Privacy Policy

Your Privacy Matters to MC Craft LLC

At MC Craft LLC, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit our website mccraft.store, purchase our products (engraved leather hats and personalized whiskey glasses), or interact with our customer service team.

We believe in transparency. This policy describes what information we collect, why we collect it, how we use it, who we share it with, and what rights you have over your own data. Please read this policy carefully. By using our Site or purchasing our products, you consent to the practices described herein.

I. Information We Collect

We collect several categories of personal information, depending on how you interact with us. “Personal information” means any data that can identify you as an individual, either alone or in combination with other information.

A. Information You Provide Directly to Us

Account Registration and Order Placement

When you create an account or place an order on mccraft.store, we collect:

Customer Service Interactions

When you contact us by email (minhchichu655@gmail.com), phone (+84968161295), live chat, or social media, we may collect:

• Your name and contact information

• Your order number (if applicable)

• The content of your communication (including any photos or documents you send)

• Notes from our team about your inquiry or issue

• Call recordings (only if you consent; otherwise, we take written notes)

Design Submissions

When you upload images, logos, or text for engraving, we collect:

• The digital file itself (JPG, PNG, SVG, AI, PDF, etc.)

• Any accompanying instructions or notes

• Metadata within the file (e.g., creation date, author name – though we do not actively extract this)

Marketing Interactions

If you sign up for our email newsletter, we collect:

• Your email address

• Your name (optional)

• Your preferences (e.g., product categories you are interested in)

If you participate in contests, sweepstakes, or promotions, we collect the information necessary to administer the promotion (e.g., shipping address for prize delivery).

B. Information Collected Automatically

When you visit our website, certain information is collected automatically by our servers and third-party analytics tools.

C. Information from Third Parties

We may receive information about you from:

• Stripe: Payment confirmation, fraud risk score, and last four digits of your payment card (Stripe does not share full card numbers with us)

• Shipping carriers (USPS, UPS, DHL): Delivery confirmation, tracking updates, and occasionally address corrections

• Social media platforms (if you interact with our posts): Public profile information, but only if you choose to link your account or interact via social login (not currently offered)

• Fraud prevention services: Risk assessments to help us prevent fraudulent transactions

D. Sensitive Personal Information

MC Craft LLC does not intentionally collect sensitive personal information such as:

• Social Security numbers, driver’s license numbers, or government IDs

• Biometric data (fingerprints, facial recognition)

• Health or medical information

• Racial or ethnic origin

• Political opinions or religious beliefs

• Sexual orientation or union membership

Please do not send us such information. If you inadvertently include sensitive information in a custom engraving request, we will delete it upon discovery and notify you.

---

II. How We Collect Information

We collect information through the following methods:

Direct Collection

• Web forms: Account registration, checkout, contact forms, newsletter signup

• Email: When you email minhchichu655@gmail.com

• Phone: When you call +84968161295

• Live chat: When you use the chat feature on mccraft.store

• File uploads: When you submit design files for engraving

Automatic Collection

• Cookies and similar technologies (see Section VI)

• Server logs: Every request to our website is logged

• Analytics tools: Google Analytics (or similar) track user behavior

• Pixel tags/beacons: Used in our emails to track open rates and link clicks

---

III. Use of Your Information

We use your personal information for the following purposes:

A. Order Fulfillment and Transaction Processing

• Process and complete your purchases

• Create and send digital proofs of custom engravings

• Produce and engrave your leather hats and whiskey glasses

• Arrange shipping and provide tracking information

• Communicate order status updates (confirmation, shipping, delivery)

• Process returns, refunds, and exchanges

Legal basis (for GDPR/UK customers): Performance of a contract with you.

B. Customer Service and Support

• Respond to your inquiries via email, phone, or chat

• Troubleshoot issues with orders, payments, or delivery

• Investigate and resolve disputes (damaged items, missing packages, etc.)

• Follow up on customer satisfaction

Legal basis: Performance of a contract and our legitimate interest in providing good customer service.

C. Account Management

• Create and maintain your user account

• Save your preferences (addresses, design templates, etc.)

• Authenticate you when you log in

• Allow you to view order history and track shipments

Legal basis: Performance of a contract.

D. Marketing and Promotions (Opt-In Only)

• Send you promotional emails about new products, sales, and events (if you opted in)

• Administer contests, sweepstakes, and giveaways

• Show personalized product recommendations on our website

• Measure the effectiveness of our marketing campaigns

Legal basis: Your consent (which you may withdraw at any time).

E. Website Improvement and Analytics

• Analyze how customers use our website to improve user experience

• Identify technical issues (broken links, slow loading pages)

• Understand which products are most popular

• Test new features and designs

Legal basis: Legitimate interest in improving our business and website.

F. Fraud Prevention and Security

• Detect and prevent fraudulent transactions

• Verify your identity for high-risk orders

• Protect our website from cyberattacks (DDoS, SQL injection, etc.)

• Comply with legal obligations (anti-money laundering, sanctions screening)

Legal basis: Legal obligations and legitimate interest in protecting our business and customers.

G. Legal Compliance

• Respond to lawful requests from law enforcement or regulators

• Comply with tax and accounting record-keeping requirements

• Enforce our Terms and Conditions and other policies

Legal basis: Legal obligations.

