Privacy Policy.
This privacy notice for crochetbykittengrll (“we,” “us,” or “our”) describes how and why we might collect, store, use, and/or share (“process”) your information when you use our services (“services”), visit our website, or engage with us, including any sales or marketing.
Contact Us.
If after reading this privacy notice, you do not fully agree with our policies/practices, please contact us here. Reading our privacy policy will help you understand your privacy rights and choices. If you do not agree with these policies and practices, please do not use our services.
1. Collecting Personal Information
i. Information You Provide
We collect personal information that you voluntarily provide to us when you:
register for our services
express an interest in obtaining information about us or our products and services
participate in activities on our services
contact us
The personal information that we collect depends on the context of your interactions with us and the services, the choices you make, and the products and features you use.
When you buy something on this website, we collect personal information from you to fulfill the order. We may collect information like your:
Name
Phone Number
Email Address
Debit/Credit Card Number
Billing and Shipping Address
Details of your purchase
We share this information with Squarespace, our online store hosting provider, so that they can provide website services to us. We also use Pirate Ship as our shipping software. Your information such as your shipping address, name, phone number, and email are shared to Pirate Ship in order to fulfill your order. As you go through checkout, the site may auto-complete your shipping and billing address by sharing what you type with the Google Places API and returning suggestions to you to improve your checkout experience.
When you submit information to this website via webform, we collect the data requested in the webform in order to track and respond to your submissions. We share this information with Squarespace, our online store hosting provider, so that they can provide website services to us. The following is collected for a webform submission:
Email Addresses
First Name
Last Name
If you create a customer account on this website, we collect personal information to improve our checkout experience and customer service. This information may include your:
Billing and shipping address(es)
Details about your orders (for example, your shirt size)
Email address
Name
Phone number
We share this information with Squarespace, our website hosting provider, so they can provide website services to us. We do not process any sensitive information.
We may collect data necessary to process your payment if you make purchases, such as your payment instrument number, and the security code associated with your payment instrument. All payment data is stored by Paypal and Stripe. You may find their privacy notice links here: https://www.paypal.com/us/legalhub/privacy-full and https://stripe.com/privacy.
ii. Information Automatically Collected
This website is hosted by Squarespace. Squarespace collects personal data when you visit this website, including:
Information about your browser, network and device
Web pages you visited prior to coming to this website
Web pages you view while on this website
Your IP address
Squarespace needs the data to run this website, and to protect and improve its platform and services. Squarespace analyzes the data in a de-personalized form.
Analytics
This website collects personal data to power our site analytics, including:
Information about your browser, network, and device
Web pages you visited prior to coming to this website
Your IP address
This information may also include details about your use of this website, including:
Clicks
Internal links
Pages visited
Scrolling
Searches
Timestamps
We share this information with Squarespace, our website analytics provider, to learn about site traffic and activity.
Cookies
This website uses cookies and similar technologies, which are small files or pieces of text that download to a device when a visitor accesses a website or app. For information about viewing the cookies dropped on your device, visit The cookies Squarespace uses.
These functional and required cookies are always used, which allow Squarespace, our hosting platform, to securely serve this website to you.
These analytics and performance cookies are used on this website, as described below, only when you acknowledge our cookie banner. This website uses analytics and performance cookies to view site traffic, activity, and other data.
Sharing
This website includes share buttons which enable you to share pages or other content from this site to the following third party services:
Facebook
Twitter
LinkedIn
Reddit
Tumblr
Pinterest
If you click a share button, these third parties may receive your personal data, including:
Information about your browser, network and device
Details about the web page or content you shared or proposed to share
Your IP address
2. Processing Personal Information.
There are many different reasons we process your personal information, which depends on how you interact with our services, including:
To facilitate account creation and authentication and otherwise manage user accounts. We may process your information so you can create and log into your account, as well as keep your account in working order.
To respond to user inquiries/offer support to users. We may process your information to respond to your inquiries and solve any potential issues you might have with the requested service.
To fulfill and manage your orders. We may process your information to fulfill and manage your orders, payments, returns, and exchanges made through the services.
To save or protect an individual’s vital interest. We may process your information when necessary to save or protect an individual’s vital interest, such as to prevent harm.
Emails
Abandoned Cart Emails
You’ll receive an automated email within 24 hours after you abandon your shopping cart, if all of the following occur:
You enter your email address at checkout, or are logged into your customer account.
You add a product which is in stock to your shopping cart.
You close your browser or leave this website without completing your purchase.
You can unsubscribe from these messages at the bottom of the email.
