Privacy Notice

1. Scope and responsible business

This notice applies to Jar Hearts’ U.S.-focused online store, customer accounts, checkout, order fulfillment, product reviews, customer support, returns and related communications. Jar Hearts is the business responsible for the practices described here. Our contact address is Jar Hearts, 5301 Polk Street, Building 13, Houston, Texas 77023, United States; privacy requests may be sent to info@jarhearts.com.

This notice does not govern a manufacturer, carrier, Stripe, Google or another provider when it processes information for its own independently determined purposes. Their notices apply to that independent processing. Our store ships only to supported United States addresses.

2. Categories of personal information we collect

Do not submit Social Security numbers, government IDs, complete card data, health records or other unnecessary sensitive information in free-text forms or email. If we need specific verification information, we will explain why.

3. Payment information and Stripe

Stripe processes payment credentials, authentication and fraud information for checkout. Jar Hearts receives transaction status, a payment token or reference, method type, limited card details such as brand and last digits, and risk or dispute information; we do not need your complete card number in customer-support email. Stripe may act as our service provider and, for certain fraud, regulatory and network purposes, under its own responsibilities. Review the Stripe Privacy Policy and Stripe Privacy Center.

4. Cookies, Google services and similar technologies

WooCommerce and WordPress use storage necessary for carts, sessions, accounts, security and preferences. We also use the Google tag, Google Analytics and Google Ads measurement services to understand visits, attribute advertising and improve the store. These services may receive page URLs, IP address at collection, device/browser data, online activity and cookie or advertising identifiers. Google explains its processing on How Google uses information from sites or apps that use its services.

Review the Cookie Policy for categories and durations. You can stop our theme from loading nonessential Google measurement on future page views using Your Privacy Choices. Essential commerce and security technology remains active.

5. Why we use personal information

• Store and contract performance: provide search, carts, accounts and checkout; confirm, accept, fulfill and deliver orders; process Stripe payments; handle cancellations, returns, refunds, warranties and support.
• Security and fraud prevention: authenticate users, validate transactions and addresses, detect abuse, protect systems, investigate incidents and enforce terms.
• Communications: send transactional notices, answer questions, administer reviews and deliver marketing only as permitted and selected.
• Operations and improvement: diagnose errors, analyze site performance, measure campaigns, forecast inventory and improve product discovery and content.
• Legal compliance and protection: maintain tax and accounting records, respond to lawful process, administer recalls, resolve disputes and establish or defend legal claims.
• Corporate transactions: evaluate or complete a financing, merger, reorganization, acquisition or sale subject to appropriate confidentiality and law.

6. Automated processing

Stripe and our commerce or security providers may automatically score transactions for fraud, payment or account risk. A score can cause a hold, request for verification or order rejection. This processing protects customers and the store and does not use precise geolocation or sensitive traits to determine eligibility. Contact us if you believe an automated result was incorrect and request human review where available or required by law.

7. When and to whom we disclose information

We disclose only information reasonably related to the service or lawful purpose:

• Payment and fraud: Stripe, payment networks, banks and verification providers.
• Fulfillment and delivery: warehouses, distributors, address-validation services and carriers needing order and recipient details.
• Technology and security: WordPress/WooCommerce infrastructure, Cloudways hosting, caching, backup, error logging, cybersecurity and technical support providers.
• Analytics and advertising: Google and related measurement providers receiving device and activity data as described above.
• Communications and support: email delivery, customer-support and review providers.
• Professional and legal: accountants, auditors, insurers, attorneys, regulators, courts and law enforcement where appropriate.
• Business transaction recipients: potential or actual investors, lenders, buyers and advisers under appropriate restrictions.

Service providers are expected to protect information and use it for authorized purposes. A provider may also have independent legal duties described in its own privacy notice.

8. Sale, sharing and targeted advertising

We do not sell personal information for money. Google analytics and advertising measurement may involve disclosure of identifiers and internet activity that California and some other states define as “sharing,” “sale” or processing for targeted advertising, even when no money changes hands. In the preceding 12 months, the potentially affected categories are identifiers, approximate location, internet/device activity and related inferences; potential recipients are analytics and advertising technology providers. We do not knowingly sell or share personal information of consumers under 16.

Use Your Privacy Choices to opt out of future nonessential Google measurement from this site. We also process a recognized Global Privacy Control signal as an opt-out for the browser or device where legally required. We do not offer a financial incentive for personal information.

9. Sensitive information and consumer health data

Account login credentials and payment information are used only to provide, secure and administer the requested service. We do not use sensitive personal information to infer characteristics or for purposes that require a separate right to limit under California law. We do not intentionally infer a health condition from product browsing or purchase history and do not sell consumer health data. Do not include health information in a product review or support request unless strictly necessary to describe a safety incident.

10. Retention

We use the shortest period reasonably consistent with the stated purpose, legal obligations and dispute needs. Backups may retain information until securely overwritten in the ordinary rotation cycle.

11. Security

We use reasonable administrative, technical and physical safeguards appropriate to the nature of the information, including access controls, transport encryption where supported, payment tokenization through Stripe, software maintenance, logging and provider controls. No internet or storage system is completely secure. Use a unique account password and notify us of suspected compromise. If a breach occurs, we will investigate and provide legally required notices.

12. Children’s privacy

The store is a general-audience retail service and is not directed to children under 13. We do not knowingly collect personal information online from a child under 13 without legally required parental consent. If you believe a child provided information, contact us so we can review and delete it as appropriate. A minor should not submit an order without a parent or legal guardian.

13. U.S. state privacy rights

Depending on your state and whether a law applies to Jar Hearts, you may have rights to confirm processing; access or know; correct; delete; obtain a portable copy; opt out of sale, sharing, targeted advertising or certain profiling; limit certain sensitive-data uses; and appeal a denied request. We will not unlawfully discriminate against you for exercising a right.

Submit a request to info@jarhearts.com or through Contact Us. Describe the right and state of residence. We may verify identity by matching account or order information and may request only information reasonably necessary for verification. An authorized agent must provide authority and may be subject to verification. We respond within the period required by applicable law and explain any denial and available appeal. Some information may be retained or exempt for transaction, security, tax, legal-claim or other statutory reasons.

14. California notice

For California residents, the categories collected and disclosed for business purposes during the preceding 12 months are described in Sections 2 and 7. Sources and purposes appear in Sections 2 and 5. The categories potentially shared for cross-context behavioral advertising appear in Section 8. Jar Hearts does not use or disclose sensitive personal information for purposes requiring a “Limit the Use of My Sensitive Personal Information” link. California residents may request access to categories and specific pieces, correction or deletion and may opt out of sale/sharing through Your Privacy Choices.

Browser “Do Not Track” is not a uniform technical standard, so the site does not respond to legacy DNT signals. We do honor a recognized Global Privacy Control signal as described above. Third parties such as Google may collect activity across websites over time; their controls and notices also apply.

15. Nevada and other state notices

Nevada residents may submit a verified request to opt out of a future sale of covered information as defined by Nevada law, although we do not currently sell covered information for monetary consideration. Residents of states providing an appeal right may reply to our decision with “Privacy Appeal” in the subject line and the reason for the appeal.

16. Changes to this notice

We may revise this notice to reflect legal, vendor or operational changes. The updated date will change, and a material change will be highlighted on the site or communicated through an appropriate channel before it applies where required. Prior versions govern practices during their effective period.

17. Contact

Email privacy questions or requests to info@jarhearts.com. Written correspondence may be sent to Jar Hearts, 5301 Polk Street, Building 13, Houston, Texas 77023, United States. Mark the subject or envelope “Privacy Request.” Do not include full card data, passwords or unnecessary identity documents in the initial request.