Privacy Policy

1. Who we are

The data controller (or business responsible for your information) is:

Our store is hosted on Shopify Inc. Shopify provides the online e-commerce platform that allows us to sell products and services to you. Your data may be stored through Shopify’s data storage, databases, and general applications. You can learn more about Shopify’s privacy practices at shopify.com/legal/privacy.

2. Information we collect

Depending on how you interact with us, we may collect the following categories of personal information:

2.1 Identity and contact data

• Name, email address, phone number, billing and shipping addresses
• Account username and password (if you create an account)
• Communications you send us (support requests, order notes, form messages)

2.2 Order and transaction data

• Products purchased, order history, cart contents, refunds, and returns
• Payment status and limited payment metadata (full card numbers are processed by Shopify/payment processors, not stored by us in full)
• Tax, shipping, and discount information related to your order

2.3 Technical and usage data

• IP address, browser type, device type, operating system, referring URLs
• Pages viewed, links clicked, time on site, and approximate location derived from IP
• Cookie identifiers and similar technologies (see Cookies section)

2.4 Marketing and preference data

• Newsletter subscription status and email preferences
• Marketing engagement (opens, clicks) when you receive our emails
• Survey or feedback responses, if you choose to provide them

2.5 User content

• Product reviews, comments, photos, or other content you voluntarily submit

We do not intentionally collect sensitive personal information (such as precise health data, government ID numbers, or biometric identifiers) unless you voluntarily provide it and we have a lawful basis to process it.

3. How we collect information

We collect personal information in the following ways:

• Directly from you — when you checkout, create an account, subscribe, contact us, or leave a review
• Automatically — through cookies, pixels, logs, and analytics tools when you browse the Site
• From service providers — such as Shopify, payment processors, shipping carriers, and email platforms that process data on our behalf
• From other sources — for example, if you interact with us on social media or if a gift recipient’s details are provided by a purchaser

4. How we use your information

We use personal information to:

• Process, fulfill, and deliver orders and returns
• Communicate about orders, accounts, and customer service
• Create and manage your customer account
• Send transactional emails and, where permitted, marketing emails (you may unsubscribe anytime)
• Improve the Site, products, and shopping experience
• Detect, prevent, and address fraud, security issues, and abuse
• Comply with legal obligations (tax, accounting, consumer protection)
• Display content and ads that may be more relevant (where we use advertising tools)
• Enforce our Terms of Service and protect our rights

5. Legal bases for processing (EEA/UK and similar laws)

If you are in the European Economic Area, United Kingdom, or another region that requires a legal basis for processing, we rely on one or more of the following:

• Contract — to fulfill your order or provide requested services
• Legitimate interests — to improve our Site, prevent fraud, and market our products in a balanced way
• Consent — for certain cookies, marketing emails, or optional features (you may withdraw consent at any time)
• Legal obligation — to meet tax, accounting, and regulatory requirements

6. How we share information

We do not sell your personal information for money. We may share information with:

• Shopify and e-commerce infrastructure — store hosting, checkout, accounts, and order management
• Payment processors — to complete transactions securely
• Shipping and fulfillment partners — to deliver packages and handle returns
• Email and customer communication tools — for order updates and (if subscribed) newsletters
• Analytics and advertising partners — to understand traffic and measure campaigns (see below)
• Professional advisors — lawyers, accountants, or insurers when needed
• Authorities — when required by law, legal process, or to protect rights and safety
• Business transfers — if we merge, sell assets, or reorganize, information may transfer as part of that transaction

Service providers are generally permitted to use personal information only to perform services for us and must protect it appropriately.

7. Cookies and similar technologies

We and our partners use cookies, pixels, local storage, and similar technologies to operate the Site, keep items in your cart, remember preferences, maintain security, measure performance, and (where enabled) support marketing.

Common types include:

• Essential — required for checkout, cart, login, and security
• Functional — remember preferences and improve usability
• Analytics — help us understand how the Site is used
• Advertising — may help deliver or measure ads on our Site or elsewhere

You can control cookies through your browser settings and, where available, cookie preference tools on the Site. Blocking some cookies may affect cart, checkout, or account features.

