Privacy Policy

Introduction

Welcome to Griffin Confections ("we," "our," or "us"). We are a home-based artisan candy business located in Morganton, NC. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or make a purchase from us.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.

Information We Collect

Personal Information You Provide

We collect information that you voluntarily provide when you:

• Place an order (name, email address, phone number, shipping address, billing address)
• Contact us through our contact form (name, email address, message content)
• Subscribe to our newsletter (email address)
• Participate in promotions or surveys

Payment Information

We use Square, Inc. as our payment processor. When you make a purchase, your payment card information is collected and processed directly by Square. We do not store your full credit card number, CVV, or other sensitive payment details on our servers. For more information about how Square handles your data, please visit Square's Privacy Policy.

Automatically Collected Information

When you visit our website, we may automatically collect certain information, including:

• Browser type and version
• Operating system
• IP address
• Pages visited and time spent on pages
• Referring website addresses

Square Payment Integration

We use Square, Inc. as our payment processing partner. Here's how your data is handled during the checkout process:

What Square Receives

• Your payment card information (processed securely through Square's PCI-compliant systems)
• Your name and contact information for order fulfillment
• Your shipping address for delivery
• Order details including items purchased and amounts

Data Security with Square

Square is a PCI-DSS Level 1 compliant payment processor, the highest level of security certification available. Your payment information is encrypted and tokenized, meaning we never have access to your full card details. Square uses industry-standard security measures including:

• End-to-end encryption for all payment data
• Tokenization to protect card information
• Secure, encrypted transmission protocols (TLS/SSL)
• Regular security audits and compliance monitoring

Order Records

Square retains order information to facilitate order management, customer service, and refunds if needed. We have access to your order history, contact information, and shipping details through our Square merchant account for fulfillment purposes.

How We Use Your Information

We use the information we collect to:

• Process and fulfill your orders
• Send order confirmations and shipping notifications
• Respond to your inquiries and provide customer support
• Send promotional communications (only with your consent)
• Improve our website and product offerings
• Prevent fraud and maintain security
• Comply with legal obligations

Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Payment Processing: With Square to process payments securely
• Shipping: With shipping carriers (USPS, UPS, FedEx) to deliver your orders
• Email Services: With our email service provider to send transactional and promotional emails
• Legal Requirements: When required by law, court order, or governmental authority

Cookies and Tracking Technologies

Our website may use cookies and similar tracking technologies to enhance your browsing experience. Cookies are small data files stored on your device. We use:

• Essential Cookies: Required for the website to function (e.g., shopping cart)
• Analytics Cookies: Help us understand how visitors use our site

You can control cookies through your browser settings. Note that disabling certain cookies may affect website functionality.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this privacy policy, unless a longer retention period is required by law. Order records are retained for accounting and tax purposes as required by applicable regulations.

Your Rights

Depending on your location, you may have certain rights regarding your personal information:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information (subject to legal retention requirements)
• Opt out of marketing communications
• Request a copy of your data in a portable format

To exercise any of these rights, please contact us using the information below.

Children's Privacy

Our website is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately so we can delete that information.

Security

We implement reasonable security measures to protect your personal information. However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Changes to This Privacy Policy

We may update this privacy policy from time to time. The updated version will be indicated by an updated "Last Updated" date. We encourage you to review this privacy policy periodically for any changes.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: