Privacy Policy

Your privacy is important to us. This Privacy Policy explains how SHPapyrus (“we,” “us,” or “our”) collects, uses, shares, and protects your personal information when you visit our website https://shpapyrus.com (the “Site”) and purchase our products. We are committed to protecting your personal data in compliance with applicable laws, including the EU General Data Protection Regulation (GDPR), the UK General Data Protection Regulation (UK GDPR), and laws in the United States.

1. Information We Collect

We may collect and process the following types of information:

Personal Identifiers: This includes your name, email address, shipping address, and billing address, which you provide when you place an order or contact us.
Payment Information: We do not collect or store your credit card details. All payments are processed securely by our third-party payment processors. We only receive a notification of successful payment.
Technical & Usage Data: We may automatically collect information about how you interact with our Site, such as your IP address, browser type, device type, pages visited, and referring website. We may collect this using cookies (see section 8).

2. Legal Basis for Processing (EU/UK Users)

If you are in the European Economic Area (EEA) or the UK, we only process your personal data when we have a valid legal basis:

To Fulfill a Contract: We process your data to fulfill our contractual obligation to you, such as processing and delivering your order.
With Your Consent: We may ask for your consent to process your data for specific purposes, such as sending you marketing newsletters. You can withdraw this consent at any time.
For Our Legitimate Interests: We may process your data for our legitimate interests, such as improving our Site and services, provided these interests are not overridden by your rights.
To Comply with a Legal Obligation: We may need to process your data to comply with tax, accounting, or other legal requirements.

3. How We Use Your Information

We use your information for the following purposes:

To process, fulfill, and ship your orders (both digital and physical).
To communicate with you about your order, answer your inquiries, and provide customer support.
To improve and optimize our website, products, and services.
To detect and prevent fraud.
To send you marketing communications (like newsletters), only if you have given your explicit consent.
To comply with our legal and tax obligations.

4. How We Share Your Information

We do not sell, trade, or rent your personal information to third parties.

We may share your information with trusted third parties only when necessary to run our business, such as:

Payment Processors: To securely handle your payment.
Shipping Carriers: To print shipping labels and deliver your physical products.
Website Host & Service Providers: Partners who help us operate our website (e.g., [List your web host, e-commerce platform like WordPress/WooCommerce]).
Legal Authorities: If required by law, subpoena, or other legal process.

5. International Data Transfers (EU/UK Users)

Your information may be transferred to, and processed in, countries outside of the EEA or the UK, such as the United States, where our third-party service providers may be located. We ensure your data is protected by relying on adequacy decisions, or by using Standard Contractual Clauses (SCCs) approved by the European Commission/UK authorities, to ensure your data is treated with a level of protection compliant with GDPR.

6. Data Retention

We will only keep your personal data for as long as it is necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or tax reporting requirements. For example, we must keep basic order information for [e.g., 6 years] for tax purposes.

7. Your Data Protection Rights

You have specific rights regarding your personal data. These rights may vary depending on your location.

For Users in the EU/UK (GDPR):

Right to Access: You have the right to request a copy of the personal data we hold about you.
Right to Rectification: You have the right to ask us to correct any inaccurate or incomplete data.
Right to Erasure (“Right to be Forgotten”): You have the right to request we delete your personal data, under certain conditions.
Right to Restrict Processing: You have the right to request we restrict the processing of your data, under certain conditions.
Right to Data Portability: You have the right to request that we transfer your data to another organization, or directly to you.
Right to Object: You have the right to object to our processing of your data (e.g., for direct marketing).

To exercise these rights, please contact us by email. You also have the right to lodge a complaint with your local data protection supervisory authority (e.g., the ICO in the UK).

For Users in California (CCPA):

If you are a California resident, you have the following rights:

Right to Know: You have the right to know what personal information we collect, use, and disclose.
Right to Delete: You have the right to request the deletion of your personal information.

SHPapyrus does not sell your personal information. We will not discriminate against you for exercising your CCPA rights.

To exercise your rights, please contact us by email.

8. Cookies

Our Site uses cookies to function. Cookies are small text files placed on your device to store data. We use essential cookies for cart functionality and checkout. We may also use non-essential cookies for analytics to help us understand how visitors use our Site. Where legally required (in the EU/UK), we will ask for your consent before placing non-essential cookies. You can manage your cookie preferences through your browser settings.

9. Data Security

We implement reasonable technical and organizational precautions to protect your personal information. However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee its absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. Any changes will be posted on this page. We encourage you to review this policy periodically.