Privacy Policy

This Privacy Policy applies to all product lines owned and operated by:

Crafted By Joanna LLC 1413 Dean Ave. Junction City, KS 66441

📞 (385) 630-3116 ✉️ hello@craftedbyjoanna.com

Whenever this policy says "we," "us," or "our," it refers to Crafted By Joanna LLC and all brands and product lines operating under it — including but not limited to products sold through our website at craftedbyjoanna.com and our Etsy storefront.

Important Notice: This Privacy Policy is provided for informational purposes and represents our good-faith commitment to your privacy. It is not a substitute for legal advice. We strongly recommend consulting a qualified attorney to ensure your privacy practices are fully compliant with all applicable federal and state laws.

This Privacy Policy applies to:

• Our website at craftedbyjoanna.com and any subdomains
• Our Etsy storefront at CraftedByJoannaLLC.Etsy.com
• Any email communications we send to you
• Our social media pages on TikTok (@craftedbyjoanna) and X/Twitter (@CraftedbyJoanna)
• Any other platform or channel through which Crafted By Joanna LLC collects personal information

This policy does not apply to third-party websites or platforms that we may link to. Those sites have their own privacy policies, and we encourage you to review them.

We collect several categories of personal information to operate our business, process your orders, and communicate with you.

Information You Provide Directly

• Identity information: First name, last name, username, or similar identifier
• Contact information: Billing address, delivery address, email address, and phone number
• Payment information: Credit or debit card details and other payment data — processed securely through our third-party payment processor. We do not store full card numbers on our systems.
• Account information: Username and password if you create an account with us
• Transaction information: Details of products you have purchased from us and your order history
• Communications: Any messages you send us through our contact form, email, or social media
• Marketing preferences: Your preferences for receiving marketing communications from us

Information Collected Automatically

When you visit our website, certain information is collected automatically through cookies and similar technologies:

• Technical data: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform
• Usage data: Information about how you use our website, including pages visited, time spent on pages, links clicked, referring URLs, and exit pages
• Device data: Device type, device identifiers, and mobile network information

Information from Third Parties

We may receive personal information about you from third parties, including:

• Payment processors (e.g., Shopify Payments, PayPal, or similar) when you complete a transaction
• Shipping carriers when delivering your orders
• Social media platforms if you interact with us through those channels
• Analytics providers such as Google Analytics
• Etsy if you purchase through our Etsy storefront (note: Etsy's own privacy policy also applies in that case)

We use your personal information only for legitimate business purposes. Specifically, we use it to:

Fulfill Orders & Provide Services

• Process and fulfill your orders, including payment authorization and delivery coordination
• Manage your customer account
• Send order confirmations, invoices, shipping notifications, and delivery updates
• Handle returns, exchanges, and customer service requests

Communicate With You

• Respond to your inquiries, questions, and support requests
• Send you promotional emails, newsletters, and marketing communications — only if you have opted in
• Notify you about changes to our products, services, or this policy

Improve Our Business

• Analyze website usage and trends to improve our site, products, and customer experience
• Conduct internal research and product development
• Monitor and improve the performance and security of our website

Legal & Safety Purposes

• Detect, investigate, and prevent fraudulent transactions and other illegal activity
• Comply with applicable legal obligations, court orders, or regulatory requirements
• Enforce our Terms of Service and other agreements

We will never sell your personal information to third parties for their own marketing purposes.

Depending on your location (including if you are in California, the European Union, or other regulated jurisdictions), we process your personal information on one or more of the following legal bases:

• Contract: Processing is necessary to fulfill our contract with you (e.g., to process and ship your order)
• Legitimate Interests: Processing is in our legitimate business interests (e.g., fraud prevention, improving our services), and those interests are not overridden by your rights
• Legal Obligation: Processing is necessary to comply with a legal obligation
• Consent: You have given clear, affirmative consent (e.g., signing up for our marketing emails)

Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

We do not sell, rent, or trade your personal information. We share your information only with trusted third-party service providers who assist us in operating our business, and only to the extent necessary for those purposes.

Service Providers We May Share Data With

| Category | Purpose | Examples | |---|---|---| | E-commerce Platform | Store and order management | Shopify | | Payment Processors | Secure transaction handling | Shopify Payments, PayPal, Stripe | | Shipping & Fulfillment | Order delivery | USPS, UPS, FedEx, and similar carriers | | Email Marketing | Sending newsletters and promotions | [Email platform, e.g., Mailchimp / Klaviyo — operator to confirm] | | Analytics | Understanding website traffic and behavior | Google Analytics | | Advertising | Targeted and retargeted advertising | Meta (Facebook/Instagram), Google Ads, TikTok Ads | | Customer Support | Managing support requests | [Support platform — operator to confirm if applicable] |

All third-party service providers are contractually required to keep your information confidential and to use it only for the purposes for which we disclose it to them.

