PRIVACY POLICY

Privacy Policy
Viccocraft (“we,” “us,” or “our”) operates the Viccocraft store and website at viccocraft.com, including all related information, content, features, tools, products, and services, in order to provide you, our customer, with a curated shopping experience (collectively, the “Services”). Viccocraft is powered by Shopify, which enables us to provide the Services to you.
This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction through the Services, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy will govern with respect to the collection, processing, and disclosure of your personal information.
Please read this Privacy Policy carefully. By accessing or using any of the Services, you acknowledge that you have read and understood the collection, use, and disclosure of your information as described in this Privacy Policy. 
Personal Information We Collect or Process
“Personal information” means information that identifies you or another person, or that can reasonably be linked to you or another person. Information that has been collected anonymously or processed so that it can no longer reasonably identify you is not considered personal information.
Depending on how you interact with the Services, where you live, and as permitted or required by applicable law, we may collect or process the following categories of personal information, including inferences derived from such information:
- Contact information: Your name, billing address, shipping address, telephone number, and email address.
- Financial information: Payment card information, transaction details, payment methods, payment confirmations, and other payment-related information. Payments are processed by Shopify and payment service providers; we do not store your full payment card number.
- Account information: Username, password, preferences, and settings, if you create an account.
- Transaction information: Products you view, add to your cart, purchase, return, exchange, or cancel, as well as your order history.
- Custom order information: Photos, names, dates, or text that you submit for personalized lamps. We use this information only to create and fulfill your order.
- Communications with us: Information you provide when contacting our customer service team.
- Device information: Information about your device, browser, network connection, IP address, and other unique identifiers.
- Usage information: Information about how and when you interact with and navigate the Services.  
Sources of Personal Information
We may collect personal information from the following sources:
- Directly from you: When you place an order, create an account, subscribe to emails, participate in a promotion, or contact us.
- Automatically through the Services: From your device when you visit our website, including through cookies and similar technologies.
- From service providers: When we engage them to provide certain technologies or when they collect or process personal information on our behalf.
- From business partners or other third parties.   
How We Use Personal Information
Depending on how you interact with us and the Services you use, we may use your personal information to:
Provide, personalize, and improve the Services. This includes processing payments, processing and fulfilling orders, creating customized products according to your requests, handling returns and exchanges, managing accounts, sending order and shipping notifications, allowing you to post reviews, remembering your preferences, and recommending products related to your previous purchases.
Marketing and advertising. We may send promotional emails, such as discount codes, new product announcements, and seasonal collections, if you have subscribed to receive them. We may also display online advertising based on your activity on the Services. You may unsubscribe from marketing emails at any time.
Security and fraud prevention. We may use personal information to authenticate accounts, maintain secure payments and shopping experiences, and detect, investigate, or address fraudulent, illegal, unsafe, or harmful activity. If you create an account, you are responsible for keeping your login credentials secure and not sharing them with others.
Communicating with you. We use your information to provide customer support and respond to your questions.
Legal purposes. We may use information to comply with applicable laws, respond to valid legal processes or requests from law enforcement or government authorities, participate in legal proceedings, and enforce our terms and policies. 
How We Disclose Personal Information
We may disclose your personal information to third parties for legitimate purposes consistent with this Privacy Policy, including:
- Service providers: Shopify and other vendors and third parties that perform services on our behalf, such as information technology management, payment processing, data analytics, email marketing, customer support, cloud storage, order fulfillment, and shipping.
- Business and marketing partners: Partners that provide marketing and advertising services. For example, we use Shopify to support personalized advertising with third-party services based on your online activity across different stores and websites. These partners process your information according to their own privacy policies. Depending on where you live, you may have the right to opt out of sharing information for targeted advertising.
- When you request or direct us to disclose information: For example, when we need to ship your order or when you use social media integrations or social login features.
- Affiliates or other companies within our corporate group.
- Business transfers and legal requirements: In connection with transactions such as mergers or bankruptcy proceedings; to comply with legal obligations, including subpoenas and search warrants; to enforce our terms and policies; and to protect the Services and the rights of our business, customers, and others.
Our Relationship With Shopify
The Services are hosted by Shopify. Shopify collects and processes personal information relating to your access to and use of the Services in order to provide and improve the Services.
Information that you submit through the Services will be transmitted to and shared with Shopify and third parties that may be located in countries other than the country in which you live.
To protect, develop, and improve our business, we use certain enhanced Shopify features. These features use data from your interactions with our store, other stores, and Shopify. For these features, Shopify is responsible for processing your personal information, including responding to requests to exercise your rights regarding such processing.
