At kcroetly, we are committed to protecting your privacy. This policy explains how we handle your information from the moment you visit our site to after you make a purchase, covering what we collect, how it is used, and the choices available to you.
Information We Gather When You Browse and Buy
To process your orders and provide a smooth shopping experience, we need to collect certain details from you during the buying and selling process. This includes personal information you provide directly, such as your name, address, and email address. Additionally, as you navigate through our store, our systems automatically receive your computer’s internet protocol (IP) address. This helps us understand the browser and operating system you are using, which in turn allows us to improve your experience on our site.
How Your Data is Used and Safeguarded
The foundation of our online store is built on Shopify, Inc., which supplies the e-commerce platform that allows us to display and sell our products. Your data is kept within Shopify’s data storage, databases, and the core Shopify application, residing on a secure server behind a firewall. When you finalize a purchase using a direct payment gateway, Shopify stores your credit card data. This information is encrypted according to the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is retained only for the duration needed to complete your transaction, and is deleted once that process is finished. All direct payment gateways comply with the standards established by PCI-DSS, which is overseen by the PCI Security Standards Council, a collaborative body involving brands such as Visa, Mastercard, American Express, and Discover. These PCI-DSS requirements are instrumental in ensuring the secure handling of credit card information by our store and its service providers. To further protect your personal information, we employ reasonable precautions and follow industry best practices. Any credit card information you provide to us is encrypted using secure socket layer technology (SSL) and stored with AES-256 encryption. While no method of online transmission or electronic storage is completely infallible, we adhere to all PCI-DSS requirements and implement additional generally accepted industry standards.
Your Choices About Marketing and Consent
We will only send you emails about our store, new products, and other updates if you have given us your permission to do so. When you provide personal information for a specific purpose—such as completing a transaction, verifying your credit card, placing an order, arranging a delivery, or returning a purchase—you are consenting to our collection and use of that information for that specific reason only. Should we ever need your information for a secondary purpose, like marketing, we will either ask for your explicit consent or give you a clear opportunity to decline.
Third-Party Services and External Destinations
The third-party providers we engage will only collect, use, and disclose your information to the extent necessary to perform the services they offer to us. However, some providers, particularly payment gateways and transaction processors, maintain their own privacy policies regarding the data we must share with them for your purchase-related transactions. We recommend reviewing their privacy policies to understand how your personal information will be managed. It is also important to note that certain providers may be located in, or have facilities in, a different jurisdiction than you or us. If you choose to proceed with a transaction involving a third-party service provider, your information may become subject to the laws of the jurisdiction(s) where that provider or its facilities are based. For example, if you are in Canada and your transaction is processed by a payment gateway in the United States, your personal information used in that transaction could be subject to disclosure under United States legislation, including the Patriot Act. Furthermore, our store uses Google Analytics to gain insights into site traffic and page engagement. Once you leave our store’s website or are redirected to a third-party website or application, this Privacy Policy and our website’s Terms of Service no longer apply. Clicking on links within our store may direct you away from our site, and we are not responsible for the privacy practices of other sites; we encourage you to read their privacy statements.
Data Retention and Your Rights
Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction, after which it is deleted. You have the right to withdraw your consent for us to contact you, and for the continued collection, use, or disclosure of your information, at any time. To do so, simply contact us at support@thousandat.com. We may also disclose your personal information if we are required by law to do so or if you violate our Terms of Service.
Age Requirements
By using this site, you confirm that you are at least the age of majority in your state or province of residence, or that you have reached the age of majority and have given us consent to allow any of your minor dependents to use this site.
Policy Updates and Business Changes
We reserve the right to modify this privacy policy at any time, so we encourage you to review it frequently. Any changes or clarifications will take effect immediately upon being posted on the website. If we make material changes, we will notify you here that the policy has been updated. Should our store be acquired or merged with another company, your information may be transferred to the new owners so that we may continue to sell products to you. If you have any questions about our privacy practices, please reach out to us at SigmundSchnabel42@outlook.com.