The email will link back to this website, where you can pick up where you left off and complete your purchase.
Marketing Emails
We may send you marketing emails, which you can unsubscribe from by clicking the link at the bottom of the email. We share your contact information with Squarespace, our email marketing provider, so they can send these emails on our behalf.
Order & Account Emails
We may email you with messages about your order or account activity. For example, we may email you to tell you that:
You’ve created a customer account
Your customer account password has been reset or updated
You’ve made a purchase
Your order has shipped
It’s not possible to unsubscribe from these messages. We share your contact information with Squarespace, our website hosting provider, so they can send these emails to you on our behalf.
Fonts
This website serves font files from and renders fonts using Google Fonts and Adobe Fonts. To properly display this site to you, these third parties may receive personal information about you, including:
Information about your browser, network, or device
Information about this site and the page you’re viewing on it
Your IP address
3. Legally Processing Your Information.
If you are located in the EU or UK:
The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on in order to process your personal information. We will process your personal information for the following reasons:
If you have given us permission, or consent to use your personal information for a specific purpose. You are able to withdraw your consent at any time.
When we find it is necessary to fulfill our contractual obligations to you.
When we find it necessary in compliance with our legal obligations to cooperate with a law enforcement or regulatory agency - to exercise or defend our legal rights, or to disclose your information as evidence in litigation in which we are involved.
When we believe it is necessary to protect your (or a third party’s) vital interests - situations involving potential threats to the safety of any person.
If you are located in Canada:
We may process your information if you have given us specific permission to use your personal information for a specific purpose, or in situations where your permission can be inferred with implied consent. You can withdraw your consent at any time.
In some cases, we may be legally permitted under applicable law to process your information without your consent. For example:
If collection is clearly in the interests of an individual and consent cannot be obtained in a timely way.
For investigations and fraud detection and prevention.
For business transactions provided certain conditions are met.
If it is contained in a witness statement and the collection is necessary to assess, process, or settle an insurance claim.
For identifying injured, ill, or deceased persons and communication with next of kin.
If we have reasonable grounds to believe an individual has been, is, or may be victim of financial abuse.
If it is reasonable to expect collection and use with consent would compromise the availability or the accuracy of the information and the collection is reasonable for purposes related to investigating a breach of an agreement or a contravention of the laws of Canada or the province.
If disclosure is required to comply with a subpoena, warrant, court order, or rules of the court relating to the production of records.
If it was produced by an individual in the course of their employment. business, or profession and the collection is consistent with the purpose for which the information was produced.
If the collection is solely for journalistic, artistic, or literary purposes.
If the information is publicly available and is specified by the regulations.
4. When And With Whom We Share Your Personal Information.
We may need to share your personal information in the following situations:
Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
Shipping. We utilize Pirate Ship as our shipping software, therefore, your information such as your shipping address, name, phone number, and email are shared to Pirate Ship in order to fulfill your order.
Site Management. Our website is hosted by Squarespace. We share information with Squarespace, our online store hosting provider, so that they can provide website services to us.
Payment. When you make a purchase through our site, we use both Paypal and Stripe as our payment processors. We may collect data necessary to process your payment if you make purchases, such as your payment instrument number, and the security code associated with your payment instrument. All payment data is stored by Paypal and Stripe. You may find their privacy notice links here: https://www.paypal.com/us/legalhub/privacy-full and https://stripe.com/privacy.
5. How Long We Keep Your Information.
We will only keep your personal information for as long as necessary for the purposes explained in this privacy policy, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). No purpose in this notice will require us keeping your personal information for longer than the period of time in which users have an account with us.
When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information. If this is not possible (for example, if your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.
6. How We Keep Your Information Safe.
We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our services is at your own risk. You should only access the services within a secure environment.
7. Collection Of Information From Minors.
We do not knowingly solicit data from, or market, to children under 18 years of age. By using the services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of the services. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us here.
8. Your Privacy Rights.
In some regions (like the EEA, UK, and Canada), you have certain rights under applicable data protection laws. These may include the right:
to request access and obtain a copy of your personal information
to request rectification or erasure
to restrict the processing of your personal information
to data portability.
In certain circumstances, you may also have the right to object to the processing of your personal information. To object, contact us here. We will consider and act upon any request in accordance with applicable data protection laws. If you are located in the EEA or UK and you believe we are unlawfully processing your personal information, you also have the right to complain to your Member State data protection authority or UK data protection authority. If you are located in Switzerland, you may contact the Federal Data Protection and Information Commissioner.
Withdrawing your consent: If we are relying on your consent to process your personal information (with express and/or implied consent depending on applicable law), you have the right to withdraw your consent at any time. You can do so by contacting us here. Please note that this will not affect the lawfulness of the processing before its withdrawal nor, when applicable law allows, will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.
Opting out of marketing and promotional communications: You can unsubscribe from our marketing and promotional communications at any time by clicking on the unsubscribe link in the emails that we send, or by contacting us here - you will be removed from the marketing lists. Keep in mind, we may still communicate with you after the fact. For example, we may:
send you necessary service-related messages for the administration and use of your account
respond to service requests
contact you regarding any other non-marketing purposes
Account Information
If you would at any time like to review or change the information in your account or terminate your account, you can log in to your account settings and update your user account.
If you request to terminate your account, we will deactivate or delete your account, as well as the information from our active databases. Keep in mind, we may still retain some information in our files in order to:
prevent fraud
troubleshoot problems
assist with any investigations
enforce our legal terms
comply with applicable legal requirements
If you have questions or comments about your privacy rights, you may contact us here.
9. Controls For Do-Not-Track Features.
Most web browsers and some mobile operating systems and mobile applications include Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this privacy notice.
10. California Residents’ Privacy Rights.
California Civil Code Section 1798.83, also known as the “Shine The Light” law, permits our users who are California residents to request and obtain from us, once a a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us here.
If you are under 18 years of age, reside in California, and have a registered account with services, you have the right to request removal of unwanted data that you publicly post on the services. To request removal of such data, please contact us here, and include the email address associated with your account and a statement that you reside in California. We will make sure the data is not publicly displayed on the services, but please be aware that the data may not be completely or comprehensively removed from all our systems (e.g. backups, etc.).
CCPA Privacy Notice
The California Code of Regulations defines a “resident” as:
every individual who is in the State of California for other than a temporary or transitory purpose and
every individual who is domiciled in the State of California who is outside the State of California for a temporary or transitory purpose
All other individuals are defined as “non-residents.'“ If this definition of “resident” applies to you, we must adhere to certain rights and obligations regarding your personal information.
What categories of personal information do we collect?
| Category | Examples | Collected |
|---|---|---|
| Identifiers | Contact details, such as real name, alias, postal address, telephone or mobile contact number, unique personal identifier, online identifier, Internet Protocol address, email address, and account name | YES |
| Personal information categories listed in the California Customer records statute | Name, contact information, education, employment, employment history, and financial information | YES |
| Protected classification characteristics under California or federal law | Gender and date of birth | NO |
| Commercial information | Transaction information, purchase history, financial details, and payment information | YES |
| Biometric information | Fingerprints and voiceprints | NO |
| Internet or other similar internet activity | Browsing history, search history, online behavior, interest data, and interactions with our and other websites, applications, systems, and advertisements | YES |
| Geolocation data | Device location | YES |
| Audio, electronic, visual, thermal, olfactory, or similar information | Images and audio, video or call recordings created in connection with our business activites | NO |
| Professional or employment related information | Business contact details in order to provide you our services at a business level or job title, work hisotry, and professional qualifications if youb apply for a job with us | NO |
| Education information | Student records and directory information | NO |
| Inferences drawn from other personal information | Inferences drawn from any of the collected personal information listed above to create a profile or summary about, for example, an individual's preferences and characteristics | NO |
| Sensitive personal information | NO |
How do we use and share your personal information?
We will use and retain the collected personal information as needed to provide our services as long as the user has an active account with us. We may also collect other personal information outside of these categories through instances where you interact with us in person, online, or by phone or mail in the context of:
Receiving help through our customer support channels
Participation in customer surveys or contests, and
Facilitation in the delivery of our services and to respond to your inquiries
If you are using an authorized agent to exercise your right to opt out we may deny a request if the authorized agent does not submit proof that they have been validly authorized to act on your behalf.
Will your information be shared with anyone else?
We may disclose your personal information with our service providers pursuant to a written contract between us and each service provider. Each service provider is a for-profit entity that processes the information on our behalf, following the same strict privacy protection obligations mandated by the CCPA. We may use your information for our own business related purposes. This is not considered to be “selling” of your personal information.
We have not disclosed, sold, or shared any personal information to third parties for a business or commercial purpose in the preceding 12 months. We will not sell or share personal information in the future belonging to website visitors, users, and other consumers.
Right to request deletion of the data.
You can ask for the deletion of your personal information at any time. If you ask us to delete your personal information, we will respect your request and delete your personal account, subject to certain exceptions provided by law. Exceptions include, but are not limited to
inhibits another consumer of their right to free speech
inhibits our compliance requirements resulting from a legal obligation
inhibits any processing that may be required to protect us against illegal activities
Right to be informed.
