Privacy Policy
Introduction
This Privacy Policy will help you better understand how we and our third party website providers collect, use, and share your personal information. If we change our privacy practices, we may update this privacy policy.
Your information belongs to you
We carefully analyze what types of information we need to provide our services, and we try to limit the information we collect to only what we really need. Where possible, we delete or anonymize this information when we no longer need it.
We protect your information from others
If a third party requests your personal information, we will refuse to share it unless you give us permission, or we are legally required. When we are legally required to share your personal information, we will tell you in advance, unless we are legally forbidden.
Our third party website provider tries to build its products and services so they can easily be used in a privacy-friendly way.
Why we process your information
We generally process your information to fulfill the orders for products and services, or where we or someone we work with needs to use your personal information for a reason related to their business (for example, to provide you with a service). Laws in the European Economic Area (“EEA”) and in the United Kingdom (“UK”) call these reasons “legitimate interests.” These “legitimate interests” include:
preventing risk and fraud
answering questions or providing other types of support
providing and improving our products and services
providing reporting and analytics
testing out features or additional services
assisting with marketing, advertising, or other communications
We only process personal information for these “legitimate interests” after considering the potential risks to your privacy and balancing any risks with certain measures—for example, by providing clear transparency into our privacy practices, offering you control over your personal information where appropriate, limiting the information we keep, limiting what we do with your information, who we send your information to, how long we keep your information, or the technical measures we use to protect your information.
We may also process your personal information where you have provided your consent. In particular, where we cannot rely on an alternative legal basis for processing, where you direct us to transfer information to a third party, where we receive your data from a third party is sourced and it already comes with consent or where we are required by law to ask for your consent (including in the context of some of our sales and marketing activities). At any time, you have a right to withdraw your consent by changing your communication choices, opting out from our communications or by contacting us.
Your rights over your information
We believe you should be able to access and control your personal information no matter where you live. Depending on how you use the website, you may have the right to request access to, correct, amend, delete, port to another service provider, restrict, or object to certain uses of your personal information. Please note that a number of these rights apply only in certain circumstances, and all of these rights may be limited by law.
If you buy something from or otherwise provide your information to our store and wish to exercise these rights over information about your purchase or interaction, please contact Kenzo Publishing LLC, dba Natalie May at nataliemay@nataliemayauthor.com
Finally, because there is no common understanding about what a “Do Not Track” signal is supposed to mean, we don’t respond to those signals in any particular way.
Where we send your information
Our third-party website provider works with and process data about individuals across the world. To operate the business, they may send your personal information outside of your state, province, or country, including to the United States. This data may be subject to the laws of the countries where we send it. We take steps to protect your information when we send your information across borders.
Transfers outside of Europe and Switzerland
If you are located in the EEA, the UK, or Switzerland, your personal information is controlled by our website provider’s Irish affiliate, Shopify International Ltd. Your information is then sent to other Shopify locations and to service providers who may be located in other regions, including Canada and the United States. When we send your personal information outside of the EEA, UK, or Switzerland, we do so in accordance with applicable law.
If you are in the EEA, the UK, or Switzerland, when your personal information is sent to Canada it is protected under Canadian law, which the European Commission has found adequately protects your information. If this personal information is sent outside of Canada (for example, when the information is sent to subprocessors), this information is protected by contractual commitments that are comparable to those provided in the Standard Contractual Clauses.
Finally, we may at times be legally required to disclose your personal information (for example, if we receive a valid court order).
How long do we retain your information?
We will retain your personal data only for as long as necessary to fulfill the purposes for which we have collected it. To determine the appropriate retention period, we consider the amount, nature and sensitivity of your personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means and the applicable legal requirements. We will also retain and use your personal information to the extent necessary to comply with our legal obligations, resolve disputes and enforce our policies. If you stop using our services or if you delete your account with us, we will delete your information or store your information in an aggregated and anonymized format.
How we protect your information
Our teams work tirelessly to protect your information, and to ensure the security and integrity of our platform. We also have independent auditors assess the security of our data storage and systems that process financial information. However, we all know that no method of transmission over the Internet, nor method of electronic storage, can be 100% secure. This means we cannot guarantee the absolute security of your personal information.
How we use “cookies” and other tracking technologies
Our third-party supplier uses cookies and similar tracking technologies when providing our services. For more information about how they use these technologies, including a list of other companies that place cookies on our sites, a list of cookies that we place powering our store, and an explanation of how you can opt out of certain types of cookies, please see the Cookie Policy.
