Privacy Policy

What We Collect

When you shop with us or create an account, we collect the information needed to fulfil your order and communicate with you:

• Contact details — name, email address, and phone number if you provide it
• Shipping and billing addresses
• Order history and the contents of your cart
• Messages you send us, including custom-order inquiries
• Email address if you join our mailing list

Payment card details are neverstored on our servers. Card information is entered directly into Square’s secure payment form, tokenized, and processed by Square; we receive only a payment confirmation and the last four digits of the card for your receipt.

How We Use It

• To process, ship, and support your orders
• To send order confirmations, shipping notices, and receipts
• To respond to your questions and custom-order requests
• To send marketing email — only if you subscribed, and every message includes a one-click unsubscribe
• To detect fraud and keep the store secure

Who We Share It With

We share personal information only with the service providers needed to run the store, and only to the extent necessary:

• Square — payment processing
• Supabase — application database and account storage
• Resend — transactional email delivery
• Vercel — website hosting
• Canada Post or other carriers, for shipping labels

We do not sell your personal information, ever.

Your Rights

We are based in Canada and handle personal information in accordance with applicable Canadian privacy law (PIPEDA). You may at any time:

• Request a copy of the personal information we hold about you
• Ask us to correct anything inaccurate
• Ask us to delete your account and personal information, subject to record-keeping we are required to keep for orders
• Unsubscribe from marketing email using the link in any message

To exercise any of these rights, email hello@lovingcharmz.com and we will respond within 30 days.

Cookies & Analytics

We use a small number of strictly necessary cookies to keep you signed in and to keep your cart working. See our Cookie Policy for details. We do not run advertising trackers.

Data Retention & Security

Order records are kept as long as required for tax and accounting purposes; account data is kept until you ask us to delete it. All traffic to and from the site is encrypted with TLS, and access to customer data is limited to the store owner.