Privacy Policy
Every time you make a purchase at Cottonfield, the transaction itself involves sharing a few essential details. As part of the buying and selling process, you provide us with your name, address, and email address. This policy outlines what happens to that information from the moment you decide to buy something, through browsing, and beyond.
Information tied to your purchase
Completing a purchase, verifying your credit card, placing an order, arranging delivery, or processing a return—these actions all require you to share personal information with us. When you do so, we operate on the understanding that you consent to us collecting and using that data specifically for the purpose you’ve asked us to carry out.
What we learn when you browse
Even when you’re just looking around our store, certain technical details reach us automatically. Your computer’s internet protocol (IP) address is one of those details, and it helps us understand more about the browser and operating system you’re using.
Marketing and your choices
If you’ve given us permission, we may send you emails about our store, new products, and other updates. We only take that step with your consent. Should we ever need your information for a secondary purpose—like marketing—we will either ask you directly for your expressed consent or give you a clear way to decline.
How your consent works
Your consent is not a one-time decision. If you initially opted in and later change your mind, you can withdraw your consent at any time. To stop us from contacting you, or from continuing to collect, use, or disclose your information, simply reach out to us at [email protected].
When we share your information
There are limited circumstances where your personal information might be disclosed. We may do so if the law requires it, or if you violate our Terms of Service.
The role of Shopify and payment processors
Our store is built on Shopify, Inc.’s platform, which gives us the online e-commerce tools to sell our products and services to you. Your data resides within Shopify’s data storage, databases, and the general Shopify application, kept on a secure server behind a firewall.
When you choose a direct payment gateway to finalize your purchase, Shopify stores your credit card data. That information is encrypted according to the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is only kept for as long as it takes to complete the transaction; once that’s finished, the purchase transaction information is deleted.
All direct payment gateways follow the standards set by PCI-DSS, which is managed by the PCI Security Standards Council. This council is a joint effort of brands including Visa, Mastercard, American Express, and Discover. The PCI-DSS requirements are designed to ensure that both our store and its service providers handle credit card information securely.
How your data travels across borders
The third-party providers we work with generally only collect, use, and disclose your information to the extent needed to perform the services they offer us. However, some providers—particularly payment gateways and other payment transaction processors—have their own privacy policies regarding the information we must supply to them for your purchase-related transactions. We recommend reading those policies so you can understand how your personal information will be managed by those providers.
It’s also important to remember that certain providers may be located in, or have facilities in, a different jurisdiction than you or us. If you proceed with a transaction that involves a third-party service provider, your information may become subject to the laws of the jurisdiction where that provider or its facilities are located. For instance, if you are in Canada and your transaction is processed by a payment gateway in the United States, the personal information used in that transaction could be subject to disclosure under United States legislation, including the Patriot Act.
Leaving our site: links and third parties
Clicking on links within our store may direct you away from our site. Once you leave, or are redirected to a third-party website or application, this Privacy Policy and our website’s Terms of Service no longer apply. We are not responsible for the privacy practices of other sites, and we encourage you to read their privacy statements.
Our store also uses Google Analytics, a tool that helps us learn about who visits our site and which pages are being viewed.
How we protect your data
We take reasonable precautions and follow industry best practices to protect your personal information from inappropriate loss, misuse, access, disclosure, alteration, or destruction. If you provide us with your credit card information, it is encrypted using secure socket layer technology (SSL) and stored with AES-256 encryption. While no method of transmission over the Internet or electronic storage is completely secure, we adhere to all PCI-DSS requirements and implement additional generally accepted industry standards.
Age requirements
By using this site, you are confirming that you are at least the age of majority in your state or province of residence, or that you are the age of majority and have given us consent to allow any of your minor dependents to use this site.
Changes to this policy and business transfers
We reserve the right to modify this privacy policy at any time, so reviewing it regularly is a good practice. Any changes or clarifications take effect immediately upon their posting on the website. If we make material changes, we will notify you here that the policy has been updated, so you remain aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it.
Should our store be acquired or merged with another company, your information may be transferred to the new owners so that we can continue to sell products to you.