Other Disclosures

We may also disclose your personal information:

• To comply with the law: If required by a court order, subpoena, or applicable regulation
• To protect rights and safety: To protect the rights, property, or safety of Crafted By Joanna LLC, our customers, or others
• In a business transfer: If we merge with, are acquired by, or sell substantially all of our assets to another company, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website before your information is transferred and becomes subject to a different privacy policy.
• With your consent: For any other purpose with your explicit consent

We use cookies and similar tracking technologies (such as web beacons and pixel tags) to enhance your experience on our website. Here is a breakdown of the types we use:

Types of Cookies We Use

Strictly Necessary Cookies These are essential for the website to function. They enable core features like your shopping cart, account login, and secure checkout. You cannot opt out of these without affecting the core functionality of the site.

Functional Cookies These remember your preferences (such as your language or region) to provide a more personalized experience.

Analytics Cookies These help us understand how visitors interact with our website by collecting information anonymously. We use tools like Google Analytics for this purpose.

Advertising & Targeting Cookies These track your browsing activity across websites to help us deliver relevant ads to you. This may include tools from Meta (Facebook Pixel), Google Ads, and TikTok Pixel.

Managing Your Cookie Preferences

You can control and manage cookies in several ways:

• Browser settings: Most browsers allow you to refuse or delete cookies. Visit your browser's help documentation for instructions.
• Opt-out tools: You can opt out of Google Analytics tracking at tools.google.com/dlpage/gaoptout. You can manage Meta ad preferences at www.facebook.com/settings/?tab=ads.
• Global Privacy Control (GPC): We honor browser-based Global Privacy Control signals as an opt-out from data sharing and targeted advertising where required by law.
• Do Not Track: Some browsers transmit a "Do Not Track" signal. [Operator: specify your current DNT practice — e.g., "We currently do not respond to DNT signals" or "We honor DNT signals."]

Please note that disabling certain cookies may affect the functionality of our website and your shopping experience.

If you opt in to our mailing list, we may send you promotional emails about new products, exclusive offers, restocks, and updates from Crafted By Joanna LLC.

Your choices:

• You may unsubscribe at any time by clicking the "Unsubscribe" link at the bottom of any marketing email
• You may also email us at hello@craftedbyjoanna.com to request removal from our marketing list
• You may update your communication preferences in your account settings (if you have an account)

Please allow up to 10 business days for your unsubscribe request to take effect.

Even if you unsubscribe from marketing emails, we will still send you transactional messages related to your orders — such as order confirmations, shipping notifications, and receipts. These are not optional as they are required to fulfill your purchase.

We comply with the CAN-SPAM Act and all applicable email marketing regulations.

Depending on where you reside, you may have specific privacy rights under applicable law. We respect these rights regardless of your location and encourage all customers to reach out if they have concerns.

Rights Available to All Customers

• Right to Access: Request a copy of the personal information we hold about you
• Right to Correct: Request that we correct inaccurate or incomplete information
• Right to Delete: Request that we delete your personal data, subject to certain legal exceptions
• Right to Opt Out of Marketing: Unsubscribe from marketing communications at any time

Additional Rights for California Residents (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

• Right to Know: The right to know what personal information we collect, use, disclose, and sell
• Right to Delete: The right to request deletion of personal information we have collected from you
• Right to Correct: The right to request correction of inaccurate personal information
• Right to Opt Out of Sale/Sharing: The right to opt out of the "sale" or "sharing" of your personal information for cross-context behavioral advertising. We do not sell personal information in the traditional sense, but certain advertising technologies may constitute "sharing" under California law.
• Right to Limit Use of Sensitive Personal Information: The right to limit how we use sensitive personal information
• Right of Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights

To submit a California rights request, please contact us at hello@craftedbyjoanna.com with the subject line "California Privacy Rights Request."

Rights for Residents of Other States

Residents of states including (but not limited to) Colorado, Virginia, Connecticut, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, and Maryland may have additional privacy rights under their respective state laws, including rights to access, correct, delete, and port their data, and to opt out of targeted advertising and profiling.

To exercise any of these rights, please contact us using the information in the Contact Us section below.

How to Submit a Rights Request

Please email us at hello@craftedbyjoanna.com with:

1. Your full name and the email address associated with your account or order
2. The specific right(s) you would like to exercise
3. Any relevant details to help us locate your information

We will respond to verifiable consumer requests within 45 days. If we need additional time, we will notify you of the extension and reason within the initial 45-day period. We may request additional verification information to protect your security.

