Privacy Policy
Effective Date: November 7, 2024
Last Updated: November 7, 2025
At Amazing Grace Gifts (https://amazinggracegifts.com), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you visit our website or make a purchase.
1. Information We Collect
1.1 Personal Information
When you make a purchase or create an account on our website, we collect the following personal information:
- Contact Information: Name, email address, phone number, billing address, and shipping address
- Payment Information: Credit card details, billing information (processed securely through our payment processors)
- Account Information: Username, password, and purchase history
- Communication Data: Records of your correspondence with our customer service team
1.2 Automatically Collected Information
When you visit our website, we automatically collect certain technical information:
- Device Information: IP address, browser type, operating system, device identifiers
- Usage Data: Pages viewed, time spent on pages, links clicked, referring website
- Location Data: General geographic location based on IP address
- Cookies and Tracking Technologies: Information collected through cookies, web beacons, and similar technologies
1.3 Comments and User-Generated Content
When you leave comments on our website, we collect:
- Comment content and metadata
- IP address and browser user agent string (for spam detection)
- Email address (which may be used with Gravatar service to display your profile picture)
1.4 Media Uploads
If you upload images to our website, please be aware that images may contain embedded location data (EXIF GPS data). We recommend removing this data before uploading. Visitors can download and extract location data from images on our website.
2. How We Use Your Information
We use the collected information for the following purposes:
2.1 Order Processing and Fulfillment
- Process and complete your orders
- Send order confirmations and shipping notifications
- Handle returns, exchanges, and refunds
- Communicate about your orders and account
2.2 Customer Service
- Respond to your inquiries and support requests
- Provide customer assistance
- Resolve disputes and troubleshoot problems
2.3 Website Improvement
- Analyze website usage and performance
- Improve user experience and website functionality
- Develop new features and services
2.4 Marketing and Communications
- Send promotional emails about new products, special offers, and sales (with your consent)
- Personalize your shopping experience
- Display relevant advertisements
2.5 Legal and Security
- Prevent fraud and unauthorized transactions
- Detect and prevent spam and abuse
- Comply with legal obligations
- Protect our rights and property
3. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your browsing experience and collect information about how you use our website.
3.1 Types of Cookies We Use
- Essential Cookies: Required for website functionality, including shopping cart and checkout processes
- Preference Cookies: Remember your settings and preferences (valid for one year)
- Authentication Cookies: Keep you logged in to your account (login cookies last 2 days, “Remember Me” option keeps you logged in for 2 weeks)
- Analytics Cookies: Help us understand how visitors use our website through Google Analytics
- Marketing Cookies: Track your browsing activity to deliver relevant advertisements
3.2 Managing Cookies
You can control and manage cookies through your browser settings. However, disabling certain cookies may affect website functionality and your user experience.
4. Third-Party Services and Data Sharing
We may share your information with trusted third-party service providers who assist us in operating our business:
4.1 Service Providers
- Payment Processors: To securely process credit card transactions and payments
- Shipping Companies: To fulfill and deliver your orders
- Email Service Providers: To send transactional and marketing emails
- Analytics Providers: Google Analytics for website usage analysis
- Customer Service Platforms: To manage customer inquiries and support
- Hosting Providers: To host our website and store data securely
These third-party providers are contractually obligated to protect your data and use it only for the specific services they provide to us.
4.2 International Data Transfers
Some of our service providers may be located outside your country of residence. For example, if you are located outside the United States and your transaction is processed by a U.S.-based payment gateway, your information may be subject to U.S. laws, including the USA PATRIOT Act. By using our website, you consent to the transfer of your information to these jurisdictions.
4.3 Business Transfers
If Amazing Grace Gifts is involved in a merger, acquisition, or sale of assets, your personal information may be transferred to the new owner to ensure continuity of service.
4.4 Legal Requirements
We may disclose your information if required by law, court order, or governmental regulation, or to protect our rights, property, or safety.
5. Embedded Content and External Links
5.1 Embedded Content
Our website may include embedded content from third-party websites (such as YouTube videos, social media posts, or external articles). When you interact with embedded content, the third-party website may collect data about you, use cookies, and track your activity as if you visited their website directly.
