Privacy Policy

At Echoes of a Dusty Key, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, and safeguard your data when you shop with us.

1. Information We Collect

When you shop with us, we collect the following customer data:

• Contact Information: Name and email address
• Shipping Information: Shipping address for order delivery
• Order History: Records of your purchases and transactions
• Payment Information: Payment details processed securely via Stripe (we do not store your credit card numbers or sensitive payment information on our servers)

2. How We Use Your Information

We use your personal information for the following purposes:

• Order Fulfillment: To process and complete your purchases
• Shipping Updates and Notifications: To send you order confirmations, shipping updates, and delivery notifications
• Customer Service Communications: To respond to your inquiries, questions, and provide support
• Service Improvement: To enhance our products and services based on customer feedback and usage patterns

We do NOT send marketing emails without your explicit consent. You will only receive transactional emails related to your orders unless you opt-in to marketing communications.

3. Information Sharing

We share your information only with trusted third parties necessary to provide our services:

• Shipping Carriers: USPS, UPS, and FedEx receive your shipping address to deliver your orders
• Payment Processing: Stripe processes your payment information securely

We do NOT sell your personal data to third parties. Your information is never sold, rented, or shared for marketing purposes.

4. Data Security

We take your data security seriously and implement industry-standard measures to protect your information:

• PCI-Compliant Payment Processing: All payment transactions are processed through Stripe, which is fully PCI DSS compliant
• SSL/TLS Encryption: All data transmission between your browser and our servers is encrypted using SSL/TLS technology
• Firebase Encrypted Storage: Your data is stored in Firebase with encryption at rest and in transit
• Regular Security Audits: We conduct regular security reviews and updates to maintain the highest security standards
• Breach Notification: In the unlikely event of a data breach, we will notify affected customers within 72 hours as required by applicable regulations

5. Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Deletion: Request deletion of your personal data (subject to legal retention requirements)
• Opt-Out: Unsubscribe from marketing communications at any time
• Update: Modify or correct your personal information through your account settings

To exercise any of these rights, please contact us at admin@shopedk.com.

6. Cookies and Tracking

We use cookies and similar technologies to enhance your shopping experience:

• Essential Cookies: Required for shopping cart functionality, session management, and secure checkout
• Analytics Cookies: Help us understand how visitors use our site to improve user experience (when applicable)

You can control cookie preferences through your browser settings, but disabling essential cookies may affect site functionality.

7. Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on our website with a new "Last Updated" date.

9. Contact Us for Privacy Concerns

If you have any questions, concerns, or requests regarding your privacy or this Privacy Policy, please contact us: