Privacy Policy
This Privacy Policy explains how Tiny Tots Undies (the "Site," "we," "us," or "our") collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from www.tinytotsundies.com (the "Site"), or otherwise communicate with us regarding the Site (collectively, the "Services").
For purposes of this Privacy Policy, "you" and "your" mean the user of the Services, whether you are a customer, a website visitor, or another individual whose information we have collected as permitted by this Privacy Policy.
Please read this Privacy Policy carefully.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the "Last Updated" date, and take any other steps required by applicable law.
How We Collect and Use Your Personal Information
To provide the Services, we collect, and have collected over the past 12 months, personal information about you from various sources, as described below. The information we collect and use depends on how you interact with us.
In addition to the specific uses described below, we may use the information we collect about you to communicate with you, provide or improve the Services, comply with applicable legal obligations, enforce any applicable terms of service, and protect or defend the Services, our rights, and the rights of our users or others.
Use of WhatsApp for Communication and Order Reminders
By providing your phone number when placing an order, you agree to receive notifications and marketing messages via WhatsApp. This includes updates on your order, reminders for abandoned carts, and exclusive promotional offers.
You may opt out of receiving WhatsApp messages at any time by replying "STOP" in the conversation or by contacting us at info@tinytotsundies.com.
Your personal information, including your phone number, will never be shared or sold to third parties and will only be used within the scope of the business relationship between you and our company.
Personal Information We Collect
The types of personal information we obtain about you depend on how you interact with our Site and Services. When we use the term "personal information," we mean information that identifies, relates to, describes, or can be associated with you.
Information We Collect Directly From You
The information you submit directly through our Services may include:
- Contact details such as your name, address, phone number, and email.
- Order information such as your name, billing address, shipping address, payment confirmation, email, and phone number.
- Account information such as your username, password, security questions, and other details used for account security.
- Customer service information, including the details you choose to share with us when contacting us (for example, via our Services).
Some features of the Services may require you to provide certain personal information. You may choose not to provide this information, but it may prevent you from using or accessing those features.
Information We Collect About Your Use
We may automatically collect certain information about your interaction with the Services ("Usage Data") through cookies, pixels, and similar technologies. Usage Data may include information about how you access and use our Site and your account, such as device information, browser information, network connection details, IP address, and other information about your interactions with the Services.
Information We Obtain From Third Parties
We may also obtain information about you from third parties, such as service providers that collect information on our behalf:
- Companies that support our Site and Services, such as Shopify.
- Payment processors that collect payment details (e.g., bank account, credit/debit card, billing address) to process transactions and provide products/services you requested.
When you visit our Site, open or click on our emails, or interact with our Services or ads, we and/or third parties may automatically collect information using tracking technologies like pixels, web beacons, SDKs, third-party libraries, and cookies.
Any information we obtain from third parties will be treated in accordance with this Privacy Policy.
How We Use Your Personal Information
-
Providing Products and Services – To fulfill our contract with you, including processing payments, fulfilling orders, sending account/order/return/exchange notifications, creating and managing your account, shipping, facilitating returns, and other account-related features.
-
Marketing and Advertising – To send you promotional communications (email, SMS, postal mail) and show you ads tailored to your interests. If you are in the EEA, the legal basis for this processing is our legitimate interest under Art. 6(1)(f) GDPR.
-
Security and Fraud Prevention – To detect, investigate, or address fraud, illegal, or malicious activity. You are responsible for securing your account credentials. Contact us immediately if you believe your account is compromised.
-
Communication and Service Improvement – To provide customer service and improve our Services.
Cookies
Like many websites, we use cookies. For details on the cookies used by Shopify, see: www.shopify.com/legal/cookies.
We use cookies to operate and improve our Site/Services (e.g., remembering preferences), analyze traffic, and personalize advertising.
Most browsers accept cookies by default. You can configure your browser to delete or block them, but this may affect your experience or limit some features.
Our Site recognizes the Global Privacy Control (GPC) signal, which allows you to opt out of certain uses/disclosures of your information.
How We Disclose Personal Information
We may share personal information with third parties in the following cases:
- Service providers (IT, payment processing, customer service, cloud storage, shipping, analytics).
- Business and marketing partners.
- With affiliates within our business group.
- In business transactions (mergers, acquisitions, bankruptcy).
- To comply with legal obligations or enforce our rights.
We do not use or disclose sensitive personal information without your consent.
Children's Data
Our Services are not directed to children, and we do not knowingly collect personal data from children. If a child has provided information, parents/guardians can contact us to request deletion.
Security and Data Retention
No security system is perfect. While we use safeguards, we cannot guarantee absolute security. Data is retained only as long as necessary for legal, operational, or contractual obligations.
Your Rights
Depending on your location, you may have rights such as:
- Access to your data
- Deletion
- Correction
- Data portability
- Opt-out of sale/sharing/targeted advertising
- Restrict processing
- Withdraw consent
- Appeal a decision
- Manage communication preferences
Requests can be made via info@tinytotsundies.com.
We may require proof of identity before fulfilling a request.
Complaints
If you have concerns, you may contact us at info@tinytotsundies.com. If unsatisfied, you may escalate to your local data protection authority.
International Users
Your data may be transferred and processed outside your country, including in the US and other regions. If transferred from Europe, we rely on Standard Contractual Clauses or equivalent legal mechanisms.
Contact
If you have questions about this Privacy Policy or our data practices, please contact us at:
info@tinytotsundies.com
30 N Gould St, STE R, Sheridan, WY 82801, USA
For purposes of applicable data protection law, unless stated otherwise, we are the data controller of your personal information.