Privacy policy

Spooky Vault, the operator of this store and website, including all data, content, functionality, tools, products, and services provided to you, the customer, as a personalized shopping experience (the "Services"). Spooky Vault utilizes Shopify technology to provide these services. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction through the Services, or when you communicate with us through any other means. In the event of a conflict between these Terms of Service and this Privacy Policy, this Privacy Policy shall govern the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of our Services, you acknowledge that you have read and understand this Privacy Policy and agree to the manner in which your personal information is collected, used, and disclosed, as set forth in this Privacy Policy.

Personal information that we collect or process

When we use the term "personal information," we refer to any data that identifies you or can reasonably be linked to you or another person. Personal information does not include data collected anonymously or that has been de-identified to the point where it cannot reasonably identify you or be linked to you. We may collect and process the following categories of personal information – including inferences derived from such information – depending on how you interact with our Services, your location, and what applicable laws permit or require:

Contact details include your name, address, billing address, shipping address, phone number, and email address.
Financial information, including credit card, debit card, and banking account numbers, payment card details, financial account data, transaction details, payment methods, payment confirmations, and other related payment information.
Account information, including your username, password, security questions, preferences, and settings.
Information about transactions, including the items you've viewed, added to your cart, saved to your wishlist, purchased, returned, exchanged, or cancelled, as well as your previous transactions.
Communications with us include any information you provide to us in your communications with us, for example, when submitting a complaint to customer service.
Device information includes details about your device, browser, or network connection, your IP address, and other unique identifiers.
Information about your use, including details about how you interact with our services, such as the method and timing of your use or browsing,
Sources of personal information

We can collect personal information from the following sources:

By creating an account, visiting our website, or using our services, you are communicating with us and providing us with your personal information.
Automatically, through our services, including information from your device when you use our products or services or visit our websites, and through the use of cookies and similar technologies.
This includes third-party service providers we engage to implement specific technologies, or those who collect or process your personal information on our behalf.
From our partners or other third parties.
How we use your personal information

Depending on how you interact with us or the services you use, we may use your personal information for the following purposes:

We use your personal information to provide you with our services, which includes fulfilling the contract we have with you, processing your payments, managing your orders, remembering your preferences and items of interest, sending you notifications related to your account, handling purchases, returns, exchanges, and other transactions, creating, maintaining, and managing your account, arranging shipping, facilitating returns and exchanges, allowing you to post reviews, and offering you a personalized shopping experience, such as recommending products related to your purchases. This may include using your personal information to personalize and improve our services.
Marketing and Advertising. We will use your personal information for marketing and promotional purposes, such as sending you commercial, advertising, and promotional communications via email, text message, or postal mail, as well as displaying advertisements for products or services within our Services or on other websites, even based on products you have previously purchased, added to your cart, or other activities you have undertaken within our Services.
Security and fraud prevention. We use your personal information to authenticate your account, provide a secure shopping and payment experience, detect, investigate, or take action against potential fraudulent, illegal, dangerous, or malicious activities, protect public safety, and ensure the security of our services. If you choose to use our services and create an account, you are responsible for maintaining the confidentiality of your login credentials. We strongly recommend that you do not share your username, password, or other information with anyone.
Communication with you. We use your personal information to provide customer service, respond to your inquiries, and deliver effective services, as well as maintain our business relationship with you.
Legal reasons. We use your personal information to comply with applicable laws and regulations, respond to valid legal requests, including those from regulatory agencies or government authorities, and to participate in legal discovery processes, such as potential or actual litigation or other legal disputes. We also use it to enforce or investigate potential violations of our terms or policies.
How we disclose personal information

In certain circumstances, we may disclose your personal information to third parties for legitimate reasons, in accordance with this Privacy Policy. Such circumstances may include:

With Shopify, we engage third-party providers who offer services on our behalf, such as IT management, payment processing, data analysis, customer service, cloud storage, order and shipping management, etc.
We partner with commercial and marketing agencies to provide marketing services and display advertising. For example, we use Shopify to support personalized advertising through third-party services, based on your online activity with various businesses and websites. Our partners will use your information in accordance with their own privacy policies. Depending on your location, you may have the right to request that we do not share information about you for personalized advertising and marketing purposes, based on your online activity with different businesses and websites. You can exercise your rights to object to such uses here.
When you instruct us to share certain information with third parties, such as for sending you products or using social media widgets or login integrations, please let us know.
Through our affiliates, or more generally, within our corporate group.
In connection with a commercial transaction, such as a merger or insolvency, to comply with applicable legal obligations (including responding to legal summons, court orders, or similar requests), to enforce the terms of service or relevant policies, and to protect or defend our services, our rights, and the rights of our users or other parties.
Relationship with Shopify

The services are hosted on Shopify, which collects and processes personal information about your access and use of the services in order to provide and improve the services for you. In order to provide and improve the services, any information you send to the services will be transmitted and shared with Shopify and with third parties that may be located in different countries than your own. Furthermore, to help protect, develop, and improve our business, we use certain advanced features of Shopify that incorporate data and information obtained from your interactions with our store, with other businesses, and with the Shopify platform itself. To offer these advanced features, Shopify may use personal information collected about your interactions with our store, with other businesses, and with the Shopify platform. In these circumstances, Shopify is responsible for the processing of your data.Personal information, including your responses to requests to exercise your rights regarding the use of such information for those purposes. To learn more about how Shopify uses your personal information and about the rights you may have, please refer to the Shopify Consumer Privacy Policy. Depending on your location, you can exercise certain rights regarding your personal information here: [Link to Shopify Privacy Portal].

