Privacy Policy

Privacy Policy

1. Introduction

This Privacy Policy explains how Christmas Flare ("we", "us", "our") collects, uses, discloses, and safeguards your information when you visit or make a purchase on our website (“Site”). This Policy complies with international data protection laws, including but not limited to the General Data Protection Regulation (GDPR) for EU/EEA citizens, the UK Data Protection Act, the California Consumer Privacy Act (CCPA), and other applicable privacy regulations.
By accessing or using our Site, you agree to the terms of this Privacy Policy. If you do not agree, please refrain from using the Site.

2. What Information We Collect

We collect the following categories of information:
a. Personal Information You Provide to Us This includes data collected during checkout, account creation, or contact:
Full name
Email address
Shipping and billing address
Telephone number
Payment information (processed securely via third-party platforms)
Order history and communications
b. Information Collected Automatically When you access our Site, we may automatically collect:
IP address
Browser type and version
Device type and operating system
Time zone and location data
Browsing actions and usage patterns
c. Cookies and Similar Technologies We use cookies and tracking technologies to enhance your browsing experience, analyze traffic, and personalize content. You can disable cookies through your browser settings, though this may affect your user experience.

3. Legal Basis for Processing

We process your personal information under one or more of the following legal bases:
Your consent
Performance of a contract (e.g., processing an order)
Compliance with legal obligations
Our legitimate interests, such as improving our services or preventing fraud

4. How We Use Your Information

We use the data collected for purposes such as:
Fulfilling and managing your orders
Processing payments and refunds
Providing customer support
Sending transactional or promotional emails
Detecting fraud and security threats
Complying with legal requirements
We do not sell, rent, or lease your personal information to third parties for marketing purposes.

5. Sharing Your Information

We may share your information with:
Service providers (e.g., Shopify, PayPal, payment processors, logistics companies)
Analytics platforms (e.g., Google Analytics)
Authorities or legal entities where required by law
All third parties are contractually obligated to protect your data and only use it to provide agreed services.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law. When we no longer need the data, it will be deleted or anonymized.

7. International Transfers

Our business is headquartered in the United States. If you are located outside the US, your personal information may be transferred to — and processed in — the United States or other jurisdictions where our partners operate. We implement Standard Contractual Clauses (SCCs) or other lawful mechanisms to ensure adequate protection of your data.

8. Your Privacy Rights

Depending on your location, you have the following rights:
Access to your personal data
Correction of inaccurate or incomplete data
Deletion (“right to be forgotten”)
Restriction of or objection to processing
Data portability
Withdrawal of consent at any time
Lodging a complaint with your local data authority
You may exercise your rights by contacting us at .
For California residents: You may request to know what personal data we hold about you and request deletion of your data, in accordance with the CCPA.
For EU/UK residents: You have the right to lodge a complaint with a supervisory authority such as the ICO (UK) or CNIL (France).

9. Security

We implement industry-standard physical, administrative, and technical safeguards to protect your personal information from unauthorized access, disclosure, use, or modification.
However, no method of transmission or storage is completely secure. You acknowledge that any transmission of personal data is at your own risk.

10. Third-Party Links and Services

Our Site may contain links to external websites or third-party services. We are not responsible for the privacy practices of such websites or services and encourage you to review their privacy policies.

11. Minors

Our website and services are not directed to, nor do we knowingly collect data from, individuals under the age of 16. If you are a parent or legal guardian and believe that your child has provided us with personal information, please contact us so we can delete the information.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Changes will be reflected on this page with an updated “Last updated” date. We encourage you to review this policy regularly. Continued use of our services after changes constitutes acceptance of the updated policy.

13. Contact Information

If you have any questions or concerns about this Privacy Policy, your data, or your rights, please contact us:
Thank you for trusting — Igniting the magic of Christmas.