Privacy Policy

We collect information that you provide directly when placing an order or contacting us:

• **Name** (collected during checkout)
• **Email address** (collected during checkout and used for order confirmation and shipping notifications)
• **Shipping address** (collected during checkout through a secure payment form)
• **Order details** (products purchased, quantities, variants such as size)

**Payment information:** Payment card details are collected and processed by Stripe, our payment processor. MISKY Souvenir does not directly access, store, or process your full payment card information.

**Technical information:** When you visit our website, certain information may be automatically collected by the web hosting service (Vercel), which may include IP addresses, browser type, device identifiers, and access logs.

**Cookies and local storage:** Our website uses browser local storage to maintain your shopping cart across sessions. An administrative session cookie is used exclusively for authenticated access to the business management panel and is not used to track customer activity.

We use the personal information we collect for the following purposes:

• **Order fulfillment:** To process your purchase, arrange shipping, and deliver your order.
• **Order confirmation:** To send you a receipt and confirmation email after successful payment.
• **Shipping notifications:** To notify you when your order has been shipped and provide tracking information.
• **Customer support:** To respond to inquiries sent to our contact email.
• **Internal record-keeping:** To maintain order history and transaction records.
• **Business operations:** To manage inventory, process refunds or exchanges, and handle returns.

We do not use your personal information for marketing, advertising, profiling, or automated decision-making unless explicitly authorized by you.

Payments are processed by **Stripe, Inc.**, a third-party payment service provider. When you provide payment information during checkout, that information is transmitted directly to Stripe through secure payment forms.

MISKY Souvenir does not store your full credit card number, CVV, or other sensitive payment credentials. Stripe handles the secure processing of payment transactions in accordance with applicable payment card industry standards (PCI DSS).

For more information about how Stripe handles your payment data, please review Stripe's Privacy Policy at https://stripe.com/privacy.

We share personal information with third-party service providers who assist us in operating our website, processing payments, fulfilling orders, and delivering services. These service providers include:

• **Stripe** (payment processing)
• **Supabase** (database and order management infrastructure)
• **Resend** (transactional email delivery)
• **Vercel** (website hosting)

These service providers are authorized to use personal information only as necessary to provide their services to us. We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

Order records, including customer name, email, shipping address, and order details, are retained to maintain transaction history and provide customer support.

Certain system records, such as administrative login attempts, are automatically deleted after a short period (typically within one hour). Expired checkout attempts older than 30 days are periodically removed.

We implement reasonable technical and organizational measures to protect personal information against unauthorized access, disclosure, alteration, or destruction.

Our website uses HTTPS encryption for data transmitted between your browser and our servers. Payment information is processed through Stripe's secure, PCI DSS-compliant infrastructure.

Access to administrative systems is restricted and protected by authentication mechanisms, including secure session management.

However, no method of transmission over the Internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security.

MISKY Souvenir operates from the United States. If you are located outside the United States, please be aware that personal information you provide may be transferred to, processed, and stored in the United States or other jurisdictions where our service providers operate.

By using our website and services, you consent to the transfer of your information to jurisdictions that may have different data protection laws than your country of residence.

Depending on your jurisdiction, you may have certain rights regarding your personal information, which may include:

• The right to access the personal information we hold about you
• The right to request correction of inaccurate information
• The right to request deletion of your personal information, subject to legal and operational requirements
• The right to object to or restrict certain processing activities

To exercise these rights, or if you have questions about your personal information, please contact us at Miskysouvenir@outlook.com.

We will respond to valid requests in accordance with applicable law. Please note that we may need to verify your identity before fulfilling certain requests, and some requests may be subject to legal limitations or operational requirements.

Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

If we become aware that we have inadvertently collected personal information from a child without appropriate parental consent, we will take steps to delete that information.

Our website may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of these third parties.

We encourage you to review the privacy policies of any third-party services you access through our website.

**Google Fonts:** Our website loads fonts from Google Fonts. When your browser requests these fonts, Google may receive your IP address. For more information, see Google's Privacy Policy at https://policies.google.com/privacy.

Our website displays a newsletter subscription form in the footer. This form is currently non-functional and does not collect or store email addresses.

If you submit your email address through this form, it will not be saved or used for any purpose. We will update this Privacy Policy if newsletter functionality is implemented in the future.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs.

When we make material changes, we will update the "Last Updated" date at the top of this policy. We encourage you to review this Privacy Policy periodically.

Continued use of our website and services after changes to this Privacy Policy constitutes acceptance of the updated policy.