Table of Contents
Your privacy matters to us. Amy's Haven ("we," "our," or "us") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit amyshaven.com or make a purchase. Please read it carefully.
1 Information We Collect
Information You Provide Directly
- Account Registration: Name, email address, password (stored encrypted), and account type (customer or artist).
- Artist Profiles: Business name, bio, profile image, payment details, and product information including photos, descriptions, and pricing.
- Purchases: Shipping address, billing address, and payment card details (processed securely through Stripe — we never store full card numbers).
- Communications: Messages you send us via email or contact forms, including support requests and partnership inquiries.
- Newsletter Sign-Up: Email address if you subscribe to our newsletter.
Information Collected Automatically
- Usage Data: Pages visited, time spent on pages, links clicked, and search queries on our platform.
- Device & Technical Data: IP address, browser type and version, operating system, device type, and referring URLs.
- Cookies & Similar Technologies: We use cookies, local storage, and tracking pixels to improve functionality and measure performance (see Section 4).
- Transaction Data: Purchase history, order amounts, and product interactions.
Information from Third Parties
- Payment Processors: Stripe provides us with transaction confirmations, payment status, and fraud signals.
- Analytics Providers: Google Analytics provides aggregated data about how visitors use our site.
2 How We Use Your Information
We use the information we collect to:
- Create and manage your account and profile
- Process orders, payments, and refunds
- Connect buyers with artists and facilitate marketplace transactions
- Send order confirmations, shipping updates, and receipts
- Respond to customer support requests and inquiries
- Send promotional emails and newsletters (only with your consent; you may unsubscribe at any time)
- Improve and personalize our platform, product recommendations, and user experience
- Detect, prevent, and respond to fraud, abuse, and security threats
- Comply with legal obligations and enforce our Terms & Conditions
- Measure the performance and effectiveness of our marketing campaigns
- Calculate and distribute our 5% social impact contribution to homelessness solutions
We will only use your information for the purposes stated above or for purposes you have explicitly consented to.
3 Sharing Your Information
We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your data only in the following circumstances:
Service Providers
We share data with trusted vendors who help us operate our platform, including:
- Stripe — payment processing
- Supabase — database and file storage
- Railway — cloud hosting and deployment
- Google Analytics — website analytics
- Email service providers for transactional and marketing emails
These providers are contractually obligated to use your data only to provide services to us.
Artists
When you place an order, we share your shipping name and address with the selling artist solely to fulfill your order. Artists do not receive your payment details.
Legal Requirements
We may disclose your information if required to do so by law, court order, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
Business Transfers
In the event of a merger, acquisition, or sale of all or part of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our site.
4 Cookies & Tracking Technologies
We use cookies and similar technologies to enhance your experience:
Essential Cookies
Required for core functionality such as keeping you logged in, maintaining your shopping cart, and securing your session. These cannot be disabled.
Analytics Cookies
Used by Google Analytics to help us understand how visitors interact with our site (pages viewed, time on site, traffic sources). This data is aggregated and anonymized.
Marketing Cookies
Used to track the effectiveness of our promotional campaigns. We may use Google Ads or similar platforms.
Managing Cookies
You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our platform. To opt out of Google Analytics, visit tools.google.com/dlpage/gaoptout.
5 Data Security
We implement industry-standard security measures to protect your personal information, including:
- HTTPS/TLS encryption for all data transmitted between your browser and our servers
- Encrypted password storage using bcrypt hashing
- Secure JWT-based authentication tokens
- Payment card data handled exclusively by PCI-DSS compliant Stripe
- Database access restricted via role-based permissions in Supabase
- Regular security reviews of our codebase and infrastructure
While we take strong precautions, no method of transmission over the internet is 100% secure. In the event of a data breach that affects your rights and freedoms, we will notify you as required by applicable law.
6 Your Rights & Choices
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Ask us to correct inaccurate or incomplete information.
- Deletion: Request that we delete your personal data ("right to be forgotten"), subject to legal obligations.
- Portability: Receive your data in a structured, commonly used format.
- Opt-Out of Marketing: Unsubscribe from marketing emails at any time via the link in any email we send, or by contacting us.
- Withdraw Consent: Where we process your data based on consent, you may withdraw it at any time.
To exercise any of these rights, please contact us at admin@amyshaven.com. We will respond within 30 days.
California Residents (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, and opt out of the sale of personal information. We do not sell personal information. To submit a CCPA request, contact admin@amyshaven.com.
7 Children's Privacy
Amy's Haven is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately at admin@amyshaven.com and we will delete it promptly.
8 Third-Party Links
Our platform may contain links to third-party websites, social media profiles, or artist external pages. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any third-party site you visit.
9 Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you by email or a prominent notice on the site. Your continued use of Amy's Haven after changes become effective constitutes your acceptance of the revised policy.
10 Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out:
Also see our Terms & Conditions for more information about using Amy's Haven.