Privacy Policy

1. Overview

This Privacy Policy describes how FtaaE collects, uses, and discloses your Personal Information when you visit, interact with, or make a purchase from ftaae.com (the “Site”). By accessing or using our services, you consent to the data collection and usage practices described herein.

2. Personal Information We Collect

When you interact with the Site, we collect certain details regarding your device, your interaction with the Site, and the information essential to fulfill your orders.

A. Device & Browsing Information

• Examples of Data Collected: Web browser version, operating system, IP address, time zone, cookie identifiers, pages viewed, search terms, and interaction metrics.
• Purpose of Collection: To ensure accurate site rendering, optimize browsing speeds, troubleshoot errors, and perform aggregated store performance analytics.
• Source: Collected automatically through log files, web beacons, cookies, and local storage technologies.

B. Order & Billing Information

• Examples of Data Collected: Full name, billing address, shipping address, payment card details (securely tokenized via PCI-DSS compliant processors), email address, and telephone number.
• Purpose of Collection: To fulfill purchases, process payments, generate shipment tracking, provide invoices and order confirmations, screen for potential risk or fraud, and handle customer service inquiries.
• Source: Directly provided by you during the checkout process.

C. Customer Support & Communication Data

• Examples of Data Collected: Records of correspondence, product feedback, warranty inquiries, and consultation preferences.
• Purpose of Collection: To provide responsive customer support and resolve order inquiries.

3. Sharing Personal Information

We share your Personal Information solely with trusted third-party service providers who assist us in operating our workshop and fulfilling your orders:

• E-Commerce & Hosting Infrastructure: Cloudflare and secure headless hosting providers to deliver reliable, ultra-fast static web pages.
• Payment Gateways: Certified PCI-DSS Level 1 payment processors (such as Stripe, Shopify Payments, or PayPal) to process transactions securely without storing raw credit card numbers on our servers.
• Shipping & Logistics Partners: Carriers (USPS, UPS, FedEx) to deliver your handcrafted candles and soaps.
• Legal Compliance: We may disclose information if required to comply with applicable laws, respond to a subpoena, or protect our legal rights.

4. Cookies and Local Storage

A cookie is a small piece of data downloaded to your computer or device when you visit our Site. We use minimal, functional cookies and browser localStorage to remember your shopping cart items, preserve your preferences, and maintain session continuity.

You can control and manage cookies through your browser settings. Please note that removing or blocking cookies may impact your user experience and certain checkout features may no longer function properly.

5. Your Privacy Rights (GDPR & CCPA/CPRA)

Depending on your jurisdiction, you may hold specific legal rights concerning your personal data:

• Right to Access: You have the right to request copies of the personal information we hold about you.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete details.
• Right to Erasure (“Right to be Forgotten”): You may request deletion of your personal data, subject to legal recordkeeping obligations (such as tax compliance).
• Right to Data Portability: You may request transfer of your data to another organization.
• Non-Discrimination: We will never discriminate against you, deny products, or charge different prices for exercising your privacy rights.

To exercise any of these rights, please email us directly at privacy@ftaae.com.

6. Data Retention & Security

When you place an order through the Site, we maintain your Order Information for our records unless and until you ask us to delete this information. We employ industry-standard encryption protocols (TLS/SSL) and strict access controls to safeguard your data.

7. Minors

The Site is not intended for individuals under the age of 16. We do not intentionally collect Personal Information from children. If you are a parent or guardian and believe your child has provided us with Personal Information, please contact us immediately for deletion.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our operational practices, regulatory updates, or new artisanal offerings. The revised date will always be indicated at the top of this document.

9. Contact Us

For questions regarding our privacy practices, or if you would like to submit a data request, please contact our privacy compliance team: