At Whimsy Sprout Inc, your privacy is our utmost priority. We understand that trust is the foundation of our relationship, and we are committed to protecting the personal information you share with us when using our website, making a purchase, or engaging with our services. This Privacy Policy is designed to be transparent, easy to understand, and comprehensive—outlining exactly how we collect, use, store, and protect your data, as well as your rights regarding your personal information. By accessing or using our website, you agree to the practices described in this policy, which aligns with global privacy standards including the General Data Protection Regulation (GDPR) for users in the European Union.

1. Information We Collect

We only collect personal information that is necessary to provide you with our products, services, and a seamless shopping experience. The information we collect falls into two categories: information you voluntarily provide, and information we automatically collect when you interact with our website.

1.1 Voluntarily Provided Information

This is information you choose to share with us, including but not limited to:

• Personal Identification Information: Name, email address, phone number, and shipping/billing address—collected when you create an account, place an order, or subscribe to our newsletter.
• Payment Information: Credit/debit card details, PayPal account information, or other payment method details—collected securely during checkout to process your order (we do not store full payment details; they are handled by our trusted third-party payment processors).
• Account & Preference Information: Password (encrypted), order history, wishlist items, communication preferences, and product reviews—collected to personalize your experience and manage your account.

1.2 Automatically Collected Information

When you visit our website, we may automatically collect certain non-identifiable information to improve our site performance and your experience, including:

• Device & Technical Information: IP address (which may be considered personal data under GDPR), browser type, operating system, device model, and screen resolution.
• Browsing & Usage Data: Pages visited, time spent on each page, links clicked, search queries, and referral source—collected using cookies and similar tracking technologies (see Section 4 for more details).

2. How We Use Your Information

We use your personal information solely for legitimate purposes, and we will never use it in ways that are inconsistent with the reasons you provided it. Our key uses include:

• Process & Fulfill Orders: Verify your identity, process payments, ship your orders, send order confirmations and tracking updates, and handle returns or exchanges.
• Manage Your Account: Allow you to access your account, view order history, update personal details, and maintain the security of your account.
• Personalize Your Experience: Recommend products based on your browsing history and preferences, tailor content to your interests, and remember your settings for future visits.
• Communicate With You: Send important updates (e.g., order status, account changes), respond to your inquiries, and share newsletters, promotions, or product updates (only if you have opted in to receive marketing communications).
• Improve Our Services: Analyze browsing and usage data to enhance our website performance, optimize product offerings, and fix any technical issues.
• Ensure Compliance & Security: Protect against fraud, unauthorized access, or misuse of our website, and comply with applicable laws, regulations, and legal obligations (including GDPR requirements for data protection).

We will never sell, rent, or share your personal information with third parties for their own marketing purposes without your explicit consent. Any sharing of your data is strictly limited to the purposes outlined in this policy.

3. How We Share Your Information

We may share your personal information with trusted third-party service providers who help us operate our business and deliver services to you. These third parties are contractually obligated to protect your data and only use it to perform the services we request. We share information with the following types of third parties:

• Payment Processors: Companies like PayPal, Stripe, or credit card processors—who handle payment transactions securely and do not store your payment details beyond what is necessary to process the payment.
• Shipping & Logistics Providers: Carriers like USPS, UPS, DHL, or FedEx—who need your shipping address to deliver your orders.
• Marketing & Communication Tools: Platforms that help us send newsletters, promotional emails, or SMS updates (only if you have opted in; you can unsubscribe at any time).
• Security & Analytics Providers: Companies that help us monitor website security, detect fraud, and analyze user behavior to improve our services.

We may also disclose your information if required by law (e.g., in response to a court order, subpoena, or government request) or to protect our rights, property, or the safety of our customers, employees, or the public.

4. Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies (e.g., web beacons, pixels) to enhance your browsing experience, remember your preferences, and collect usage data. Cookies are small text files stored on your device that help us recognize you when you return to our website.

• Essential Cookies: These are necessary for the website to function properly (e.g., to remember your cart items or login status). They cannot be disabled.
• Analytics Cookies: These collect data about how you use our website (e.g., pages visited, time spent) to help us improve site performance and user experience.
• Marketing Cookies: These track your browsing activity to deliver personalized promotions and ads (only if you have opted in). You can disable these cookies at any time.

You can manage your cookie preferences through your browser settings—most browsers allow you to block or delete cookies. However, disabling certain cookies may affect the functionality of our website.

5. Data Security & Storage

We take the security of your personal information very seriously and implement industry-standard measures to protect it from unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption of sensitive data (e.g., payment information, passwords) using SSL/TLS technology.
• Secure servers and firewalls to prevent unauthorized access to our databases.
• Regular security audits and updates to our systems and processes.
• Restricted access to personal information—only authorized employees and third-party service providers who need the data to perform their duties can access it.

We store your personal information only for as long as necessary to fulfill the purposes outlined in this policy, or as required by law. Once your data is no longer needed, we will securely delete or anonymize it.

6. Your Rights Regarding Your Information

Under applicable privacy laws (including GDPR), you have certain rights regarding your personal information. We make it easy for you to exercise these rights at any time:

• Right to Access: Request a copy of the personal information we hold about you.
• Right to Correction: Ask us to correct any inaccurate or incomplete personal information.
• Right to Erasure: Request that we delete your personal information (also known as the "right to be forgotten"), subject to certain legal exceptions.
• Right to Restrict Processing: Ask us to limit how we use your personal information (e.g., if you dispute the accuracy of the data).
• Right to Data Portability: Request a copy of your personal information in a structured, machine-readable format so you can transfer it to another service provider.
• Right to Withdraw Consent: If you have given us consent to use your information (e.g., for marketing), you can withdraw it at any time—this will not affect any processing we did before you withdrew consent.

To exercise any of these rights, please contact our customer support team at qinyouzeke@outlook.com or 12139941219. We will respond to your request within a reasonable timeframe (in compliance with GDPR requirements, typically within 30 days) and will not charge you for exercising your rights, unless your request is excessive or unfounded.

7. Children’s Privacy

Our website is not intended for children under the age of 13 (or the age of consent in your jurisdiction). We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child without parental consent, we will promptly delete that information. If you are a parent or guardian and believe your child has shared personal information with us, please contact us to request its deletion.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable laws (including updates to GDPR). When we make changes, we will update the "Last Updated" date at the bottom of this page and post the new policy on our website. We encourage you to review this policy periodically to stay informed about how we are protecting your privacy. Your continued use of our website after the changes take effect constitutes your acceptance of the updated policy.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information, please contact us:

• Email: qinyouzeke@outlook.com
• Phone: 12139941219

We are committed to addressing your concerns promptly and transparently. If you are not satisfied with our response, you may also have the right to lodge a complaint with your local data protection authority (e.g., the Information Commissioner’s Office in the UK or your country’s equivalent under GDPR).

Thank you for trusting Whimsy Sprout Inc with your privacy. We are dedicated to earning and maintaining that trust every day.