5.2 Links to External Websites
Our website may contain links to external websites that are not operated by us. We are not responsible for the privacy practices or content of these third-party websites. We encourage you to review their privacy policies before providing any personal information.
6. Data Security
We take the security of your personal information seriously and implement industry-standard security measures:
- Encryption: All sensitive information (including credit card details) is encrypted using Secure Socket Layer (SSL) technology during transmission
- Secure Storage: Payment information is stored with AES-256 encryption
- PCI-DSS Compliance: We follow Payment Card Industry Data Security Standards for handling payment information
- Access Controls: Limited access to personal data, restricted to authorized personnel only
- Regular Security Audits: We regularly review and update our security practices
While we implement robust security measures, please note that no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but strive to use commercially acceptable means to protect your data.
7. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy:
- Account Information: Retained for as long as your account is active or as needed to provide services
- Transaction Records: Retained for accounting, tax, and legal compliance purposes (typically 7 years)
- Comments: Retained indefinitely unless you request deletion
- Marketing Data: Retained until you unsubscribe or request deletion
- Analytics Data: Anonymized and aggregated data may be retained indefinitely
When data is no longer needed, we securely delete or anonymize it in accordance with our data retention policy.
8. Your Privacy Rights
You have the following rights regarding your personal information:
8.1 Access and Portability
- Request a copy of the personal data we hold about you
- Receive your data in a structured, commonly used format
8.2 Correction and Update
- Update or correct inaccurate personal information
- Modify your account settings and preferences
8.3 Deletion
- Request deletion of your personal data (subject to legal retention requirements)
- Close your account permanently
8.4 Opt-Out Rights
- Unsubscribe from marketing emails (using the unsubscribe link in emails)
- Opt out of personalized advertising
- Disable cookies through browser settings
8.5 Restriction and Objection
- Request restriction of processing in certain circumstances
- Object to processing based on legitimate interests
To exercise your rights, please contact us at: [email protected]
We will respond to your request within 30 days. In some cases, we may need to verify your identity before processing your request.
9. Google Analytics
We use Google Analytics to analyze website traffic and user behavior. Google Analytics collects information such as:
- Pages visited and time spent on each page
- How users arrived at our website
- Device and browser information
- Geographic location (city/country level)
- User interactions and navigation patterns
This information helps us understand user preferences, improve website performance, and enhance user experience. Google Analytics data is collected anonymously and does not identify individual users.
You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.
10. Spam Detection
To protect our website and users from spam and abuse, visitor comments may be automatically checked through spam detection services. These services analyze comment content, IP addresses, and user behavior patterns to identify and prevent spam.
11. Children’s Privacy
Our website is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will delete such information from our records.
12. Age of Consent
By using our website, you represent that:
- You are at least the age of majority in your state, province, or country of residence, OR
- You are the age of majority and have provided consent for your minor dependents to use this website
13. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information is collected, used, shared, or sold
- Right to delete personal information
- Right to opt-out of the sale of personal information (we do not sell personal information)
- Right to non-discrimination for exercising your privacy rights
To exercise these rights, contact us at [email protected].
14. European Privacy Rights (GDPR)
If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including:
- Right to access your personal data
- Right to rectification of inaccurate data
- Right to erasure (“right to be forgotten”)
- Right to restriction of processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent at any time
Our lawful bases for processing your data include: contract performance, legal obligations, legitimate interests, and consent.
15. Changes to This Privacy Policy
We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes:
- The “Last Updated” date at the top of this page will be revised
- Material changes will be prominently posted on our website
- We may notify you via email for significant changes
- Continued use of our website after changes constitutes acceptance of the updated policy
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
16. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Amazing Grace Gifts
Email: [email protected]
Website: https://amazinggracegifts.com
We will respond to your inquiry as soon as possible, typically within 30 days.
17. Consent
By using our website, you consent to the collection, use, and sharing of your information as described in this Privacy Policy. If you do not agree with this policy, please do not use our website or provide any personal information.
