Privacy Policy

PRIVACY POLICY

Effective Date: February 1, 2026

1. INTRODUCTION

Welcome to Passion Craft Store. We understand that privacy is important to you, especially given the personal nature of our products. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our website and make purchases from us.

Passion Craft Store ("we," "us," or "our") operates the website https://passioncraftstore.com (the "Website" or "Service"). We are an individual business/entrepreneur registered in Ukraine.

Our Commitment to Your Privacy:
We are committed to protecting your personal information and your right to privacy. We treat all customer data with the utmost confidentiality and implement appropriate security measures to safeguard your information.

By using our Website, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Website.

2. DISCRETION AND CONFIDENTIALITY

We understand that our products are personal in nature, and we take your privacy seriously:

Billing Discretion:

• Credit card charges processed through Stripe will appear on your statement as "WESTERNBID.COM PEMBROKE PARK FL"
• PayPal transactions will appear on your statement as "PAYPAL*WESTERNBID"
• No reference to our store name or product categories will appear on your billing statements

Shipping Information:

• Packages are shipped with a representative name and address as the sender
• No reference to "Passion Craft Store" appears on the exterior of packages
• International shipments include customs declarations (CN22/CN23 forms) affixed to the package, which contain a description of contents as required by international shipping regulations
• Product descriptions may be included on shipping labels or documentation when required by the shipping carrier

Data Confidentiality:

• Your order history and purchase details are treated as confidential information
• We do not share your purchase information with third parties for marketing purposes
• We do not sell, rent, or trade your personal information

3. BUSINESS INFORMATION

Data Controller:
Passion Craft Store
Individual Business/Entrepreneur
38 Bohdana Khmelnytskoho Street,
Kyiv, Ukraine, 01030

Contact Information:

• Email: [email protected]
• Phone: +380982139580
• Contact Form: https://passioncraftstore.com/contact-us/

For the purposes of applicable data protection laws, we are the data controller responsible for your personal information collected through this Website.

4. DEFINITIONS

To help you understand this Privacy Policy, here are some key terms:

• Personal Data: Any information relating to an identified or identifiable individual, such as your name, address, email address, or phone number.
• Usage Data: Information collected automatically when you use the Website, such as your IP address, browser type, pages visited, and time spent on pages.
• Cookies: Small data files stored on your device that help us improve your experience and understand how you use our Website.
• Processing: Any operation performed on personal data, including collection, storage, use, disclosure, or deletion.
• Service Providers: Third-party companies or individuals who process data on our behalf to help us operate our business.

5. INFORMATION WE COLLECT

5.1 Information You Provide to Us

When you place an order or interact with our Website, we may collect:

Order Information:

• Full name
• Email address
• Phone number (optional)
• Shipping address (street address, city, state/province, postal code, country)
• Billing address (if different from shipping)

Communication Information:

• Messages you send through our contact form
• Customer service correspondence
• Product reviews you submit

5.2 Information Collected Automatically

When you visit our Website, we automatically collect certain technical information:

Usage Data:

• IP address
• Browser type and version
• Operating system
• Pages visited and time spent on pages
• Referring website
• Date and time of visit
• Unique device identifiers

Cookies and Similar Technologies:
We use cookies and similar tracking technologies to collect information about your browsing activities. See Section 9 for more details.

5.3 Information We Do NOT Collect

• We do not collect payment card details (these are processed directly by our payment providers)
• We do not collect date of birth
• We do not require account registration
• We do not collect information from social media profiles
• We do not knowingly collect information from individuals under 18 years of age

6. HOW WE USE YOUR INFORMATION

We use the information we collect for the following purposes:

Order Fulfillment:

• Processing and shipping your orders
• Sending order confirmations and shipping notifications
• Communicating with you about your orders
• Handling returns, exchanges, or customer service inquiries

Website Operation and Improvement:

• Maintaining and improving our Website functionality
• Analyzing usage patterns to enhance user experience
• Ensuring website security and preventing fraud
• Troubleshooting technical issues

Legal Compliance:

• Complying with applicable laws and regulations
• Responding to legal requests from authorities
• Protecting our legal rights and interests

Customer Service:

• Responding to your inquiries and requests
• Providing support related to your orders

7. LEGAL BASIS FOR PROCESSING (FOR EEA/UK USERS)

If you are located in the European Economic Area (EEA) or the United Kingdom (UK), we process your personal data based on the following legal grounds:

Legitimate Interest: Where we rely on legitimate interest, we have assessed that our processing is necessary for our business purposes and does not unduly impact your privacy rights.

8. DATA SHARING AND DISCLOSURE

We do not sell, rent, or trade your personal information. We share your data only with the following categories of recipients and only as necessary:

8.1 Payment Processors

We use Westernbid as an intermediary payment service provider, which processes payments through Stripe and PayPal on our behalf.

We do not store your payment card details. When you make a payment, your payment information is transmitted to Westernbid, who processes it through Stripe or PayPal as applicable. All payment processors are PCI-DSS compliant.

8.2 Shipping and Fulfillment

These providers receive your name and shipping address to deliver your orders.

8.3 Hosting and Technical Services

About Cloudflare: All traffic to our Website passes through Cloudflare's network for security and performance purposes. Cloudflare may process certain technical data (such as IP addresses) to provide these services. For more information, see Cloudflare's Privacy Policy.

8.4 Analytics

8.5 Legal Disclosures

We may disclose your information if required to do so by law or in response to valid legal requests, including:

• Court orders or subpoenas
• Government or regulatory agency requests
• To protect our legal rights or defend against legal claims
• To prevent fraud or security threats
• To protect the safety of our users or the public

9. COOKIES AND TRACKING TECHNOLOGIES

9.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites function properly and provide information to website owners.

9.2 Types of Cookies We Use

Essential Cookies (Required):
These cookies are necessary for the Website to function and cannot be disabled. They include:

• Shopping cart functionality
• Session management
• Security features

Analytics Cookies:
We use Google Analytics to understand how visitors interact with our Website. These cookies collect information about:

• Pages visited
• Time spent on the Website
• How you arrived at our Website
• General geographic location (country/city level)

Google Analytics data is aggregated and anonymized where possible.

9.3 Managing Cookies

Most web browsers allow you to control cookies through their settings. You can:

• View what cookies are stored on your device
• Delete cookies selectively or entirely
• Block cookies from specific or all websites
• Set your browser to notify you when cookies are being set

Please note: Disabling essential cookies may prevent you from using certain features of our Website, including the shopping cart.

Opting Out of Google Analytics:
You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout

9.4 Cookie Consent

Our Website displays a cookie consent banner. By continuing to use the Website after acknowledging the banner, you consent to our use of non-essential cookies. You may withdraw consent at any time by adjusting your browser settings.

10. INTERNATIONAL DATA TRANSFERS

10.1 Where Your Data Is Processed

As a Ukraine-based business serving customers worldwide, your personal data may be transferred to and processed in:

• Ukraine: Our primary business location
• United States: Website hosting (Hetzner, Ashburn, VA), fulfillment center (SkladUSA, Minnesota), payment processing (Westernbid/Stripe/PayPal)
• Global (Cloudflare network): Content delivery and security services
• Other countries: Where our shipping carriers and service providers operate

10.2 Safeguards for International Transfers

For EEA/UK Users:

• We rely on Standard Contractual Clauses (SCCs) approved by the European Commission for transfers to countries without adequate data protection
• Our service providers are contractually obligated to protect your data in accordance with this Privacy Policy

For All Users:

• We only work with reputable service providers who maintain appropriate security measures
• We limit data sharing to what is necessary for the specific purpose
• We require our service providers to keep your data confidential

11. DATA RETENTION

We retain your personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy:

Deletion Upon Request:
You may request deletion of your personal data at any time (see Section 12). We will delete or anonymize your data unless we are legally required to retain it.

