Privacy Policy

Effective Date: January 2026 Last Updated: January 2026

Tiny Craft LLC ("Tinycraft", "we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website tinycraft.co, make a purchase, or interact with us.

Please read this policy carefully. By using our website, you consent to the practices described in this Privacy Policy.

1. Information We Collect

We collect information in several ways:

1.1 Information You Provide Directly

When you place an order, create an account, subscribe to our newsletter, or contact us, we may collect:

• Full name
• Email address
• Shipping address
• Billing address
• Phone number
• Payment information (processed securely by our payment provider)
• Order history
• Communication preferences
• Any other information you choose to provide

1.2 Information Collected Automatically

When you visit our website, we automatically collect certain information about your device and usage:

• IP address
• Browser type and version
• Operating system
• Device type (desktop, mobile, tablet)
• Unique device identifiers
• Referring website or source
• Pages visited and time spent on each page
• Links clicked
• Products viewed
• Date and time of visit
• Location data (country, region, city based on IP)

1.3 Information from Third Parties

We may receive information about you from third parties, including:

• Payment processors (transaction confirmation)
• Marketing partners
• Social media platforms (if you interact with our ads)
• Analytics providers

2. How We Use Your Information

We use your information for the following purposes:

To Fulfil Orders and Provide Services:

• Process and fulfil your orders
• Send order confirmations and shipping updates
• Provide customer support
• Process returns and refunds

To Communicate with You:

• Respond to your enquiries
• Send transactional emails (order confirmations, shipping notifications)
• Send marketing emails (with your consent)
• Notify you of changes to our policies or services

To Improve Our Business:

• Analyse website traffic and user behaviour
• Improve our website, products, and services
• Personalise your shopping experience
• Conduct research and analysis

For Marketing and Advertising:

• Display targeted advertisements
• Measure the effectiveness of our marketing campaigns
• Send promotional offers and newsletters (with your consent)

To Protect Our Business:

• Detect and prevent fraud
• Enforce our terms and policies
• Comply with legal obligations

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, we process your personal data based on the following legal grounds:

• Processing orders: Performance of a contract
• Sending order updates: Performance of a contract
• Marketing emails: Your consent
• Analytics and improvement: Legitimate interest
• Fraud prevention: Legitimate interest
• Legal compliance: Legal obligation

You may withdraw consent at any time by clicking "unsubscribe" in any marketing email or contacting us.

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect information and improve your experience.

4.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help us recognise your device, remember your preferences, and understand how you use our site.

4.2 Types of Cookies We Use

• Essential Cookies: Required for the website to function (e.g., shopping cart, checkout)
• Analytics Cookies: Help us understand how visitors use our site (e.g., Google Analytics)
• Marketing Cookies: Used to deliver relevant ads and track campaign performance (e.g., Meta Pixel, TikTok Pixel)
• Preference Cookies: Remember your settings and preferences

4.3 Third-Party Cookies

Our website may contain cookies from third-party services, including:

• Google Analytics
• Meta (Facebook/Instagram) Pixel
• TikTok Pixel
• Triple Whale
• Klaviyo
• Loox

These third parties have their own privacy policies governing how they use your data.

4.4 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to:

• View what cookies are stored
• Delete cookies individually or all at once
• Block all or certain cookies
• Set preferences for certain websites

Please note that disabling cookies may affect website functionality.

4.5 Do Not Track

Some browsers have a "Do Not Track" feature. Our website does not currently respond to Do Not Track signals.

5. Sharing Your Information

We do not sell your personal information. We share your information only with trusted third parties who help us operate our business:

5.1 Service Providers

• Shopify: E-commerce platform and hosting
• Klaviyo: Email marketing
• Google Analytics: Website analytics
• Meta (Facebook/Instagram): Advertising and analytics
• TikTok: Advertising and analytics
• Triple Whale: Analytics and attribution
• Loox: Customer reviews
• Payment processors: Secure payment processing
• Shipping carriers: Order delivery

5.2 Legal Requirements

We may disclose your information if required by law, court order, or government request, or if we believe disclosure is necessary to:

• Comply with legal obligations
• Protect our rights, property, or safety
• Prevent fraud or illegal activity
• Enforce our terms and policies

5.3 Business Transfers

If Tiny Craft LLC is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

6. International Data Transfers

Your information may be transferred to and processed in countries outside your own, including the United States. These countries may have different data protection laws than your country of residence.

