Privacy Policy

Our Commitment to Your Privacy

At THUCMYCRAFT, we understand that privacy is not just a policy—it’s a promise. When you visit our website, browse our collections, or make a purchase, you entrust us with your personal information. We take this responsibility seriously and are committed to protecting your privacy and safeguarding your personal data.

This Privacy Policy explains how we collect, use, disclose, and protect your information when you interact with our website, products, and services. We believe in transparency and want you to feel confident that your information is handled with care, respect, and in compliance with applicable privacy laws.

We are committed to protecting your privacy and ensuring that your personal information is handled in a safe and responsible manner. This policy applies to all users of our website, whether you are a customer, visitor, or simply browsing our collections.

---

Section 1: Information We Collect

1.1 Personal Information You Provide

We collect personal information that you voluntarily provide to us when you:

Create an Account:

• Full name

• Email address

• Password (encrypted)

• Phone number (optional)

• Mailing address

Place an Order:

• Billing address

• Shipping address

• Payment information (processed securely by Stripe)

• Order history

• Product preferences

Sign Up for Our Newsletter:

• Email address

• Name (optional)

• Preferences for communication

Contact Customer Service:

• Name

• Email address

• Phone number (if provided)

• Order number (if applicable)

• Message content

• Any additional information you choose to share

Leave a Review or Feedback:

• Name (as you choose to display)

• Email address

• Review content

• Product rating

• Photos (if you choose to upload)

Enter a Promotion or Contest:

• Name

• Email address

• Contact information

• Any additional information required for the promotion

Participate in Surveys:

• Responses to survey questions

• Demographic information (if provided)

• Feedback about our products and services

1.2 Information Collected Automatically

When you visit our website, we automatically collect certain information about your device and browsing behavior:

Device Information:

• IP address

• Browser type and version

• Operating system

• Device type

• Screen resolution

Usage Information:

• Pages visited

• Time spent on pages

• Click-through behavior

• Search queries

• Referral source (how you found our website)

• Date and time of visits

Location Information:

• Approximate geographic location based on IP address

• Country, region, and city (approximate)

• Time zone

Cookies and Similar Technologies:

• Session information

• Preferences and settings

• Shopping cart contents

• Browsing history

• Login status

1.3 Information from Third Parties

We may receive information about you from third parties in limited circumstances:

Payment Processors (Stripe):

• Confirmation of payment

• Transaction status

• Fraud prevention data

Shipping Carriers:

• Delivery confirmation

• Address validation

• Tracking information

Social Media Platforms:

• Public profile information

• Likes, shares, and interactions

• Content you post that mentions us

Marketing Partners:

• Information from promotional campaigns

• Engagement data

• Opt-in preferences

1.4 Sensitive Information

We do not collect sensitive personal information, including:

• Social Security numbers

• Financial account numbers

• Driver’s license numbers

• Passport numbers

• Health or medical information

• Racial or ethnic origin

• Political opinions

• Religious or philosophical beliefs

• Biometric data

Please Note: We process your payment information through Stripe, a secure third-party payment processor. We do not store your full credit card numbers or other sensitive financial information on our servers.

---

Section 2: How We Use Your Information

2.1 Order Processing and Fulfillment

We use your information to process and fulfill your orders, including:

• Processing payments through Stripe

• Confirming your order

• Preparing your items for shipment

• Shipping your order to your provided address

• Providing tracking information

• Communicating about your order status

• Handling returns and exchanges

• Managing customer service inquiries

2.2 Account Management

If you create an account with us, we use your information to:

• Manage your account and profile

• Allow you to access your order history

• Store your preferences and settings

• Provide personalized recommendations

• Enable faster checkout for future orders

2.3 Communication

We use your information to communicate with you about:

• Order confirmations and updates

• Shipping notifications and tracking

• Returns and exchanges

• Customer service inquiries

• Product recalls or safety information

• Important policy changes

Marketing Communications:
With your consent, we may also send you:

• Newsletters about our products and collections

• Promotional offers and discounts

• Event invitations and announcements

• Product recommendations and inspiration

• Surveys and feedback requests

Opting Out:
You may opt out of marketing communications at any time by:

• Clicking the “unsubscribe” link in any marketing email

• Updating your account preferences

• Contacting us directly

2.4 Website Improvement

We use your information to improve our website and services:

