experience, analyze traffic, and enable essential site functionalities. The types of cookies we use include:
– Essential Cookies: Necessary for core website functions such as navigation, login, and checkout.
– Functional Cookies: Enable enhanced features and personalization (e.g., language preferences).
– Analytics Cookies: Collect aggregated data to understand how visitors interact with the site (e.g., page views, bounce rates).
– Performance Cookies: Help us measure system performance and diagnose issues.
10. Cookie Management and Compliance
In compliance with GDPR and CCPA, we provide all users with the ability to control their cookie preferences through a cookie management dashboard available upon visiting HearthstoneCrafts.com. Users can opt in or out of non-essential cookies at any time. We honor browsers’ “Do Not Track” signals to the extent legally and technically feasible.
11. Protection of Children’s Privacy
HearthstoneCrafts.com is not intended for children under the age of 13, and we do not knowingly collect personal data from children. If we discover that we have unknowingly collected such data, we will promptly delete it. If you believe a child under 13 has provided personal data through our website, please contact us at [email protected] immediately.
12. Changes to This Privacy Policy
We may update or revise this Privacy Policy to reflect changes to our operational practices, legal obligations, or user expectations. Where appropriate, we will notify users of material changes via prominent on-site messaging or direct communication. Continued use of our services after any update indicates your acknowledgment of the amended policy.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how your personal data is used, you may contact us at:
Email: [email protected]
Website: https://www.hearthstonecrafts.com
We are committed to ensuring that your privacy rights are respected and upheld.
—
HearthstoneCrafts.com processes all personal information in a manner consistent with the GDPR, CCPA, and other applicable data protection regulations. Should you have any concerns about your data, we encourage you to reach out via the contact information above.