Privacy Policy for OolongToolong

Who I Am

I am committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR). This policy explains how I collect, use, and share your personal information when you visit my website or make purchases from my store.

Information I Collect and Store

During your visit to my site, I collect the following information:

  • Products you’ve viewed, to display recently viewed products and make recommendations.
  • Location, IP address, and browser type, to estimate taxes and shipping.
  • Shipping address, to calculate shipping costs and deliver orders.

I also use cookies to track your shopping cart and browsing preferences while you’re on my site.

When you purchase from me, I collect information like:

  • Name, billing address, shipping address, email address, phone number, credit card/payment details, and optional account information like username and password.
  • Order information, including the products purchased, date and time of purchase, and shipping details.

I use this information for the following purposes:

  • To send you information about your account and order.
  • To respond to your requests, including refunds and complaints.
  • To process payments and prevent fraud.
  • To set up your account for my store.
  • To comply with legal obligations, such as tax calculations.
  • To improve my store offerings and user experience.
  • To send you marketing messages, if you opt-in.

If you create an account, I will store your name, address, email, and phone number to populate the checkout for future orders.

I generally store your information for as long as it’s needed for the purposes for which it was collected and in accordance with legal requirements. For example, order information is stored for a specific period for tax and accounting purposes.

Who Has Access to Your Data

Members of my team who have access to your information include:

  • Administrators and Shop Managers, who can access order information and customer information to fulfill orders, process refunds, and provide support.

What I Share with Others

I share information with third parties who help me provide my services. This includes sharing data with Stripe for payment processing. Stripe requires information like the purchase total and billing details to process payments. You can read more about their privacy policy here.

Caching and External Services

This site uses caching to facilitate faster response times and a better user experience. Caching potentially stores a duplicate copy of every web page on this site. All cache files are temporary and are not accessed by third parties, except for technical support from the cache plugin vendor. Cache files expire on a schedule set by the site administrator, but may be purged earlier if needed. I may use QUIC.cloud services to process and cache your data temporarily. Learn more about their privacy policy here.

What Rights You Have Over Your Data

As a data subject, you have rights under GDPR, including the right to:

  • Request an exported file of the personal data I hold about you.
  • Request correction of inaccurate or incomplete data.
  • Request erasure of your personal data, except when legally required.
  • Object to or restrict data processing in certain circumstances.
  • Request data portability to transfer your data to another service.

To exercise any of these rights, contact me at [email protected].

Updates to This Policy

I may update this policy occasionally to reflect changes in my business practices or regulatory requirements. If significant changes occur, I will notify you through my website or other appropriate means.

Contact Information

For any questions or concerns about this privacy policy, contact me at [email protected].