SECTION 1 – WHAT DO WE DO WITH YOUR INFORMATION?
When you buy something from our store, as part of the buying and selling process, we collect personal information that we
such as name, address and email.
When you browse our store, we also automatically receive your computer’s internet protocol (IP) address
In order to provide us with information that helps us to know about your browser and operating system.
Email marketing (if applicable): With your permission, we can send you emails about our store, new products and other updates
SECTION 2 – CONSENT
How do you obtain my consent?
When you provide us with your personal information to complete a transaction, verify your credit card, create an order, arrange a shipment or make a return, we imply that you accept the collection and use for that specific reason only.
If we ask your personal information for a secondary reason, such as marketing, we will ask for your express consent, or we will give you the opportunity to deny it.
How can I cancel my consent?
If after agreeing to change your mind, you can cancel your consent for us to contact you, for the collection, use or disclosure of your information, at any time, by contacting us at firstname.lastname@example.org or by writing to: Mexican Candy Box South Carolina , Chihuahua, CHH, 31214, Mexico
SECTION 3 – DISCLOSURE
We may disclose your personal information if required by law or if you violate our Terms of Service.
SECTION 4 – SHOPIFY
Our store is housed in Shopify Inc. They provide us with the online e-commerce platform that allows us to sell you our products and services.
Your data is stored through Shopify data storage, databases and the general Shopify application. Your data is stored on a secure server behind a firewall.
If you choose a direct payment gateway to complete your purchase, then Shopify stores data from your credit card. It is encrypted through the Standard Data Security of the Payment Card Industry (PCI-DSS). Your purchase transaction data is stored only to the extent necessary to complete the purchase transaction. After it has been completed, the information of your purchase transaction is deleted.
All direct payment gateways adhere to the standards established by PCI-DSS as indicated by the PCI Security Standards Board, which is a joint effort of brands such as Visa, MasterCard, American Express and Discover.
PCI-DSS requirements help ensure the secure handling of credit card information from stores and their service providers.
For a clearer view, you may also want to read the Shopify Terms of Service here or Privacy Statement here.
SECTION 5 – SERVICES OF THIRD PARTIES
In general, third-party providers used by us will only collect, use and disclose your information to the extent necessary to enable them to perform the services they provide to us.
However, some third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies with respect to the information we are required to provide for transactions related to purchases.
For these providers, we recommend that you read the privacy policies so that you can understand how your personal information will be handled.
In particular, remember that some providers may be located or have facilities that are located in a jurisdiction other than you or us. So if you wish to proceed with a transaction that involves the services of a third party provider, your information may be subject to the laws of the jurisdiction (jurisdictions) in which the service provider or its facilities are located.
As an example, if you are in Canada and your transaction is processed by a payment gateway based in the United States, then your personal information used to complete the transaction may be subject to disclosure under United States law, including the Patriot Act.
When you click on links in our store, you may be redirected away from our site. We are not responsible for the privacy practices of other sites and we recommend you read their privacy rules.
SECTION 6 – SECURITY
To protect your personal information, we take reasonable precautions and follow industry best practices to ensure that there is no loss of improper use, misuse, disclosure, alteration or destruction of the same.
If you provide us with your credit card information, this information is encrypted using Secure Socket Layer (SSL) technology and stored with an AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional standards accepted by the industry.
Here is a list of cookies we use. We list them so you can choose if you want to choose to remove them or not.
_session_id, unique token, sessional, Allows Shopify to store information about your session (referrer, landing page, etc).
_shopify_visit, no data held, Persistent for 30 minutes from the last visit, Used by our website provider’s internal stats tracker to record the number of visits
_shopify_uniq, no data held, expires midnight (relative to the visitor) of the next day, Counts the number of visits to a store by a single customer.
cart, unique token, persistent for 2 weeks, Stores information about the contents of your cart.
_secure_session_id, unique token, sessional
storefront_digest, unique token, indefinite If the shop has a password, this is used to determine if the current visitor has access.
SECTION 7 – AGE OF CONSENT
By using this site, you declare that you are at least the age of majority in your state or province of residence, or that you are of legal age in your state or province of residence and that you have given us your consent to allow any of your dependents minors use this site.
If our store is acquired or merged with another company, your information can be transferred to the new owners, so that we can continue to sell you products.
QUESTIONS AND CONTACT INFORMATION
If you want to: access, correct, amend or delete any personal information we have about you, register a complaint, or simply want more information contact our Privacy Compliance Officer email@example.com or by correopostal to Mexican Candy Box
[Re: Privacy Compliance Officer]
[South Carolina, Chihuahua, CHH, 31214, Mexico]