Privacy Policy
What we collect, why we collect it, and the choices you have.
1. Scope
This policy explains how Slap your brand Corp collects, uses, shares, and protects personal information when you use CrafTrader. It applies to our website, seller storefronts on our subdomains, and our emails.
Sellers are independent businesses. When a Seller receives your name and address to fulfil an order, that Seller is an independent controller of that information and handles it under their own practices.
2. Information you give us
- Account details: name, email address, password (stored hashed, never in readable form), and any avatar or bio you add.
- Order details: shipping address, recipient name, phone number when you provide one, and gift messages.
- Seller details: shop name, description, location, policies, payout information collected by our payment provider, and tax details where required.
- Content: listings, photos, videos, reviews, and messages you send to other users through the platform.
- Support: what you tell us when you contact us or report a problem.
3. Information we collect automatically
- Device and connection data: IP address, browser type, operating system, and referring page.
- Usage data: pages viewed, searches run, items favourited, and how you move through the site.
- Cookies and similar technologies, described in our Cookie Policy.
4. Payment information
Card numbers are entered directly into a payment form hosted by our payment provider and are transmitted to that provider, not to us. We receive a token, the last four digits, the card brand, and the result of the charge. We never see or store your full card number or security code.
5. How we use information
- To create and run your account and to authenticate you.
- To process orders, payments, subscriptions, refunds, and payouts.
- To arrange shipping and give you tracking.
- To provide customer support and resolve disputes between Buyers and Sellers.
- To personalise what you see, including search results and recommendations.
- To send transactional messages such as order confirmations and shipping updates. These are not marketing and you cannot opt out of them while you have an active order.
- To send marketing messages where you have opted in, and to stop when you opt out.
- To detect, investigate, and prevent fraud, abuse, and security incidents.
- To meet legal, tax, and accounting obligations.
6. Legal bases (for users in the EEA and UK)
We process personal data to perform our contract with you (running your account and your orders), on the basis of legitimate interests (keeping the platform safe, improving it, and preventing fraud), with your consent (non-essential cookies and marketing email), and to comply with legal obligations (tax and accounting records).
8. How long we keep information
We keep account information while your account is open. After you close it, we delete or anonymise personal information within a reasonable period, except records we must retain for tax, accounting, fraud-prevention, or legal purposes — typically up to seven years for transaction records.
9. Your rights
Depending on where you live, you may have the right to access the personal information we hold about you, to correct it, to delete it, to receive a portable copy, to object to or restrict certain processing, and to withdraw consent you previously gave.
California residents (CCPA/CPRA) may request disclosure of the categories and specific pieces of personal information collected, request deletion or correction, and opt out of sharing for cross-context behavioural advertising. We will not discriminate against you for exercising these rights.
To make a request, write to privacy@slapyourbrand.com. We will verify your identity before acting and will respond within the time the applicable law allows. You may also lodge a complaint with your local data-protection authority.
10. International transfers
We operate from the United States, and our service providers may process information in other countries. Where we transfer personal data out of the EEA or UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
11. Security
We protect information in transit with TLS, store passwords using a one-way hash, offer two-factor authentication, and limit internal access to what each role needs. No system is perfectly secure; if a breach affects your personal information, we will notify you and the relevant authorities as the law requires.
12. Children's privacy
The Services are not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, write to privacy@slapyourbrand.com and we will delete it.
13. Changes and contact
We will post any updated policy here with a new effective date and, for material changes, give notice before they take effect.
Privacy questions: privacy@slapyourbrand.com. Slap your brand Corp, 2517 W McDowell Rd, Suite 117. Phoenix, AZ 85009.