• Analyzing usage patterns and trends

• Testing new features and functionality

• Optimizing user experience

• Identifying and fixing technical issues

• Improving product selection and recommendations

2.5 Security and Fraud Prevention

We use your information to protect you and our business:

• Detecting and preventing fraud

• Verifying your identity

• Protecting against unauthorized transactions

• Investigating suspicious activity

• Ensuring compliance with our policies

2.6 Legal Compliance

We may use your information to comply with legal obligations:

• Responding to lawful requests from authorities

• Enforcing our Terms and Conditions

• Protecting our rights and property

• Complying with applicable laws and regulations

---

Section 3: How We Share Your Information

3.1 Service Providers

We share your information with trusted third-party service providers who assist us in operating our business:

Data Processing Agreements:
We require all service providers to maintain appropriate data protection measures and use your information only for the purposes we specify.

3.2 Business Transfers

In the event of a business transfer, such as:

• Mergers or acquisitions

• Sale of company assets

• Bankruptcy or reorganization

Your personal information may be transferred to the new entity. We will notify you of any such transfer and provide you with options regarding your data.

3.3 Legal Requirements

We may disclose your information if required to do so by law or in response to lawful requests from public authorities, including to meet national security or law enforcement requirements.

We May Disclose Information When Necessary To:

• Comply with a subpoena or court order

• Cooperate with law enforcement investigations

• Protect against legal liability

• Enforce our Terms and Conditions

• Protect the rights, property, or safety of THUCMYCRAFT or others

3.4 With Your Consent

We may share your information in other circumstances with your explicit consent. For example, if you participate in a promotion where your information may be shared with a partner brand.

3.5 Aggregated Information

We may share aggregated, anonymized data that does not identify you personally. This data is used for analytical purposes and may be shared with partners, advertisers, or other third parties.

3.6 Social Media

If you choose to interact with us on social media, your public information (such as your name and profile picture) may be visible to others. We may also display social media content on our website.

---

Section 4: Cookies and Tracking Technologies

4.1 What Are Cookies?

Cookies are small text files that are placed on your device when you visit a website. They help websites recognize your device, remember your preferences, and provide a more personalized experience.

4.2 Types of Cookies We Use

4.3 Managing Cookies

You can control and manage cookies in several ways:

Browser Settings:

• Block all cookies

• Block third-party cookies

• Clear cookies after each session

• Receive notification when cookies are set

Opt-Out Tools:

• Google Analytics Opt-Out Browser Add-on

• Network Advertising Initiative Opt-Out Tool

• Digital Advertising Alliance Opt-Out Tool

Please Note: Disabling essential cookies may affect your ability to use our website properly.

4.4 Other Tracking Technologies

We may also use:

• Web Beacons: Small transparent images used to track behavior

• Pixels: Code snippets used for marketing and analytics

• Local Storage: Data stored locally on your device

• Session Storage: Temporary data stored during your visit

---

Section 5: Data Security

5.1 Security Measures

We implement a variety of security measures to protect your personal information:

Technical Security:

• SSL encryption for all data transmission

• Secure servers with firewall protection

• Regular security audits and vulnerability testing

• Access controls and authentication

• Data encryption for stored information

Physical Security:

• Restricted access to facilities

• Secure storage of physical records

• Surveillance and monitoring

Organizational Security:

• Employee training on data protection

• Strict access controls for staff

• Confidentiality agreements for employees

• Regular security policy reviews

5.2 Third-Party Security

We carefully select our service providers and require them to maintain:

• Appropriate technical and organizational security measures

• Compliance with data protection laws

• Confidentiality agreements

• Regular security assessments

Payment Security:
Stripe processes all payment transactions and maintains the highest security standards:

• PCI DSS Level 1 certification

• Data encryption and tokenization

• Fraud detection and prevention

• Regular security audits

5.3 Data Breach Response

In the event of a data breach, we will:

1. Contain the breach immediately

2. Investigate the cause and extent

3. Notify affected individuals (where required by law)

4. Report to relevant authorities (where required)

5. Implement measures to prevent future breaches

5.4 Your Responsibility

You also play a role in protecting your information:

• Use a strong, unique password for your account

• Keep your login credentials confidential

• Log out after each session

• Monitor your account for suspicious activity

• Contact us immediately if you suspect unauthorized access

---

Section 6: Data Retention

6.1 Retention Periods

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

6.2 Data Deletion

You may request deletion of your personal information by contacting us. Please note that we may need to retain certain information for:

• Legal compliance (tax, audit, regulatory)

• Fraud prevention

• Dispute resolution

• Enforcement of our Terms and Conditions

---

Section 7: Your Rights

7.1 Overview of Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Right to Access

• Right to Rectification

• Right to Erasure (Right to be Forgotten)

• Right to Restriction of Processing

• Right to Data Portability

• Right to Object

• Rights in Relation to Automated Decision-Making and Profiling

7.2 Your Rights Under California Law (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the sources of that information, our purposes for collecting it, and the third parties with whom we share it.

