Privacy Policy
Tulia's Artisan Gallery Privacy Policy
This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from www.tulias.com (the “Site”).
PERSONAL INFORMATION WE COLLECT
When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as “Device Information.” This site encrypts data using the HTTPS protocol
We collect Device Information using the following technologies:
- “Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org.
- “Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
- “Web beacons,” “tags,” and “pixels” are electronic files used to record information about how you browse the Site.
Additionally, when you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including your name, billing address, shipping address, payment information (including credit card numbers), email address, and phone number. We refer to this information as “Order Information.”
When we talk about “Personal Information” in this Privacy Policy, we are talking both about Device Information and Order Information.
HOW DO WE USE YOUR PERSONAL INFORMATION?
The Site will not independently sell personal data for commercial purposes, but does disclose personal data to third parties or allow third parties to access personal data to help provide services. To request that your personal data be erased, or to learn more about how your personal data is used please contact us at info@tulias.com
We use the Order Information that we collect generally to fulfill any orders placed through the Site (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations). Additionally, we use this Order Information to:
Communicate with you;
Screen our orders for potential risk or fraud; and
When in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.
We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimize our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns).
SHARING YOUR PERSONAL INFORMATION
We share your Personal Information with third parties to help us use your Personal Information, as described above. For example, we use Shopify to power our online store--you can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy. We also use Google Analytics to help us understand how our customers use the Site--you can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.
Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.
We will not sell your personal data for commercial purposes.
BEHAVIOURAL ADVERTISING
As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.
You can opt out of targeted advertising by using these OPT-Out Links:
MAILCHIMP - https://tulias.us9.list-manage.com/unsubscribe?u=fd1ba1aaa10ae2652680ceff2&id=af897c2ee6
FACEBOOK - https://www.facebook.com/settings/?tab=ads
GOOGLE - https://www.google.com/settings/ads/anonymous
BING - https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads
CALIFORNIA RESIDENTS:
https://www.tulias.com/pages/ccpa-opt-out
Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: http://optout.aboutads.info/.
DO NOT TRACK
Please note that we do not alter our Site’s data collection and use practices when we see a Do Not Track signal from your browser.
YOUR RIGHTS
If you are a European resident, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the contact information below.
Additionally, if you are a European resident we note that we are processing your information in order to fulfill contracts we might have with you (for example if you make an order through the Site), or otherwise to pursue our legitimate business interests listed above. Additionally, please note that your information will be transferred outside of Europe, including to Canada and the United States.
CONSENT
By providing your personal information and engaging with our website, you consent to the collection, processing, and storage of your data as described in this Privacy Policy. We will only process your personal data for the purposes outlined herein and in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).
With your consent, we may use your personal information to send you marketing communications about our products, promotions, and events via email. You have the right to withdraw your consent for such marketing communications at any time by using the unsubscribe link provided in the email or by contacting us directly.
Please note that certain processing activities may rely on other lawful bases as permitted by the GDPR, such as contractual necessity or legitimate interests. Rest assured that we will handle your personal data responsibly and only for the purposes stated in this Privacy Policy.
If you have any questions or concerns about our data processing activities or would like to exercise your rights under the GDPR, such as accessing, rectifying, or deleting your personal information, please contact us using the details provided in the 'Contact Us' section of this Privacy Policy.
By continuing to use our website and providing your personal information, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your data in accordance with its terms.
DATA SUBJECT RIGHTS
As an individual whose personal data is processed by Tulia's Artisan Gallery, you have the following rights under the General Data Protection Regulation (GDPR):
Right of Access: You have the right to request access to the personal information we hold about you. Upon receiving such a request, we will provide you with a copy of the data we process concerning you and any additional relevant information.
Right to Rectification: If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request its rectification or updating. We will promptly correct any inaccurate information and ensure it is up to date.
Right to Erasure: You have the right to request the erasure of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected or if you withdraw your consent. However, please note that this right is subject to legal obligations or other legitimate reasons that may require us to retain certain data.
Right to Restriction of Processing: You have the right to request the restriction of processing your personal data in specific situations. This means that we will limit the processing of your data, typically while assessing a request for rectification or verifying the accuracy of the information.
Right to Data Portability: You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another data controller, where technically feasible.
Right to Object: You have the right to object to the processing of your personal data, including profiling, based on legitimate interests or for direct marketing purposes. We will cease processing your data unless we have compelling legitimate grounds that override your interests, rights, and freedoms or if the processing is necessary for the establishment, exercise, or defense of legal claims.
Right to Withdraw Consent: If we rely on your consent as the lawful basis for processing your personal data, you have the right to withdraw your consent at any time. This withdrawal will not affect the lawfulness of any processing carried out before you withdrew your consent.
If you wish to exercise any of these rights or have any questions regarding your rights under the GDPR, please contact us using the details provided in the 'Contact Us' section of this Privacy Policy.
INTERNATIONAL DATA TRANSFER
Please note that, as a global business, Tulia's Artisan Gallery may transfer and process your personal data outside the European Economic Area (EEA) to countries that may not have the same level of data protection laws as your home country.
When transferring personal data to countries outside the EEA, we will ensure that appropriate safeguards are in place to protect your data in accordance with the requirements of the General Data Protection Regulation (GDPR). These safeguards may include:
Adequacy Decision: We may transfer personal data to countries that the European Commission has determined to provide an adequate level of data protection, ensuring a similar level of protection as within the EEA.
