Privacy policy

Last Updated: March 25, 2025

Your privacy is important to us. It is Embles LLC's policy to respect your privacy and comply with applicable laws and regulations regarding any personal information we may collect about you, including across our website, https://whimsytots.com, and other sites we own and operate.

This Privacy Policy explains how we collect, use, store, share, and protect your personal information, and your rights regarding that information, under applicable law.

1. What This Policy Covers

This policy applies to information collected through:

Our website and order processing
Customer service interactions
Marketing tools and advertising platforms we integrate with
Associated applications and third-party tools (e.g., Shopify, Klaviyo, Meta, Google)

If you click a link to an external website, that site's own privacy policy applies.

2. Information We Collect

We collect information in two ways:

a) Voluntarily Provided Information

This includes:

Name, email address, phone number, and shipping address
Account credentials
Order and payment information (processed via Shopify or Stripe)
Reviews, photos, and social content
Form entries and survey responses

b) Automatically Collected Information

Sent by your device during site use:

IP address, browser, and operating system
Pages visited, time spent on pages
Device type, screen resolution
Location data (if enabled)
Referring URLs and error logs

3. Device Data

We may automatically collect:

Device type and OS
Browser and language settings
Unique device identifiers
Location data (where enabled)
Mobile configuration and network settings

Your device or browser settings control what data is shared.

4. Legal Bases for Processing (GDPR)

We process personal data under the following lawful bases:

Consent – e.g., for email marketing and cookies
Performance of a contract – e.g., to fulfill purchases
Compliance with a legal obligation – e.g., tax or fraud reporting
Protection of vital interests – e.g., legal emergencies
Public interest – only where legally applicable
Legitimate interests – e.g., analytics, site security, direct marketing (balanced with user rights)

Most relevant for eCommerce: Consent, Contract, Legal Obligation, and Legitimate Interests.

5. Sensitive Information

We do not intentionally collect sensitive personal data (e.g., health information, biometric data, racial or ethnic origin). If such information is submitted unintentionally, it will be securely deleted.

6. User-Generated Content

Any reviews, photos, or other content you submit for public display may be associated with your name, email, or account.
By submitting content, you consent to its public display and understand it may be used in accordance with this Privacy Policy.

7. Why We Collect Your Information

We collect, hold, and use your personal information to:

Fulfill orders and deliver services
Provide support and resolve issues
Send transactional and marketing communications
Personalize your experience
Improve our website through analytics
Administer surveys, giveaways, or promotions
Detect and prevent fraud
Comply with legal obligations

8. Consent and Your Choices

Where required by law, we obtain your explicit consent before using non-essential cookies or sending marketing emails.

You may withdraw consent at any time by:

Clicking "unsubscribe" in our emails
Adjusting cookie preferences via your browser or banner
Contacting privacy@whimsytots.com

9. How Long We Keep Your Information

We keep your data only for as long as needed for:

Account activity and customer service
Order history and legal compliance
Marketing (until you opt out)

When no longer needed, your data is securely deleted or anonymized.

10. How We Protect Your Information

We implement commercial-grade safeguards:

SSL encryption
Secure Shopify platform hosting
Restricted access controls
Ongoing data access reviews

No online method is completely secure. Please keep your passwords private and strong.

11. Children's Privacy

Our site is not intended for children under 13.
We do not knowingly collect data from children.
If you believe a child has submitted personal information, contact us and we will delete it.

12. Who We Share Information With (Service Providers)

We use service providers to operate our business. These companies only process your information as needed to deliver their services on our behalf:

Category	Examples
Payment Processors	Stripe, Shopify Payments
Hosting & eCommerce Platform	Shopify
Email & Marketing Tools	Klaviyo
Analytics	Google Analytics, Meta Pixel
Advertising	Meta Ads (Facebook, Instagram), Google Ads, Pinterest Ads
Shipping & Fulfillment	FedEx, DHL, YunExpress

We do not sell your personal information.

13. Meta Pixel & Targeted Advertising

We may use technologies like Meta Pixel to deliver personalized ads based on your activity on our site and others.
These tools collect browsing behavior, device data, and other identifiers based on your consent and cookie settings.

14. International Transfers

We and our partners may store and process your personal information in the United States or other jurisdictions.

If you are located in the EU/UK or Australia:

Your data may be transferred to countries without equivalent privacy laws
We use Standard Contractual Clauses (SCCs) or similar safeguards to protect your data
By using our services, you consent to such transfers, where permitted

Australia-specific disclosure:
Overseas recipients of your data (e.g., in the U.S.) may not be subject to Australian privacy laws. We take reasonable steps to ensure your data is handled securely and in accordance with this Privacy Policy.

15. Your Rights

Depending on your location, you may have the right to:

Access your personal data
Correct or update your data
Request deletion
Withdraw consent to marketing
Object to data processing
Lodge a complaint with a regulatory authority

You may submit requests by email or mail:

📧 privacy@whimsytots.com
📬 Embles LLC, 1309 Coffeen Avenue, STE 5343, Sheridan, WY 82801, USA

16. Data Breaches

If we become aware of a data breach involving your personal information, we will:

Notify affected individuals, if required
Notify relevant authorities in accordance with legal obligations
Take immediate action to contain the breach

17. Cookies and Tracking

We use cookies and tracking technologies to:

Analyze site usage
Personalize content
Deliver relevant ads

Where required, non-essential cookies are only used with your consent.

See our Cookies Policy for full details.

18. Do Not Track

Some browsers allow “Do Not Track” (DNT) signals.
We currently do not respond to DNT signals but follow all legal data handling standards outlined here.

19. CCPA / CPRA Rights (California)

California residents have the right to:

Know what data we collect and how we use it
Request access, deletion, or correction
Opt out of data “sale” or “sharing” (we do not sell personal data)
Not be discriminated against for exercising privacy rights

To make a request, email us at privacy@whimsytots.com with subject: “CCPA Privacy Request.”

20. Shine the Light (California)

California law permits users to request information on how their personal data is shared for third-party marketing.

To make a request, email us with subject line: “California Privacy Rights Request” and include your full name and mailing address.

21. Business Transfers

In the event of a sale, merger, or acquisition, your personal data may be transferred to the new entity under the terms of this Privacy Policy.

22. Policy Changes

We may revise this Privacy Policy as our services or laws change.
When we make material updates, we will notify you via our website or email, as applicable.