Privacy policy
This Privacy Policy explains how Tinkerstoneshop LLC d/b/a Tinkers (“Tinkers,” “we,” “us,” or “our”) collects, uses, shares, and processes your information when you visit or make a purchase from our websites, contact our support, or otherwise use our services (the “Services”). Our store is hosted by Shopify Inc., which provides the e-commerce platform we use to sell our products.
If you do not agree with this Policy, please do not use the Services.
1) What Personal Data We Collect
a) Data you provide directly
-
Identification & contact: name, email, phone number, billing and shipping addresses.
-
Account: login credentials and preferences (if you create an account).
-
Order & payment: order details, chosen payment method, partial payment card data (processed by payment processors), fraud signals.
-
Support/UGC: messages to support, survey responses, product reviews, photos you upload.
b) Data collected automatically
-
Device/usage: IP address, device identifiers, browser/OS type, pages viewed, time stamps, referring pages/UTM, interactions (e.g., add-to-cart), approximate location (via IP).
-
Cookies & similar tech: identifiers stored on your browser/device; pixels; SDKs. See Cookies below.
c) Data from third parties
-
Payment, fraud, and logistics partners (e.g., Shopify, payment gateways, shipping carriers).
-
Marketing & analytics providers (campaign performance, attribution).
-
Social networks if you interact with our pages or use social sign-in (if enabled).
2) How We Use Personal Data
We process data to:
-
Provide & fulfill: process orders, payments, shipping, returns, and customer support.
-
Improve & personalize: analyze usage, debug, develop new features, tailor content and recommendations.
-
Marketing & communications: send transactional emails (order confirmations, delivery updates), and—with your consent where required—newsletters, offers, and ads (including on third-party sites). You can opt out of marketing at any time.
-
Safety & compliance: prevent fraud/abuse, enforce our Terms, comply with legal obligations (tax, accounting, reporting).
Legal bases (GDPR/EEA/UK)
-
Contract (Art. 6(1)(b)): to fulfill orders, provide support.
-
Legitimate interests (Art. 6(1)(f)): security, analytics, improvements, limited direct marketing.
-
Consent (Art. 6(1)(a)): email/SMS marketing, certain cookies/ads, where required.
-
Legal obligation (Art. 6(1)(c)): tax, accounting, regulatory requests.
3) Cookies & Similar Technologies
“Cookies” are small text files stored on your device. We use cookies, pixels, and similar tech to:
-
keep you signed in; remember cart;
-
personalize content; measure ads;
-
understand site performance; enhance security.
You can control cookies in your browser settings and (where offered) via our site’s cookie banner/preferences. Disabling certain cookies may affect site functionality.
4) How We Share Personal Data
We do not sell your personal information. We share data as needed to operate the Services:
-
Service providers/processors: Shopify (store platform), payment gateways, fraud-prevention tools, email/SMS providers, cloud hosting, analytics, shipping/logistics.
-
Business transfers: in a merger, acquisition, financing, or sale of assets, data may transfer to the new owner.
-
Legal & safety: when required by law or to protect rights, safety, and security (e.g., court orders, governmental requests).
We do not share data with third parties for their independent marketing without your consent.
5) International Transfers
We operate in the United States and may transfer data to countries outside your own (including Canada/EU/UK via Shopify and other vendors). Where required, we rely on Standard Contractual Clauses or other lawful mechanisms to protect your data.
6) Data Security & Retention
We use reasonable technical and organizational safeguards to protect data (encryption in transit, access controls, least-privilege). No method is 100% secure.
We keep data only as long as necessary for the purposes described (e.g., order records per tax/accounting laws), then delete or anonymize it.
7) Children’s Privacy
The Services are intended for adults. We do not knowingly collect data from children:
-
Under 13 (US/COPPA), and
-
Under 16 (EEA/UK), where applicable.
If you believe a child provided data, contact us and we will delete it promptly.
8) Your Rights
Depending on your location, you may have rights to:
-
Access/know what data we hold about you;
-
Correct inaccurate data;
-
Delete data;
-
Portability (receive a copy in a structured format);
-
Restrict/oppose certain processing;
-
Withdraw consent where processing is based on consent.
California & certain US state rights (e.g., CA/CO/CT/VA/UT)
You may also have the right to opt out of sale/share/targeted advertising, to limit use of sensitive data, and to appeal a decision. We do not sell personal information, but we may use cookies for cross-context advertising; you can opt out via browser signals or by contacting us.
We will verify requests and respond within applicable timeframes. To exercise rights or preferences, email us at contact@tinkers.store.
9) Third-Party Websites & Services
Our site may link to third-party websites/services. Their privacy practices are governed by their own policies; we are not responsible for their content or practices.
10) Changes to this Policy
We may update this Policy to reflect operational, legal, or regulatory changes. We will post a revised “Last Updated” date and, where required, provide additional notice.
11) Contact Us
If you have any questions regarding this Privacy Statement or its implementation, here is how you can reach us Email: contact@tinkers.store