Third-party websites and links

The Services may include links to websites or other online platforms managed by third parties. If you access links that direct you to non-affiliated or unmanaged sites, we recommend that you review their privacy and security policies, as well as their terms and conditions. We do not guarantee or assume responsibility for the privacy or security of such sites, including the accuracy, integrity, or reliability of the information they contain. Information you provide in public or semi-public areas – including that shared on third-party social media platforms – may also be visible to other users of the Services and users of those third-party platforms, without any restrictions on our or their use.The inclusion of these links does not, in itself, constitute an endorsement of the content of those platforms or their owners or operators, unless explicitly stated in the Services themselves.

Data on minors

These services are not intended for use by minors, and we do not knowingly collect personal information from minors in accordance with applicable laws in your jurisdiction. If you are a parent, guardian, or legal custodian of a minor who has provided us with their personal information, you can contact us using the contact information provided below to request its deletion. As of the date of this Privacy Policy, we are not aware of any instances where we have "shared" or "sold" (as defined in applicable legislation) the personal information of individuals under the age of 16.

Safety and protection of your information

Please be aware that no security measure is perfect or foolproof, and we cannot guarantee "absolute security." Furthermore, any information you send to us may not be secure during transmission. We recommend that you do not use unsecured channels to send us sensitive or confidential information.

The length of time we retain your personal information depends on several factors, including the need to maintain your account, provide you with services, comply with legal obligations, resolve disputes, or enforce other applicable contracts and policies.

Your rights and options

Depending on where you reside, you may have some or all of the rights listed below regarding your personal information. However, these rights are not absolute and may only apply in certain circumstances. In some cases, we may refuse your request if permitted by law.

Right of access. You have the right to request access to the personal information we hold about you.
Right to suppression. You have the right to request that we delete the personal information we have about you.
Right to rectification. You have the right to request that we correct any inaccurate personal information we have about you.
Right to data portability. You may be entitled to receive a copy of the personal information we hold about you and to request that it be transferred to a third party, under certain circumstances and subject to certain exceptions.
You have the right to object to the sale or transfer of your personal data for personalized advertising purposes. Depending on your location, you may have the right to object to the "sale" or "transfer" of your personal information, or to object to the processing of such information for purposes considered "targeted advertising," as provided for in applicable privacy laws. You can exercise your rights to object to these uses here. Please note that if you visit our website with the Global Privacy Control opt-out setting enabled, we will automatically treat this visit as a request for exclusion for the device and browser you are using. If we can associate the device sending the signal with a Shopify account, we will also apply the exclusion request to that account. For more information about Global Privacy Control,You can visit https://globalprivacycontrol.org/. Aside from the Global Privacy Control signal, we do not recognize other "Do Not Track" signals that may be sent from your web browser or device.
Communication preference management. We can send you promotional emails, and you can opt out at any time by using the unsubscribe option in our emails. If you choose to opt out, we may still send you non-promotional emails, such as those related to your account or your orders.

If you reside in the United Kingdom or the European Economic Area (EEA), and subject to the exceptions and limitations provided for in local legislation, you may also exercise the following rights, in addition to those previously mentioned:

Opposition to treatment and limitation of treatment: You may have the right to request that we discontinue or limit the processing of your personal information for specific purposes.
Right to withdraw consent: If your personal information is processed based on your consent, you have the right to withdraw that consent. Withdrawing your consent will not affect the legality of the processing that was carried out based on your consent before the withdrawal.

Anyone can exercise these rights at the locations specified in the Services or by contacting us through the contact details provided below. To learn more about how Shopify uses your personal information and the rights you may have – including those related to data processed by Shopify – you can visit https://privacy.shopify.com/en.

We will not discriminate against anyone exercising these rights. We may need to verify your identity before processing your requests, as permitted or required by applicable law. Under applicable law, you may designate an authorized representative to submit requests on your behalf in order to exercise your rights. Before accepting a request submitted by a representative, we will require proof that you have authorized them to act on your behalf, and we may require you to verify their identity directly with us. We will respond to your request within a reasonable timeframe, as established by applicable law.

Claims

If you have any concerns about how we handle your personal information, please contact us using the contact details provided below. Depending on your location, you may have the right to appeal our decision by contacting us using the contact details provided below, or by submitting a complaint to the local data protection authority. For the EEA, you can find a list of data protection authorities here.

International transfers

Please be aware that we may transfer, store, and process your personal information outside of the country in which you reside.

If we transfer your personal information outside of the European Economic Area (EEA) or the United Kingdom, we will use recognized transfer mechanisms, such as the standard contractual clauses (SCC) issued by the European Commission, or equivalent contracts issued by the competent authority in the United Kingdom, where applicable. This will only apply if the transfer is made to a country that has been recognized as providing an adequate level of protection.

Changes to this Privacy Policy

We may update this Privacy Policy periodically, even to reflect changes in our practices or for operational, legal, or regulatory reasons. We will publish the updated version of this Privacy Policy on this website, update the "Last Updated" date, and notify you of any changes as required by applicable law.

Contact

If you have any questions about our privacy practices or this Privacy Policy, or if you wish to exercise any of the rights you are entitled to, we are the data controller for your personal information under applicable data protection laws.