Privacy Policy

Eco Art and Craft Privacy Policy

Last updated: 21 June 2025

Eco Art and Craft operates this website and store, including all related content, tools, and services (the “Services”), and is powered by Shopify. This Privacy Policy explains how we collect, use, and disclose your personal information when you visit, interact with, or make a purchase through the Services.

By using the Services, you agree to the collection and use of information in accordance with this Privacy Policy. If there is a conflict between our Terms of Service and this Privacy Policy regarding the collection, use, or disclosure of your personal information, this Privacy Policy will apply.

Personal Information We Collect

“Personal information” refers to information that identifies or can reasonably be linked to you. It does not include anonymized or aggregated data. Depending on how you interact with the Services, we may collect:

Contact details: name, billing and shipping address, email, phone number
Financial information: payment card details, transaction info
Account details: username, password, preferences
Transaction history: items viewed, added to cart, purchased, returned
Customer support interactions
Device and browser info: IP address, device type, browser type
Usage data: how you interact with the Services

Sources of Personal Information

We may collect information from:

You, when you provide it directly
Automated tracking (via cookies, analytics, etc.)
Our service providers (e.g. Shopify, payment processors)
Marketing and business partners

How We Use Your Information

We use personal information to:

Provide and improve the Services (e.g. process orders, personalize your experience)
Communicate with you (e.g. customer service, order updates)
Market our products (e.g. promotions, personalized advertising)
Ensure safety and prevent fraud
Comply with legal obligations

How We Share Your Information

We may share your information:

With Shopify and our service providers (e.g. payment processors, cloud storage, shipping partners)
With marketing partners for advertising and promotions
At your direction (e.g. social integrations or shipping instructions)
With affiliates or business partners
In connection with a business transaction (e.g. merger, acquisition)
To comply with legal obligations (e.g. law enforcement or court orders)

Shopify's Role

Shopify hosts our store and processes personal data as part of providing and improving the Services. Shopify may use data from your activity across multiple stores (not just ours) to improve their platform. In these cases, Shopify is considered the data controller and handles your personal information independently.

To learn more, visit the Shopify Consumer Privacy Policy or manage your data preferences via the Shopify Privacy Portal.

Third-Party Links

Our Services may include links to third-party sites. We are not responsible for the privacy or content of those sites. You should review their terms and privacy policies before engaging.

Children’s Privacy

Our Services are not intended for use by children. We do not knowingly collect personal information from individuals under the age of majority. If we become aware that a child has submitted personal data, we will delete it upon request.

Data Security & Retention

We implement reasonable safeguards to protect your data but cannot guarantee complete security. Data is retained only as long as necessary for the purposes outlined here or as required by law.

Your Rights and Choices

Depending on your location, you may have the right to:

Access your personal data
Delete your personal data
Correct inaccurate data
Receive a copy (data portability)
Opt out of targeted advertising or data sharing
Manage communication preferences

If you reside in the UK or EEA, you may also:

Object to or restrict processing
Withdraw consent at any time

To exercise your rights, contact us using the details below. We may require identity verification.

Complaints

You may contact us with any concerns. Depending on your location, you may also lodge a complaint with your local data protection authority.

International Transfers

Your data may be processed in countries outside of your own, including the United States, Canada, and Australia. Where applicable, we use lawful mechanisms such as Standard Contractual Clauses to protect transferred data.

Changes to This Privacy Policy

We may update this policy from time to time. If material changes are made, we will update the “Last updated” date and provide notice as required by law.