We do not sell your personal information for money. However, certain advertising technologies we use — such as Meta Pixel, Google Ads, and TikTok Pixel — may be considered "sharing" or "selling" personal information under some state privacy laws (such as the CCPA/CPRA).

To opt out of the sharing of your personal information for targeted advertising purposes, you may:

• Use the Global Privacy Control (GPC) browser extension or setting, which we honor as a valid opt-out signal
• Email us at hello@craftedbyjoanna.com with the subject line "Opt-Out of Data Sharing"
• Adjust your preferences through the advertising platform directly (see the Cookies section for links)

We will process your opt-out request as required by applicable law.

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, including:

• Active accounts: For as long as you maintain an account with us
• Order records: For a minimum of 7 years for tax, accounting, and legal compliance purposes
• Marketing data: Until you unsubscribe or request deletion
• Support communications: For a reasonable period following resolution of your request

When personal information is no longer needed, we will securely delete or anonymize it. If deletion is not immediately possible (e.g., because data is stored in backup archives), we will isolate it from further use until deletion is possible.

If you request deletion of your account or data and we are not legally required to retain it, we will take steps to remove your information within a reasonable timeframe.

We are committed to protecting your personal information. We implement appropriate technical and organizational security measures, including:

• SSL/TLS encryption for all data transmitted during checkout and account login
• Secure, access-controlled systems for storing personal data
• Third-party payment processing — we never store full credit card numbers on our servers
• Regular review of our data collection, storage, and processing practices

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially reasonable means to protect your information, we cannot guarantee absolute security. In the event of a data breach that affects your rights or freedoms, we will notify you as required by applicable law.

You are also responsible for maintaining the confidentiality of your account password and for any activity that occurs under your account.

Our website and products are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13.

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at hello@craftedbyjoanna.com. Upon verification, we will take prompt steps to delete that information from our systems.

If we learn that we have inadvertently collected personal information from a child under 13, we will delete it as quickly as possible.

For users between the ages of 13 and 16, we will not share or sell their personal information for advertising purposes without explicit consent, in compliance with applicable state laws.

Our website and social media channels may contain links to third-party websites, platforms, or services — such as Etsy, TikTok, Meta (Facebook/Instagram), X (Twitter), Google, or other partner sites.

We are not responsible for the privacy practices, content, or security of those external sites. Each has its own privacy policy, and we strongly encourage you to review them before providing any personal information:

• Etsy Privacy Policy
• Meta Privacy Policy
• Google Privacy Policy
• TikTok Privacy Policy

A link to a third-party site does not constitute an endorsement of that site's privacy practices.

Crafted By Joanna LLC is based in the United States, and our website is intended primarily for US customers. If you are visiting from outside the United States — including from the European Union, United Kingdom, or Canada — please be aware that:

• Your information will be transferred to and processed in the United States, which may have different data protection laws than your country
• By using our website or placing an order, you consent to this transfer and processing

If you are in the European Union or UK, you may have additional rights under the General Data Protection Regulation (GDPR) or UK GDPR, including the right to lodge a complaint with your local data protection authority.

If you are in Canada, your information may be subject to the Personal Information Protection and Electronic Documents Act (PIPEDA).

For questions about international data transfers, please contact us at hello@craftedbyjoanna.com.

We may update this Privacy Policy from time to time to reflect changes in our business practices, the services we offer, applicable laws, or technology. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Post the revised policy on our website
• Where required by law or where the changes are significant, notify you by email or by placing a prominent notice on our website

Your continued use of our website or services after the effective date of any changes constitutes your acceptance of the updated policy. We encourage you to review this policy periodically to stay informed about how we protect your information.

Because privacy law is rapidly evolving — with new US state laws taking effect regularly — we are committed to keeping this policy current and accurate.

If you have any questions, concerns, or requests related to this Privacy Policy or your personal data — or if you wish to exercise any of your privacy rights — please don't hesitate to reach out:

Crafted By Joanna LLC 1413 Dean Ave. Junction City, KS 66441

📞 (385) 630-3116 ✉️ hello@craftedbyjoanna.com 🌐 craftedbyjoanna.com

We take all privacy inquiries seriously and will do our best to respond promptly and thoroughly. For formal privacy rights requests, please allow up to 45 days for a response.

---

This Privacy Policy was last updated on June 7, 2025. Crafted By Joanna LLC recommends reviewing this policy with a qualified attorney to ensure compliance with all applicable federal, state, and local privacy laws.