Introduction

This website (“Site”) is operated by spookymagicwear (“we,” “us,” or “our”). This Privacy Policy outlines the methods through which we collect, use, share, and safeguard your personal information when you visit the Site, make purchases, or otherwise engage with our services (collectively, the “Services”). Your use of the Services constitutes acceptance of the practices described herein. Throughout this Privacy Policy, “you” and “your” refer to any user of our Services—whether as a customer, visitor, or any individual whose data we collect under these terms.

Please review this Policy carefully.

Information Collection Methods

We obtain personal information through three primary channels:

Direct Submissions from You

• Contact information (such as name, email, shipping/billing addresses, and phone number) collected during account creation or checkout.
• Payment details (e.g., credit/debit card information) captured for transaction processing, with secure handling performed exclusively by our payment partners.
• Account credentials (username/password) recorded upon registration.
• Communications content retained when you contact support or submit feedback.
• Submitted preferences or profile data, including product reviews and wishlist items, stored as part of your account activity.

Automated Collection During Site Usage

• Cookies and similar technologies automatically gather information such as IP address, browser/device type, operating system, referral URLs, viewed pages, clicked links, and other Site interactions.
• Shopping behavior data—including products viewed, items added to cart, and purchase history—captured systematically.

Third-Party Information Sources

• Payment processors provide transaction confirmations and limited details (such as partial card numbers).
• Analytics, marketing, and fraud-prevention partners may supply supplemental data.
• Social media platforms share profile information when you interact with us, subject to your permissions and privacy settings.

Utilization of Your Personal Data

The personal information we collect serves the following primary business objectives:

Order Fulfillment & Service Delivery

Your data facilitates purchase processing, shipping coordination, returns/exchanges management, account maintenance, and customer support. This constitutes contractual performance essential to our agreement with you.

User Communication

Your contact information enables delivery of order confirmations, shipping notifications, account updates, and responses to your inquiries.

Service Enhancement & Security

Usage analytics support Site optimization through behavioral analysis, issue diagnosis, experience improvements, and feature development. Fraud detection, security breach prevention, and investigation of illicit activity rely on your data pursuant to our legitimate interest in maintaining secure and functional Services.

Legal Compliance

We may process information to comply with statutory obligations, regulatory requirements, legal proceedings, or enforceable government demands (including tax reporting or subpoena responses).

Cookies and Tracking Technologies

Our Site uses cookies, pixels, web beacons, and related tracking mechanisms (collectively, “Cookies”).

Cookies are small text files placed on your device to enable core website functionality, retain preference settings, and optimize browsing experiences. Essential operational purposes include session-based cart retention and secure account login. Additional uses include functional purposes (e.g., saving language preferences), performance/analytics (e.g., traffic analysis), and advertising/targeting (e.g., displaying relevant ads).

Your browser settings allow you to manage Cookie preferences. Disabling certain Cookies may limit functionality in some areas of the Site. Detailed information about Cookies used is available in our [Link to Cookie Policy or Detailed Cookie Table].

Personal Information Disclosure

We disclose information only under the following defined circumstances:

Third-Party Service Providers

Trusted partners that perform operationally essential services may access your information under strict confidentiality obligations. These include payment processors, order fulfillment and logistics providers, IT and cloud hosting services, marketing/advertising platforms, and customer support vendors. Such partners are contractually required to protect your information and use it solely for service-related purposes.

Legal Compliance Requirements

We may disclose information in response to valid legal processes such as subpoenas, court orders, or statutory obligations, including to protect the rights, property, or safety of spookymagicwear, our customers, or the public.

Corporate Transaction Contingencies

In the context of mergers, acquisitions, asset transfers, financings, or similar events, personal information may be transferred as part of the business assets involved.

Consent-Based Sharing

We share information with specific third parties only when you explicitly authorize or provide documented consent for such disclosure.

We confirm that we do not sell personal information to third parties for their independent marketing purposes.

Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect your personal information from unauthorized access, loss, misuse, or alteration.

Industry-standard encryption protocols (SSL/TLS) are used to protect sensitive data transmissions, especially during checkout. Access to personal information is restricted to authorized personnel who require access for legitimate business needs. Our payment processors comply with PCI-DSS standards. After transactions are completed, full credit card numbers are permanently removed from our systems.

Despite our efforts, no method of transmission over the Internet or of electronic storage is entirely secure, and absolute security cannot be guaranteed.

Cross-Border Data Transfers

Your personal information may be transferred to, stored in, or processed in,  designated locations—including [e.g., the United States]—where data protection laws may differ from those in your country of residence.

For transfers originating in the European Economic Area (EEA), United Kingdom (UK), or Switzerland to jurisdictions lacking adequacy determinations, appropriate transfer mechanisms such as European Commission-approved Standard Contractual Clauses (SCCs) are used.

Your Privacy Rights

Depending on your jurisdiction (including laws such as GDPR and CCPA/CPRA), you may have the following rights concerning your personal information:

• The right to request access to the categories and specific pieces of personal information we maintain about you.
• The right to request correction of any inaccuracies or completion of incomplete data.
• The right to request deletion of your personal information, subject to lawful exceptions under applicable statutes.
• The right, where technically feasible, to receive your personal information in a structured, commonly used, machine-readable format suitable for transfer to another controller.
• The right to withdraw consent at any time when processing is based solely on your consent, without affecting prior lawful processing.
• The right to request restriction of processing or object to certain processing activities, including direct marketing or processing based on legitimate interest.
• Assurance that exercising your rights will not result in discriminatory treatment in terms of pricing, service quality, or user experience.
• The right, where applicable, to appeal an unfavorable privacy-related decision through a designated process.

To exercise any of the rights above, please contact us using the communication channels provided. We will take reasonable steps to verify your identity in accordance with legal requirements before fulfilling your request.

Children’s Privacy

Our Services are intended solely for adult users and are not designed for individuals under 18 years of age. We apply age verification measures and do not knowingly collect personal information from minors. If you are a parent or guardian and become aware that a minor has provided personal information through our Services, please contact us immediately. Upon confirming that data was collected from someone under the minimum legal age, we will promptly delete such information without exception.

Data Retention

We retain personal information only for as long as necessary to fulfill the purposes outlined in this Policy, subject to statutory retention requirements that supersede typical retention periods (including obligations related to financial compliance, auditing, legal proceedings, or security operations). Retention durations vary by data type, and processing purpose. Account-related data remains stored for the duration of your active use and an additional commercially reasonable period following account closure, consistent with business needs and regulatory obligations.

Policy Amendment Procedures

We may revise this Privacy Policy periodically to reflect changes in operational practices, technologies, legal requirements, or other legitimate business reasons. The current version will always be available at this URL. You are responsible for reviewing the Policy regularly to remain aware of applicable terms. If material changes occur, we will provide advance notice through prominent channels such as website banners or email notifications where legally required. Continued use of the Services following any modification constitutes acceptance of the revised Policy.

Contact Us

If you have questions, concerns, or formal requests regarding this Policy or our handling of personal information, please contact us at [email protected]. Our compliance team will respond in accordance with applicable legal timelines and requirements in your jurisdiction.