Last update: 2/12/24
This website collects information about you during the checkout process on the store page. What follows is information about what is collected, how long it’s stored for, and so on. I’ve done what I can to make this as accurate and thorough as I can, though if there are any issues or questions feel free to contact me.
Who we are
Our website address is: https://www.helenetimma.com.
What we collect and store
While you visit our site, we’ll track:
- Products you’ve viewed: we’ll use this to, for example, show you products you’ve recently viewed
- Location, IP address and browser type: we’ll use this for purposes like estimating taxes and shipping
- Shipping address: we’ll ask you to enter this so we can, for instance, estimate shipping before you place an order, and send you the order!
We’ll also use cookies to keep track of cart contents while you’re browsing our site.
Note: you may want to further detail your cookie policy, and link to that section from here.
When you purchase from us, we’ll ask you to provide information including your name, billing address, shipping address, email address, phone number, credit card/payment details and optional account information like username and password. We’ll use this information for purposes, such as, to:
- Send you information about your account and order
- Respond to your requests, including refunds and complaints
- Process payments and prevent fraud
- Set up your account for our store
- Comply with any legal obligations we have, such as calculating taxes
- Improve our store offerings
- Send you marketing messages, if you choose to receive them
If you create an account with us, we will store your name, email and phone number which will be used with the checkout page on future orders.
We store this information as long as it is necessary for the purposes listed above, and we are not legally required to continue to keep it. For example, we will store order information for business purposes such as taxes and accounting, which will include your name, email address and billing and shipping addresses
We will also store comments or reviews, if you choose to leave them.
How we get your consent?
When you provide us with personal information to complete a transaction, verify your chosen form of payment, and place an order, we imply that you consent to our collecting it and using it for that specific reason only (with the exception of tax and accounting information as defined in this policy.)
If we ask for your personal information for a secondary reason, such as marketing, we will ask you directly for your expressed consent with an opportunity to opt out.
How do you withdraw your consent?
If you decide to change your mind after opting in, you may withdraw your consent for us to contact you, and use or disclosure of your information at any time by contacting us at:
tinydragonstudiosllc@gmail.com
helenet.art@gmail.com
Who on our team has access
Members of our team have access to the information you provide us. For example, both Administrators and Shop Managers can access:
- Order information like what was purchased, when it was purchased and where it should be sent, and
- Customer information like your name, email address, and billing and shipping information.
Our team members have access to this information to help fulfill orders, process refunds and support you.
Website Platform and third-party apps
This shop is hosted via WooCommerce through WordPress. WooCommerce provides our e-commerce platform which allows us to sell products. WooCommerce and Printful (print on demand service which provides products and shipping for my store currently) store your personal information such as your name, email or phone number, and your address when you place an order on our shop.
Payments are processed through PayPal. As such, when processing payments, some of your information will be passed over to PayPal, including required information to process or support the payment, including total and billing information. All prices are in USD.
Please see the PayPal Privacy Policy for more details.
Delivery Times of Goods and Services
Our products unless labeled otherwise are sourced from our printing partners which are based in the US as well as other parts of the world. Therefore, it can take longer to ship products to you depending on the shipping location. Shipping could be delayed for up to 2-4 weeks for customers outside of the US and Europe. There are also possible shipping delays which fall out of the realm of things we can manage, but we will do our best to get things to you as quickly as possible.
Customs and or Duties and Taxes
Prices on our shop do not include any import or customs duties and tax charges applicable to your order. WE ARE NOT RESPONSIBLE FOR ANY CUSTOMS AND OR DUTIES AND TAXES APPLIED TO YOUR ORDER. You will be responsible for paying any fees upon delivery and such fees will be dependent on the country the order is being shipped to. Please check with the Customs Department in your local area for information regarding these charges.
Returns and Exchanges
All sales are final, although if you receive a misprint or defect, once you return it, within 14 days a replacement will be arranged to be sent to you. You’ll be responsible for any additional charges.
Order Not Received
If there are any issues with your order, please bring them up within 4 weeks of the order being processed. It may help to contact your local post office first and ask about your order.
Wrong Address
If you put in the wrong address by mistake and your item or items are not delivered to you, the item may be returned to the Printful Warehouse. If it is returned and you want the item sent to the correct address, you would be responsible for any additional fees this would incur. If your item was returned due to an incorrect address, we will attempt to contact you.
What we share with others
We share information with third parties who help us provide our orders and store services to you; for example —
Payments
We accept payments through PayPal. When processing payments, some of your data will be passed to PayPal, including information required to process or support the payment, such as the purchase total and billing information.
Please see the PayPal Privacy Policy for more details.
