Last updated on July 3, 2023
Who we are
Our website address is: https://www.warmheartbears.com
This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from www.warmheartbears.com.
What personal data we collect and why we collect it
When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as “Device Information”.
We collect Device Information using the following technologies:
– “Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org.
– “Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
– “Web beacons”, “tags”, and “pixels” are electronic files used to record information about how you browse the Site.
Additionally, when you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including your name, billing address, shipping address, payment information (including credit card numbers, email address, and phone number. We refer to this information as “Order Information”.
When we talk about “Personal Information” in this Privacy Policy, we are talking both about Device Information and Order Information.
Comments
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included.
Contact forms
By filling out contact forms on this website, you consent to the storage of the information you have provided for a minimum of 38 months.
If you have subscribed to our mailing list, you will not be removed after 38 months, but you may unsubscribe at any time by clicking the “Unsubscribe” link at the bottom of the email.
Cookies
Cookies are small bytes of information that a site or service provider leaves on your computer’s hard drive or web browser via online transfer if you allow. This enables the site or system to recognize you when you revisit at a later date. For example, if you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment.
You alternatively may refuse to use cookies by installing a cookie-blocker extension on your browser, but your experience on our website will be reduced and you will have to re-enter your unsaved information at each visit, if that information is required for the experience.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracing your interaction with the embedded content if you have an account and are logged in to that website.
Analytics
Our website uses Google Analytics, a website traffic analyzer owned by Google, with servers based in the United States. Google Analytics does not identify you by IP address or name. We use Google Analytics to help us understand our website traffic and page usage.
Who we share your data with
We may share your data with the following third parties Paypal, Tiger Technologies, and MailChimp. Your information is shared with these parties as part of the day-to-day operation of our business, including managing our relationship with you, providing integrated online galleries, managing your invoices and payments, and sending you communications.
How long we retain your data
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
Security logs are retained for 14 days.
What rights you have over your data
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Where we send your data
Visitor comments may be checked through an automated spam detection service.
This site is part of a network of sites that protect against distributed brute force attacks. To enable this protection, the IP address of visitors attempting to log into the site is shared with a service provided by ithemes.com. For privacy policy details, please see the iThemes Privacy Policy.
Additional information
How we protect your data
We protect your data a number of different ways, including using security on this website that performs weekly scans for data breaches and malware. These scans are then reported via email to the administrator account.
What data breach procedures we have in place
In the event that your data is compromised, we, or the third party where your data was used, will reach out to you to inform you of the breach, how to protect yourself, and what to do next.
What third parties we receive data from
We receive data from the following third parties: Paypal, ApplePay, GooglePay and Stripe. This data is related only to purchases you make with us.
Security Logs
The IP address of visitors, user ID of logged in users, and username of login attempts are conditionally logged to check for malicious activity and to protect the site from specific kinds of attacks. Examples of conditions when logging occurs include login attempts, log out requests, requests for suspicious URLs, changes to site content, and password updates. This information is retained for 14 days.
Changes
We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.
The Site is not intended for individuals under the age of 14.
Contact information
If you have questions about your data, you can send an email to warmheartbears@comcast.net.
