Privacy Policy — Flaxbound

What we collect

We collect only what an order or an answer requires. There is no account system on this site, no profile to maintain and no tracking of you across other websites.

Order details: name, email address, phone number, delivery address, the items ordered, any notes you add, and your age band.
Enquiries: name, email address, optional phone number, country, subject and the message you write.
Custom order enquiries: the above plus the fibre, dimensions, quantity and timing you ask for, and optionally your business name.
Technical data: standard server logs (IP address, request time, browser user agent) kept for security and fraud prevention.

We do not collect or store card numbers. Card details are entered on the encrypted payment page and never reach our servers.

Why we process it, and on what basis

To fulfil your order — performance of a contract with you.
To answer your enquiry — our legitimate interest in responding to people who contact us.
To send marketing email — only with your consent, which you give by ticking an optional box and can withdraw from any message.
To keep the site secure and prevent fraud — our legitimate interest in protecting the business and its customers.
To meet tax and accounting obligations — compliance with a legal obligation.

If you begin a checkout and do not complete payment, we keep the details you entered so we can send you the payment link and answer questions about it. You can ask us to delete that record at any time.

Who else sees it

We do not sell personal information and we do not share it for cross-context behavioural advertising. We disclose it only to the service providers that make an order work, and only as far as each one needs:

Our hosting and infrastructure provider, which runs this website.
Our payment provider, which processes your card payment and receives the amount, the currency and the details needed to take it.
The carrier delivering your parcel, which receives your delivery address.
Our email provider, which delivers order and enquiry correspondence.
Our accountants and, where legally required, tax authorities, courts or regulators.

Each provider is bound by contract to process the data only on our instructions.

How long we keep it

Enquiries and custom order enquiries: up to 24 months from the last message between us.
Incomplete checkouts: up to 6 months, then deleted.
Completed orders: for as long as tax and accounting law requires us to keep the transaction record, and no longer than that for any other purpose.
Marketing consent records: until you unsubscribe, plus a minimal record that you unsubscribed so we do not email you again.
Server logs: up to 90 days.

Your rights in the EEA and the UK

If the GDPR or UK GDPR applies to you, you have the right to access your data, to have it corrected, to have it erased, to restrict or object to our processing of it, and to receive it in a portable format. Where we rely on consent you can withdraw it at any time without affecting what we did before you withdrew it.

Email support@bagsofnature.shop and we will respond within one month. We may ask you to confirm the email address the data is held under so we do not disclose it to the wrong person. If you are not satisfied with our response you may complain to your national supervisory authority.

We are based in the United States. Where we receive personal data from the EEA or the UK, that transfer is made on the basis of Standard Contractual Clauses with our processors, together with the technical measures described below.

Your rights in California

Under the CCPA as amended by the CPRA, California residents may request to know what personal information we have collected, the sources, the purposes and the categories of recipients; to have it deleted; to have inaccurate information corrected; and to limit the use of sensitive personal information.

We do not sell or share personal information as those terms are defined by the CCPA, and we have not done so in the preceding twelve months. We do not knowingly collect personal information from anyone under 16 and therefore do not sell it.

We honour the Global Privacy Control. If your browser or extension sends a GPC signal, we treat it as a valid opt-out request for that browser without asking you to do anything else.

To exercise any of these rights, email support@bagsofnature.shop or call +1 6148410636. You may use an authorised agent. We will not discriminate against you for exercising a right.

Children

This site is not intended for children under 13 and we do not knowingly collect personal information from them. Anyone between 13 and 17 must have a parent or guardian confirm the order, which is why checkout asks for a guardian email address in that case.

If you believe a child under 13 has given us personal information, email support@bagsofnature.shop and we will delete it.

How we protect it

The whole site is served over HTTPS. Form submissions are validated on the server as well as in the browser. Access to order records is limited to the people who need it to fulfil orders and answer questions, and is protected by multi-factor authentication.

No system is perfect. If a breach affects your rights and freedoms we will notify you and the relevant authority within the time limits the law sets.

Cookies and analytics

What we set, what each one does and how to refuse the non-essential ones is set out separately in the Cookie Policy.

Changes to this policy

When we change this policy we update the date at the top of the page. If a change materially affects how we handle data you have already given us, we will tell you by email before it takes effect.

Questions about anything on this page go to support@bagsofnature.shop, or write to BAGS FOR CRUISES, LLC, 501 Commerce Street, Suite 1210, Nashville, TN 37203, USA.