We value your privacy and are committed to protecting your personal information in accordance with the GDPR. This policy explains how we collect, use, and safeguard the information you share with us.

1. What information do we collect?

We collect the following personal information:

• When you make a purchase:
  Name, address, phone number, email address, and payment details (securely processed by our payment providers).
• When you sign up for our newsletter:
  Your email address.
• Automatically:
  Information about your device (e.g., IP address, browser type, operating system) and how you interact with our website (e.g., pages visited, time spent) to improve your experience and analyze website traffic.
  

2. Why do we collect this information?

We use your personal information for the following purposes:

• To process and deliver your orders.
• To send newsletters and marketing materials (only if you have opted in).
• To improve our website and better understand our customers' needs.

3. Cookies and Tracking Technologies

Cookies are small files stored on your device when you visit our website. We use cookies to:

• Essential cookies: Enable basic website functionality (e.g., remembering items in your cart).
• Analytics cookies: Help us understand how visitors use our website to improve its functionality (e.g., Google Analytics).
• Marketing cookies: Show personalized ads and track performance.

Your choices:
You can manage or disable cookies through your browser settings. Note that some cookies are essential for the website to function correctly.

4. How do we share your information?
We do not share your information with third parties for marketing purposes. However, we do use third-party service providers to operate our business, such as:

• Shopify: To manage our online store.
• Payment providers (e.g., Klarna): For secure payment processing.
• Email services: To send newsletters.
• Analytics providers (e.g., Google Analytics): To understand website traffic and performance.

These providers comply with GDPR regulations.

5. How long do we retain your information?
We retain your personal information as long as necessary to fulfill our obligations, such as for processing orders or bookkeeping. You can request that we delete your information at any time, except when we are legally required to retain it.

6. Your rights
Under the GDPR, you have the following rights:

• Access: The right to request access to the personal data we hold about you.
• Correction: The right to request that we correct inaccurate or incomplete data.
• Deletion: The right to request that we delete your data.
• Objection: The right to object to marketing communications.
• Data portability: The right to transfer your data to another service.

To exercise any of these rights, contact us using the details below.

Contact us
If you have any questions about how we handle your personal information, feel free to contact us:

• Email: info@tinyheritage.com