For transfers from the EEA, UK, or Switzerland, we use appropriate safeguards, such as:

• Standard Contractual Clauses approved by the European Commission
• Data processing agreements with our service providers

By using our website, you consent to the transfer of your information to the United States and other countries.

7. Data Retention

We retain your personal information for as long as necessary to:

• Fulfil the purposes described in this policy
• Comply with legal and regulatory requirements
• Resolve disputes and enforce our agreements

Retention Periods:

• Order information: 7 years (for tax and legal purposes)
• Account information: Until you request deletion
• Marketing preferences: Until you unsubscribe
• Analytics data: 26 months

After the retention period, we securely delete or anonymise your data.

8. Data Security

We implement industry-standard security measures to protect your personal information, including:

• SSL/TLS encryption for data in transit
• Secure payment processing (we never store full credit card numbers)
• Access controls and authentication
• Regular security assessments

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

9. Your Rights

Depending on your location, you may have certain rights regarding your personal information.

9.1 All Users

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Unsubscribe from marketing emails
• Request deletion of your data (subject to legal obligations)

9.2 EEA, UK, and Swiss Residents (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Request restriction of processing
• Portability: Receive your data in a portable format
• Object: Object to processing based on legitimate interest
• Withdraw Consent: Withdraw consent for processing based on consent
• Lodge a Complaint: File a complaint with your local data protection authority

To exercise these rights, contact us at contact@tinycraft.co. We will respond within 30 days.

EU Data Protection Authorities: You have the right to lodge a complaint with your local supervisory authority. A list of EU data protection authorities can be found at: https://edpb.europa.eu/about-edpb/board/members_en

UK Information Commissioner's Office (ICO): https://ico.org.uk/

9.3 California Residents (CCPA/CPRA)

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have additional rights:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you in the past 12 months
• Right to Delete: Request deletion of your personal information
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt-Out: Opt out of the sale or sharing of your personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

Categories of Personal Information Collected (Past 12 Months):

• Identifiers (name, email, address, IP address): Yes
• Commercial Information (purchase history, products viewed): Yes
• Internet Activity (browsing history, interactions with our site): Yes
• Geolocation (country, region, city from IP): Yes
• Inferences (preferences, characteristics): Yes

Sale of Personal Information:

We do not sell your personal information in the traditional sense. However, under CCPA's broad definition, sharing data with advertising partners (e.g., Meta, TikTok) for targeted advertising may be considered a "sale." You can opt out of this by:

• Clicking "Do Not Sell or Share My Personal Information" on our website
• Contacting us at contact@tinycraft.co

Submitting a Request:

California residents may submit a request by:

• Emailing contact@tinycraft.co
• Calling +1 (659) 213 6568

We will verify your identity before processing your request. We will respond within 45 days.

Authorised Agents:

You may designate an authorised agent to submit a request on your behalf. We may require written proof of authorisation.

9.4 Other Jurisdictions

If you are located in another jurisdiction with data protection laws, you may have similar rights under local law. Contact us to exercise your rights.

10. Children's Privacy

Our website is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will delete it promptly.

If you believe a child has provided us with personal information, please contact us at contact@tinycraft.co.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these websites. We encourage you to read their privacy policies before providing any personal information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. When we make changes, we will:

• Update the "Last Updated" date at the top of this policy
• Post the revised policy on our website
• Notify you by email if the changes are significant

Your continued use of our website after changes are posted constitutes your acceptance of the revised policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Tiny Craft LLC 30 N Gould St Ste N Sheridan, WY 82801, USA Email: contact@tinycraft.co Phone: +1 (659) 213 6568 Hours: 9am–5pm Central Time, Monday–Friday

For GDPR-related enquiries, you may also contact our data protection contact at the email address above.