Privacy policy for Anathema Studio
1. Introduction: State who you are (“Anathema Studio”) and that you are committed to protecting the privacy of your visitors and customers. Include the policy’s effective date.
2. Information we collect: List the specific categories of data you collect.
* Personal information: Customer name, email, shipping and billing addresses, and payment details collected during a purchase.
* Communications: Information provided when a user contacts you directly (e.g., via email or a contact form).
* Usage data: Technical data like IP addresses, browser info, and interaction data collected by website analytics.
3. How we use your information: Explain the purpose for which you use the collected data.
* Fulfill orders: To process and ship orders, and to provide customer service.
* Marketing: To send newsletters and promotional materials if a user has opted in to receive them.
* Website improvement: To analyze website usage and improve user experience.
* Legal obligations: To comply with legal requirements and protect against fraud.
4. How we share your information: Disclose the categories of third parties you share data with and why.
* Service providers: Third-party vendors like shipping companies and payment processors to complete transactions.
* Analytics providers: Services like Google Analytics to understand website traffic.
* Legal disclosure: When required by law (e.g., court order).
5. Consumer rights: Clearly explain the rights available to your customers, particularly focusing on those from New Jersey, California, and the EU.
* Right to know (CCPA): California residents can request to see what data you’ve collected.
* Right to delete (CCPA/NJDPA): Consumers can request the deletion of their personal information.
* Right to opt-out (CCPA/NJDPA): Consumers can opt out of the sale or sharing of their personal information for targeted advertising. For California, this requires a “Do Not Sell or Share My Personal Information” link.
* Right to limit sensitive data (NJDPA/CCPA): Consumers can limit the use of sensitive personal data.
* Right to access and portability (NJDPA/GDPR): Consumers can request access to their data in a portable format.
6. Data retention and security:
* Retention: Explain how long you store data (e.g., retaining customer info for tax and business purposes).
* Security: Briefly describe the security measures taken to protect personal information, without revealing specific details that could create a vulnerability.
7. Contact us: Provide clear contact information for privacy inquiries.
