Privacy Policy

Last updated: March 29,2025


Pull Heart String operates this store and website, including all related information, content, features, tools, products, and services, to provide you with a curated shopping experience (the "Services"). This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, make a purchase, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using or accessing any of the Services, you acknowledge that you have read and understood how your information is collected, used, and disclosed as described here.

Personal Information We Collect or Process

"Personal information" refers to information that identifies or can reasonably be linked to you or another individual. It does not include anonymized or de-identified data. Depending on how you interact with the Services and where you live, we may collect or process the following categories of personal information:

Contact details — your name, address, billing and shipping address, phone number, and email address.

Financial information — credit or debit card numbers, payment account details, transaction records, and payment confirmations.

Account information — your username, password, security questions, preferences, and settings.

Transaction information — items you view, add to your cart or wishlist, purchase, return, or cancel, as well as your past transactions.

Communications with us — the content of messages you send us, such as customer support inquiries.

Device information — details about your device, browser, or network connection, including your IP address and other unique identifiers.

Usage information — data about how and when you interact with or navigate the Services.

Personal Information Sources

We may collect personal information from the following sources:

Directly from you — when you create an account, use the Services, communicate with us, or otherwise provide us with your information.

Automatically through the Services — from your device when you use our products or visit our website, including through cookies and similar technologies.

From our service providers — when we engage them to support certain functions and they collect or process your information on our behalf.

From partners or other third parties.

How We Use Your Personal Information

Depending on how you use the Services, we may use your personal information to:

Provide, tailor, and improve the Services — to process payments, fulfill orders, manage your account, arrange shipping, handle returns and exchanges, send account-related notifications, and personalize your experience. We may also use submissions, outputs, and communications for marketing and promotional purposes as permitted by our Terms of Service and this Privacy Policy.

Marketing and advertising — to send promotional communications by email, text, or mail, and to show you relevant advertisements on our Services or other websites based on your activity.

Security and fraud prevention — to authenticate your account, detect and investigate fraudulent or malicious activity, protect public safety, and secure our Services.

Communicating with you — to provide customer support, respond to your inquiries, and maintain our relationship with you.

Legal compliance — to comply with applicable law, respond to legal process, enforce our terms and policies, and participate in litigation or legal proceedings as necessary.

How We Disclose Personal Information

We may disclose your personal information to third parties in the following circumstances:

  • With vendors and service providers who perform functions on our behalf, such as payment processing, IT management, data analytics, customer support, cloud storage, and shipping.
  • With business and marketing partners for advertising and marketing purposes, in accordance with their own privacy policies. You may have the right to opt out of certain targeted advertising depending on where you reside.
  • When you direct us or consent to sharing your information with third parties, such as for product delivery or through social media integrations.
  • With our affiliates or within our corporate group.
  • In connection with a business transaction such as a merger or acquisition, to comply with legal obligations, enforce our terms, or protect our rights and those of our users.

Third-Party Websites and Links

Our Services may contain links to third-party websites or platforms. If you follow links to sites not affiliated with or controlled by us, you should review their own privacy and security policies. We are not responsible for the privacy or security of those sites, and our inclusion of such links does not imply endorsement of their content or operators.

Children's Data

Our Services are not intended for use by children. We do not knowingly collect personal information from anyone under the age of majority in your jurisdiction. If you are a parent or guardian and believe your child has provided us with personal information, please contact us using the details below to request deletion. We do not knowingly sell or share the personal information of individuals under 16 years of age.

Security and Retention of Your Information

No security measure is completely foolproof, and we cannot guarantee perfect security. We recommend that you avoid using unsecured channels to share sensitive information with us.
We delete your data after delivery and do not retain it, except where we are required to maintain it to comply with legal obligations, resolve disputes, or enforce applicable contracts and policies.

Your Rights and Choices

Depending on where you live, you may have some or all of the following rights regarding your personal information. These rights are not absolute and may be subject to exceptions under applicable law:

Right to Access / Know — you may request access to the personal information we hold about you.

Right to Delete — you may request that we delete your personal information.

Right to Correct — you may request that we correct inaccurate personal information.

Right of Portability — you may request a copy of your personal information and ask that it be transferred to a third party, subject to certain conditions.

Right to Opt Out of Sale or Sharing — depending on where you reside, you may have the right to opt out of the sale or sharing of your personal information for targeted advertising purposes.

Managing Communication Preferences — you may opt out of promotional emails at any time using the unsubscribe link included in our messages. We may still send non-promotional communications related to your account or orders.

If you reside in the UK or European Economic Area, you may also have the following rights, subject to local law exceptions:

Objection to or Restriction of Processing — you may ask us to stop or limit our processing of your personal information for certain purposes.

Withdrawal of Consent — where we rely on your consent to process personal information, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

You may exercise any of these rights where indicated on the Services or by contacting us using the details below. We will not discriminate against you for exercising your rights. We may need to verify your identity before processing your request. You may also designate an authorized agent to make requests on your behalf, subject to verification requirements. We will respond to requests in a timely manner as required by applicable law.

Complaints

If you have concerns about how we handle your personal information, please contact us using the details below. Depending on where you live, you may also have the right to lodge a complaint with your local data protection authority. For residents of the EEA, a list of relevant supervisory authorities is available through the European Commission.

International Transfers

Your personal information may be transferred to, stored in, or processed in countries other than where you reside. For transfers out of the European Economic Area or the United Kingdom, we rely on recognized mechanisms such as the European Commission's Standard Contractual Clauses or equivalent instruments, unless the destination country has been deemed to provide an adequate level of protection.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal and regulatory reasons. Updates will be posted on this website with a revised "Last updated" date, along with any notice required by applicable law.

Contact

For questions about this Privacy Policy, our privacy practices, or to exercise your rights, please contact us at: support@pullheartstring.com
For the purpose of applicable data protection laws, Pull Heart String is the data controller of your personal information.