🔐 Craftvara Privacy Policy

Effective Date: June 19, 2025

1. Introduction

Welcome! At Craftvara (“we”, “our”, “us”), your privacy is a top priority. This policy explains what information we collect, why we collect it, and how we protect it.

This policy complies with Canada’s PIPEDA, and U.S. privacy laws including CalOPPA, CCPA/CPRA, and other relevant state regulations.

We do not sell your personal data. We may share it with service providers to fulfill orders.

2. Personal Information We Collect

A. Information You Provide
  • Name, email, shipping/billing address
  • Payment method (collected via Square)
  • Optional profile data (e.g., vendor store info)
B. Automatically Collected
  • Device and browser info (for security & UX)
  • IP address, session data
C. Cookies & Tracking

We use cookies to improve the site experience and for analytics — nothing intrusive. We do not track you across other sites for ads.

3. How We Use Your Information

  • Process and fulfill orders
  • Communicate about your account or purchases
  • Analyze trends to improve our platform
  • Comply with legal and tax obligations

Sharing:

  • Vendors receive your shipping/contact info to fulfill orders
  • Third-party service providers (e.g., Square, hosting, email) but only to fulfill services
  • We do not sell or share data for advertising purposes

4. Your Privacy Rights

Canada (PIPEDA):

  • Access: You can request a copy of what we have held about you
  • Correction: You can ask for corrections to your data
  • Deletion: You may request data removal when no longer needed

California (CCPA/CPRA & CalOPPA):

  • Access/Know: California users can request details of collected information
  • Delete: You can request deletion of personal data, with limited exceptions
  • Opt-out: If we ever “sell” data (we don’t), you’d have the right to opt-out
  • Non-discrimination: You’re protected if you exercise these rights

5. Data Retention

We retain order-related info (e.g., order history, shipping) for up to 6 years for legal and tax record-keeping.

Other personal data is kept only as long as necessary. You may request deletion of your account and data that’s no longer required.

6. Security

Data is secured via HTTPS and best-in-class security practices.

Payment data is handled securely by Square; we do not store full credit card numbers.

7. Children’s Privacy

We do not knowingly collect info from children under 13. If you believe your child has provided us with personal info, please contact us immediately — we will remove it promptly.

8. Changes to This Policy

We may update this policy to reflect changes in laws or practices. Notice of changes will be posted here and via email if significant.

Continued use after changes means acceptance of those updates.

9. How to Contact Us

For questions or privacy requests, please email us at:
📧 privacy@craftvara.com

✅ Compliance References

  • PIPEDA fair information principles: consent, purpose, openness, access, etc.
  • CalOPPA: must post a privacy policy with details on collection, use, access
  • CCPA/CPRA rights: access, deletion, opt-out, non-discrimination

🔚 Summary

We’re committed to protecting your privacy and operating transparently. If you ever have questions, complaints, or requests regarding your data, just let us know!