Privacy policy
Privacy Policy
Effective Date: January 9, 2025
This Privacy Policy describes how Island Enchantments (“we,” “us,” “our,” "me," "my," or "I,") collects, uses, and discloses your Personal Information when you visit or make a purchase from Island Enchantments (the “Site” or the “Service”). By accessing or using our Site, you signify that you have read, understood, and agree to our collection, storage, use, and disclosure of your Personal Information as described in this Privacy Policy.
1. DEFINITIONS
- “Personal Information”: Any information that can identify an individual, either alone or in combination with other data (e.g., name, address, email, IP address).
- “Service Providers”: Third-party companies or individuals who provide services on our behalf (e.g., payment processing, shipping, analytics).
2. SCOPE OF THIS PRIVACY POLICY
This Privacy Policy applies to all information collected through our Site, social media platforms, email communications, or any other channels that link to or reference this Privacy Policy. It does not apply to third-party websites or services that we do not control, even if our Site contains links to those third-party sites.
3. COLLECTING PERSONAL INFORMATION
We collect Personal Information to provide and improve our services, to communicate with you, and to fulfill your orders. The types of Personal Information we collect include:
3.1 Device Information
- Examples: Web browser version, IP address, time zone, cookie data, pages or products viewed, search terms, and interaction data.
-
Purpose:
- To load our Site accurately for you.
- To perform analytics and optimize our services.
- Source: Collected automatically through cookies, log files, web beacons, tags, or pixels as you browse our Site.
- Disclosure: Shared with service providers such as Shopify for hosting and analytics tools like Google Analytics.
3.2 Order Information
- Examples: Name, billing address, shipping address, payment information (including credit card numbers), email address, order history.
-
Purpose:
- To fulfill orders (processing payments, shipping, providing invoices).
- To screen for potential risk or fraud.
- To communicate with you regarding your purchase or related services.
- To provide marketing communications (if in line with preferences you have shared).
- Source: Collected directly from you during checkout or account creation.
-
Disclosure:
- Shared with Shopify (our e-commerce platform).
- Shared with shipping partners (e.g., Canada Post) to fulfill and deliver orders.
3.3 Customer Support Information
- Examples: Name, contact details, billing/shipping address, payment information, order details.
-
Purpose:
- To assist with inquiries, returns, or complaints.
- To improve our customer service and product offerings.
- Source: Collected directly from you when you contact us for support.
- Disclosure: May be shared internally with our customer support team or with relevant service providers to resolve your inquiries.
4. HOW WE USE YOUR PERSONAL INFORMATION
We use your Personal Information to:
- Provide Our Services: Offer products for sale, process payments, and fulfill orders (including shipping).
- Communication: Send you updates about new products, services, promotional offers, or other relevant information, where in line with your communication preferences.
- Improve & Personalize: Perform analytics (e.g., via Google Analytics) to understand how users interact with our Site and to improve the user experience.
- Legal Compliance & Security: Detect and prevent fraud, maintain the security of our services, and comply with legal obligations or law enforcement requests.
- Advertising & Marketing: Provide targeted advertisements or marketing communications we believe may be of interest to you (see Behavioral Advertising below).
5. SHARING PERSONAL INFORMATION
We may share your Personal Information with:
- Shopify: Our e-commerce platform, which hosts our online store. Shopify’s Privacy Policy describes how Shopify handles your data.
- Service Providers & Partners: For shipping (Canada Post), payment processing, analytics (Google Analytics), or other necessary services. We require these providers to protect your Personal Information and only use it for the services requested.
- Compliance with Law: To comply with applicable laws and regulations, respond to subpoenas or lawful requests, or to protect our rights in legal proceedings.
- Business Transfers: In the event of a merger, acquisition, bankruptcy, or sale of all or a portion of our assets, your Personal Information may be transferred to a successor entity.
We do not sell your Personal Information to third parties for monetary compensation.
