Super Colossal Privacy policy.

Privacy Policy

Super Colossal LLC ("we," "our," or "us") values your privacy. This Privacy Policy explains how we collect, use, and share information about you when you visit our website, purchase our products, or interact with us in other ways. This Privacy Policy does not apply to the practices of third parties that we do not own or control, including Etsy or any third party services you access through Etsy. You can reference the Etsy Privacy Policy to learn more about its privacy practices.

1. Information We Collect

We collect information that identifies, relates to, describes, or could reasonably be linked to you ("Personal Data") in the following categories:

1.1. Information You Provide

  • Contact Information: Name, email address, phone number, and shipping address.

  • Account Information: Username, password, and other account details.

  • Payment Information: Credit card details, billing address, and transaction history.

  • Communication: Information you provide in your communications with us, including customer support inquiries.

1.2. Information Collected Automatically

  • Device Information: IP address, browser type, operating system, device type.

  • Usage Information: Pages viewed, links clicked, time spent on the website, and other usage details.

  • Cookies and Tracking Technologies: We use cookies and similar technologies to collect data to improve your experience.

1.3. Information from Third Parties

We may receive information from third parties, such as payment processors, marketing platforms, and public databases.

2. How We Use Your Information

We use your Personal Data for the following purposes:

  • To Process Transactions: Fulfill orders, process payments, and deliver products.

  • To Provide Customer Support: Respond to inquiries and resolve issues.

  • To Improve Our Services: Analyze website performance and enhance user experience.

  • For Marketing and Communications: Send promotional materials, updates, and special offers, where permitted by law.

  • To Comply with Legal Obligations: Adhere to applicable laws and regulations.

3. Legal Basis for Processing Personal Data (GDPR)

If you are located in the European Economic Area (EEA), we process your Personal Data under the following legal bases:

  • Consent: Where you have given explicit consent.

  • Contractual Necessity: To perform a contract with you.

  • Legal Obligation: To comply with applicable laws.

  • Legitimate Interests: To improve our services, prevent fraud, and protect our business.

4. Your Rights

4.1. For EU/EEA Residents (GDPR)

You have the following rights:

  • Access: Request a copy of your Personal Data.

  • Rectification: Correct inaccurate or incomplete data.

  • Erasure: Request deletion of your data.

  • Restriction: Request to restrict processing of your data.

  • Data Portability: Request transfer of your data to another service provider.

  • Objection: Object to data processing based on legitimate interests or for direct marketing.

  • Withdraw Consent: Withdraw consent at any time.

4.2. For California Residents (CCPA)

You have the right to:

  • Know: Request information about the categories and specific pieces of Personal Data we collect.

  • Delete: Request deletion of your Personal Data.

  • Opt-Out: Opt-out of the sale of your Personal Data.

  • Non-Discrimination: Not be discriminated against for exercising your privacy rights.

5. How We Share Your Information

We may share your Personal Data with:

  • Service Providers: Third-party vendors for payment processing, shipping, and marketing. We share information with Etsy as necessary to provide you services and comply with my obligations under both the Etsy Seller Policy and Etsy Terms of Use.

  • Business Partners: In connection with joint marketing efforts or co-branded products.

  • Compliance and Legal: When required by law or to protect our legal rights. (a) respond to legal process or to government requests; (b) enforce my agreements, terms and policies; (c) prevent, investigate, and address fraud and other illegal activity, security, or technical issues; or (d) protect the rights, property, and safety of my customers, or others.

  • Business Transfers: In the event of a merger, sale, or other corporate transaction.

6. Data Retention

We retain your Personal Data for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, and resolve disputes.

7. Cookies and Tracking Technologies

We use cookies, web beacons, and similar technologies to enhance user experience and analyze website traffic. You can manage your cookie preferences through your browser settings.

8. International Data Transfers

We operate globally, and your Personal Data may be transferred to countries outside your country of residence. We ensure adequate data protection measures, including standard contractual clauses, to safeguard your data.

9. Data Security

We implement appropriate technical and organizational measures to protect your Personal Data from unauthorized access, loss, misuse, or alteration.

10. Children’s Privacy

Our website is not intended for children under the age of 13 (or the relevant minimum age in your jurisdiction). We do not knowingly collect Personal Data from children without parental consent.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised "Last Updated" date.