Privacy Policy

Privacy Policy for The Tin Menagerie

Last Updated: 10/19/2025

This Privacy Policy describes how Witty Things Designs ("we", "us", or "our") collects, uses, discloses, and safeguards your personal information when you visit our website tinmenagerie.com (the "Site") or use our services. By accessing or using our Site, you agree to the terms of this Privacy Policy.

1. Information Collection Practices

1.1 Personal Information We Collect

We may collect the following types of personal information:

• Identifiers: Name, alias, postal address, unique personal identifier, online identifier, IP address, email address, account name, or other similar identifiers
• Commercial Information: Records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies
• Internet Activity: Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement
• Geolocation Data: Physical location or movements
• Payment Information: Credit card numbers, debit card numbers, or other financial information (processed securely by our payment processors)
• Account Credentials: Usernames, passwords, password hints, and similar security information used for authentication

1.2 Methods of Collection

We collect information through various methods:

• Directly From You: When you register an account, make a purchase, complete forms, or communicate with us
• Automatically Through Technology: Cookies, web beacons, log files, and other tracking technologies
• From Third Parties: Analytics providers, advertising networks, and social media platforms

2. Use of Collected Information

We use the information we collect for the following business purposes:

• Service Delivery: To provide, maintain, and improve our services; to process transactions; and to manage your account
• Communication: To respond to inquiries, send service-related announcements, and deliver marketing communications
• Personalization: To personalize your experience and deliver content and product offerings relevant to your interests
• Analytics: To understand how users access and use our services and to improve our offerings
• Security: To detect security incidents, protect against malicious activity, and prosecute those responsible
• Legal Compliance: To comply with applicable laws, regulations, and legal processes

3. Information Sharing and Disclosure

3.1 Categories of Third Parties

We may share your information with the following categories of third parties:

• Service Providers: Companies that provide services on our behalf (payment processing, hosting, analytics, etc.)
• Business Partners: Third parties with whom we collaborate to offer joint products or services
• Advertising Networks: To deliver targeted advertisements
• Legal Authorities: When required by law or to protect our rights

3.2 Specific Disclosure Circumstances

We disclose personal information in the following specific situations:

• Business Transfers: In connection with any merger, sale of company assets, financing, or acquisition
• Legal Requirements: When we believe disclosure is necessary to comply with the law or protect rights
• Consent: With your explicit consent for specific purposes

4. Data Retention Practices

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Our retention periods are determined by:

• The amount, nature, and sensitivity of the personal data
• The potential risk of harm from unauthorized use or disclosure
• The purposes for which we process the personal data
• Applicable legal requirements

Typical retention periods:

• Account information: Retained while account is active plus 3 years
• Transaction records: 7 years for tax compliance
• Website analytics: 26 months

5. Data Security Measures

We implement appropriate technical and organizational measures to protect personal information, including:

• Encryption of data in transit and at rest
• Regular security assessments and penetration testing
• Access controls and least privilege principles
• Employee security training and awareness programs
• Incident response and breach notification procedures

While we strive to protect your personal information, no security system is impenetrable and we cannot guarantee absolute security.

6. International Data Transfers

Your personal information may be transferred to, stored, and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for these transfers, including:

• Data processing agreements with third-party service providers
• Compliance with applicable data protection laws

7. Your Rights and Choices

7.1 General Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information under certain circumstances
• Restriction: Request restriction of processing of your personal information
• Portability: Request transfer of your personal information to another service provider
• Objection: Object to processing of your personal information
• Withdraw Consent: Withdraw previously given consent

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and use personal information about you, including:

• Strictly Necessary Cookies: Essential for website functionality
• Performance Cookies: Collect information about website usage
• Functionality Cookies: Remember choices you make
• Targeting Cookies: Used to deliver relevant ads

You can control cookies through your browser settings and other tools. However, disabling cookies may affect website functionality.

9. Children's Privacy

Our Site is not directed to children under 16 years of age. We do not knowingly collect personal information from children. If we learn we have collected personal information from a child, we will delete that information.

10. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of material changes by posting the new policy on our Site with an updated effective date. Your continued use of our services after such changes constitutes acceptance of the revised policy.

11. Contact Information

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

• By Email: Ssanders@wittythings.com
• Through our website: tinmenagerie.com/contact