Standard Contractual Clauses: In the absence of an adequacy decision, we may use standard contractual clauses approved by the European Commission or relevant supervisory authorities. These clauses are binding agreements that impose data protection obligations on the recipient of the data, ensuring an adequate level of protection.
Binding Corporate Rules: If we transfer personal data within our corporate group, we may rely on internal binding corporate rules that are approved by data protection authorities to regulate the transfer of data between our entities, ensuring a consistent level of protection.
Privacy Shield: While the EU-U.S. Privacy Shield framework is no longer a valid mechanism for transferring personal data from the EU to the United States, if we had previously relied on Privacy Shield, we will ensure that any data transfers to the United States are in accordance with other approved transfer mechanisms or legal requirements.
By using our website and providing your personal information, you consent to the transfer of your data as described in this Privacy Policy, including international transfers as necessary to provide our services and meet our contractual obligations.
If you have any questions or require further information about international data transfers or the safeguards we have in place, please contact us using the details provided in the 'Contact Us' section of this Privacy Policy.
DATA SECURITY
At Tulia's Artisan Gallery, we take the security of your personal data seriously. We have implemented a range of technical and organizational measures to ensure the confidentiality, integrity, and availability of your data, as required by the General Data Protection Regulation (GDPR).
Data Encryption: We use industry-standard encryption protocols, such as HTTPS, to protect your personal data during transit between your device and our servers. This ensures that your information remains secure and cannot be intercepted by unauthorized parties.
Access Controls: We have implemented strict access controls to limit access to your personal data to authorized personnel who require it for legitimate purposes. These access controls are regularly reviewed and updated as needed.
Data Minimization: We collect and process only the personal data that is necessary for the purposes described in this Privacy Policy. We strive to minimize the data we collect and retain to reduce the risk of unauthorized access or use.
Regular Security Assessments: We conduct regular security assessments and audits to identify and address any vulnerabilities or risks to the security of your personal data. This includes monitoring our systems, networks, and applications for any potential security incidents.
Employee Training: Our employees undergo comprehensive data protection and security training to ensure they understand their responsibilities and obligations regarding the handling of personal data. This training includes awareness of data security best practices and procedures.
Incident Response: In the event of a data breach or security incident, we have established procedures and protocols to respond promptly and effectively. We will notify you and the relevant authorities as required by law if we determine that a breach poses a risk to your rights and freedoms.
While we implement robust security measures, please note that no method of transmission or storage over the internet can guarantee absolute security. We encourage you to take appropriate measures to protect your personal data, such as using strong and unique passwords and keeping them confidential.
If you have any questions or concerns about the security of your personal data or would like more information about our data security practices, please contact us using the details provided in the 'Contact Us' section of this Privacy Policy.
DATA BREACH RESPONSE:
At Tulia's Artisan Gallery, we prioritize the security of your personal data. In the event of a data breach or unauthorized access to your personal information, we have implemented a comprehensive data breach response plan to minimize any potential impact and comply with the requirements of the General Data Protection Regulation (GDPR).
Incident Identification and Assessment: We maintain monitoring systems and conduct regular security assessments to promptly identify any potential data breaches or security incidents. Our dedicated team will assess the nature and scope of the breach to understand the potential risks to your personal data.
Mitigation and Containment: Upon identification of a data breach, we will take immediate action to mitigate and contain the breach. This may involve securing affected systems, isolating compromised accounts, or implementing additional security measures to prevent further unauthorized access.
Notification: If we determine that a data breach is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay, as required by the GDPR. Our notification will include information about the nature of the breach, the types of personal data affected, and the recommended steps you can take to protect yourself.
Cooperation with Authorities: We will cooperate fully with data protection authorities and other relevant regulatory bodies in accordance with applicable laws and regulations. This includes notifying the relevant supervisory authority of the breach and providing them with any necessary information and documentation.
Communication and Support: We will strive to maintain transparent and open communication with affected individuals throughout the breach response process. Our support team will be available to address any concerns or questions you may have and provide guidance on steps you can take to protect your personal data.
We recommend that you promptly inform us if you suspect any unauthorized access or misuse of your personal data. Additionally, we encourage you to regularly review your account activity, use strong and unique passwords, and promptly report any suspicious activities.
If you have any questions or require further information about our data breach response procedures, please contact us immediately using the details provided in the 'Contact Us' section of this Privacy Policy.
RETENTION PERIODS
At Tulia's Artisan Gallery, we will retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
For example, we will retain your Order Information for a period necessary to process your order, including any returns, refunds, or customer support inquiries. Once the purpose for which the data was collected is fulfilled, and there is no longer a legal or legitimate basis to retain the data, we will securely delete or anonymize it.
In certain cases, we may retain your personal data for longer periods if required by applicable laws or regulations, to establish, exercise, or defend legal claims, or as reasonably necessary for our legitimate business purposes.
Please note that even after you cease using our services or your account is closed, we may retain certain information as required by law or for our legitimate business purposes, such as record-keeping, resolving disputes, and enforcing our agreements.
If you have any questions regarding the retention period for your specific personal data or if you would like your personal data to be deleted in accordance with applicable laws, please contact us using the details provided in the 'Contact Us' section of this Privacy Policy.
DATA RETENTION
When you place an order through the Site, we will maintain your Order Information for our records unless and until you ask us to delete this information.
CHANGES
We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.
CONTACT US
For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at info@tulias.com or by mail using the details provided below:
1808 Janke Dr., Unit M, NORTHBROOK, IL, 60062, United States