How you can reach us
If you would like to ask about, make a request relating to, or complain about how we process your personal information, please contact Kenzo Publishing LLC, dba Natalie May at nataliemay@nataliemayauthor.com
United States Regional Privacy Notice
This United States Regional Privacy Notice (“US Notice”) supplements our Privacy Policy.
This US Notice is for individuals residing in certain US states and is designed to help you better understand how we collect, use, and disclose your personal information and, depending on how you use our website and where you reside, how to exercise available rights under various applicable privacy laws in the US, specifically the California Consumer Privacy Act, the Colorado Privacy Act, the Connecticut Act Concerning Personal Data Privacy and Online Monitoring, the Utah Consumer Privacy Act, and the Virginia Consumer Data Protection Act (collectively, the “US Privacy Laws”).
What information we collect and share about you
To provide our apps and services to you, we must process information about you, including personal information.
We do not “sell” your personal information as that term is defined under US Privacy Laws.
Here is a summary of the categories of personal information we may have collected about you over the past 12 months and with whom we may have disclosed that information to, depending on how you use our website.
CATEGORIES OF PERSONAL INFORMATION COLLECTED
RECIPIENTS OF PERSONAL INFORMATION
Identifiers, including name, email address, mailing address, phone number;
Personal information categories listed in the California Customer Records statute, including name, mailing, and billing address, phone number, credit, or debit card information;
Commercial information, including products you purchase, place in your shopping cart, favorite or review;
Internet or other electronic network activity information, including information regarding the device and browser you use, network connection, IP address, and how you browse through our apps and sites;
Geolocation data, including your mailing and billing address;
Inferences, or information derived from other personal information about you, which could include your preferences, interests, and other information used to personalize your experience;
Other information you provide; and
Sensitive personal information, which may include:
Government-issued identifiers, including social security, driver’s license, state identification card, or passport number;
Your account access credentials (such as account log-in, financial account, debit, or credit card number in combination with any required security access code, password, or credentials allowing access to an account);
Your device’s precise location (if you are a Shop App user, but only when you allow Shop to access this information);
Information you voluntarily disclose that may reveal certain characteristics about you such as your racial or ethnic origin or sexual orientation.
Companies who help us provide you with our services, including cloud storage providers, payment processors, fulfillment partners, security vendors, email providers, marketplaces, and data analytics vendors;
Advertisers and marketing vendors;
your visit or purchases from the website;
Law enforcement or other third parties in connection with legal requests, to comply with applicable law or to prevent harm.
Why we collect and share your Personal Information
We use and share your personal information for the purposes set out in this policy. For categories of sensitive personal information that we collect, we only use or disclose such information either with your specific consent when required, or as otherwise permitted by law.
Sources of Personal Information
We collect and use personal information provided by:
You: We collect the information you provide when you use the website, fill in order information, or contact support. We collect account and payment information you provide to us or items you save to favorites, purchases you make, reviews you post, and how you otherwise interact or communicate with us. We also collect information about how you browse through our apps and sites, including search terms you may enter.
Your device(s): We collect information from and about the devices you use, including computers, phones, and other web-connected devices you use to access our apps or services, and we combine this information across different devices you use.
Third parties: We receive information from partners who help us provide you with our services.
How long we keep your information
Because we need your personal information to provide our services, we generally keep your personal information, including sensitive personal information, while you use our products or services or until you tell us to delete your information. We may also keep personal information to comply with legal obligations or protect our or other’s interests.
Your rights over your information
Depending on where you live, how you use our website, and subject to certain exceptions, you may have some or all of the following rights:
Right to Know: The right to request that we disclose to you the personal information we collect, use, or disclose about you, and information about our data practices.
Right to Request Correction: The right to request that we correct inaccurate personal information that we maintain about you.
Right to Request Deletion: The right to request that we delete personal information that we have collected about you.
To exercise your rights, including the “right to know” and “right to delete,” please send an email to: Kenzo Publishing LLC, dba Natalie May at nataliemay@nataliemayauthor.com
for instructions on how to request deletion of your information.
Please note that to protect your information and the integrity of our products and services, we may need to verify your identity before processing your request. In some cases, we may need to collect additional information to verify your identity, such as your email address or a government issued ID.
Under US privacy laws, you may also designate an authorized agent to make these requests on your behalf. If you use an authorized agent to submit a request, we may need to collect additional information, such as a government issued ID, to verify your identity before processing your request to protect your information.
In certain states, you may have the right to appeal our decision regarding a request related to these rights.
We will not discriminate against you for exercising any of these rights.
How you can reach us
If you would like to ask about or have concerns about how we process your personal information, please contact Kenzo Publishing LLC, dba Natalie May at nataliemay@nataliemayauthor.com