Privacy Policy

• Personal Identification Information: This includes, but is not limited to, your name, email address, and shipping address. This information is primarily collected to facilitate account creation, order processing, and communication.
• Transaction Data: When you make a purchase from Story Crimes, we collect details of the transaction. This may include the items purchased, their price, and the date of purchase. Please note that while we record transaction details, we do not store your full credit card information on our servers.
• Interaction Data: This encompasses comments, reviews, and other forms of user-generated content that you might provide on our platforms.

• Registration: When you create an account on our website, we collect personal identification information to set up and secure your account.
• Purchases: When you buy merchandise, we gather transaction data and personal identification information to process and deliver your order.
• Newsletter Sign-Up: If you choose to subscribe to our newsletters, we collect your email address to send you the relevant updates and communications.
• Contact Forms: When you reach out to us for support or inquiries, we collect the information you provide to assist you effectively.

• Order Processing: We collect and use your personal data to process and fulfil merchandise orders. This includes verifying your identity, processing payments, and ensuring timely delivery of purchased items.
• Customer Support: Your data aids us in providing timely and effective customer support. Whether you’re facing issues with an order, have queries about our products, or need assistance with any other aspect of our services, your data helps us serve you better.
• Spam Prevention: To ensure the security and integrity of our website and to protect our community from malicious activities, we may use your data for spam detection and prevention.
• Newsletter and Updates: If you’ve opted to receive newsletters or other communications from us, we use your email address to send you the relevant content and updates.
• Community Engagement: We value the contributions of our community members. Data related to comments, reviews, and other user-generated content helps us foster a vibrant and interactive community.

• Hosting and Infrastructure: Our website is hosted by Hostinger, with servers located in the USA, AZ. This means that the primary storage of your data is in this location. Additionally, certain services, such as our email sending service (Amazon SES), utilize servers in the EU, Stockholm.
• Security Measures: We prioritize the security of your data. Our hosting environment employs robust security measures, including encryption and secure protocols, to protect your data from unauthorized access, alteration, or deletion.
• An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service Privacy Policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

• Account Information: If you register an account with Story Crimes, we retain your account information for as long as your account remains active. If you choose to deactivate or delete your account, we will retain your data for a period of 3 months for backup, archival, and audit purposes.
• Transaction Data: For users who make purchases, transaction data is retained for a period of 7 years, in line with financial and tax regulations.
• Newsletter Subscriptions: If you subscribe to our newsletters, we retain your email address for as long as you remain subscribed. If you choose to unsubscribe, your email address will be removed from our mailing list immediately.
• Comments and Reviews: Data related to comments and reviews is retained indefinitely to maintain the historical context of discussions and feedback on our platforms.

1. Contact us through the provided contact form on our website.
2. Clearly state your request for data deletion.
3. Once we receive your request, we will confirm its receipt and begin the data deletion process.
4. Please note that the deletion process can take up to 30 days from the date of request receipt. During this period, your data will be removed from our active databases. However, some residual data might remain in our backups until they are naturally overwritten or purged.

• Printify: We use Printify for our print-on-demand merchandise services. When you place an order, relevant details are shared with Printify to process and fulfil that order. Printify’s Privacy Policy
• Amazon SES: We utilize Amazon SES for sending out emails, including newsletters and transactional emails. This means that your email address and email content are processed by Amazon SES when we send you emails. Amazon SES Privacy Details
• titan.email: For receiving emails and managing our email communication, we rely on titan.email. Any correspondence you send to us may be processed and stored by titan.email. Titan’s Privacy Policy
• Cloudflare: To enhance website performance, security, and spam prevention, we use Cloudflare’s services. This may involve processing your IP address and other related data to ensure a secure browsing experience. Cloudflare’s Privacy Policy
• Hostinger: Our website is hosted by Hostinger. All data you provide on our website, including account information and transaction details, is stored on Hostinger’s servers. Hostinger’s Privacy Policy

Given the global nature of our third-party service providers, your data may be transferred and processed in countries other than your own, including from the USA to the EU and vice versa. We ensure that all our service providers adhere to data protection standards that are compliant with relevant regulations, ensuring your data remains secure and protected, irrespective of where it’s processed.

• Right to Access: You have the right to request a copy of the personal data we hold about you. If you wish to do so, please contact us, and we’ll provide you with this information within a reasonable timeframe.
• Right to Rectification: If you believe that any personal data we hold about you is incorrect or incomplete, you can request corrections. Reach out to us with the details of the required changes, and we’ll take the necessary steps to rectify your data.
• Right to Erasure: You can request the deletion of your personal data from our systems. Please note that there might be certain circumstances where we might need to retain some data for legal, audit, or other legitimate purposes.
• Right to Restrict Processing: While we don’t share your data with third-party marketing companies, and all our newsletters are double opt-in, you still have the right to request limited use of your data. If you have concerns about specific data processing activities, please let us know.
• Right to Data Portability: Although our website primarily functions as a content platform and not a service in the traditional sense, you still have the right to request your data for transfer to another entity. If you wish to exercise this right, contact us, and we’ll provide your data in a commonly used, machine-readable format.
• Right to Object: You have the right to object to certain uses of your data. As mentioned, we don’t share your data with third-party marketing companies, and all our newsletters are double opt-in. However, if you have specific concerns or objections, please communicate them to us.

