Privacy Policy

Last updated: September 10, 2024

This Privacy Policy for Socks and Raffia («Website») describes how and why we might collect, store, use, and/or share («process») your information when you use our services («Services»), such as when you:

• Visit our website Socks and Raffia at https://socksandraffia.shop/.
• Engage with us through the order form.

Questions or Concerns?

Reading this Privacy Policy will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, contact us.

Summary of Key Points

This summary provides key points from our privacy notice, but you can find out more details about any of these topics by following the links provided after each key point or by using our table of contents below to find the section you are looking for.

• What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with «Socks and Raffia» and the Services, the choices you make, and the features you use.
• Do we process any sensitive personal information? We do not process sensitive personal information.
• Do we receive any information from third parties? We do not receive any information from third parties.
• How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with the law. We may also process your information for other purposes with your consent.
• In what situations and with which parties do we share personal information? We may share information in specific situations and with specific third parties.
• How do we keep your information safe? We have organizational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information.
• What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information.
• How do you exercise your rights? The easiest way to exercise your rights is by contacting us. We will consider and act upon any request in accordance with applicable data protection laws.

Table of Contents

1. What information do we collect?

Personal information you disclose to us

In short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you express interest in obtaining information about us or our products and Services or otherwise when you contact us.

Personal information you provide

The personal information we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. Personal data we collect may include:

• Names
• Email addresses or phones

Sensitive information

We do not process sensitive information.

All personal information you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Automatically collected information

In short: Some information - such as your IP address and/or browser and device characteristics - is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (such as your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for internal analytics and reporting purposes.

Like many other websites, we also collect information through cookies and similar technologies.

2. How do we process your information?

In short: We process your information to provide, improve, and administer our Services, communicate with you, ensure security and prevent fraud, and comply with legal obligations. We may also process your information for other purposes with your consent.

We process your personal data for various reasons depending on how you interact with our Services, including:

• Providing and facilitating service delivery. We may process your information to provide you with the service you requested.
• Responding to user inquiries/support requests. We may process your information to respond to your inquiries and address any potential issues you may have with the requested service.
• Requesting feedback. We may process your information when necessary to request feedback and contact you regarding your use of our Services.
• Protecting our Services. We may process your information as part of our efforts to ensure the security and reliability of our Services, including monitoring and preventing fraud.
• Preserving or protecting vital interests of an individual. We may process your information when necessary to preserve or protect vital interests of an individual, such as preventing harm.

3. What legal bases do we rely on to process your personal information?

In short: We process your personal data only when we have a valid legal reason (i.e., legal basis) to do so in accordance with applicable laws, such as with your consent, to comply with laws, to provide you with services under our contractual obligations, to protect your rights, or to pursue our legitimate business interests.

If you are in the EU or the UK, this section applies to you.

The General Data Protection Regulation (GDPR) and the UK General Data Protection Regulation (UK GDPR) require us to explain the valid legal bases we rely on to process your personal data. Therefore, we may rely on the following legal bases to process your personal data:

• Consent. We may process your information if you have given us permission (i.e., consent) to use your personal information for a specific purpose. You can withdraw your consent at any time.
• Contract performance. We may process your personal data when we believe it is necessary to fulfill our contractual obligations to you, including providing our Services.
• Legitimate interests. We may process your information if we believe it is reasonably necessary to achieve our legitimate business interests, provided those interests do not override your interests and fundamental rights and freedoms. For example, we may process your personal information for some of the following purposes:
  • Developing and displaying personalized and relevant content to our users.
  • Analyzing how our Services are used to improve them for user engagement and retention.
  • Supporting our business operations.
  • Diagnosing problems and/or preventing fraud.
  • Understanding how our users use our products and services to enhance user experience.
• Legal obligations. We may process your information if we believe it is necessary to comply with our legal obligations, such as cooperating with law enforcement or regulatory authorities, enforcing or defending our legal rights, or disclosing your information as evidence in a legal proceeding in which we are involved.
• Vital interests. We may process your information if we believe it is necessary to protect your vital interests or the vital interests of a third party, such as in situations involving potential threats to the safety of any person.

If you are in Canada, this section applies to you.

We may process your information if you have given us specific permission (i.e., explicit consent) to use your personal information for a particular purpose or in situations where your consent may be implied (i.e., implied consent). You can withdraw your consent at any time.

In some exceptional cases, under applicable law, we may be permitted to process your information without your consent, including:

• If collection is clearly in the interest of an individual and consent cannot be obtained in a timely manner.
• For investigations, detection, and prevention of fraud.
• For business transactions under certain conditions.
• If it is contained in witness statements and collection is necessary for evaluating, processing, or settling an insurance claim.
• For identifying injured, ill, or deceased individuals and communicating with next of kin.
• If we have reasonable grounds to believe that an individual has been, is, or may become a victim of financial abuse.
• If it is reasonably expected that collection and use with consent would jeopardize the availability or accuracy of information, and collection is reasonable for purposes related to investigating breaches of agreements or violations of Canadian or provincial laws.
• If disclosure is required for complying with a subpoena, warrant, court order, or rules of court concerning the provision of records.
• If it was provided by an individual in the course of their employment, business, or profession, and collection aligns with the purposes for which it was obtained.
• If the collection is solely for journalistic, artistic, or literary purposes.
• If the information is publicly available and provided for by regulations.

4. When and with whom do we share your personal data?

In short: We may share information in specific situations described in this section and/or with the following third parties.

We may need to share your personal data in the following situations:

• In accordance with legal requirements: To comply with laws, regulations, or law enforcement requests.
• When using Google Analytics: We may share your information with Google Analytics to track and analyze the use of our Services. For more information about Google's privacy practices, please visit the Google Privacy & Terms page.

5. Do we use cookies and other tracking technologies?

In short: We may use cookies and other tracking technologies to collect and store your information.

We may use cookies and similar tracking technologies (e.g., web beacons and pixels) to access or store information. Specific details on how we use such technologies and how you can opt-out of certain cookies are outlined in our Cookie Policy.

6. How long do we keep your information?

In short: We keep your information for as long as necessary to fulfill the purposes outlined in this privacy notice, unless a longer retention period is required or permitted by law.

We will retain your personal data only for as long as necessary for the purposes outlined in this privacy notice, unless a longer retention period is required or permitted by law (e.g., for tax, accounting, or other legal requirements).

If we have no ongoing legitimate business need to process your personal data, we will either delete or anonymize such information or, if that is not possible (e.g., because your personal data has been stored in backup archives), we will securely store your personal data and isolate it from any further processing until deletion is possible.

7. How do we keep your information safe?

In short: We strive to protect your personal information through a combination of organizational and technical security measures.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our security measures and efforts to protect your information, no electronic transmission over the Internet or technology for storing information can be guaranteed to be 100% secure, and thus we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security measures and improperly collect, access, steal, or alter your information. While we will do our best to protect your personal data, the transmission of personal data to and from our Services is at your own risk. You should access the Services only within a secure environment.

8. Do we collect information about minors?

In short: We do not knowingly collect or share data about children under the age of 18.

We do not knowingly solicit data from children under the age of 18. By using our Services, you confirm that you are at least 18 years old or that you are the parent or guardian of a minor and consent to the minor's use of the Services. If we learn that we have collected personal information from users under 18 years old, we will take reasonable steps to delete such data from our records as soon as possible. If you become aware of any data we may have collected from children under 18 years old, contact us.

9. What are your privacy rights?

In short: In regions such as the European Economic Area (EEA), the United Kingdom (UK), and Switzerland, you have specific rights regarding your personal data under regulations including the General Data Protection Regulation (GDPR).

Under the GDPR, you have the following rights regarding your personal data:

• Right to Access: You have the right to request access to the personal data we hold about you, including obtaining a copy of it, so you can review and verify its accuracy.
• Right to Rectification: You have the right to request that we correct or update any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You have the right to request that we delete your personal data, subject to certain conditions, such as when the data is no longer necessary for the purposes for which it was collected, or if you withdraw your consent on which the processing is based.
• Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data under certain circumstances, such as when you contest the accuracy of the data or if the processing is unlawful.
• Right to Data Portability: You have the right to request the transfer of your personal data to another data controller in a structured, commonly used, and machine-readable format, where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data based on legitimate interests or for direct marketing purposes. If you object to processing for direct marketing, we will cease processing your data for such purposes.
• Right to Withdraw Consent: If we process your data based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

If you are in the EEA, UK, or Switzerland and believe that your data is being processed unlawfully or if you have any concerns about how we handle your data, you have the right to lodge a complaint with the relevant data protection authority. In Switzerland, contact details for the data protection authorities can be found here.