• Right to Delete: You have the right to request that we delete any personal information we have collected about you, subject to certain exceptions.

• Right to Opt-Out: You have the right to opt-out of the sale or sharing of your personal information. Please note that we do not sell your personal information to third parties.

• Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising your privacy rights.

To Exercise Your California Rights:
Contact us at dinhthucmy06@gmail.com with your request. We will respond within 45 days, as required by law.

7.3 Your Rights Under GDPR (European Union)

If you are a resident of the European Union, you have the following rights under the General Data Protection Regulation (GDPR):

• Right to Access: You can request a copy of your personal data.

• Right to Rectification: You can request correction of inaccurate data.

• Right to Erasure: You can request deletion of your data (subject to limitations).

• Right to Restrict Processing: You can request restriction of data processing.

• Right to Data Portability: You can request transfer of your data.

• Right to Object: You can object to certain data processing.

• Right to Lodge a Complaint: You can lodge a complaint with a supervisory authority.

To Exercise Your GDPR Rights:
Contact us at dinhthucmy06@gmail.com with your request. We will respond within 30 days, as required by law.

7.4 Your Rights Under Other Jurisdictions

We comply with applicable privacy laws in all jurisdictions where we operate. If you have questions about your rights, please contact us.

7.5 How to Exercise Your Rights

To Exercise Your Rights:

1. Contact us at dinhthucmy06@gmail.com

2. Specify your request and the rights you wish to exercise

3. Provide sufficient information to verify your identity

4. We will respond within the legally required timeframe

Verification:
We may request verification of your identity to protect your information. This may include:

• Confirming your email address

• Providing your order number

• Answering security questions

• Providing government-issued identification (in limited circumstances)

---

Section 8: Children’s Privacy

8.1 Age Restrictions

Our website and products are intended for adults aged 18 years and older. We do not knowingly collect personal information from children under 13 years of age.

8.2 Compliance with COPPA

We comply with the Children’s Online Privacy Protection Act (COPPA). If we learn that we have collected personal information from a child under 13, we will take steps to delete that information promptly.

8.3 Parental Consent

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. We will work with you to remove that information.

---

Section 9: International Data Transfers

9.1 Transfer of Data

THUCMYCRAFT is based in the United States. Your information may be processed and stored in the United States or other countries where our service providers operate.

9.2 Data Protection Standards

We ensure that your information is protected in accordance with applicable laws, including:

• EU-U.S. Data Privacy Framework: We comply with the principles of the EU-U.S. Data Privacy Framework, as established by the U.S. Department of Commerce.

• Standard Contractual Clauses: We use standard contractual clauses for transfers of personal data from the European Union.

9.3 International Users

If you are accessing our website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers and central database are located. By using our website, you consent to this transfer.

---

Section 10: Third-Party Links

10.1 External Websites

Our website may contain links to third-party websites, including:

• Social media platforms

• Payment processors

• Shipping carriers

• Marketing partners

• Affiliate sites

10.2 Third-Party Privacy Policies

We are not responsible for the privacy practices of third-party websites. We encourage you to review the privacy policies of any third-party sites you visit.

10.3 Social Media Integration

If you choose to log in or interact with us through social media platforms, you agree to their terms and privacy policies. We may receive information from these platforms as described in their policies.

---

Section 11: Do Not Track Signals

11.1 What Is Do Not Track?

Do Not Track (DNT) is a browser setting that signals to websites that you do not wish to be tracked across the internet.

11.2 Our Response to DNT

At this time, we do not respond to Do Not Track signals. However, we do provide you with options to control your privacy settings and communications preferences.

11.3 Global Privacy Control

We support Global Privacy Control (GPC), which signals to websites that you wish to opt out of data sharing. If you have GPC enabled, we will respect your signal.

