Introduction

Grace's Towel ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website gracestowel.com and make purchases from us.

Information We Collect

We collect information you provide directly to us, including:

• Account Information: Name, email address, and password when you create an account
• Order Information: Shipping address, billing address, and phone number when you place an order
• Payment Information: Payment details are processed securely by Stripe and we do not store your full credit card information
• Communication: Information you provide when contacting us for support
• Social Login: If you sign in using Facebook, Google, or GitHub, we receive your name and email address from these services

How We Use Your Information

We use the information we collect to:

• Process and fulfill your orders
• Send order confirmations and shipping updates
• Respond to your questions and provide customer support
• Send marketing communications (with your consent, which you can withdraw at any time)
• Improve our website and services
• Prevent fraud and maintain security

Information Sharing

We do not sell your personal information. We may share your information with:

• Service Providers: Companies that help us operate our business, including payment processors (Stripe), shipping carriers, and email service providers
• Legal Requirements: When required by law or to protect our rights

Cookies and Tracking

We believe in keeping things simple. Our website only uses strictly necessary cookies — the bare minimum required to make shopping work. We do not use any third-party advertising, tracking, or analytics cookies.

Here's exactly what we use:

• Security cookie (csrf_token): Protects your account from cross-site request forgery attacks. This cookie is essential for secure form submissions and expires after 24 hours.
• Guest order cookie: If you check out as a guest, a temporary cookie allows you to view and manage your order. This cookie is scoped to your specific order and expires after a short period.

That's it — no tracking pixels, no behavioral profiling, no data sold to advertisers. Just the essentials to give you a smooth shopping experience.

Data Security

We implement appropriate technical and organizational measures to protect your personal information. All payment transactions are encrypted using SSL technology and processed by Stripe, a PCI-DSS compliant payment processor.

Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Opt out of marketing communications
• Request a copy of your data in a portable format (for EU residents under GDPR)

Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes described in this policy. Order information is retained for legal and accounting purposes.

Children's Privacy

Our website is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at:

Email: privacy@gracestowel.com