Last updated: October 31, 2026
This Privacy Policy describes how your personal information is collected, used, and shared when you visit, contact us, or make a purchase from www.mattyscraftingjoy.com (the “Site”).
WHO WE ARE
The Site is operated by Matty's Crafting Joy (“we”, “us”, “our”), which is the data controller of your personal information. You can contact us at:
Matty's Crafting Joy
c/o Ship my Deal
41740 Enterprise Circle North, Suite 103
Temecula, CA 92590, USA
Email: info@mattyscraftingjoy.com
PERSONAL INFORMATION WE COLLECT
When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as “Device Information.”
We collect Device Information using the following technologies:
- “Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org.
- “Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
- “Web beacons,” “tags,” and “pixels” are electronic files used to record information about how you browse the Site.
Additionally, when you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including your name, billing address, shipping address, email address, and phone number. We refer to this information as “Order Information.” Payment details (such as credit card numbers) are entered directly into, and processed securely by, our payment providers (such as Shopify Payments and PayPal). We do not store your full credit card details and do not have access to them.
When you contact us through chat, email, or our contact form, we collect the content of your messages and any information you choose to share with us, such as your name, email address, and order details. We refer to this information as “Communication Information.”
When we talk about “Personal Information” in this Privacy Policy, we are talking about Device Information, Order Information, and Communication Information.
HOW WE USE YOUR PERSONAL INFORMATION AND OUR LEGAL BASES
- To fulfill your orders (processing payments through our payment providers, shipping, invoices and order confirmations, returns and customer service). Legal basis: performance of a contract with you.
- To respond to your messages and provide customer support, including through chat. Some responses to chat messages may be generated or assisted by an automated customer support agent (Shopify Inbox agent). Legal basis: performance of a contract and our legitimate interest in answering your inquiries.
- To improve the quality of our customer support, including improving the Shopify Inbox agent over time. Legal basis: our legitimate interest in providing helpful and accurate support. You may object to this use at any time (see “Your Rights”).
- To screen for potential risk and fraud (in particular, using your IP address). Legal basis: our legitimate interest in protecting our store and customers.
- To analyze and improve our Site (for example, by generating analytics about how our customers browse and interact with the Site). Legal basis: your consent where required by law (for example, for non-essential cookies in the EEA and UK); otherwise our legitimate interests.
- To send you marketing emails and show you targeted advertising, in line with the preferences you have shared with us. Legal basis: your consent where required by law. You can withdraw your consent at any time.
- To comply with legal obligations, such as keeping tax and accounting records. Legal basis: legal obligation.
If we ask for your personal information for a secondary reason, like marketing, we will either ask you directly for your expressed consent, or provide you with an opportunity to say no. If after you opt in, you change your mind, you may withdraw your consent at any time by using the unsubscribe link in our emails, by adjusting your cookie preferences, or by contacting us at info@mattyscraftingjoy.com. Withdrawing consent does not affect processing carried out before the withdrawal.
SHARING YOUR PERSONAL INFORMATION
We share your Personal Information with service providers that help us operate our store, as described above:
- Shopify – powers our online store. We use Shopify to process customer data, including chat communications, to generate responses and to improve the quality of the Shopify Inbox agent over time. Learn more: https://www.shopify.com/legal/privacy.
- Payment providers (Shopify Payments and PayPal) – process your payments.
- Ship my Deal – our fulfillment warehouse in California, which receives the order and shipping information needed to pack and ship your order.
- USPS (United States Postal Service) – delivers our orders in the United States and internationally, and receives your name, shipping address and order details for that purpose. International shipments may also be handled by postal and customs authorities in the destination country.
- Google (Google Analytics and Google Ads) – analytics and advertising. Learn more: https://www.google.com/intl/en/policies/privacy/. You can opt out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.
- Meta (Facebook and Instagram) and Microsoft Bing – advertising and measurement.
- Our privacy compliance app – processes your IP address and email address when you submit a data request (such as access or deletion) through our GDPR Compliance page.
We do not sell your Personal Information. We may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful requests for information we receive, or to otherwise protect our rights.
BEHAVIOURAL ADVERTISING
Where you have consented (or where consent is not required by law), we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.
You can opt out of targeted advertising by:
- FACEBOOK - https://www.facebook.com/settings/?tab=ads
- GOOGLE - https://www.google.com/settings/ads/anonymous
- BING - https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads
Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: http://optout.aboutads.info/.
DO NOT TRACK
Please note that we do not alter our Site’s data collection and use practices when we see a Do Not Track signal from your browser. This does not affect the cookie choices you make through our cookie banner.
INTERNATIONAL DATA TRANSFERS
We and our service providers process information in the United States and in Israel, so your information may be transferred outside the European Economic Area (EEA) and the United Kingdom. Israel is recognized by the European Commission as providing an adequate level of data protection. For transfers to the United States, we rely on our service providers’ transfer safeguards, such as the EU-U.S. Data Privacy Framework (where the provider is certified) or the European Commission’s Standard Contractual Clauses.
DATA RETENTION
We keep Order Information and Communication Information in our store platform (Shopify) for as long as it is retained there in accordance with Shopify’s data retention practices, or until you ask us to delete it, whichever comes first. We may keep certain order records for longer where required by law, for example for tax and accounting purposes. Device Information collected through cookies is kept for the periods set by the relevant cookie, as described in our cookie banner.
YOUR RIGHTS
If you are located in the EEA or the United Kingdom, you have the following rights regarding your personal information:
- Access – to request a copy of the personal information we hold about you;
- Rectification – to ask us to correct inaccurate or incomplete information;
- Erasure – to ask us to delete your personal information, subject to legal retention obligations;
- Restriction – to ask us to limit how we use your personal information;
- Data portability – to receive your personal information in a structured, commonly used format;
- Objection – to object to processing based on our legitimate interests, and to object at any time to direct marketing;
- Withdrawal of consent – to withdraw any consent you have given, at any time.
You can exercise these rights through our GDPR Compliance page (https://mattyscraftingjoy.com/pages/gdpr-compliance) or by contacting us at info@mattyscraftingjoy.com. We will respond within one month. You also have the right to lodge a complaint with the data protection authority in your country of residence.
We do not use your personal information for decisions based solely on automated processing that produce legal or similarly significant effects on you. If you would like a human to review a response you received from our automated chat agent, please contact us at info@mattyscraftingjoy.com.
CHANGES
We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons. We will update the “Last updated” date at the top of this policy when we do.
CONTACT US
For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at info@mattyscraftingjoy.com or by mail at the address listed under “Who We Are.”