1Personal information we collect

"Personal information" means information that identifies, relates to, describes, or can reasonably be linked to you. It does not include aggregated or de-identified information.

Information you provide directly

We may collect personal information when you make a purchase, create an account, subscribe to communications, or otherwise interact with our site, including:

• Full name
• Billing and shipping address
• Email address and phone number
• Order history and customer service communications
• Payment-related information (processed securely through Shopify)

We do not directly store or process full credit card numbers. All payment data is handled by Shopify and its authorized processors.

Automatically collected information

When you visit our site, we may automatically collect IP address, browser type, device identifiers, approximate location, pages viewed, and referring URLs. This information helps us operate, secure, and improve our services.

2Sources of personal information

We collect personal information from you directly, automatically through cookies and similar technologies, and from service providers such as Shopify, payment processors, analytics tools, shipping partners, and marketing platforms, as well as business and advertising partners as permitted by law.

3How we use your personal information

We use personal information to fulfill orders, process payments, ship products, manage returns, provide customer support, operate and improve our services, send marketing and order communications, and prevent fraud.

4Marketing, email & SMS communications

• Promotional emails: sent by default (opt-out available)
• Order updates: sent by default
• Abandoned cart emails: sent by default
• Marketing SMS messages: sent only if you explicitly opt in

You may unsubscribe or opt out at any time using the instructions in our messages or by contacting us.

5Shopify platform & payments

Our store is hosted on Shopify Inc. Payments are processed through Shopify's payment gateways, including Shop Pay, Apple Pay, Google Pay, PayPal, and major credit cards, in compliance with PCI-DSS standards.

Your data is stored through Shopify's secure servers using industry-standard safeguards. Credit card data is encrypted through SSL and stored with AES-256 encryption. Purchase transaction data is deleted after your transaction is complete. All direct payment gateways adhere to PCI-DSS standards as managed by the PCI Security Standards Council.

6Disclosure of personal information

We may disclose personal information to Shopify and service providers that support our business (payments, analytics, shipping, customer support), to marketing and advertising partners for personalized advertising, at your direction or with your consent, to affiliates or as part of a corporate transaction, and to comply with legal obligations or protect rights and safety.

7Behavioral advertising & analytics

We use tools including Google Analytics, Meta (Facebook & Instagram), and TikTok advertising tools. These may collect information about your activity across websites. You may opt out using platform-specific controls or industry opt-out tools such as the Digital Advertising Alliance.

8Cookies & tracking technologies

We use cookies and similar technologies to operate the site, analyze performance, personalize content, and support advertising. Some cookies are essential for site functionality. Others are used for analytics and advertising and may be managed through browser settings.

For Shopify cookie details, visit: shopify.com/legal/cookies

9Data security & retention

We take reasonable precautions and follow best practices to protect your personal information from loss, misuse, or unauthorized access. Credit card information is encrypted using SSL and stored with AES-256 encryption. We follow all PCI-DSS requirements and implement additional security standards.

We retain personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law.

10Your privacy rights

Depending on your location, you may have the right to access, correct, or delete your personal information, request data portability, and opt out of certain marketing, advertising, or data sharing uses. Residents of some states have additional rights under CCPA/CPRA. We will not discriminate against you for exercising your rights.

11GDPR notice (EU residents)

Although we do not sell to or accept orders from the EU, we recognize GDPR principles. Where applicable, EU residents may request access, correction, or deletion of personal data by contacting us at the email below.

12Children's data

Our services are not intended for children. We do not knowingly collect personal information from children under the age of majority in your jurisdiction. If you are the parent or guardian of a child who has provided us with their personal information, please contact us to request deletion. We do not knowingly sell or share personal information of individuals under 16 years of age.

13Changes to this policy

We may update this Privacy Policy from time to time. Changes take effect upon posting. Continued use of our services constitutes acceptance of the updated policy.

14Contact us

Tiny Treasures Trading LLC
Mailing Address: [Insert Physical Address]
Email: privacy@tinytreasurestrading.com
Subject Line: PRIVACY – [Your Request]