8. Analytics and advertising

We may use tools such as Shopify analytics and third-party services (for example Google Analytics, Meta/Facebook pixels, or similar platforms) to measure traffic, evaluate campaigns, and improve marketing. These providers may set cookies or collect device identifiers and usage data according to their own policies.

Where required by law, we will request consent before non-essential tracking. You can often opt out of interest-based advertising through industry tools (for example aboutads.info or youronlinechoices.eu) and platform settings on Google, Meta, and other networks.

9. Data retention

We keep personal information only as long as needed for the purposes described in this Policy, including to:

• Complete transactions and provide customer support
• Maintain accounts while they remain active
• Comply with legal, tax, and accounting obligations
• Resolve disputes and enforce agreements
• Support legitimate business needs such as security and fraud prevention

When information is no longer required, we will delete or anonymize it where reasonably practicable, subject to backup and legal retention requirements.

10. Security

We implement reasonable administrative, technical, and organizational measures designed to protect personal information. Shopify provides PCI-compliant checkout infrastructure for payment processing. However, no method of transmission over the Internet or electronic storage is completely secure. You use the Site at your own risk and should protect your account credentials.

11. Your privacy rights

Depending on where you live, you may have rights regarding your personal information, which can include:

• Access — request a copy of personal information we hold about you
• Correction — request that we fix inaccurate or incomplete data
• Deletion — request that we delete personal information, subject to legal exceptions
• Portability — receive certain data in a portable format
• Restriction or objection — limit or object to certain processing
• Withdraw consent — where processing is based on consent
• Opt out of marketing — unsubscribe from promotional emails at any time

To exercise these rights, contact us at admin@theprovidenceforge.com. We may need to verify your identity before fulfilling a request. You may also have the right to lodge a complaint with a data protection authority in your country or state.

12. California privacy notice (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) may provide additional rights, including the right to know, delete, correct, and opt out of “sale” or “sharing” of personal information for cross-context behavioral advertising.

Categories collected. In the past 12 months we may have collected identifiers (name, email, IP), commercial information (purchases), internet/activity data, and approximate geolocation—as described above.

Sources and purposes. We collect from you, automatically from your device, and from service providers, for the business purposes listed in this Policy (order fulfillment, customer service, security, analytics, and marketing where permitted).

Sale / sharing. We do not sell personal information for money. Like many online stores, we may use advertising or analytics cookies that could be considered a “sale” or “sharing” under California law in some cases. To request opt-out, email admin@theprovidenceforge.com with the subject line “California Opt-Out,” and adjust cookie/browser settings where available.

Non-discrimination. We will not discriminate against you for exercising CCPA/CPRA rights.

Authorized agents may submit requests as permitted by law; we may require proof of authorization and identity verification.

13. International transfers

We are based in the United States. If you access the Site from another country, your information may be transferred to, stored, and processed in the United States and other countries where Shopify and our providers operate. Those countries may have different data-protection laws than your home country. Where required, we rely on appropriate safeguards (such as standard contractual clauses used by providers) for cross-border transfers.

14. Children’s privacy

The Site is not directed to children under 13 (or under 16 where a higher age applies for consent to processing). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will take steps to delete it as required by law.

15. Do Not Track signals

Some browsers send “Do Not Track” (DNT) signals. There is no consistent industry standard for responding to DNT. At this time, the Site does not respond to DNT signals in a uniform way. You can manage cookies and tracking preferences as described above.

16. Third-party websites

The Site may link to third-party websites, social platforms, or services. We are not responsible for their privacy practices. Review their policies before providing personal information.

17. Automated decision-making

We do not use automated decision-making that produces legal or similarly significant effects solely by automated means without human involvement, except as may occur in standard fraud-prevention or payment-risk tools operated by Shopify or payment providers during checkout.

18. Changes to this Policy

We may update this Privacy Policy from time to time. The “Effective date” at the top will be revised when changes are posted. Material changes may also be highlighted on the Site or communicated by email when appropriate. Continued use of the Site after an update constitutes acknowledgment of the revised Policy, except where applicable law requires additional consent.

19. Contact us

For privacy questions, requests to exercise your rights, or complaints, contact: