Privacy Policy

Enchantments Inc. (“we,” “our,” or “us”) is committed to safeguarding the privacy and personal data of our website visitors, customers, and users in strict accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other relevant legislation. This Privacy Policy outlines how data is collected, used, stored, and protected in connection with your use of enchantmentsincnyc.com.

1. Commitment to Privacy and Data Protection

Your privacy is important to us. We are dedicated to handling your personal data responsibly, transparently, and lawfully. Whether you are browsing enchantmentsincnyc.com or engaging with our content, services, or purchases, we are committed to protecting your rights and maintaining your trust.

2. Scope of This Policy and Role of the Data Controller

This Privacy Policy applies to the collection and use of personal data through enchantmentsincnyc.com and related communications. Enchantments Inc., located in New York, operates as the data controller for your personal data and determines the purposes and means of processing such data.

3. Categories of Personal Data We Process

We process the following categories of personal and technical information:

a) Usage Data: Includes your browser type and version, IP address, time zone settings, referrer URLs, session duration, actions taken on the site, and related analytical activity.

b) Account Data: Includes personal identifiers such as your full name, postal and billing address, email address, and telephone numbers where applicable.

c) Profile Data: Encompasses your purchase history, product preferences, wish lists, behavior on the site, feedback, and stored interests.

d) Communication Data: Information contained in your interactions with us, including support messages, inquiries, feedback, and correspondence via email or our contact forms.

e) Technical Data: Includes device identifiers, internet connection data, settings configurations, operating systems, and any technical diagnostics used to improve system performance.

f) Transaction Data: Consists of payment records (excluding full credit card numbers), order history, shipping addresses, and invoice or delivery confirmations.

g) Preference Data: Consists of your newsletter subscriptions, marketing communication choices, and preferences about specific product types or services of interest.

4. Legal Bases for Processing

Our processing of your data is governed by the following lawful bases:

– Consent: Where you have provided clear permission for us to process your data for specific purposes (e.g., receiving promotional emails).
– Performance of a Contract: Processing is necessary for fulfilling a contract with you (e.g., completing or shipping an order).
– Legitimate Interests: To operate, manage, and improve enchantmentsincnyc.com while respecting your fundamental rights.
– Legal Obligation: When required to comply with our legal or regulatory obligations.

5. Your Rights

As a data subject, you have the following rights concerning your personal data under GDPR and CCPA:

– Right of Access: Request access to the personal data we hold about you.
– Right to Rectification: Request corrections to inaccurate or incomplete data.
– Right to Erasure (“Right to Be Forgotten”): Ask us to delete your data under certain circumstances.
– Right to Restrict Processing: Limit how we use your data in specific situations.
– Right to Data Portability: Receive your data in a structured, commonly used, and machine-readable format or request its transfer to another controller, where technically feasible.
– Right to Object: Object to processing based on our legitimate interests or for direct marketing purposes.
– Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising your rights under CCPA.
– Right to Opt-Out of Sale: California residents may opt-out of the “sale” of personal information, as defined under CCPA. We do not sell personal data in any form.

To exercise any of these rights, you may contact our Data Protection Officer at [email protected].

6. Security Measures

We incorporate appropriate organizational, technical, and administrative security safeguards to protect your personal data, including but not limited to:

– Secure Socket Layer (SSL) encryption for data transmission.
– Role-based and restricted access controls.
– Encrypted data storage where applicable.
– Regular data backups and system patching.
– Staff training and adherence to internal privacy procedures.

7. International Data Transfers

If we transfer your data outside the European Economic Area (EEA) or the United States, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission, data privacy frameworks, or other valid transfer mechanisms recognized under applicable data protection laws.

8. Data Retention

We retain personal data for as long as necessary to fulfill the purposes outlined in this Policy or as otherwise required by law. Typical retention timeframes include:

– Account and Profile Data: Retained for up to seven (7) years after account closure.
– Transaction Data: Maintained for financial and legal compliance for up to seven (7) years.
– Communication Records: Retained for up to three (3) years after the last correspondence.
– Preference and Technical Data: Retained while you maintain a user profile or until a data deletion request is made.

All data is securely deleted or anonymized upon the expiration of its retention period.

9. Cookie Policy

We use cookies and similar technologies on enchantmentsincnyc.com to improve user experience, analyze traffic, and support personalized content delivery. Cookies fall into the following categories:

– Essential Cookies: Necessary for site functionality and transactional operations.
– Functional Cookies: Enable enhanced features such as remembering user preferences.
– Analytics Cookies: Help us understand how visitors use the website through aggregated analytics.
– Performance Cookies: Monitor system performance and loading times.

We do not use cookies for invasive profiling or unauthorized tracking.

10. Cookie Management and Legal Compliance

Upon visiting enchantmentsincnyc.com, you will be presented with a cookie consent banner. You may manage or withdraw your consent at any time by adjusting your browser settings or clicking the cookie settings widget available on the site. We honor user preferences and comply with the GDPR and CCPA requirements regarding data collection, storage, and cookie usage.

11. Children’s Privacy

enchantmentsincnyc.com is not intended for or directed to children under the age of 13. We do not knowingly collect personal data from children. If we discover such information has been collected inadvertently, it will be securely deleted upon detection or notification. Parents or legal guardians who believe their child may have submitted personal data may contact us at [email protected].

12. Changes to This Privacy Policy

We may update or revise this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal obligations. Updated versions will be posted on enchantmentsincnyc.com. Where legally required, we will notify you of material changes and seek your renewed consent.

13. Contact Us

If you have any questions, requests, or concerns regarding this Privacy Policy, or if you wish to exercise any of your data protection rights, please contact us at:

Enchantments Inc.
Email: [email protected]
Website: https://enchantmentsincnyc.com

We are committed to ensuring that your personal data is handled in compliance with all applicable privacy laws and best practices. Please reach out with any privacy-related concerns or to request further information.