PRIVACY POLICY

Please read carefully these policies before purchasing from us.
By placing an order through our online store, you agree to the following.

​We at Crafty Paper Co. respect your privacy. This Privacy Policy describes how we collect, use, share, and protect the personal information you provide when you use our services, purchase from us, or contact us on our website, email, and/or social media. This Privacy Policy does not apply to the practices of third parties that we do not own or control.
​
Any changes to this Privacy Policy become effective immediately upon publication on our website, and you waive specific notice of any changes to the Policy by continuing to use and purchase from our site. We encourage you to review this Privacy Policy periodically, when you use our website for any purpose or engage with us on social media. You are deemed to have accepted any changes to any revised Privacy Policy by your continued use of our website after the revised Privacy Policy is posted.
​
WHY WE COLLECT INFORMATION
We rely on a number of legal bases to collect, use, and share your information, including:
- As needed to provide our services, such as to fulfill your order, to settle disputes, or to provide customer support;
- When you have provided your affirmative consent, which you may revoke at any time, such as by signing up for our mailing list;
- If necessary to comply with a legal obligation or court order or in connection with a legal claim, such as retaining information about your purchases if required by tax law; and
- As necessary for the purpose of our legitimate interests, if those legitimate interests are not overridden by your rights or interests, such as to provide the services you request and in our legitimate interest to improve our services.
​
THE INFORMATION WE COLLECT
To fulfill your order or contact you per your request, your must provide us with a variety of information. By accepting this Privacy Policy, you are specifically consenting to our collection of the data described below, to our use of the data, to the processing of this data, and to our sharing of the data with third-party processors as needed for our legitimate business interests. The information we collect may include:
PERSONAL DATA
Personal Data is information that can be used to identify you such as name, shipping and billing address, email address, telephone number, or demographic information like your age, gender, or hometown. You consent to giving us this information by providing it voluntarily on our website or any mobile application. You provide some of this information when you make purchases from our website. You may also provide this information by participating in various activities associated with us, including responding to blogs, contacting us with questions, or participating in social media. Your decision to disclose this data is entirely voluntary. You are under no obligation to provide this information, but your refusal may prevent you from accessing certain benefits from our website or from making purchases.
DERIVATIVE DATA
Derivative data is information that our servers automatically collect about you when you access our website, such as your IP address, browser type, the dates and times that you access our website, and the specific pages you view. If you are using a mobile application, our servers may collect information about your device name and type, your phone number, your country of origin, and other interactions with our application. Derivative data may also include data collected by third-party service providers, such as advertising and analytics providers, and may include cookies, log data, or web beacons. Cookies are discussed more fully below. Derivative data collected by third-party service providers generally does not identify a specific individual.
FINANCIAL DATA
Financial data is data that is related to your payment method, such as credit card or bank transfer details. We collect financial data in order to allow you to purchase, order, return, or exchange products or services from our website. We store limited financial data. Most financial data is transferred to our payment processors, Stripe and PayPal, and you should review these processors’ Privacy Policy to determine how they use, disclose, and protect your financial data. As a courtesy Stripe and PayPal's Privacy Policy can be found here:
https://stripe.com/us/privacy
https://www.paypal.com/us/webapps/mpp/ua/privacy-full – 
SOCIAL NETWORKING DATA
We may access personal information from social networking sites and apps, including Facebook, Instagram, Linkedin, Twitter, Snapchat, or other social networking sites or apps not named specifically here, which may include your name, your social network username, location, email address, age, gender, profile picture, and any other public information. If You do not want us to access this information, please go to the specific social networking site and change your privacy settings.
OTHER DATA
On occasion, you may give us additional data in order to enter into a contest or giveaway, or to participate in a survey. You will be prompted for this information and it will be clear that you are offering this kind of information in exchange for an entry into such a contest or giveaway.
​
INFORMATION SHARING AND DISCLOSURE
We may use and process your data for our legitimate business interests, which include, among other things, communicating with you, improving our goods or services, improving our website, and providing you with the information or products that you have requested.
We may share your information with third parties in limited circumstances. In particular, we may share your data with third-party processors as needed to serve our legitimate business interests, which include administration of our website, entering into contracts with you, communicating with you, taking orders for goods or services, delivering our goods and services, identifying trends, protecting the security of our company and website, and marketing additional goods and services to you. The legal basis for our disclosure of your data is both your consent to this Privacy Policy and our own right to protect and promote our legitimate business interests.
The following are specific reasons why we may share your information:
- Service providers. We engage with certain trusted third parties to perform functions and provide services to our business, such as delivery companies.  We will share your personal information with these third parties, but only to the extent necessary to perform these services.
- Business transfers. If we sell or merge our business, we may disclose your information as part of that transaction, only to the extent permitted by law.
- Compliance with laws. We may collect, use, retain, and share your information if we have a good faith belief that it is reasonably necessary to: (a) respond to legal process or to government requests; (b) enforce our agreements, terms, and policies; (c) prevent, investigate, and address fraud or other illegal activity, security, or technical issues; or (d) protect the rights, property, and safety of our customers, or others.
​
DATA RETENTION
We retain your personal information only for as long as necessary to provide you with our services and as described in our Privacy Policy.  However, we may also be required to retain this information to comply with our legal and regulatory obligations, to resolve disputes, and to enforce our agreements.  We generally keep your data for the following time period: four (4) years. 
Transfers of Personal Information Outside the European Union
Crafty Paper Co is located in the United States of America.  We may store and process your information through third-party hosting services in the US and other jurisdictions.  As a result, we may transfer your personal information to a jurisdiction with different data protection and government surveillance laws than your jurisdiction.  If we are deemed to transfer information about you outside the European Union, we rely on Privacy Policy as the legal basis for the transfer, as Google Cloud is Privacy Shield certified.