---

Section 12: Changes to This Privacy Policy

12.1 Policy Updates

We reserve the right to update, modify, or change this Privacy Policy at any time without prior notice. Changes will be effective immediately upon posting to our website.

When We Make Changes:

• We will post the updated policy on this page

• We will update the “Last Updated” date at the bottom of this page

• For significant changes, we may provide additional notice (email, website notification)

12.2 How to Stay Informed

To stay informed about changes to our Privacy Policy:

• Review this page periodically

• Check your email for notifications

• Contact us if you have questions

---

Section 13: Contact Information

13.1 How to Reach Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Email: dinhthucmy06@gmail.com
Phone: +84 0346664390
Address: 5900 Balcones Dr STE 100, Austin, TX 78731, USA
Business Hours: Monday – Friday, 9:00 AM – 6:00 PM (CST)

13.2 Privacy Officer

For privacy-related inquiries, please address your communication to our Privacy Officer.

Privacy Officer Contact:
Email: dinhthucmy06@gmail.com (with subject line “Privacy Officer”)
Please allow 5-7 business days for a response.

13.3 Complaints

If you have a complaint about our privacy practices, we encourage you to contact us first. We will work with you to resolve the issue promptly and fairly.

Escalation:
If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.

---

Section 14: Data Protection Officer

14.1 DPO Appointment

We have appointed a Data Protection Officer (DPO) to oversee our privacy and data protection practices.

DPO Responsibilities:

• Monitoring compliance with privacy laws

• Training staff on data protection

• Handling privacy inquiries and complaints

• Conducting data protection impact assessments

• Liaising with regulatory authorities

14.2 Contacting the DPO

To contact our Data Protection Officer:
Email: dinhthucmy06@gmail.com (with subject line “DPO”)
Address: 5900 Balcones Dr STE 100, Austin, TX 78731, USA

---

Section 15: Consent and Agreement

15.1 Consent

By using our website and providing us with your personal information, you consent to the collection, use, and sharing of your information as described in this Privacy Policy.

15.2 Withdrawing Consent

You may withdraw your consent at any time by:

• Updating your account preferences

• Unsubscribing from communications

• Contacting us directly

15.3 Agreement

Your continued use of our website following any changes to this Privacy Policy constitutes your acceptance of those changes.

---

Section 16: Security Breach Notification

16.1 Breach Response Plan

We have established procedures for responding to security breaches, including:

Immediate Actions:

• Contain the breach and secure systems

• Investigate the cause and extent

• Preserve evidence for investigation

Notification:

• Affected individuals will be notified without undue delay

• Regulatory authorities will be notified if required by law

• We will provide updates as more information becomes available

Post-Breach Actions:

• Implement measures to prevent recurrence

• Review and update security policies

• Provide affected individuals with guidance on protecting themselves

16.2 Your Responsibility

If you suspect unauthorized access to your account, please contact us immediately. We will assist you in securing your account.

---

Section 17: Data Subject Access Requests

17.1 Making a Request

To request access to your personal information or exercise other rights:

1. Submit your request to dinhthucmy06@gmail.com

2. Include your full name and order number (if applicable)

3. Specify the information or action you are requesting

17.2 Processing Time

We will process your request within the timeframes required by applicable law:

• California (CCPA): Within 45 days

• EU (GDPR): Within 30 days

• Other jurisdictions: As required by law

17.3 Identification

We may require verification of your identity before processing your request. This helps us protect your information from unauthorized access.

---

Section 18: Privacy Policy Summary

---

Section 19: Final Words

At THUCMYCRAFT, we value your trust and are committed to protecting your privacy. We believe that clear communication about how we handle your personal information is essential to building and maintaining that trust.

We are dedicated to complying with all applicable privacy laws and regulations and to continuously improving our privacy practices. If you have any questions or concerns about our Privacy Policy, please don’t hesitate to contact us.

Thank you for choosing THUCMYCRAFT. We are honored to serve you and are committed to protecting your privacy while bringing joy to your everyday moments.

---

THUCMYCRAFT
5900 Balcones Dr STE 100
Austin, TX 78731, USA
Email: dinhthucmy06@gmail.com
Phone: +84 0346664390
Website: thucmycraft.shop

---

THUCMYCRAFT — Bringing joy to the everyday with handmade textiles for the home.