Depending on the circumstances, you have the right to know:
whether we collect and use your personal information
the categories of person information that we collect
the purposes for which the collected personal information is used
whether we sell or share personal information to third parties
the categories of third parties to whom the personal information was sold, shared. or disclose for a business purpose
the business or commercial purpose for collecting, selling, or sharing personal information
the specific pieces of personal information we collected about you.
In accordance with applicable law, we are not obligated to provide or delete consumer information that is de-identified in response to a consumer request or to re-identify individual data to verify a consumer request.
Right to Non-Discrimination for the Exercise of a Consumer’s Privacy Rights
We will not discriminate against you if you exercise your privacy rights.
Verification Process
In order to verify your request, we will need to verify your identity in order to determine you are the same person that we have the information for in our system. This may require us to ask you to provide further information so that we can match it with the information you have previously provided us.
In this case, we will only use personal information you have provided to us to verify your identity in order to make the request. We will avoid requesting any additional information from you for the purposes of verification, but if we cannot verify your identity from the information you’ve provided, we may request that you provide additional information. This is strictly for security and fraud-prevention purposes. We will delete this additional information as soon as we verify your identity.
Other Privacy Rights
You may object to the processing of your personal information.
You may request correction of your personal data if it is incorrect or no longer relevant, or ask to restrict the processing of the information.
You can designate an authorized agent to make a request under the CCPA on your behalf. We may deny a request from an authorized agent that does not submit proof that they have been validly authorized to act on your behalf in accordance with the CCPA.
You may request to opt out from future selling or sharing of your personal information to third parties. Upon receiving an opt-out request. we will act upon the request as soon as feasibly possible, but no later than 15 days from the date of the request submission.
To exercise these rights, you can contact us here. If you have a complaint about how we handle your data, we would like to hear from you.
11. Virginia Residents’ Privacy Rights.
Virginia CDPA Privacy Notice
Under the Virginia Consumer Data Protection Act (CDPA):
“Consumer” means a natural person who is a resident of the Commonwealth acting only in an individual or household context. It does not include a natural person acting in a commercial or employment context.
“Personal data” means any information that is linked or reasonably linkable to an identified or identifiable natural person. “Personal data” does not include de-identified data or publicly available information.
“Sale of personal data” means the exchange of personal data for monetary consideration.
If this definition “consumer” applies to you, we must adhere to certain rights and obligations regarding your personal data. The information we collect, use, and disclose about you will vary depending on how you interact with us and our services.
Your rights with respect to your personal data
Right to be informed whether or not we are processing your personal data
Right to access your personal data
Right to correct inaccuracies in your personal data
Right to request deletion of your personal data
Right to obtain a copy of the personal data you previously shared with us
Right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects (“profiling”)
We have not sold any personal data to third parties for business or commercial purposes. We will not sell personal data in the future belonging to website visitors, users, and other consumers.
Exercise your rights provided under the Virginia CDPA
You may contact us here to exercise your rights under the Virginia CDPA. If you are using an authorized agent to exercise your rights, we may deny a request if the authorized agent does not submit proof that they have been validly authorized to act on your behalf.
Verification Process
We may request that you provide additional information reasonably necessary to verify you and your consumer’s request. If you submit the request through an authorized agent, we may need to collect additional information to verify your identity before processing your request.
Upon receiving your request, we will respond without undue delay, but in all cases, within 45 days of receipt. The response period may be extended once by 45 additional days when reasonably necessary. We will inform you of any such extension within the initial 45-day response period, together with the reason for the extension.
Right to appeal
If we decline to take action regarding your request, you will be informed of our decision as well as our reasoning behind it. If you wish to appeal this decision, please contact us here. Within 60 days of receipt of an appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If your appeal is denied, you may contact the Attorney General to submit a complaint.
12. Privacy Policy Updates.
This privacy notice may be updated every so often. The updated version will be indicated by an updated “Revised” date and the updated version will be effective as soon as it is accessible. We encourage you to review this privacy notice frequently to be informed of how we are protecting your information.
13. Contact Us About This Notice.
If you have questions or comments about this notice, you may contact us here.
14. Review, Update, or Delete Your Collected Data.
Based on the applicable laws of your country, you may have the right to request access to the personal information we collect from you, change that information, or delete it. To request a review, update, or delete your personal information, please contact us here.
This privacy policy was created using Termly’s Privacy Policy Generator.
Last Updated: 8/21/2023 8:28PM EDT