Please read this privacy policy carefully to get a clear understanding of how we collect, use, protect or otherwise handle your Personally Identifiable Information so that we are  GDPR Compliant.

Our website address is: www.mamascraftbasket.com

This privacy policy has been compiled to better serve Mama’s Craft Basket customers who are concerned with how their ‘Personally Identifiable Information’ (PII) is being used online. PII, is information that can be used on its own or with other information to identify, contact, or locate a single person, or to identify an individual in context.

What Information Do We Collect, and How Do We Use It?

Contact Forms and Shopping Cart

We collect information from you when you place an order, subscribe to our FREE Exclusive VIP Club, surf our website, fill out a form, provide us with feedback on our products or services, or otherwise enter information on our site.

When ordering on our site, as appropriate, you may be asked to enter your name, email address, mailing address, phone number, credit card information (for payment providers that process your credit card information), or other details to help you with your experience. By entering any information on this site you understand you are opting in for updates, emails, promotional sales, giveaways, marketing and newsletters. To make it more clear, we use your information for the following:

• To quickly process your transactions.
• To follow up with you after correspondence (email or phone inquiries).
• To allow us to better service you in responding to your customer service requests.
• To send you emails on sales, giveaways, promotional codes, newsletters and other marketing correspondence.
• To periodically ask you for ratings and reviews of our services or products.

How Long Do We Retain Your Data?

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue. All other data is also retained indefinitely unless deletion is specifically requested.

Who Do We Share Your Data With?

We do not sell, trade, or otherwise transfer to outside parties your Personally Identifiable Information aside from Google Analytics. We do not receive personal information from this process, just a daily statistical report on how many visitors we had to this website in each consecutive 24-hour period.

Comments

When visitors leave comments on this site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Visitor comments may also be checked through an automated spam detection service.

Media

If you upload images to this website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracing your interaction with the embedded content if you have an account and are logged in to that website.

Cookies

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

We do not host Membership Accounts on this website, so there is no concern about collecting your information via that format.

If you edit or publish an article to this website, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just posted. It expires after 1 day.

What Rights Do You Have Over Your Data?

You can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

How Do We Protect Your Data?

We have an active SSL Certificate installed on this website which means your information is Encrypted.

SSL is the Secure Socket Layer protocol which is responsible for creating secure communication between client and server. This is done by both server and client authentication and the negotiation of an encryption algorithm and cryptographic keys.

Internet users associate SSL with the padlock that appears in your browser’s address bar when you enter the secure area of a website. They know to look for this before entering any personal or financial information online. (Notice the address bar above shows the padlock and the word ‘Secure’. You will also notice the ‘s’ after the ‘http’, signifying that the site is SECURE).

If information is entered on an unsecured website, the data is transmitted from your computer to the web server un-encrypted and viewable in plain text. Anyone ‘sniffing’ packets on the network or on the internet can capture your information and use it fraudulently.

Since this site is hosted at Bluehost we have a free shared SSL Certificate through Let’s Encrypt for all assigned and parked domains and subdomains. These have been installed and activated.

What Data Breach Procedures Do We Have in Place?

In order to be in line with Fair Information Practices we will take the following responsive action, should a data breach occur:

• We will notify you via email within 7 business days

CAN SPAM Act

The CAN-SPAM Act is a law that sets the rules for commercial email, establishes requirements for commercial messages, gives recipients the right to have emails stopped from being sent to them, and spells out tough penalties for violations.

We collect your email address in order to:

• Send information, respond to inquiries, and/or other requests or questions
• Process orders and to send information and updates pertaining to orders.
• Market to our mailing list or continue to send emails to our clients after the original transaction has occurred.

To be in accordance with CANSPAM, we agree to the following:

• Not use false or misleading subjects or email addresses.
• Identify the message as an advertisement in some reasonable way.
• Include the physical address of our business or site headquarters.
• Monitor third-party email marketing services (such as Mailchimp) for compliance, if one is used.
• Honor opt-out/unsubscribe requests quickly.
• Allow users to unsubscribe by using the link at the bottom of each email.

If at any time you would like to unsubscribe from receiving future emails, you can follow the instructions at the bottom of each email and it will automatically remove you from our list.

Our Contact Information

If you have any concerns regarding your privacy information after reading the Privacy Policy information in this document, please send an email to marilyn@mamascraftbasket.com, stating specifically what your concerns are about.

******

Last Edited on 2018-05-24