This Privacy Policy explains how Emberandpines, operated by Ember & Pines, collects, uses, shares and protects your personal information when you visit our website or buy our tees, hoodies, beanies and camp mugs. It also explains the privacy rights available to you as a customer in the United States.

Information we collect

Information you provide:

• Your name and email address
• Phone number, if you provide one at checkout
• Billing and shipping addresses
• Details of the orders you place with us
• Messages you send to our support team

Information collected automatically:

• IP address
• Device type, browser and operating system
• Cookies and similar technologies
• How you browse and interact with our site, such as pages viewed and products searched

How we use your information

• To process, ship and track your orders
• To answer your questions and handle returns and refunds
• To send order confirmations and shipping updates
• To send marketing emails if you choose to receive them
• To improve our website, product search and shopping experience
• To prevent fraud and keep our site secure

Who we share information with

We share personal information only with the service providers we need to run our store:

• PayPal, to process payments
• DigitalOcean Spaces, to store files and images
• OpenAI, to power product search on our site
• Telegram, to send order notifications to our staff
• Our email service provider (SMTP), to deliver order and marketing emails
• Shipping carriers (USPS, UPS, FedEx and DHL), to deliver your orders
• Google Analytics and Google Ads, which use cookies for analytics and advertising

Cookies

We use cookies to keep the site working, understand how visitors use it and measure our advertising. Google Analytics and Google Ads set cookies for analytics and advertising purposes. You can block or delete cookies in your browser settings, although some parts of the site may not work as intended without them.

Categories of personal information we disclose

Sale and sharing of personal information

We do not sell your personal information for money. However, the advertising and analytics cookies used by Google Ads and Google Analytics may be considered "sharing" of personal information under the California Privacy Rights Act (CPRA) and similar state laws. You can opt out at any time on our Do Not Sell or Share My Personal Information page.

Your privacy rights

We extend the following rights to all customers in the United States:

• Know: ask what personal information we collect, use and disclose
• Access: request a copy of the personal information we hold about you
• Delete: ask us to delete your personal information
• Correct: ask us to correct inaccurate information
• Opt out: opt out of the sale or sharing of your personal information
• Non-discrimination: we will not treat you differently for exercising your rights

Depending on your state, you may also have the right to data portability and to opt out of targeted advertising and profiling.

How to submit a request

Email us at [email protected] or use the form below. Please tell us which right you want to exercise.

Response times

• Opt-out requests are completed within 15 business days. We do not require identity verification or an account to opt out.
• Other requests are answered within 45 days. If we need more time, we may extend this by a further 45 days and will let you know. We may need to verify your identity before fulfilling these requests.

Appeals

If we decline your request, you may appeal by emailing us with the subject line "Privacy Appeal". We will respond within 60 days. If you are not satisfied with our response, you may contact the Attorney General of your state.

Authorized agents

You may use an authorized agent to submit a request on your behalf. The agent must provide written permission signed by you.

Children's privacy

Our site is not directed to children. We do not sell or share the personal information of consumers under 16 without prior consent: consumers aged 13 to 15 must give their own consent, and children under 13 require consent from a parent or guardian.

Sensitive personal information

We do not collect sensitive personal information, so we do not offer a "Limit the Use of My Sensitive Personal Information" option.

Marketing emails

Every marketing email includes an unsubscribe link. If you unsubscribe, you will still receive transactional emails about your orders, such as order confirmations and shipping updates.

Data retention and security

We keep personal information only as long as needed to fulfill orders, meet legal obligations and resolve disputes. Our site is served over an encrypted SSL connection, and we use reasonable measures to protect your information, but no method of transmission or storage is completely secure.

Changes to this policy

We may update this Privacy Policy from time to time. The date at the top of this page shows when it was last revised.