Privacy policy

This policy applies to information we collect through our online store and in the course of fulfilling your orders and responding to your requests. By using our store, you agree to the practices described here. If you do not agree, please do not use the store.

We collect the following categories of information:

• Information you provide. Your name, email address, shipping and billing addresses, phone number (if provided), order contents, personalization details you submit (such as names, dates, or messages), and any information you include when you contact us.
• Payment information. When you pay, your card or payment details are collected and processed directly by our payment processor. We do not receive or store full payment card numbers; we receive limited information such as a confirmation, the payment method type, and the last digits of the card.
• Account information. If you create an account, we store your login credentials in protected form and your saved order history and addresses.
• Information collected automatically. When you visit the store, we and our service providers may collect device and usage data — such as IP address, browser type, pages viewed, referring pages, and approximate location — through cookies and similar technologies.

• To process, fulfill, ship, and confirm your orders
• To craft personalized and made-to-order items to the details you provide
• To communicate with you about orders, shipping, support requests, and — where you have opted in — marketing and promotions
• To operate, maintain, secure, and improve our store
• To detect, prevent, and address fraud, abuse, and security issues
• To comply with our legal and tax obligations

Where required by law (for example, for visitors in the European Economic Area and the United Kingdom), we rely on the following legal bases: performance of a contract (to fulfill your order), our legitimate interests (to operate and improve the store and prevent fraud), your consent (for optional marketing and certain cookies), and compliance with legal obligations.

We do not sell your personal information. We share it only as needed to run our store and as described below:

• Payment processing. With our payment provider to authorize and process transactions and help prevent fraud.
• Order fulfillment. With the production and shipping partners who make and deliver your items, including the name and address needed to fulfill and ship your order, and with carriers for delivery and tracking.
• Service providers. With vendors who host our store, send transactional and marketing emails or messages, and provide analytics and security services, under agreements that limit their use of your information to providing those services.
• Legal and safety. When required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of our customers, our business, or others.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction.

We use cookies and similar technologies to keep your cart and session working, remember your preferences (such as region and currency), understand how the store is used, and — where applicable — support marketing. Some cookies are essential to the store's operation; others are optional. You can control non-essential cookies through your browser settings, though disabling certain cookies may affect how the store works.

We operate internationally and serve customers around the world. Your information may be processed and stored in countries other than the one in which you live, including countries that may have different data protection laws. Where required, we take steps to ensure your information receives an adequate level of protection when transferred.

We retain personal information for as long as necessary to fulfill the purposes described in this policy — including providing our products, maintaining order and tax records, resolving disputes, and enforcing our agreements — and then delete or anonymize it, unless a longer retention period is required or permitted by law.

We use reasonable administrative, technical, and organizational measures designed to protect your personal information against loss, theft, and unauthorized access, use, or disclosure. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

Depending on where you live, you may have the right to access, correct, update, port, or delete your personal information, to object to or restrict certain processing, and to withdraw consent where processing is based on consent. If you are in a region with such rights (for example, the EEA, the UK, or certain U.S. states), you may also have the right to lodge a complaint with your local data protection authority.

You can opt out of marketing emails at any time using the unsubscribe link in those messages. To make a privacy request, contact us through our Customer Service page. We will respond as required by applicable law and may need to verify your identity before acting on your request.

Our store is intended for adults and is not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.

We may update this policy from time to time to reflect changes in our practices or for legal reasons. When we do, we will revise the “Last updated” date above, and material changes will take effect when posted on this page. Please review this policy periodically.

For privacy questions or to exercise your rights, contact Cotton Candy Custom Creations & Gifts through our Customer Service page.