Privacy Policy

This Privacy Policy describes how fableandwhimsy.com (the "Site" or "we") collects, uses, and discloses personal information when you visit or make a purchase from the website.

Collecting Personal Information

When you visit the Site, we collect certain information about the device you are using, your interaction(s) with the Site, and information necessary to process your purchases.  We may also collect additional information if you reach out to use for customer support.  In this Privacy Policy, we refer to any information that uniquely identify an individual as "Personal Information".  Refer to the list below for more information about what Personal Information is collected and why.

Device Information

  • Examples of information collected: version of web browser, IP address, timezone, cookie information, what sites or products that are viewed, search terms, and interactions with the Site.
  • Purpose of collection: to properly load the Site and to perform analytics on usage to better optimize the Site.
  • Source of collection: Collected automatically when accessing the Site using cookies, log files, web beacons, tags, or pixels.
  • Disclosure for business purpose: shared with the processor (Shopify).

Order Information

  • Examples of information collected: name, billing address, shipping address, payment information (including credit card numbers), email address, and phone number.
  • Purpose of collection: to provide products or services to fulfill our contract, to process your payment information, to arrange shipping, and to provide you with invoices and/or order confirmations, and communicate with you.
  • Source of collection: collected directly from you (the Buyer).
  • Disclosure for business purpose: shared with the processor (Shopify).

Customer Support Information

  • Examples of information collected: name, billing address, shipping address, payment information (including credit card numbers), email address, and phone number.
  • Purpose of collection: to provide customer support.
  • Source of collection: collected directly from you (the Buyer).

Minors

The Site is not intended for individuals under the age of 18.  We do not intentionally collect personal information from minors.  If you are the parent or guardian and believe your child has provided us personal information, please contact us at rachel@fableandwhimsy.com to request deletion.

Sharing Personal Information

Your personal information is sometimes shared with service providers to help us provide services and fulfill our contracts as described above.  As an example:

  • We use Shopify to power our online store.  You can read more about how Shopify uses personal information here: https://www.shopify.com/legal/privacy. 
  • We may share personal information to comply with applicable laws and regulations, to respond to a subpoena, search warrant, or other lawful request for information we receive, or to otherwise protect our rights.

Behavioral Advertising

As described above, we use personal information to provide you with targeted advertisements or marketing communications we believe may be of interest to you.  For example:

  • We use Google Analytics to help us understand how our customers use the Site.  You can read more about how Google uses your personal information here: https://policies.google.com/privacy?hl=en.
  • You can opt out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.
  • We share information about your use of the Site, your purchases, and your interaction with our ads on other websites with our advertising partners.  We collect and share some of this information directly with advertising partners and in some cases through the use of cookies or other similar technologies (which you may consent to depending on your location).
  • For more information on how targeted advertising works, you can visit the Network Advertising Initiative's ("NAI") educational page at https://thenai.org/about-online-advertising/faq/?tab=2.

Using Personal Information

Personal information is used to provide services to you, which include: offering product for sale, processing payments, shipping and fulfillment of your order, and keeping you up to date on new products, services, and offers.

Lawful Basis

Pursuant to the General Data Protection Regulation ("GDPR"), if you are a resident of the European Economic Area ("EEA") we process your information under the following bases:

  • Your consent;
  • The performance of the contract between you and the Site;
  • Compliance with our legal obligations;
  • To protect your vital interests;
  • To perform a task carried out in the public interest;
  • For our legitimate interests, which do not override your fundamental rights and freedoms.

Retention

When you make an order through the Site, we will retain your personal information for our records until and unless you ask us to erase this information.  For more information, please see the "Your Rights" section below.

Automatic Decision-Making

If you are a resident of the EEA, you have the right to object to processing based solely on automated decision-making (which includes profiling), when that decision-making has a legal effect on your or significantly affects you.

We DO NOT engage in fully automated decision-making that has a legal or otherwise significant effect using customer data.

Shopify (the processor) uses limited automated decision-making to prevent fraud that does not have a legal or significant effect on you.

Services that include elements of automated decision-making are:

  • A temporary denylist of IP addresses associated with repeat failed transactions.  This denylist persists for a small number of hours.
  • A temporary denylist of credit cards associated with denylisted IP addresses.  This list persists for a small number of days.

Your Rights

GDPR

If you are a resident of the EEA, you have the right to access the personal information that we have about you, to port it to a new service, and to ask that this information be corrected, updated, or erased.  If you would like to exercise these rights, please reach out to us.

Your information will initially be processed in Ireland and then transferred outside of Europe for storage and further processing (including Canada and the United States).  For more information on how data transfers comply with the GDPR, please see Shopify's GDPR whitepaper: https://help.shopify.com/en/manual/privacy-and-security/privacy/index.

CCPA

If you are a resident of California, you have the right to access the personal information we have about you, to port it to a new service, and to ask that your information be corrected, updated, or erased.  If you would like to exercise these rights, please reach out to us.

Cookies

A cookie is a small amount of information that is downloaded to your device when you visit our Site.  A number of different cookies are used, including functional, performance, advertising, social media, and content cookies.  Cookies make your browsing experience better by allowing the Site to remember actions and preferences.  Cookies also provide information on how people use the Site.

How long a cookie remains on your device depends on whether it is a persistent or session cookie.  Persistent cookies last until they expire or are deleted.  Session cookies last until you stop browsing.  Most of the cookies that are used are persistent and will expire between 30 minutes and two years from the date they are downloaded.

Cookies can be controlled and managed in various ways.  Keep in mind that removing or blocking cookies can negatively impact the user experience and parts of the Site may no longer be functional or accessible.  Blocking cookies may not completely prevent the sharing or information with third parties.

Most browsers will automatically accept cookies, but you can change this in your browser's Tools or Preferences menu.

Do Not Track

Be aware that there is no consistent industry standard for how to respond to "Do Not Track" signals.  We do not alter out data collection and usage practices when we receive such a signal from your browser.

Changes

We update this Privacy Policy from time to time in order to reflect changes in our practices or to maintain compliance with operational or legal regulations.  For more information about these practices, or if you have questions, please contact us by emailing rachel@fableandwhimsy.com

Last Revised: 09/25/2024