1. Business Information

Tales & Terrors is responsible for the personal information described in this Privacy Policy.

2. Meaning of Personal Information

“Personal information” means information that identifies, relates to, describes, or can reasonably be associated with an individual or household.

Personal information does not generally include information that has been lawfully made public, aggregated information, or information that has been de-identified so that it cannot reasonably be linked to an individual.

3. Information We Collect

Depending on how you interact with our store, we may collect the following categories of personal information:

• Contact information: name, email address, telephone number, billing address, shipping address, and account contact details.
• Order information: products ordered, order number, order history, transaction details, returns, refunds, and customer-support records.
• Payment information: selected payment method, payment status, billing details, and transaction identifiers.
• Account information: login credentials, saved addresses, preferences, and account activity.
• Device and network information: IP address, browser type, device type, operating system, language settings, and general location derived from an IP address.
• Website activity: pages viewed, links selected, products viewed, search activity, cart activity, referring website, and interactions with our online store.
• Communications: emails, contact-form submissions, telephone inquiries, reviews, feedback, and customer-service messages.
• Marketing preferences: newsletter subscriptions, promotional preferences, and consent or opt-out choices.
• Fraud-prevention information: transaction risk signals, order activity, device data, shipping information, and records used to prevent abuse.

4. Information You Provide Directly

We collect personal information that you voluntarily provide when you:

• Place or attempt to place an order
• Create or update a customer account
• Subscribe to marketing communications
• Submit a return or refund request
• Contact customer support
• Participate in a promotion, survey, or giveaway
• Submit a product review or feedback
• Visit or communicate with our retail location

Certain information is required to process an order. If you choose not to provide required information, we may be unable to complete the requested transaction or service.

5. Information Collected Automatically

When you visit our website, Shopify and our authorized technology providers may automatically collect certain information through cookies, pixels, log files, software development kits, and similar technologies.

This information may include:

• Your IP address and general geographic region
• Browser, device, and operating-system information
• Pages and products you view
• Time spent on pages
• Search and cart activity
• Referring and exit pages
• Cookie and device identifiers
• Interactions with advertisements or marketing messages

We use this information to operate the website, remember preferences, maintain security, understand store performance, improve customer experience, and measure marketing activity.

6. How We Use Personal Information

We may use personal information for the following business and commercial purposes:

• Providing and operating our online store
• Processing and fulfilling orders
• Confirming payments and issuing refunds
• Arranging shipping and order tracking
• Managing customer accounts
• Responding to questions and support requests
• Handling returns, damaged-product claims, and disputes
• Detecting fraud, misuse, and security threats
• Maintaining and improving our products and services
• Personalizing store content and product recommendations
• Sending marketing communications when permitted
• Measuring advertising and website performance
• Maintaining business, tax, and transaction records
• Complying with applicable laws and legal obligations
• Establishing, exercising, or defending legal claims

7. Shopify

Our online store is hosted and powered by Shopify. Shopify provides the ecommerce infrastructure that allows us to display products, manage customers, process orders, and operate our online store.

Shopify may collect and process personal information when you browse or purchase from our store. Depending on the service and configuration, Shopify may process information on our behalf or for its own stated purposes.

Shopify may process information in the United States, Canada, and other countries where Shopify or its service providers maintain operations.

For additional information about Shopify’s handling of customer information, please review:

Shopify Consumer Privacy Policy

8. Payments

Payments are processed through Shopify and the payment provider selected during checkout.

Payment providers may collect your name, billing address, transaction amount, card or bank information, authentication information, and other details needed to authorize and complete the transaction.

Tales & Terrors generally does not receive or store complete payment-card numbers. Those details are processed by authorized payment providers according to their own privacy and security practices.

The payment methods available to you may vary depending on your location, order, and device.

9. Shipping and Order Delivery

We share information necessary to fulfill and deliver your order with shipping carriers, fulfillment partners, and logistics providers.

This information may include:

• Your name
• Shipping address
• Email address or telephone number
• Order number
• Package and delivery details
• Information needed for tracking or customs processing

Shipping providers may use this information to deliver the package, provide tracking updates, prevent fraud, comply with legal requirements, and respond to delivery inquiries.

10. Cookies and Similar Technologies

Cookies are small data files placed on your browser or device. Our store uses cookies and similar technologies for purposes that may include:

• Keeping the website and checkout operational
• Remembering cart contents and customer preferences
• Maintaining account sessions
• Preventing fraud and improving security
• Understanding website usage and performance
• Personalizing content and recommendations
• Measuring advertising and marketing effectiveness

Some cookies are necessary for the store to function. Other analytics, personalization, or advertising technologies may depend on your privacy settings and applicable law.

You may control cookies through your browser settings and, when available, through our cookie banner or “Your Privacy Choices” link.

Blocking necessary cookies may prevent certain store features, account functions, carts, or checkout services from operating correctly.

11. Analytics and Advertising

We may use analytics and advertising services to understand how customers use our store, measure campaign performance, prevent repeated or irrelevant advertisements, and display more relevant content.

Depending on the tools enabled on our store, these providers may collect device identifiers, cookie identifiers, IP addresses, page activity, product interactions, shopping activity, and information about engagement with advertisements.

Under certain U.S. state privacy laws, some advertising-related disclosures may be considered a “sale,” “sharing,” or use for “targeted advertising,” even when no money is exchanged for the personal information.

Where required, you may opt out through our cookie banner, the “Your Privacy Choices” link displayed on our store, or by contacting us.

12. Email and Text Marketing

If you subscribe to marketing, we may use your contact information to send product announcements, new releases, promotions, preorder information, store news, and other marketing communications.

You may unsubscribe from promotional emails at any time by selecting the unsubscribe link included in the message.

If text-message marketing is offered, instructions for opting out will be included in the message or the applicable signup terms.

Even if you opt out of marketing, we may continue sending non-promotional communications concerning orders, payments, security, returns, customer support, or policy updates.

13. Product Reviews and Public Content

If you submit a review, testimonial, social-media post, or other content for public display, the submitted content and associated display name may be visible to other customers.

Do not include sensitive information, payment information, home addresses, or other information you do not want made public in reviews or public submissions.

Reviews may be processed by a review-platform provider if our store uses such a service.

14. How We Disclose Information

We may disclose personal information to the following categories of recipients when reasonably necessary:

• Shopify and ecommerce infrastructure providers
• Payment processors and financial institutions
• Shipping carriers and fulfillment providers
• Website hosting, security, and technical-support providers
• Analytics and advertising providers
• Email, messaging, and customer-service providers
• Review, loyalty, and marketing-platform providers
• Accountants, insurers, auditors, and legal advisers
• Government authorities and law-enforcement agencies
• Business successors in a merger, sale, or reorganization

Service providers are permitted to receive information only for legitimate business purposes and subject to applicable contractual or legal requirements.

15. Sale or Sharing of Personal Information

Tales & Terrors does not sell personal information in exchange for money.

However, depending on how advertising or analytics technologies are configured, disclosures of online identifiers and website activity to advertising partners may be treated as a sale, sharing, or targeted advertising under certain state laws.

Where applicable, you may opt out of these activities by using the “Your Privacy Choices” link in our website footer, adjusting the cookie banner, enabling a recognized browser-based opt-out preference signal, or contacting us.

16. Kentucky Privacy Rights

The Kentucky Consumer Data Protection Act provides qualifying Kentucky residents with certain rights when the law applies to the business processing their personal data.

Subject to applicable limitations, these rights may include:

• Confirming whether a business is processing personal data
• Accessing personal data held about the consumer
• Correcting inaccuracies in personal data
• Deleting qualifying personal data
• Receiving a portable copy of qualifying personal data
• Opting out of targeted advertising
• Opting out of the sale of personal data
• Opting out of certain profiling that produces legal or similarly significant effects
• Appealing a refusal to act on an eligible privacy request

The Kentucky law applies only to businesses that meet its statutory requirements and thresholds. Even when a particular law does not apply, we may honor reasonable privacy requests when we can safely and lawfully do so.

