Privacy Policy
Effective Date: 8.01.2025
[Your Business Name] (“we”, “our”, or “us”) values your privacy. This Privacy Policy outlines how we collect, use, and safeguard your information when you visit or make a purchase on [your website URL] (“Website”).
We comply with applicable privacy laws, including the California Consumer Privacy Act (CCPA/CPRA) and the General Data Protection Regulation (GDPR) for residents of the European Union (EU), European Economic Area (EEA), and the United Kingdom (UK).
1. Information We Collect
We collect only the necessary personal data required to process and fulfill your order or respond to inquiries:
- Name
- Email address
- Shipping and billing address
- Phone number (if provided)
- Payment information (handled securely by third-party processors)
- Order details (items purchased, order number, date)
- IP address and limited technical information (for basic analytics and site functionality)
We do not create or maintain user accounts.
2. How We Use Your Information
We use your information to:
- Process and ship orders
- Communicate about your order status
- Respond to customer service requests
- Handle returns and refunds
- Maintain internal business records for tax and legal compliance
We do not sell or rent your personal data to third parties.
3. Legal Basis for Processing (GDPR)
Under the GDPR, we process your personal data based on:
- Contractual necessity (e.g., fulfilling your order)
- Legal obligations (e.g., for accounting or taxes)
- Legitimate interests (e.g., fraud prevention or customer service)
We only collect the minimum data needed for those purposes.
4. Your Rights (GDPR and International)
If you are located in the EU/EEA/UK or another jurisdiction with similar rights, you have the right to:
- Access a copy of the personal data we hold about you
- Request correction or deletion of your personal data
- Object to or restrict certain types of processing
- Withdraw consent where applicable
- Data portability (receive your data in a usable format)
- Lodge a complaint with a data protection authority in your country
To exercise any of these rights, contact us at: [your email address].
5. Your Rights (CCPA/CPRA – California Residents)
If you are a California resident, you have the right to:
- Know what personal information we collect and how it’s used
- Request deletion of your personal information
- Opt out of the sale or sharing of your personal information (we do not sell your data)
- Correct inaccurate personal information
- Limit the use of sensitive personal information (we do not collect sensitive data like SSNs or biometric data)
You may exercise these rights by contacting us at [your email address]. We will not discriminate against you for exercising your rights.
6. Cookies and Tracking
We use cookies and similar tracking technologies for:
- Functionality (e.g., remembering your cart)
- Analytics (e.g., understanding website usage)
You can manage your cookie preferences through your browser settings. EU/EEA users may see a cookie banner to manage consent.
7. Third-Party Services
We share data only with trusted service providers necessary to run our business, such as:
- Payment processors (e.g., Stripe, PayPal)
- Shipping carriers (e.g., USPS, UPS)
- Email service providers (for order confirmations and support)
These third parties are required to protect your data and use it only for the services they provide to us.
8. Data Retention
We retain your personal data only as long as necessary for:
- Completing your order
- Tax and legal obligations
- Resolving disputes
- Enforcing our agreements
Typically, this is up to 7 years unless otherwise required by law.
9. International Data Transfers
If you are located outside the United States, please note that your information may be transferred to and processed in the U.S., where our servers and service providers are located.
We take steps to ensure that any data transfers comply with applicable data protection laws, including the use of standard contractual clauses where required.
10. Security
We implement reasonable physical, technical, and administrative safeguards to protect your data from unauthorized access, loss, misuse, or alteration.
Payment information is handled via secure SSL encryption and processed through PCI-compliant third-party providers.
11. Children’s Privacy
Our website is not intended for children under 13, and we do not knowingly collect information from minors. If we learn we have collected data from a child, we will delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy to reflect changes in law, practices, or technology. Updates will be posted here with the updated effective date.
13. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your rights, you may contact us at:
Salt City Collective
Email: [email protected]
Website: https://www.saltcitycollective.com