Privacy Policy

Privacy Policy regarding the processing of personal data

This policy was published on September 18, 2020.

At Kraftygraphy we try to offer the best services and products to our customers. This policy explains our privacy practices for Kraftygraphy.com which we will refer to as “site” and our other services providers like Shopify, PayPal and Facebook Chat.

SC Shades and Light SRL, CUI 35745866, J38/213/2016, located in Daesti, Fedelesoiu, Valcea, Romania, EU, is the data controller and is responsible for your personal information.

We process your personal information to run our business and provide our users with quality service in full compliance with Regulation (EU) 2016/679 (“General Data Protection Regulation” or “GDPR”), as well as any other applicable legislation in the EU..

By accepting our Term of use (and in some jurisdictions, by acknowledging this policy), you confirm that you have read and understand this policy, including how and why we use your information. If you don’t want us to collect or process your personal information in the ways described in this policy, you shouldn’t use our services.

We are not responsible for the content or the privacy policies or practices of any of our members, websites and apps hosted through Shopify apps.

All account owners must be at least 18 years of age. Minors under 18 years of age and at least 13 years of age are permitted to use Kraftygraphy services only if they have permission and direct supervision by the owner of the account. Children under age 13 are not permitted to use our services. You are responsible for all account activity conducted by a minor on your account. We do not knowingly “sell,” as that term is defined under applicable law, including the California Consumer Privacy Act, the personal information of minors.

By using the Services, you acknowledge that Kraftygraphy will use your information in Romania(EU member) and any other country where Kraftygraphy and our suppliers operate. Please be aware that the privacy laws and standards in certain countries, including the rights of authorities to access your personal information, may differ from those that apply in the country in which you reside. We will transfer personal information only to those countries to which we are permitted by law to transfer personal information.

How we collect information?

In the course of providing our Services, we collect or receive your personal information in a few different ways.

Directly from you, for example, from forms you complete or during registration;

Indirectly from you, based on your activity and interaction with our Products, or from the device or browser you use to access the Products and Services; from our suppliers that help provide Kraftygraphy services you may interact with (such as, for example, for payments or customer support), and from our third party advertising and marketing partners. We require certain information to provide you the Services. Kraftygraphy uses the personal information it receives and collects in accordance with the purposes described in this policy

From where we collect and use information?

Making an account | Service Usage: If you register, you will need to submit an e-mail address and name associated with your account. You may modify that name through your account settings. You need to provide this information to enable us to provide you an account. Additional information, such as billing and payment information (including billing contact name, address, telephone number, credit card information), a telephone number, and/or a physical postal address, may be necessary in order for us to provide a particular service, like payments. We may store credit card information and other information provided to us during checkout, for billing and payment purposes, and to process your transaction. In some countries you may be asked to authenticate your payment method when you place your order. To authenticate a payment, you will need to respond to a prompt from your card issuer and provide additional information, such as a correct response to a question, a password, or a passcode. Information that you submit through the application process will not be displayed publicly and will only be used internally by the service providers, unless otherwise specified.

Automated Information: Our marketing service providers automatically receives and records information from your browser or your mobile device when you visit the Site or use certain features of the Services, such as your IP address or unique device identifier, cookies, and data about which pages you visit and how you interact with those pages in order to allow us to operate and provide the Services. This information is stored in log files and is collected automatically. We may combine this information from your browser or your mobile device with other information that we or our advertising or marketing partners collect about you, including across devices. This information is used to provide advertising, including across your devices, and a more personalized experience for members and visitors.

Data from Advertising and Marketing Partners: As described below, we receive information from our advertising and marketing partners about you. This information can include attribution information via cookies and UTM tags in URLs to determine where a visit to Kraftygraphy comes from, responses to marketing emails and advertisements, responses to offers, and audience information from partners who you have given consent to share that information with us.

Analytics Information: We use data analytics software to ensure Site and App functionality and to improve the Services. This software records information such as how often you use the Apps, what happens within the Apps, aggregated usage, performance data, app errors and debugging information, and where the site were access from. We do not link the information we store within the analytics software to any personally identifiable information that you submit.

Non-Member Information: Kraftygraphy receives or obtains information (for example, an email address or phone number) about a person who is not yet a registered member (a “non-member”) such as when a non-member chooses to subscribe to an Kraftygraphy

newsletter, a member invites a non-member to visit the Site, or a non-member uses Guest Checkout to make a purchase.

Messages

On occasion, we will need to contact you. Primarily, these messages are delivered by email, or by push notifications for a variety of reasons, including marketing, transactions, advocacy, and service update purposes. If you no longer wish to receive push notifications, you can disable them.

You can opt out of receiving marketing communications via email or Messages in your account settings or by following the unsubscribe link in any marketing email you receive. Every account is required to keep a valid email address on file to receive messages. We may also contact you by e-mail or chat to provide member support or for transaction-related purposes. Additionally, and with your consent where required by applicable law, we may send you an SMS (or similar) message, or reach out to you by telephone, in order to provide you with customer support, or to provide you with information about products and features that you may find of interest. You can update your contact preferences in your account settings.

Some messages from Kraftygraphy are service-related and necessary for members and Guest Checkout users. You understand and agree that we can send you non-marketing emails, Messages, such as those related to transactions, your account, security, or product changes. Examples of service-related messages include an email address confirmation/notification of an order, service availability, modification of products, correspondence with Support team

When you register for an account, subscribe to a newsletter, or provide us with your email address or phone number such as for a Guest Checkout purchase, you receive notice of and agree (in some jurisdictions and situations, by an additional unambiguous consent) to receive marketing emails and messages from us. You can unsubscribe at any time from marketing emails or messages through the opt-out link included in marketing emails or messages. Members can control if they get marketing emails.

Using, Sharing, & Disclosure Information

We respect your privacy. Kraftygraphy will not disclose your name, email address, or other personal information to third parties without your consent, except as specified in this policy.

Legal Bases

When you access or use the Services, we collect, use, share, and otherwise process your personal information for the purposes described in this policy. We rely on a number of legal bases to use your information in these ways. These legal bases include where:

Necessary to perform the contractual obligations in our Terms of Use and in order to provide the Services to you;
Offer you refunds where applicable, answer to questions and suggestions
You have consented to the processing, which you can revoke at any time;
Necessary to comply with a legal or regulatory obligation, a court order, or to exercise or defend any impending or asserted legal claims;
You have expressly made the information public;
Necessary in the public interest, such as to prevent crime; and
Occasionally necessary to protect your vital interests or those of others (in rare cases where we may need to share information to prevent loss of life or personal injury).
For processing your orders and invoicing
Legal accounting

Where we process your information

Providing and Improving our Services: We use your information to improve our Services, including sharing your information for such purposes, and we do so as it is necessary to improve our Services for our users and to explore and unlock ways to develop and grow our business. As a core part of our Services, we have a legitimate interest in customizing your on-site experience to help you search for and discover relevant items and recommended purchases, including using this information to help us find the best ways to market and sell our products.

Keeping our Services Safe and Secure: We use your information for safety and security purposes, which can include sharing your information for such purposes, and we do so because it is necessary to pursue our legitimate interests or those of a third party in ensuring the security of our Services, preventing harm to individuals or property, or crime, enforcing or defending legal rights, or preventing damage to our systems, or those of our users or our partners. This includes enhancing protection of our community against spam, harassment, intellectual property infringement, crime, and security risks of all kinds. We use your information to provide and improve the Services, for billing and payments, for identification and authentication,

Buying: As part of the buying process, we may use information for shipping address and payment status. This can also involve us sharing your information with some of our third party partners such as our shipping and payment partners to enable us to provide the Service to you. Such partners will process your personal information in accordance with their own privacy policies. These partners, not us, are responsible for the protection of personal information under their control. By making a purchase on our store, you are directing us to share your information in this way. Since this is an important part of the Services we provide, we need to do this in order to perform our obligations under our Terms of Use.

Site Customization: We may learn about the types of products that you’re interested in from your browsing and purchasing behavior and use such information to suggest potential purchases as a result.

Legal and Safety: We may also retain, preserve, or release your personal information to a third party in the following limited circumstances: in response to lawful requests by public authorities, including to meet legitimate national security or law enforcement requirements; to protect, establish, or exercise our legal rights or defend against impending or asserted legal claims, including to collect a debt, or a material violation of our policies (including our Intellectual Property Policy); to comply with a subpoena, court order, legal process, regulation, or other legal requirement; or when we believe in good faith that such disclosure is reasonably necessary to comply with the law, prevent imminent physical harm or financial loss, or investigate, prevent, or take action regarding illegal activities, suspected fraud, threats to our rights or property, or violations of Kraftygraphy Terms of Use. For example, if permitted due to the forgoing circumstances, your information may be shared with tax authorities or other governmental agencies. In the cases set out above, our use of your information may be necessary for the purposes of our or a third party’s legitimate interest in keeping our Services secure, preventing harm or crime, enforcing or defending legal rights, or preventing damage. Such use may also be necessary to comply with a legal obligation, a court order, or to exercise or defend legal claims or to facilitate the collection of taxes and prevention of tax fraud. It may also be necessary in the public interest (such as to prevent crime) or to protect vital interests (in rare cases where we may need to share information to prevent loss of life or personal injury).

If Kraftygraphy receives a lawful, verified request for a member’s records or information in one of the limited circumstances described in the previous paragraph, we may release personal information, which may include, but may not be limited to, a member’s name, address, phone number, email address, company/trading name and, where appropriate, bank account and transaction details.

Aggregated Information: Kraftygraphy may share demographic information with business partners, but it will be aggregated and de-personalized so that personal information is not revealed.

Service Providers: Kraftygraphy also needs to engage third-party companies and individuals (such as analytics and security providers) to help us operate, providea great experience. These third parties have only limited access to your information, may use your information only to perform these tasks on our behalf, and are obligated not to disclose or use your information for other purposes. Our engagement of service providers is often necessary for us to provide the Services to you, particularly where such companies play important roles like helping us keep our Service operating and secure.

Third Parties: Third-party also collect information about your use of the Site. For example, when you load a page on kraftygraphy.com that has a social plug-in from a third-party site or service, such as a “Like” or “Send” button, you are also loading content from that third-party site. These interactions are subject to the privacy policy of the third-party site. Kraftygraphy chooses and manages these third-party technologies placed on the site. However, these are third-party technologies, and they are subject to third party's privacy policy.

Kraftygraphy operates globally. By using our Services, you understand that Shades and Light srl may share some of the information it gathers with Shopify Inc. (its US parent company), other trusted shopify apps and payment providers for purposes described in this privacy policy, including for ID verification, transaction reviews, and payment processing.

Security

The security of your personal information is important to us. We use Paypal Express Payment and Shopify platform with multiple layers of security, but unfortunately, no method of transmission over the internet or method of electronic storage is 100% secure. Therefore, while we strive to protect your personal information, we cannot guarantee its absolute security.

Your account information is protected by a password. It is important that you protect against unauthorized access to your account and information by choosing your password carefully and by keeping your password and computer secure, such as by signing out after using the Services.

Retention

We will retain your information only for as long as is necessary, for as long as your account is active, or as needed to provide the services to you. If you no longer want Kraftygraphy to use your information to provide the Services to you, you may delete your account. We will retain and use your information to the extent necessary to comply with our legal obligations (for example, if we are required to retain your information to comply with applicable tax/revenue laws), resolve disputes, enforce our agreements, and as otherwise described in this policy.

Your Rights & Choices

Certain privacy laws around the world, including the European General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), provide users with rights related to their personal information. Consistent with those laws, we give you choices about how we contact you. You may change or correct your account information through your account settings. You may also remove certain optional information, such as your name. You can also request to permanently close your account and delete your personal information. Depending on your location, you may also benefit from a number of rights with respect to your information. While some of these rights apply generally, certain rights apply in limited cases.

