Privacy policy.

About this policy

This policy explains how Little Grimlings (“we”, “us”) collects, uses and shares your information when you visit littlegrimlings.com, buy from us, or contact us. Little Grimlings is based in Las Vegas, Nevada, USA.

If you buy from our Etsy shop, Etsy's own privacy policy and our Etsy shop privacy policy apply to that purchase.

Information we collect

When you place an order

Checkout is handled by Shopify. To complete your order we receive your name, email address, shipping and billing address, phone number if you give one, and the details of what you ordered. Payments are processed by Shopify and its payment partners, and we never see your full card details.

When you contact us

Our contact form asks for your name, email address and message, and optionally an order number and up to three photos. Before your photos leave our website they are resized, converted to JPEG, and stripped of hidden metadata such as camera details and location. Your message and photos are then emailed to our customer care inbox. They are not stored on the website.

When you browse

• Cart cookie. A secure cookie remembers your shopping cart for 7 days. The site needs it for the cart to work.
• Analytics. We use Google Analytics, which sets cookies and collects information such as the pages you visit, how you arrived, your device and browser, and your approximate location based on your IP address. This helps us understand what people enjoy and improve the site.
• Spam protection. When you send a message, we check how many messages have come recently from the same connection and email address. We use a scrambled one-way code for this, not your IP address or email address themselves.

How we use your information

We use your information only for these reasons:

• To make, ship and support your order, including replacements and refunds.
• To answer your messages and help with any problem.
• To keep the site secure and prevent spam and fraud.
• To understand how the site is used and make it better.
• To keep records we are required to keep, such as for tax purposes.

We don't send marketing emails. If we ever start a mailing list, we will only add you if you clearly sign up, and you can unsubscribe at any time. We don't sell your personal information.

If you live in the EU or UK, our legal bases are: performing our contract with you (your order), our legitimate interests (support, security and improving the site), legal obligations (record keeping), and your consent where we ask for it.

Who we share it with

We share your information only with the services that help us run the shop, and only what they need:

• Shopify runs our store and checkout and processes payments.
• Printify and its print provider Monster Digital (United States), and Tapstitch for some products, receive your name, shipping address and order details so they can print and ship your order.
• Shipping carriers such as USPS receive your name and address to deliver your package.
• Cloudflare hosts this website, processes contact form photos and delivers contact form emails.
• Google provides our website analytics.

We may also share information if the law requires it, to protect our rights, customers or others, or as part of a sale or merger of the business, only as the law allows.

How long we keep it

We keep order information for 4 years so we can support your order and meet tax and legal requirements. Customer care messages are kept as long as needed to help you, and generally no longer than 4 years. Analytics data is kept according to our Google Analytics retention setting. After that, we delete it.

International visitors

We are based in the United States, and our store, production and shipping partners process orders in the United States. If you are outside the US, including in the EU or UK, your information will be transferred to and processed in the United States, which may have different data protection laws. We rely on our service providers' contractual data protection safeguards for these transfers.

Your choices and rights

Depending on where you live, you may have the right to:

• Ask for a copy of the personal information we hold about you.
• Ask us to correct or delete it. Unless we must keep it, for example for tax reasons, we will delete it.
• Object to or restrict how we use it, including for analytics.
• Complain to your local data protection authority if you live in the EU or UK.

You can block or delete cookies in your browser settings. Blocking the cart cookie will stop the cart from working. To opt out of Google Analytics, you can use Google's browser add-on or your browser's privacy controls. We don't sell or share personal information for targeted advertising. Our site doesn't currently respond to “Do Not Track” browser signals.

To make a request, contact us using the details below. We won't treat you differently for asking.

Children

This site isn't directed at children under 13, and we don't knowingly collect their personal information. If you think a child has sent us information, contact us and we will delete it.

Security

We use secure connections, keep payment handling with Shopify, and limit what each partner receives. No method of sending or storing information is completely secure, but we work to protect yours.

Changes to this policy

If we change this policy, we will update it here and change the date at the top. Important changes will be made clear on this page.

Contact us

For purposes of EU data protection law, Little Grimlings is the data controller of your personal information. For any privacy question or request, including access, correction or deletion, use our contact form and mention in your message that it's a privacy request.