What is “Personally Identifiable Information” (PII)?
As used in U.S. privacy law and information security, PII is information that can be used on its own or with other information to identify, contact, or locate a single person, or to identify an individual in context.
When and why do we collect your PII?
We collect personal information from you when you visit the site and when you enter information on our site, such as placing an online order. We may use that information to facilitate your user experience, to process requests made by you (such as to sign up for e-mails or to send us a message), and/or to process your transactions in our online store.
What PII do we collect from visitors to our website?
When ordering or registering on our site, you may be asked to enter your name, email address, mailing address, phone number, credit card information or other details to help you with your experience.
How do we protect your PII?
We do not use vulnerability scanning and/or scanning to PCI standards. Your personal information is contained behind secured networks and is only accessible by a limited number of persons who have special access rights to such systems, and are required to keep the information confidential. In addition, all sensitive/credit information you supply is encrypted via Secure Socket Layer (SSL) technology.
We implement a variety of security measures when a user places an order enters, submits, or accesses their information
All transactions are processed through a gateway provider and are not stored or processed on our servers.
Do we use ‘cookies’?
Help remember and process the items in the shopping cart.
You can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies. You do this through your browser (like Internet Explorer) settings. Each browser is a little different, so look at your browser’s Help menu to learn the correct way to modify your cookies.
If users disable cookies in their browser:
If you disable cookies off, some features will be disabled It will turn off some of the features that make your site experience more efficient and some of our services will not function properly. However, you can still place orders with us by telephone.
How does our site handle Do Not Track signals?
We honor Do Not Track (DNT) signals and do not track, plant cookies, or use advertising when a DNT browser mechanism is in place.
Third Party Disclosure
We do not sell, trade, or otherwise transfer to outside parties your personally identifiable information.
On this Web page.
Users are able to change their personal information:
By emailing firstname.lastname@example.org
COPPA (Children Online Privacy Protection Act)
When it comes to the collection of personal information from children under 13, the Children’s Online Privacy Protection Act (COPPA) puts parents in control. The Federal Trade Commission, the nation’s consumer protection agency, enforces the COPPA Rule, which spells out what operators of websites and online services must do to protect children’s privacy and safety online.
We do not specifically market to children under 13.
California Online Privacy Protection Act
According to CalOPPA we agree to the following:
Users can visit our site anonymously.
Fair Information Practices
The Fair Information Practices Principles form the backbone of privacy law in the United States and the concepts they include have played a significant role in the development of data protection laws around the globe. Understanding the Fair Information Practice Principles and how they should be implemented is critical to comply with the various privacy laws that protect personal information.
In order to be in line with Fair Information Practices we will take the following responsive action, should a data breach occur:
We will notify the users via email within 7 business days
We also agree to the individual redress principle, which requires that individuals have a right to pursue legally enforceable rights against data collectors and processors who fail to adhere to the law. This principle requires not only that individuals have enforceable rights against data users, but also that individuals have recourse to courts or a government agency to investigate and/or prosecute non-compliance by data processors.