12. YOUR PRIVACY RIGHTS

Depending on your location, you may have certain rights regarding your personal data:

12.1 Rights for All Users

All users of our Website have the right to:

• Access: Request information about what personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data
• Objection: Object to certain processing of your data
• Withdraw Consent: Withdraw any consent you have previously given

12.2 How to Exercise Your Rights

To exercise any of these rights, please contact us:

• Email: [email protected]
• Contact Form: https://passioncraftstore.com/contact-us/
• Mail: 38 Bohdana Khmelnytskoho Street, Kyiv, Ukraine, 01030

We will respond to your request within 30 days (or as required by applicable law). We may need to verify your identity before processing your request.

12.3 Additional Rights by Region

Please see the Regional Privacy Addendums below for additional rights specific to your location:

• European Economic Area / United Kingdom: Section 16
• California, USA: Section 17
• Other US States: Section 18
• Canada: Section 19

13. DATA SECURITY

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

Technical Measures:

• Secure HTTPS encryption for all Website connections
• Cloudflare security and DDoS protection
• Secure servers hosted by reputable providers
• No storage of payment card information on our systems
• Regular security updates and monitoring

Organizational Measures:

• Limited access to personal data on a need-to-know basis
• Use of reputable, trusted service providers
• Confidential handling of all customer information

Important Notice:
While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to maintaining industry-standard protections.

14. AGE RESTRICTIONS

Our Website is intended for adults only.

You must be at least 18 years of age (or the age of majority in your jurisdiction, if higher) to use our Website and purchase our products.

Age Verification:

• Our Website displays an age verification gate upon entry
• By clicking "Proceed" or entering the Website, you confirm that you are of legal age
• By placing an order, you further confirm that you meet the minimum age requirement

Minors:
We do not knowingly collect personal information from anyone under 18 years of age. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately. If we discover that we have inadvertently collected data from a minor, we will delete that information promptly and cancel any associated orders.

15. SHIPPING RESTRICTIONS

We currently do not ship to the following countries:

• Russia
• Belarus

We may also be unable to ship to other countries due to shipping restrictions, customs regulations, or regional instability. If we cannot fulfill an order to your location, we will notify you and provide a full refund.

16. ADDITIONAL INFORMATION FOR EEA AND UK RESIDENTS

If you are located in the European Economic Area (EEA) or the United Kingdom (UK), you have additional rights under the General Data Protection Regulation (GDPR) and UK GDPR:

16.1 Your GDPR Rights

In addition to the rights listed in Section 12, you have the right to:

• Data Portability: Receive a copy of your personal data in a structured, commonly used, machine-readable format, and transmit it to another controller
• Restriction: Request restriction of processing in certain circumstances
• Automated Decision-Making: Not be subject to decisions based solely on automated processing (we do not engage in automated decision-making)

16.2 Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates applicable law.

For EEA residents, you may contact the data protection authority in your country of residence. A list of authorities is available at: https://edpb.europa.eu/about-edpb/board/members_en

For UK residents, you may contact the Information Commissioner's Office (ICO): https://ico.org.uk/make-a-complaint/

16.3 Data Transfers

Your data may be transferred outside the EEA/UK as described in Section 10. For such transfers, we rely on:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions where applicable
• Other lawful transfer mechanisms

16.4 Response Time

We will respond to requests from EEA/UK residents within one month. This period may be extended by two additional months if necessary, taking into account the complexity and number of requests.

17. ADDITIONAL INFORMATION FOR CALIFORNIA RESIDENTS

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).

17.1 Categories of Personal Information Collected

In the past 12 months, we have collected the following categories of personal information:

17.2 Sources of Personal Information

We collect personal information from:

• Directly from you (when you place orders or contact us)
• Automatically from your device (usage data, cookies)
• From service providers (payment confirmation, shipping status)

17.3 Purposes for Collection

We collect and use personal information for the purposes described in Section 6 of this Privacy Policy.

17.4 Disclosure of Personal Information

We disclose personal information to the categories of service providers described in Section 8, solely for business purposes.

17.5 Sale and Sharing of Personal Information

We do not sell your personal information.
We do not share your personal information for cross-context behavioral advertising.