​
TRACKING TECHNOLOGIES
Cookies: We also use cookies (small text files sent to us by your computer) and web beacons to store certain information. We may use cookies to authenticate your identity, to determine if you are logged onto our website, for personalization, for security, for targeted advertising, or for analysis of the performance of our website and services. 
We may use any or all of the following types of cookies:
Essential Cookies: These cookies help us run our website and improve your experience on it.
Functionality Cookies: These cookies allow us to remember your preferences from earlier visits to our website.
Social Media Cookies: These cookies allow us to record when you have engaged with a social media tool while visiting our website. If You wish to change your social media sharing settings, please visit the privacy settings of the social media network.
Advertising Cookies: We may work with third-party advertising partners who collect information about your browsing habits on our website in order to later display a relevant ad about our services when you're on a third-party site such as a social media platform. These cookies may also allow us to access your location.
In addition, when you first encounter our website, you will be asked to “consent to cookies.” If You wish to disable cookies, You may do so through your individual browser options. However, this may affect your ability to use or make purchases from our website. More detailed information about cookie management with specific web browsers can be found at the browsers’ respective websites. By continuing to use our website and not disabling cookies on your browser, you are consenting to our use of cookies in accordance with the terms of this policy.
In addition, We may use third-party software to post advertisements on our website or mobile application, to oversee marketing or email campaigns, or manage other company initiatives. These third-party softwares may use cookies or similar tracking technology. We have no control over these third parties or their use of cookies. For more information on opting out of interest-based ads, visit the Network Advertising Initiative Opt-Out Tool or Digital Advertising Alliance Opt-Out Tool.
Email Confirmations: We may receive email confirmations when you open an email from us. This allows us to determine if users are responding favorably to our email communications and to improve those communications.
Other Technologies: Other data technologies may be used that collect comparable information for security, fraud detection, and similar purposes, to give us information about your use of our website, and to greater improve our website and service offerings to You.
​
WEBSITE ANALYTICS
We may partner with third-party analytic companies. The analytic companies may also use cookies (described above) or other tracking technologies to analyze visitors’ use of our website to determine the popularity of the content, and better understand online activity. We do not transfer personal information to these third-party vendors. However, in order to access our website, you must consent to the collection and use of your information by these third-party analytic companies. You should review their Privacy Policy and contact them directly if you have questions. If you do not want any information to be collected and used by tracking technologies, visit the Network Advertising Initiative Opt-Out Tool or Digital Advertising Alliance Opt-Out Tool.
​
INTERNATIONAL DATA
Our website is hosted by servers located in the United States of America, Therefore, if you reside outside of The United States of America, some of your data will be transferred internationally to and stored on those servers. In addition, we may use third-party processors (including payment processors) and subcontractors located in United States of America. We use all reasonable methods to protect the safety of your data during transfer, including hosting our website on reputable servers and engaging reputable third-party processors. By using this site and providing us with information, you consent to this transfer, processing, and storage of your information in United States of America. Note that the privacy laws in United States of America may not be as strict as those in other countries. Please be aware that:
We may transfer data that we collect to locations outside of our headquarters for processing or storing, and the data may be processed by our staff or by third-party processors. For example, we may engage third parties to fulfill orders. By submitting your personal data, you agree to this transfer, storing, and processing. We take all reasonable steps to make sure your data is treated securely and in conformity with this Privacy Policy.
Data that is provided to us is stored on secure servers. Payment information and other sensitive data will be encrypted to ensure its safety.
The transmission of data via the internet is never completely secure, and we cannot guarantee the security of data that is sent to us electronically. Your transmission of data to us is at your own risk.
Where data that you have transmitted to us is password protected, you are responsible for keeping the password confidential. You are exclusively responsible for any breaches of your data that results from your own disclosure of or failure to protect your password.
​
CALIFORNIA PRIVACY RIGHTS
The State of California has established its own unique regulations that apply to California residents. If you reside in California, you have the right to obtain from us, once per year and free of charge, information regarding what information we disclose to third-party marketers, and the names and addresses of each third party to whom we disclose your data. If you are a California resident and would like to make such a request, please use the contact information listed below.
If you are a California resident and under the age of 18, you have the right to request that we remove any data that you publicly post on our website. To request removal of your data, please use the contact information listed below. Note that while we will remove your data that is publicly posted on our website, we may not be able to completely remove that data from our systems.
 
YOUR RIGHTS
If you reside in certain territories, including the European Union, you have a number of rights in relation to your personal information.  While some of these rights apply general, certain rights apply only in certain limited cases. These rights are as follows:
- Access. You may have the right to access and receive a copy of the personal information we hold about you by contacting us using the contact information below.
- Change, restrict, delete. You may also have rights to change, restrict our use of, or delete your personal information.  Absent exceptional circumstances (such as where we are obligated to store data for legal reasons) we will generally delete your personal information upon request.
- Object. You can object to our processing of some of your information based on your legitimate interests and receiving marketing messages from us after providing your express consent to receive them.  In such cases, we will delete your personal information unless we have compelling and legitimate grounds to continue using that information or if it is needed for legal reasons.
- Complain. If you reside in the EU and wish to raise a concern about our use of your information (and without prejudice to any other rights you may have), you have the right to do so with your local data protection authority.
​
​
CONTACT US
For purposes of EU data protection law, Erika Hurtado is the data controller of your personal information.  If you have any quests or concerns, you may contact us at hello@craftypaperco.com