Comments
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Cookies
If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
Embedded content from other websites
Articles or links on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
External Sites and Sharing Buttons
Data Used: When official sharing buttons are active on the site, each button loads content directly from its service in order to display the button as well as information and tools for the sharing party. As a result, each service can in turn collect information about the sharing party. When a non-official Facebook or a Pinterest sharing button is active on the site, information such as the sharing party’s IP address as well as the page URL will be available for each service, so sharing counts can be displayed next to the button. When sharing content via email (this option is only available if Akismet is active on the site), the following information is used: sharing party’s name and email address (if the user is logged in, this information will be pulled directly from their account), IP address (for spam checking), user agent (for spam checking), and email body/content. This content will be sent to Akismet (also owned by Automattic) so that a spam check can be performed. Additionally, if reCAPTCHA (by Google) is enabled by the site owner, the sharing party’s IP address will be shared with that service. You can find Google’s privacy policy here.
Who we share your data with
If you request a password reset, your IP address will be included in the reset email. Your data may also be shared with any of the websites mentioned on this policy, and any sharing would then pertain to their privacy policy.
How long we retain your data
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
For transactions through the store, personal data may be collected and stored pertaining only to tax information and shop management (i.e. tracking and managing sales.)
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
What rights you have over your data
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Where your data is sent
Visitor comments may be checked through an automated spam detection service.
We collect information about visitors who comment on Sites that use our Akismet Anti-spam service. The information we collect depends on how the User sets up Akismet for the Site, but typically includes the commenter’s IP address, user agent, referrer, and Site URL (along with other information directly provided by the commenter such as their name, username, email address, and the comment itself).
Payments
We accept payments through PayPal. When processing payments, some of your data will be passed to PayPal, including information required to process or support the payment, such as the purchase total and billing information.
Please see the PayPal Privacy Policy for more details.
WooCommerce Shipping & Tax
Data Used: For payments with PayPal or Stripe: purchase total, currency, billing information. For taxes: the value of goods in the cart, value of shipping, destination address. For checkout rates: destination address, purchased product IDs, dimensions, weight, and quantities. For shipping labels: customer’s name, address as well as the dimensions, weight, and quantities of purchased products.
Data Synced (?): For payments, we send the purchase total, currency and customer’s billing information to the respective payment processor. Please see the respective third party’s privacy policy (Stripe’s Privacy Policy and PayPal’s Privacy Policy) for more details. For automated taxes we send the value of goods in the cart, the value of shipping, and the destination address to TaxJar. Please see TaxJar’s Privacy Policy for details about how they handle this information. For checkout rates we send the destination ZIP/postal code and purchased product dimensions, weight and quantities to the carrier directly or via EasyPost, depending on the service used. For shipping labels we send the customer’s name, address as well as the dimensions, weight, and quantities of purchased products to EasyPost. We also store the purchased shipping labels on our server to make it easy to reprint them and handle support requests.
Contact information
If there are any privacy concerns I can be contacted via helenet.art@gmail.com
How we protect your data
Paypal encryption is set up through the site in the interest of keeping everyone’s information safe.
What data breach procedures we have in place
Brute Force Attack Protection
Data Used: In order to check login activity and potentially block fraudulent attempts, the following information is used: attempting user’s IP address, attempting user’s email address/username (i.e. according to the value they were attempting to use during the login process), and all IP-related HTTP headers attached to the attempting user.
Activity Tracked: Failed login attempts (these include IP address and user agent). We also set a cookie for 1 day to remember if/when a user has successfully completed a math captcha to prove that they’re a real human. Learn more about this cookie.
What third parties we receive data from
Jetpack
Data Used: To deliver this functionality and record activities around site management, the following information is captured: user email address, user role, user login, user display name, WordPress.com and local user IDs, the activity to be recorded, the WordPress.com-connected site ID of the site on which the activity takes place, the site’s Jetpack version, and the timestamp of the activity. Some activities may also include the actor’s IP address (login attempts, for example) and user agent.
Activity Tracked: Login attempts/actions, post and page update and publish actions, comment/pingback submission and management actions, plugin and theme management actions, widget updates, user management actions, and the modification of other various site settings and options. Retention duration of activity data depends on the site’s plan and activity type. See the complete list of currently-recorded activities (along with retention information).
Data Synced (?): Successful and failed login attempts, which will include the actor’s IP address and user agent.
WooCommerce Shipping & Tax
Data Used: For payments with PayPal or Stripe: purchase total, currency, billing information. For taxes: the value of goods in the cart, value of shipping, destination address. For checkout rates: destination address, purchased product IDs, dimensions, weight, and quantities. For shipping labels: customer’s name, address as well as the dimensions, weight, and quantities of purchased products.
Data Synced (?): For payments, we send the purchase total, currency and customer’s billing information to the respective payment processor. Please see the respective third party’s privacy policy (Stripe’s Privacy Policy and PayPal’s Privacy Policy) for more details. For automated taxes we send the value of goods in the cart, the value of shipping, and the destination address to TaxJar. Please see TaxJar’s Privacy Policy for details about how they handle this information. For checkout rates we send the destination ZIP/postal code and purchased product dimensions, weight and quantities to the carrier directly or via EasyPost, depending on the service used. For shipping labels we send the customer’s name, address as well as the dimensions, weight, and quantities of purchased products to EasyPost. We also store the purchased shipping labels on our server to make it easy to reprint them and handle support requests.
Changes to this Privacy Policy
We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this policy, we will notify you here that it has been updated.