We respect your privacy. This Policy explains what personal information we collect, how we use and share it, and the choices you have. By using our site, you agree to this Policy.

1) Information we collect

We collect information in three ways: you provide it, it’s collected automatically, or we get it from service providers we use to run the store.

A. Information you provide

• Contact & account details (name, email, phone, billing & shipping addresses).
• Order details (items purchased, gift messages, delivery notes).
• Payment-related info (last 4 digits, card brand, token)—we don’t store full card numbers; payments are processed by our providers (e.g., WooPayments/Stripe).
• Messages you send us (support requests, form submissions, reviews).

B. Information collected automatically

• Device & usage data (IP address, browser type/version, operating system, device identifiers, pages visited, links clicked, referring/exit pages, date/time).
• Cookies/Similar tech (see §5).

C. Information from service providers

• Fraud-prevention signals, geolocation approximations, carrier delivery status, analytics/metrics.

2) How we use your information

We use personal information to:

• Fulfill orders & provide services (process payments, ship, manage returns/replacements, customer support).
• Operate & secure the site (debugging, fraud prevention, abuse and attack detection).
• Improve our products & site (analytics, quality control).
• Communicate (order confirmations, shipping notices, service messages).
• Marketing (with your consent where required): newsletters, promotions—you can opt out anytime.

Legal bases (where applicable): performance of a contract (to fulfill your order), legitimate interests (to secure and improve our site), consent (newsletters/cookies where required), and compliance with legal obligations (tax/record-keeping).

3) Sharing & disclosures

We do not sell your personal information. We share it only with:

• Payment processors & commerce tools: WooCommerce, WooPayments/Stripe, fraud-prevention tools.
• Shipping & logistics: USPS/UPS and similar carriers; label services (e.g., WooCommerce Shipping).
• Site operations: hosting, security (e.g., Jetpack/LiteSpeed), email delivery (e.g., FluentSMTP), form tools (Fluent Forms), and backup/IT vendors.
• Analytics: Google Analytics (see §5 Cookies for controls).
• Legal & compliance: to comply with law, enforce our Terms, or protect our rights, users, or the public.
• Business transfers: in a merger, acquisition, or asset sale, your info may transfer as permitted by law.

Each provider processes data under its own privacy policy and our instructions where applicable.

4) Data retention

We keep personal information only as long as needed for the purposes in this Policy:

• Orders & tax records: typically 7 years (or longer if required by law).
• Account info: while your account is active; delete on request or after inactivity where feasible.
• Support messages/forms: typically 2 years unless needed longer for disputes/security.
• Marketing lists: until you unsubscribe or we delete the list.

When we no longer need data, we delete or de-identify it.

5) Cookies & similar technologies

We use cookies, pixels, and local storage to:

• Keep you signed in, remember cart contents, and process checkout.
• Measure site performance and improve content (e.g., Google Analytics).
• Provide limited, interest-based messaging for our own products.

Your choices

• Cookie banner / settings: Where shown, use Cookie Settings to accept/decline categories.
• Browser controls: You can block or delete cookies in your browser. Doing so may affect site functions (e.g., cart/checkout).
• Google Analytics opt-out: https://tools.google.com/dlpage/gaoptout

We don’t respond to “Do Not Track” signals due to industry variability.

6) Marketing communications

With your consent (where required), we may send you newsletters or promotions. You can unsubscribe via the link in any email or by contacting us at admin@sugarnproof.com. Service messages (order/shipping/important updates) will still be sent.

7) Security

We use commercially reasonable technical and organizational measures (HTTPS/TLS, access controls, firewalls, periodic updates) to protect personal information. No online method is 100% secure; please use strong, unique passwords and keep them confidential.

8) Your privacy rights

Depending on your location, you may have rights to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Delete your information (subject to legal exceptions, e.g., tax records).
• Opt out of marketing or certain cookies.
• Data portability where applicable.

California / Virginia / Colorado / Connecticut / Utah residents may have additional rights to limit or opt out of certain processing. We do not sell your data or engage in “targeted advertising” using your personal data in a manner that constitutes a “sale/share” under state privacy laws. To exercise rights, email admin@sugarnproof.com with “Privacy Request” in the subject; we’ll verify your identity as required.

9) Children’s privacy

Our site is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us data, contact admin@sugarnproof.com and we will delete it.

10) International visitors

We are a U.S. business and primarily process data in the United States. If you access the site from outside the U.S., you understand your information may be transferred to and processed in the U.S., which may have different data-protection laws than your country.

11) Changes to this Policy

We may update this Policy from time to time. Changes are effective when posted here, with the “Effective date” updated. Material changes may also be communicated by email or a site notice.

12) WordPress & WooCommerce

Comments
When visitors leave comments, we collect the data shown in the comment form plus the visitor’s IP address and browser user-agent to help with spam detection. An anonymized string created from your email address (a hash) may be sent to the Gravatar service to check if you use it. Gravatar’s privacy policy: https://automattic.com/privacy/. After approval, your profile image is visible to the public in the context of your comment.

Media
If you upload images, avoid uploading images that include embedded location (EXIF GPS) data. Visitors to the site can download and extract location data from images on the site.

Cookies (WordPress login, comments, preferences)

• If you leave a comment, you may opt in to saving your name, email, and website in cookies for convenience (lasts 1 year).
• Visiting the login page sets a temporary cookie to check if your browser accepts cookies; it contains no personal data and is discarded when you close your browser.
• When you log in, we set cookies to save your login and screen display choices. Login cookies last 2 days (or 2 weeks if “Remember Me” is selected); screen options cookies last 1 year. Logging out removes the login cookies.
• If you edit or publish an article, an additional cookie will be saved that contains the post ID of the article you just edited and expires after 1 day.

(See our Cookies section above for analytics/marketing cookies and how to control them.)

Embedded content from other sites
Articles may include embedded content (e.g., videos, images, articles). Embedded content from other websites behaves exactly as if you visited the other website. Those sites may collect data about you, use cookies, embed third-party tracking, and monitor your interaction with that embedded content—including tracking if you have an account and are logged in to that site. Please review those third-party privacy policies.

Who we share your data with
If you request a password reset, your IP address may be included in the reset email for security. Visitor comments may be checked through an automated spam detection service (e.g., Akismet).

How long we retain your data

• Comments: Retained indefinitely so we can recognize and approve follow-up comments automatically.
• User accounts: For users who register, we store the personal information provided in their profile. Users can see, edit, or delete their personal information at any time (except usernames). Site administrators can also see and edit that information.
• Order/account retention for commerce purposes is described in the Data Retention section above (e.g., order/tax records typically 7 years).

Your rights over your data
If you have an account or have left comments, you can request an export of the personal data we hold about you, including any data you have provided. You can also request that we erase personal data we hold, subject to data we must keep for administrative, legal, or security purposes. To exercise rights, email admin@sugarnproof.com with “Privacy Request” in the subject; we’ll verify your identity as required.

Where your data is sent
Visitor comments may be checked through an automated spam detection service, and operational data is processed by our service providers (hosting, security, payment processing, shipping, email delivery, analytics) as described in Sharing & Disclosures.

12) Contact us

Sugar n’ Proof LLC
Email: admin@sugarnproof.com