17. Privacy Rights in Other States

Depending on your state of residence and the applicability of state privacy law, you may have rights to:

• Know whether we process your personal information
• Access categories or copies of personal information
• Correct inaccurate information
• Request deletion of qualifying information
• Receive information in a portable format
• Opt out of targeted advertising
• Opt out of certain sales or sharing
• Limit certain uses of sensitive personal information
• Appeal a decision concerning a privacy request
• Receive equal service without unlawful discrimination

These rights are not absolute and may be subject to identity verification, legal exceptions, business exemptions, and statutory thresholds.

18. Submitting a Privacy Request

To submit a request concerning your personal information, contact us using one of the following methods:

Please describe the request and provide enough information for us to locate the relevant records.

We may need to verify your identity before completing a request. Depending on the request, verification may require confirming your email address, order details, account information, or another piece of information already associated with you.

We will use information submitted for verification only to authenticate and process the request, prevent fraud, and comply with legal requirements.

19. Authorized Agents

Where permitted by applicable law, you may authorize another person to submit a privacy request on your behalf.

We may request proof that the agent has authority to act for you. We may also contact you directly to verify your identity and confirm the request, unless applicable law provides otherwise.

20. Responding to Requests and Appeals

We will respond to verified privacy requests within the period required by applicable law. For laws that require a response within 45 days, we will respond within that period unless a permitted extension is reasonably necessary.

If we deny an eligible request, we will explain the reason when required and provide information about any available appeal procedure.

To appeal a privacy-request decision, email:

support@talesandterrors.com

Include “Privacy Request Appeal” in the subject line and identify the original request.

21. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including:

• Completing orders and providing customer support
• Maintaining transaction and tax records
• Processing returns, refunds, and warranty claims
• Preventing fraud and maintaining security
• Resolving disputes and enforcing agreements
• Complying with legal and regulatory obligations

The appropriate retention period depends on the type of information, the reason it was collected, legal requirements, and whether the information is needed to protect customers or our business.

When information is no longer reasonably needed, we may delete, anonymize, or securely dispose of it.

22. Data Security

We use reasonable administrative, technical, and physical safeguards intended to protect personal information against unauthorized access, loss, misuse, alteration, and disclosure.

Our online store uses an encrypted SSL/TLS connection for data transmitted between your browser and the website.

No method of electronic transmission or data storage is completely secure. We cannot guarantee that personal information will never be accessed, disclosed, altered, or destroyed without authorization.

Customers should protect account passwords, use unique credentials, and notify us if they believe their account or order information has been compromised.

23. International Data Processing

Shopify and some of our service providers may process personal information in countries outside the state or country where you live.

These locations may have different data-protection laws. When required, applicable contractual, organizational, or legal safeguards may be used for international processing.

24. Children’s Privacy

Our website and services are not directed to children under 13 years of age, and we do not knowingly collect personal information directly from children under 13 without legally required parental consent.

If you believe a child has submitted personal information to us without appropriate authorization, contact:

support@talesandterrors.com

We will review the request and take appropriate steps consistent with applicable law.

25. Third-Party Websites

Our website may contain links to social-media platforms, payment providers, shipping carriers, manufacturers, or other third-party websites.

We do not control the privacy, security, or content practices of third-party websites. We encourage you to review the privacy policy of any third-party service before providing personal information.

26. Do Not Track and Opt-Out Signals

Some browsers allow users to send “Do Not Track” signals. Because there is not a universally accepted standard for these signals, our website may not respond to every Do Not Track setting.

Where required by applicable privacy law and supported by our technology, we may process recognized browser-based universal opt-out preference signals as requests to opt out of qualifying sales, sharing, or targeted advertising.

27. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our services, technology, legal obligations, business practices, or privacy requirements.

The revised version will be published on this page with an updated “Last updated” date.

If a change is material, we may provide additional notice when required, such as by posting a notice on the website or sending an email to affected customers.

28. Contact Us

If you have questions about this Privacy Policy, our privacy practices, or a request concerning your information, contact: