Privacy & Cookie Policy

1. Who we are

Diamond Painting Art Kit operates this ecommerce website. In this policy, “we,” “us,” and “our” refer to Diamond Painting Art Kit.

2. Information we collect

Information you provide

• Contact and identity information: name, email, telephone number, billing address, and shipping address.
• Order information: products, sizes, drill choices, framing choices, prices, discounts, notes, and transaction history.
• Account information: username, protected password credentials, saved addresses, and preferences.
• Customer-support information: messages, order references, photographs, attachments, complaint details, and support history.
• Custom-photo content: images and instructions uploaded or sent for a personalized product.
• Reviews or submissions: content you choose to publish or send.

Information collected automatically

• IP address, browser and device information, operating system, referring URL, requested pages, date and time, and security events.
• Cart, checkout, session, account, language, currency, and cookie-preference identifiers.
• Technical logs used for security, error diagnosis, fraud prevention, performance, and availability.

Payment information

Payments are processed through Stripe. We do not receive or store your complete card number or card security code. Stripe and the relevant payment networks receive transaction and payment information necessary to authorize, secure, refund, and support the payment.

3. How we use information

• Operate the website, cart, checkout, accounts, and support systems.
• Accept, verify, produce, fulfill, ship, track, and support orders.
• Review and prepare custom-photo products.
• Process payments, refunds, disputes, taxes, and accounting records.
• Communicate about orders, delivery, support, policies, or security.
• Detect fraud, abuse, malicious traffic, account compromise, and unlawful activity.
• Comply with legal, tax, customs, regulatory, and recordkeeping duties.
• Improve navigation, content, accessibility, performance, and customer experience.
• Use optional analytics or advertising tools only as disclosed through cookie controls and where the required consent or other lawful basis exists.

4. Legal bases

Where law requires a legal basis, we generally rely on contract, legal obligation, legitimate interests, or consent. You may withdraw consent for optional activities at any time without affecting earlier lawful processing.

5. Who receives information

• Stripe and payment networks for payment processing, fraud prevention, disputes, and refunds.
• WordPress, WooCommerce, hosting, and technical providers used to run and maintain the store.
• Cloudflare for content delivery, security, traffic filtering, availability, and related network services.
• Production and fulfillment partners in China to manufacture, personalize, package, and dispatch orders.
• Postal, courier, logistics, customs, and delivery providers to transport and clear parcels.
• Professional advisers and service providers such as accountants, legal advisers, security specialists, insurers, and fraud-prevention providers.
• Authorities or other parties when required by law or reasonably necessary to protect rights, safety, customers, the website, or the public.
• A successor organization in a merger, sale, restructuring, financing, or transfer of the business, subject to appropriate safeguards.

We do not sell personal information for money. We do not use or disclose personal information for cross-context behavioral advertising unless that activity is clearly disclosed and any required choices are provided.

6. International transfers

We serve customers internationally and use providers in multiple countries, including the United States and China. Information may therefore be processed outside your country. Where required, we use contracts, approved transfer mechanisms, risk assessments, or other safeguards designed to protect transferred information.

7. Custom-photo uploads

Custom images are used to review, produce, fulfill, and support the personalized order. Upload only images you are legally entitled to use and avoid unnecessary sensitive information.

We retain custom images only as long as reasonably necessary for production, fulfillment, support, disputes, security, and legal obligations, after which they are deleted, de-identified, or placed beyond routine use under our retention process.

8. Cookies and similar technologies

• Strictly necessary: cart, checkout, security, load balancing, account login, currency, and cookie choices.
• Preferences: remembering settings that improve the experience.
• Analytics: understanding website use and performance when enabled and permitted.
• Advertising: measuring or personalizing advertising only if such tools are activated, disclosed, and lawfully used.

Where consent is required, non-essential technologies should remain disabled until you make a choice. You can change optional cookie settings through the website’s cookie preference tool. Browser controls can also block or delete cookies, although essential store features may stop working correctly.

9. Retention

We keep information only as long as reasonably necessary for the purpose collected and for legal, tax, accounting, fraud, warranty, dispute, and security needs. Order and transaction records may commonly be retained for up to seven years where required. Account, support, custom-image, and technical records use shorter or purpose-specific periods where appropriate.

10. Security

We use administrative, technical, and organizational safeguards intended to protect information, including encrypted website connections, access controls, service-provider controls, backups, security monitoring, and traffic protection. No internet system can be guaranteed completely secure.

11. Your privacy rights

Depending on your location, you may have rights to request access, correction, deletion, restriction, portability, objection, withdrawal of consent, or information about collection and disclosure. You may also have a right to appeal or complain to a data-protection authority.

Email [email protected] to submit a request. We may need to verify identity and may retain information where law permits or requires.

12. Children

The website is intended for adults capable of entering a purchase contract. We do not knowingly collect personal information from children in a manner prohibited by applicable law. A parent or guardian who believes a child submitted information should contact us.

13. Third-party websites

The website may link to third-party services. Their privacy practices are controlled by their own policies, and we are not responsible for how an unrelated site handles information.

14. Changes

We may update this policy when our services, providers, legal obligations, or practices change. We will post the revised date and provide additional notice when required.

15. Contact