17.6 Your California Privacy Rights

As a California resident, you have the right to:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you
• Right to Delete: Request deletion of your personal information, subject to certain exceptions
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt-Out of Sale/Sharing: We do not sell or share personal information, so this right does not apply
• Right to Limit Use of Sensitive Personal Information: We do not collect sensitive personal information as defined by the CPRA
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

17.7 How to Submit a Request

To exercise your California privacy rights:

• Email: [email protected]
• Contact Form: https://passioncraftstore.com/contact-us/

We will verify your identity by matching information you provide with information we have on file. We will respond to verifiable requests within 45 days. If we need more time (up to 90 days total), we will notify you.

17.8 Authorized Agents

You may designate an authorized agent to submit requests on your behalf. We may require the agent to provide proof of authorization and may still require you to verify your identity.

17.9 California "Shine the Light" Law

California Civil Code Section 1798.83 permits California residents to request information about disclosure of personal information to third parties for direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes.

17.10 Do Not Track Signals

Our Website does not currently respond to "Do Not Track" (DNT) browser signals. However, you can manage cookies through your browser settings and opt out of Google Analytics as described in Section 9.

18. ADDITIONAL INFORMATION FOR RESIDENTS OF OTHER US STATES

Several US states have enacted comprehensive privacy laws, including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and others. If you reside in one of these states, you may have similar rights to those described for California residents in Section 17.

18.1 Your Rights May Include:

• Right to access your personal data
• Right to correct inaccuracies
• Right to delete your personal data
• Right to data portability
• Right to opt out of targeted advertising, sale of personal data, or profiling

Note: We do not sell personal data or engage in targeted advertising or profiling based on personal data.

18.2 How to Exercise Your Rights

To exercise your rights under any applicable state privacy law:

• Email: [email protected]
• Contact Form: https://passioncraftstore.com/contact-us/

We will respond within the timeframe required by your state's law (typically 45 days, with possible extensions).

18.3 Right to Appeal

If we decline to take action on your request, you have the right to appeal. To appeal, contact us at [email protected] with "Privacy Appeal" in the subject line. We will respond to appeals as required by applicable law.

19. ADDITIONAL INFORMATION FOR CANADIAN RESIDENTS

If you are a resident of Canada, your personal information is protected under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

19.1 Your Rights Under PIPEDA

You have the right to:

• Access: Request access to your personal information held by us
• Correction: Request correction of inaccurate or incomplete information
• Withdraw Consent: Withdraw consent for collection, use, or disclosure of your personal information (subject to legal or contractual restrictions)
• Complain: File a complaint with the Office of the Privacy Commissioner of Canada

19.2 Consent

By providing personal information to us and using our Website, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy. You may withdraw consent at any time by contacting us, though this may affect our ability to provide services to you.

19.3 Contact for Canadian Privacy Inquiries

For questions or requests related to your privacy rights under Canadian law:

• Email: [email protected]
• Contact Form: https://passioncraftstore.com/contact-us/

You may also contact the Office of the Privacy Commissioner of Canada:

• Website: https://www.priv.gc.ca/
• Phone: 1-800-282-1376

20. THIRD-PARTY LINKS

Our Website may contain links to third-party websites, services, or resources that are not operated by us. If you click on a third-party link, you will be directed to that third party's site.

We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites or services. We strongly encourage you to review the privacy policy of every website you visit.

21. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors.

How We Will Notify You:

• We will post the updated Privacy Policy on this page
• We will update the "Effective Date" at the top of this policy
• For significant changes, we may provide additional notice (such as a banner on our Website)

Your Continued Use:
Your continued use of our Website after the updated Privacy Policy becomes effective constitutes your acceptance of the changes. We encourage you to review this Privacy Policy periodically.

22. CONTACT US

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Passion Craft Store

Email: [email protected]

Phone: +380982139580

Contact Form: https://passioncraftstore.com/contact-us/

Mailing Address:
38 Bohdana Khmelnytskoho Street,
Kyiv, Ukraine, 01030

We will make every effort to respond to your inquiry within a reasonable timeframe.

23. LANGUAGE

This Privacy Policy is provided in English. If there is any conflict between the English version and any translated version, the English version shall prevail.

© 2026 Passion Craft Store. All rights reserved.

SUMMARY OF KEY POINTS