To learn more about how Shopify uses your personal information and the rights that may be available to you, please review Shopify’s Consumer Privacy Policy. Depending on where you live, you may also be able to exercise certain rights through Shopify’s Privacy Portal.
Third-Party Websites and Links
The Services may contain links to websites or online platforms operated by third parties. If you visit websites that we do not own or control, please review their privacy and security policies and other terms.
We are not responsible for the privacy or security practices of those websites, nor for the accuracy, completeness, or reliability of information found on them.
Information you provide in public or semi-public areas, including third-party social media platforms, may be viewed and used by other people without restriction. The inclusion of a link does not, by itself, mean that we endorse or sponsor the third-party platform or its owner unless expressly stated otherwise.
Children’s Data
The Services are not intended for children, and we do not knowingly collect personal information from individuals who are below the age of majority under the laws where they live.
If you are the parent or guardian of a child who has provided personal information to us, please contact us using the information below and we will delete that information.
As of the effective date of this Privacy Policy, we are not aware that we have “shared” or “sold,” as those terms are defined under applicable law, personal information belonging to anyone under the age of 16. 
Security and Retention of Your Information
No security measures are perfect or impenetrable, and we cannot guarantee “absolute security.” Information that you send to us may not be secure while in transit, so please do not send sensitive or confidential information through unsecured communication channels.
How long we retain your personal information depends on factors such as whether we need the information to maintain your account, provide the Services, comply with legal obligations, resolve disputes, or enforce contracts and policies.
Photos and information submitted for customized orders are retained only for as long as necessary to complete the order and provide after-sales support.
Your Rights and Choices
Depending on where you live, you may have some or all of the following rights. These rights are not absolute and may apply only in certain circumstances. In some cases, we may decline a request where permitted by law.
- Right to access / right to know: Request access to personal information that we maintain about you.
- Right to deletion: Request that we delete personal information that we maintain about you.
- Right to correction: Request that we correct inaccurate personal information about you.
- Right to data portability: Receive a copy of your personal information and, in certain circumstances and subject to applicable exceptions, request that it be transferred to a third party.
- Right to opt out of sale, sharing, or targeted advertising: Depending on where you live, you may have the right to opt out of the “sale” or “sharing” of personal information or its use for “targeted advertising,” as those terms are defined under applicable privacy laws.
If you visit our website with a Global Privacy Control (GPC) signal enabled, depending on where you are located, we will treat that signal as a request to opt out for the relevant device and browser. If the device can be associated with a Shopify account, the opt-out may also apply to that account. More information is available at globalprivacycontrol.org. Other than GPC, we do not respond to other “Do Not Track” signals.
Communication preferences: You may unsubscribe from promotional emails at any time by using the unsubscribe link included in the email. We may still send non-promotional communications, including order confirmations and shipping updates. 
If you live in the United Kingdom or European Economic Area (EEA), subject to exceptions and limitations under local law, you may also have the following rights:
- Objection and restriction of processing: You may request that we stop or restrict our processing of your personal information for certain purposes.
- Withdrawal of consent: Where we process information based on your consent, you may withdraw that consent at any time. Withdrawal does not affect processing that occurred before consent was withdrawn.
You may exercise these rights by following the instructions available through the Services or by contacting us using the information below. To learn about rights relating to information processed by Shopify, please visit privacy.shopify.com.
We will not discriminate against you for exercising these rights. We may need to verify your identity before processing a request as permitted or required by applicable law. You may authorize an agent to submit a request on your behalf. Before accepting a request from an authorized agent, we may require proof of authorization and may ask you to verify your identity directly. We will respond within the timeframe required by applicable law.   
Complaints
If you have a complaint about how we process your personal information, please contact us using the information below.
Depending on where you live, you may have the right to appeal our decision by contacting us again or to submit a complaint to your local data protection authority. If you are located in the EEA, you may consult the applicable list of data protection supervisory authorities.  
International Data Transfers
We are based in Vietnam and may transfer, store, and process your personal information outside the country in which you live.
When we transfer personal information outside the European Economic Area or United Kingdom, we use recognized transfer mechanisms where required, such as the European Commission’s Standard Contractual Clauses or equivalent contractual mechanisms issued by the relevant UK authority. Such mechanisms are not required where information is transferred to a country officially recognized as providing an adequate level of protection. 
Changes to This Privacy Policy
We may update this Privacy Policy from time to time, including to reflect changes in our practices or for operational, legal, or regulatory reasons. We will publish the revised Privacy Policy on our website, update the “Last Updated” date, and provide any notice required by applicable law.