Certainly. Based on our previous discussions and the nature of your website, here’s a draft for the “Security Measures” section of your privacy policy:

• Encryption: All data transmitted between your device and our servers is encrypted using industry-standard encryption protocols. This ensures that your data remains confidential and secure during transmission.
• Secure Servers: Our website is hosted on Hostinger, a reputable hosting provider known for its robust security measures. Hostinger employs state-of-the-art security infrastructure to ensure data integrity and protection.
• Regular Updates: We regularly update our website and its underlying systems to address potential security vulnerabilities. By staying updated, we ensure that our platform remains resilient against emerging threats.
• Access Control: Only authorized personnel have access to our backend systems and the data stored therein. We’ve implemented strict access controls to ensure that your data is only accessible to those who need it for legitimate purposes.
• Cloudflare Protection: With the integration of Cloudflare, our website benefits from additional layers of security, including DDoS protection and advanced threat detection. Cloudflare’s infrastructure acts as a shield, filtering out malicious traffic and ensuring that only legitimate requests reach our servers.

While you visit our site, we’ll track:

• Products you’ve viewed: we’ll use this to, for example, show you products you’ve recently viewed
• Location, IP address and browser type: we’ll use this for purposes like estimating taxes and shipping
• Shipping address: we’ll ask you to enter this so we can, for instance, estimate shipping before you place an order, and send you the order!

We’ll also use cookies to keep track of basket contents while you’re browsing our site.

When you purchase from us, we’ll ask you to provide information including your name, billing address, shipping address, email address, phone number, credit card/payment details and optional account information like username and password. We’ll use this information for purposes, such as, to:

• Send you information about your account and order
• Respond to your requests, including refunds and complaints
• Process payments and prevent fraud
• Set up your account for our store
• Comply with any legal obligations we have, such as calculating taxes
• Improve our store offerings
• Send you marketing messages, if you choose to receive them

If you create an account, we will store your name, address, email and phone number, which will be used to populate the checkout for future orders.

We generally store information about you for as long as we need the information for the purposes for which we collect and use it, and we are not legally required to continue to keep it. For example, we will store order information for 7 years for tax and accounting purposes. This includes your name, email address and billing and shipping addresses.

We will also store comments or reviews, if you choose to leave them.

Members of our team have access to the information you provide us. For example, both Administrators and Shop Managers can access:

• Order information like what was purchased, when it was purchased and where it should be sent, and
• Customer information like your name, email address, and billing and shipping information.

Our team members have access to this information to help fulfill orders, process refunds and support you.

In this section you should list who you’re sharing data with, and for what purpose. This could include, but may not be limited to, analytics, marketing, payment gateways, shipping providers, and third party embeds.

We share information with third parties who help us provide our orders and store services to you; for example —

In this subsection you should list which third party payment processors you’re using to take payments on your store since these may handle customer data. We’ve included PayPal as an example, but you should remove this if you’re not using PayPal.

We accept payments through PayPal. When processing payments, some of your data will be passed to PayPal, including information required to process or support the payment, such as the purchase total and billing information.

Please see the PayPal Privacy Policy for more details.

Note: Smush does not interact with end users on your website. The only input option Smush has is to a newsletter subscription for site admins only. If you would like to notify your users of this in your privacy policy, you can use the information below.

Smush sends images to the WPMU DEV servers to optimise them for web use. This includes the transfer of EXIF data. The EXIF data will either be stripped or returned as it is. It is not stored on the WPMU DEV servers.

Smush uses the Stackpath Content Delivery Network (CDN). Stackpath may store web log information of site visitors, including IPs, UA, referrer, Location and ISP info of site visitors for 7 days. Files and images served by the CDN may be stored and served from countries other than your own. Stackpath’s Privacy Policy can be found here.

Smush uses a third-party email service (Drip) to send informational emails to the site administrator. The administrator’s email address is sent to Drip and a cookie is set by the service. Only administrator information is collected by Drip.

In order to enable you to use this website with Patreon services, we save certain functionally important Patreon information about you in this website if you log in with Patreon.

These include your Patreon user id, Patreon username, your first, last names and your vanity name. Additionally, the id of your campaign at Patreon and your campaign’s Patreon URL are also saved.

If you request that your data be deleted from this website, this data will also be deleted and Patreon functionality will not work. You would need to register on this website and log in to this website with Patreon again in order to re-populate this data and have Patreon functionality working again.