Right to Access & Portability: You can request a copy of your personal information and information explaining how that information is used.
Right to Correction: You have the right to request that we rectify inaccurate information about you.
Right to Restrict Processing: In certain cases where we process your information, you may also have the right to restrict or limit the ways in which we use your personal information.
Right to Deletion: In certain circumstances, you have the right to request the deletion of your personal information, except information we are required to retain by law, regulation, or to protect the safety, security, and integrity
Right to Object: If we process your information based on our legitimate interests as explained above, or in the public interest, you can object to this processing in certain circumstances. In such cases, we will cease processing your information unless we have compelling legitimate grounds to continue processing or where it is needed for legal reasons. Where we use your personal data for direct marketing purposes, you can object using the unsubscribe link in such communications.
Right to Withdraw Consent: Where we rely on consent, you can choose to withdraw your consent to our processing of your information using specific features provided to enable you to withdraw consent, like an email unsubscribe link.

The CCPA provides California residents with the following additional rights:

Right to Know: California residents may request disclosure of the specific pieces and/or categories of personal information that the business has collected about them, the categories of sources for that personal information, the business or commercial purposes for collecting the information, the categories of personal information that we have disclosed, and the categories of third parties with which the information was shared.
Right to Opt-Out: To the extent that Kraftygraphy “sells” personal information(as that term is defined under the CCPA), California residents are entitled to opt-out of the “sale” of data at any time (see below for more information).

If you would like to manage, change, limit, or delete your personal information,do it by changing or deleting your account or by contacting us.

Please note that we may verify your identity before we are able to process any of the requests described in this Section, and in our discretion, deny your request if we are unable to verify your identity. As a part of this process, government or other identification may be required. You may designate an authorized agent to make a request on your behalf. In order to designate an authorized agent to make a request on your behalf, you must provide a valid power of attorney, the requester’s valid government issued identification, and the authorized agent’s valid government issued identification, and we may verify the authenticity of the request directly with you.

We may send you messages about the Services or your activity. Some of these messages are required, service-related messages for members (such as transactional messages or legal notices). Other messages are not required, such as newsletters and you can unsubscribe anytime. If you don't want to provide your email address and or phone number, please close your account or ask us to delete your information.

Additional Disclosures for California Residents

In addition to the Rights & Choices described above, the CCPA requires disclosure of the categories of personal information collected over the past 12 months The categories of personal information that we have collected – as described by the CCPA – are:

Identifiers, including name, email address, shop name, IP address, and an ID or number assigned to your account.
Other individual records such as phone number, billing address, or credit or debit card information. This category includes personal information protected under pre-existing California law (Cal. Civ. Code 1798.80(e)), and overlaps with other categories listed here.
Commercial information, including purchases and engagement with the Services.
Internet activity, including your interactions with our Services and what led you to our Services.
Sensory visual data, such as pictures posted on our Service.
Geolocation data provided through location enabled services such as WiFi and GPS.
Inferences, including information about your interests, preferences and favorites.

The Purposes for Our Collection

We collect and use these categories of personal information for our business and commercial purposes described above, for improving our user experience, improving the safety and security of our services, processing purchase and sale transactions, and for advertising and marketing services.

Third Party Marketing and Advertising and Your Rights (Opt-Out of “Sale”)

Kraftygraphy does not sell personal information to third parties for monetary value. However, the term “sale” is defined broadly under the California Consumer Privacy Act. is interpreted to include interest based advertising or other data uses described in the sections above, we will comply with applicable law as to those activities.

To opt-out of receiving interest based advertising, you can exercise your choice by unsubscribing deleting your account or contacting us.

Privacy Policy Changes

We may update this policy from time to time. We’ll let you know by posting an update We encourage you to check back regularly and review any updates.

Contact

If you have any questions:

paula@kraftygraphy.com

+40 0746141263

Write to us at one of the following addresses:

To Shades and Light SRL

Adress Nicolae Titulescu, nr6, et 1, Rm. Valcea,

Valcea,

Romania

If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, you may contact

Romanian National Authority for the Supervision of Personal Data Processing

Adress: B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1,

cod poștal 010336, București, Romania

Phone: +40.318.059.211 sau +40.318.059.212;

E-mail:anspdcp@dataprotection.ro

If you live in the EU, you may also file a complaint with your local data protection regulator.