Privacy Policy

1.0 - What Information We Collect and What We Do With It

When you purchase something from our site or set up an account with us we collect the following information:

  • Customer name

  • Email address

  • Customer since (date of first order)

  • Total spent

  • Date of last order

  • Number of orders

  • Average order value

  • All saved shipping addresses. You can store multiple addresses and set a default.

  • All saved payment methods and billing addresses. You can store multiple payment methods and set a default. Note: Only the last four digits of saved payment methods will display.

You can create an account and save payment methods during checkout or by using a ‘Sign In’ link in the navigation menu.

When you browse our site, we also collect the following information that helps us analyze how visitors use our site:

  • Date

  • Time

  • IP address

  • Referrer (the URL previously accessed, if this information is available to Squarespace)

  • Browser version

  • Operating system

Your browser’s privacy settings may prevent Squarespace from capturing every detail about your visit.

With your permission only, we may send you emails about new products, promotions and other updates.

We will only disclose your personal information if we are required by law to do so or if you violate our Terms of Service.

2.0 – Squarespace and Data Security

Our store is hosted by Squarespace. They provide us with the online e-commerce platform that allows us to sell our products and services to you. Squarespace automatically enables Secure Sockets Layer (SSL) security on their hosted sites.  With SSL you access a constant, secure connection on every page of our site. With SSL, you will see a lock icon next to the URL in your browser, and the URL will begin with https:// showing that your information is safe.

SSL provides three important security benefits:

Privacy: Encrypts the connection between the browser and web server and securely transmits information (like login credentials) to prevent unauthorized parties from eavesdropping.

Data integrity: Prevents unauthorized parties from altering data during transmission.

Authentication: Protects against impersonation by requiring web server proof of identity.

Squarespace uses 2048 bit SSL encryption on all pages except checkout pages, and TLS version 1.2 for all HTTPS connections. The checkout page is protected by SSL to keep your credit card data safe and secure. Our checkout page is Level 1 PCI compliant and uses 128 bit SSL encryption.

 We use Stripe as our payment processor.  Stripe is Payment Card Industry Data Security Standard (PCI-DSS) compliant.  PCI-DSS is the security standard for all companies and organizations that handle payment information from consumers. PCI-DSS is a framework for developing a robust payment card data security process—including prevention, detection and appropriate reaction to security incidents.  Sensitive card data is never handled by CraftnCast or Squarespace. It goes directly to the payment processor’s servers. Squarespace doesn’t have access to this information and CraftnCast can only see the last four digits of your credit card number if you elect to save your payment method.

As a third-party service provider for payment processing, Stripe, or any other payment processor, has its own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions. For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled.

3.0 - Consent

By using our site, you represent that you are at least the age of majority in your state or province of residence, or that you are the age of majority in your state or province of residence and you have given us your consent to allow any of your minor dependents to use our site.

When you provide us with personal information to complete a transaction, verify your credit card, place an order, arrange for a delivery or return a purchase, you imply that you consent to our collecting it and using it for that specific reason only.

If we ask for your personal information for a secondary reason, like marketing, we will either ask you directly for your express consent, or provide you with an opportunity to say no.

If after you opt-in, you change your mind, you may withdraw your consent for us to contact you, for the continued collection, use or disclosure of your information, at any time, by emailing us, or contacting us by mail at:

CraftnCast 
40 E Shop Ave 
Chelan, WA  98816

4.0 - Third Party Services

In general, the third-party providers we use will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us. However, each third-party service provider has its own privacy policies. We recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers.  

If you click on links from our site, they may direct you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy policies.

5.0 - Cookies

Cookies are small pieces of data that websites store on a device. Cookies can improve your browsing experience because they help websites remember preferences and understand how people use different features.

Here is a list of cookies that we use. We’ve listed them here so you that you can choose if you want to opt-out of cookies or not.

Cookie Name  :  Duration  :  Purpose

Crumb  :  Session  :  Prevents cross-site request forgery (CSRF). CSRF is an attack vector that tricks a browser into taking unwanted action in an application when someone’s logged in.

RecentRedirect  :  30 minutes  :  Prevents redirect loops if a site has custom URL redirects.

CART  :  2 weeks  :  Shows when a visitor adds a product to their cart.

HasCart  :  2 weeks  :  Tells Squarespace that the visitor has a cart.

Locked  :  Session  :  Prevents the password-protected screen from displaying if a visitor enters the correct site-wide password.

SiteUserInfo  :  3 years  :  Identifies a visitor who logs into a customer account

SiteUserSecureAuthToken  :  3 years  :  Authenticates a visitor who logs into a customer account

Commerce-checkout-state  :  Session  :  Stores state of checkout while the visitor is completing their order in PayPal

squarespace-popup-overlay  :  Persistent  :  Prevents the Promotional Pop-Up from displaying if a visitor dismisses it

squarespace-announcement-bar  :  Persistent  :  Prevents the Announcement Bar from displaying if a visitor dismisses it

 We also use Analytics and Performance cookies to collect information about how visitors interact with our site.

Cookie Name  :  Duration  :  Purpose

ss_cid  :  2 years  :  Identifies unique visitors and tracks a visitor’s sessions on a site

ss_cvr  :  2 years  :  Identifies unique visitors and tracks a visitor’s sessions on a site

ss_cvisit  :  30 minutes  :  Identifies unique visitors and tracks a visitor’s sessions on a site

ss_cvt  :  30 minutes  :  Identifies unique visitors and tracks a visitor’s sessions on a site

ss_cpvisit  :  2 years  :  Identifies unique visitors and tracks a visitor’s sessions on a site

ss_cookieAllowed  :  30 days  :  Remembers if a visitor agreed to placing Analytics cookies on their browser if a site is restricting the placement of cookies

6.0 - Changes to this Privacy Policy

We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it. If our company is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to sell products to you.

7.0 - Questions & Contact Information

If you would like to: access, correct, amend or delete any personal information we have about you, register a complaint, or simply want more information, contact our Privacy Compliance Officer by emailing us, or contacting us by mail at:

CraftnCast 
40 E Shop Ave 
Chelan, WA 98816