6. BEHAVIORAL ADVERTISING
We may use your Personal Information to provide targeted advertisements or marketing communications. For example:
- Google Analytics: Collects information about how customers use our Site. Learn more in the Google Privacy Policy. You can opt out via Google Analytics Opt-out.
- Facebook Ads: You can adjust your Facebook ad settings at Facebook Ad Preferences.
To learn more about how targeted advertising works, visit the Network Advertising Initiative’s educational page.
Opt-Out: You can opt out of some targeted advertising by visiting the Digital Advertising Alliance’s opt-out portal.
7. LAWFUL BASIS (GDPR)
If you reside in the European Economic Area (EEA), we process your Personal Information under the following lawful bases:
- Your Consent: Where you have given explicit consent.
- Contractual Necessity: To perform or fulfill a contract with you (e.g., completing a sale).
- Legal Obligations: To comply with applicable laws or regulations.
- Vital Interests: Where necessary to protect your vital interests or those of another person.
- Public Interest: Where required for a public task.
- Legitimate Interests: To pursue our legitimate business interests, provided these do not override your rights and freedoms.
8. RETENTION
We retain your Personal Information for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law. If you wish to have your Personal Information deleted, please contact us; however, note that certain data may need to be retained for record-keeping or legal compliance purposes.
9. AUTOMATED DECISION-MAKING
We do not engage in fully automated decision-making (including profiling) that produces legal or similarly significant effects. However, Shopify may utilize limited automated decision-making to prevent fraud (e.g., temporary IP or credit card denylists).
10. YOUR RIGHTS (GDPR & OTHER PRIVACY LAWS)
If you are a resident of the EEA or certain other regions with privacy laws (e.g., the UK, California under CCPA), you have specific rights regarding your Personal Information:
- Access: The right to request a copy of your Personal Information.
- Rectification: The right to correct inaccuracies or update your Personal Information.
- Erasure: The right to request deletion of your Personal Information.
- Restriction of Processing: The right to ask us to stop processing your data in certain circumstances.
- Data Portability: The right to request the transfer of your data to another service.
- Objection to Processing: The right to object to certain processing activities, including direct marketing.
To exercise these rights, contact us. We may require additional verification to ensure your identity before fulfilling certain requests.
11. COOKIES
Cookies are small data files stored on your device. They help us improve your browsing experience and remember your preferences. We use various types of cookies, including necessary, performance, advertising, and social media cookies.
11.1 Cookies Necessary for the Functioning of the Store
- _ab: Used in connection with access to admin.
- _secure_session_id: Used in connection with navigation through the storefront.
You can control or disable cookies through your browser settings; however, some features of our Site may not function properly if cookies are disabled.
12. DATA SECURITY
We employ appropriate technical and organizational measures, such as encryption, secure servers, and access controls, to protect your Personal Information from accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. While we strive to protect your data, no transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.
13. CHILDREN’S PRIVACY
Our Site and services are not intended for individuals under 16 years of age. We do not knowingly collect Personal Information from children under 16. If we learn that we have inadvertently collected such information, we will take steps to delete it as soon as possible. If you believe we might have any information from or about a minor, please contact us.
14. INTERNATIONAL TRANSFERS
Your Personal Information may be transferred to and processed in countries other than the country in which you are resident, including Canada and the United States, where our servers or service providers are located. By using our Site, you consent to the transfer of your information to these countries. We ensure an adequate level of protection is in place by following applicable data protection laws (e.g., Standard Contractual Clauses for EEA transfers).
15. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or other operational needs. Any changes will be posted on this page with an updated “Effective Date”. We encourage you to review this Privacy Policy periodically for any updates. Your continued use of our Site after we post modifications indicates you accept those changes.
16. CONTACT INFORMATION
For more information about our privacy practices, to make a complaint, or to exercise your rights under this Privacy Policy, please contact us.
Island Enchantments
Last Updated: January 9, 2025
By using this Site, you acknowledge that you have read and agree to this Privacy Policy. If you do not agree, please discontinue use of our Site and services immediately.