Account Information: To access, correct, or delete your account information, or to exercise any other rights, please contact us using the details provided below. Note that upon account deletion, we may retain certain data to comply with legal obligations or resolve disputes, but such data will not be used for any other purposes.

Opt-out: To opt out of marketing communications, you can use the unsubscribe link provided in those communications or contact us directly. For managing cookies, please adjust your browser settings. Be aware that disabling cookies may affect the functionality and user experience of the Site.

If you have any questions about your privacy rights or wish to exercise any of them, contact us.

10. Do Not Track (DNT) Signals

In short: Many browsers and some mobile systems offer a «Do Not Track» (DNT) feature to signal your preference not to be tracked online. Currently, there is no standardized technology for recognizing DNT signals. Therefore, we do not respond to DNT signals or other mechanisms indicating a preference not to be tracked. If a standard is adopted in the future, we will update this privacy notice to reflect that change.

11. Privacy Rights for Residents of California, Colorado, Connecticut, Utah, and Virginia

California:

• California Consumer Privacy Act (CCPA): Residents have the right to request information about categories of personal data shared with third parties for direct marketing and request deletion of public data if under 18. Requests must be submitted in writing.
• Shine the Light Law (Section 1798.83): Allows California residents to request information about personal data shared with third parties for direct marketing purposes.

Colorado:

Colorado Privacy Act (CPA): Residents have the following rights:
• Right to know if their personal data is processed.
• Right to access personal data.
• Right to correct inaccuracies.
• Right to delete personal data.
• Right to obtain a copy of personal data provided.
• Right to opt out of targeted advertising, data sales, or profiling that leads to significant decisions.

Connecticut:

Connecticut Data Privacy Act (CTDPA): Residents have similar rights to those under the CPA, including:
• Right to know if their personal data is processed.
• Right to access, correct, and delete personal data.
• Right to obtain a copy of personal data provided.
• Right to opt out of targeted advertising, data sales, or profiling.

Utah:

Utah Consumer Privacy Act (UCPA): Residents have the following rights:
• Right to know if their personal data is processed.
• Right to access personal data.
• Right to request deletion of personal data.
• Right to obtain a copy of personal data provided.
• Right to opt out of targeted advertising or data sales.

Virginia:

Virginia Consumer Data Protection Act (VCDPA): Defines «consumer» as a resident acting in a personal context. Rights include:
• Right to know if personal data is processed.
• Right to access personal data.
• Right to correct inaccuracies.
• Right to request deletion of personal data.
• Right to obtain a copy of personal data provided.
• Right to opt out of targeted advertising, data sales, or profiling.

Use and Disclosure of Personal Data:

• Personal data may be shared with service providers under contract.
• Data may be used for internal business purposes, such as technological development, but is not sold.

Rights Regarding Personal Data:

• Deletion Request: You can request deletion of your personal information, with some legal exceptions.
• Information Request: You have the right to know about the collection, use, and sharing of your personal data.
• Non-Discrimination: You will not be discriminated against for exercising privacy rights.
• Authorized Agents: Agents must provide proof of authorization to act on your behalf.

Verification Process:

For any inquiries or to exercise your rights, contact us.

12. Do We Make Changes to This Notice?

In short: Yes, we will update this notice as necessary to comply with applicable laws.

We may update this privacy notice from time to time. The updated version will be marked with a new «Last updated» date, and the updated version will be effective as soon as it is available. If we make significant changes to this privacy notice, we may notify you by placing a notice of such changes in a prominent place or by sending you a direct notification.

We encourage you to frequently review this privacy notice to stay informed about how we are protecting your information.

13. How Can You Contact Us About This Notice?

If you have any questions or comments about this notice, you can contact us.

14. How Can You Access, Update, or Delete Data We Have About You?

In accordance with applicable laws in your country, you may have the right to request access to the personal information we hold about you, to modify that information, or to delete it. To request access to, update, or delete your personal information, please contact us.