---

IV. Disclosure of Your Information

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. We only share your information in the following circumstances:

A. Service Providers (Necessary to Fulfill Your Order)

B. Legal and Regulatory Disclosures

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., subpoenas, court orders, warrants). We may also disclose information to:

• Protect our rights, property, or safety (or those of our customers)

• Investigate fraud or security violations

• Enforce our Terms and Conditions or other policies

C. Business Transfers

If MC Craft LLC is involved in a merger, acquisition, bankruptcy, or sale of all or a portion of its assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website of any such change in ownership or control of your personal information.

D. With Your Consent

We may share your information for other purposes if you give us explicit consent (e.g., featuring your custom design in our marketing materials with your permission).

---

V. Third-Party Service Providers

We engage trusted third parties to perform functions on our behalf. All providers are contractually obligated to protect your data and use it only for the specific services they provide.

Detailed List of Providers

Third-Party Privacy Policies

We encourage you to review the privacy policies of these third parties:

• Stripe: https://stripe.com/privacy

• Shopify: https://www.shopify.com/legal/privacy

• USPS: https://www.usps.com/privacypolicy

• UPS: https://www.ups.com/us/en/help-center/legal-terms/privacy-policy.page

• DHL: https://www.dhl.com/global-en/home/legal/privacy-notice.html

• Google: https://policies.google.com/privacy

• Klaviyo: https://www.klaviyo.com/privacy

---

VI. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on mccraft.store.

What Are Cookies?

Cookies are small text files placed on your device (computer, phone, tablet) when you visit a website. They allow the website to recognize your device and remember certain information.

Types of Cookies We Use

Specific Cookies We May Use

• Session cookies: Expire when you close your browser. Used to keep you logged in during your visit.

• Persistent cookies: Remain on your device until they expire or you delete them. Used to remember your login for future visits.

• Third-party cookies: Set by our partners (e.g., Google Analytics, social media platforms). These are subject to the partners’ own privacy policies.

Your Cookie Choices

Browser settings: Most browsers allow you to:

• See what cookies are stored and delete them

• Block third-party cookies

• Block all cookies

• Receive a warning before a cookie is set

Note: Disabling essential cookies will break our checkout and login functionality. You may still browse products, but you will not be able to place orders.

Opt-out of analytics: You can install the Google Analytics opt-out browser add-on: https://tools.google.com/dlpage/gaoptout

Opt-out of marketing cookies: We participate in industry self-regulatory programs. You can opt out of interest-based advertising from many providers at:

• Network Advertising Initiative: https://optout.networkadvertising.org

• Digital Advertising Alliance: https://optout.aboutads.info

Do Not Track Signals

Some browsers offer a “Do Not Track” (DNT) feature. Our website does not currently respond to DNT signals because there is no consistent industry standard for interpreting them. However, you can control cookies through browser settings as described above.

---

VII. Data Security

We take data security seriously. While no method of transmission over the Internet or electronic storage is 100% secure, we implement industry-standard measures to protect your personal information.

Security Measures We Implement

What to Do If You Suspect a Breach

If you believe your personal information with MC Craft LLC has been compromised, please contact us immediately at minhchichu655@gmail.com.

If a data breach occurs that is likely to result in a risk to your rights and freedoms, we will:

• Notify affected customers within 72 hours of discovering the breach (or as required by applicable law)

• Report the breach to relevant supervisory authorities

• Provide guidance on steps you can take to protect yourself

Limitations

Despite our efforts, no security system is impenetrable. You also play a role in protecting your information by:

• Using a strong, unique password for your MC Craft account

• Not sharing your password with anyone

• Logging out of your account after using a shared device

• Keeping your own devices secure (antivirus, updates)

---

VIII. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes for which it was collected, including for legal, accounting, or reporting requirements.

Retention Periods by Data Category

Anonymization

After the retention period expires, we may anonymize your data (remove all identifiers) rather than delete it entirely. Anonymized data may be retained indefinitely for analytical purposes.

Your Right to Deletion

You may request deletion of your personal information at any time (subject to legal retention requirements). See Section IX below.

---

IX. Your Privacy Rights (California, GDPR, and Others)

Depending on where you live, you may have certain legal rights regarding your personal information.

A. Rights for All Users (Global)

Regardless of your location, you have the right to:

• Access: Request a copy of the personal information we hold about you

• Correction: Request that we correct inaccurate or incomplete information

• Deletion: Request that we delete your personal information (subject to legal exceptions)

• Object: Object to our processing of your information (e.g., for marketing)

• Restrict: Request that we limit how we use your information

• Portability: Request a machine-readable copy of your data to transfer to another company

B. California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide additional rights.

Right to Know: You may request that we disclose:

• Categories of personal information we have collected about you

• Sources of that information

• Business purpose for collecting

• Categories of third parties with whom we share information

• Specific pieces of personal information we have collected

Right to Delete: You may request deletion of your personal information, subject to exceptions (e.g., we may retain information to complete a transaction or comply with legal obligations).

Right to Opt-Out of Sale/Sharing: We do not sell your personal information. We also do not share it for cross-context behavioral advertising (though we do use analytics and marketing cookies – you can opt out via cookie settings).

Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights (e.g., by charging different prices or denying services).

Right to Correct: You may request correction of inaccurate information.

Right to Limit Use of Sensitive Information: We do not collect sensitive personal information as defined by the CPRA.

How to Exercise California Rights: Email minhchichu655@gmail.com with “California Privacy Request” in the subject line. We will verify your identity (may request additional information to prevent fraud) and respond within 45 days (extendable by 45 days with notice).

Verification Process: For requests to access or delete specific information, we will ask for:

• Your full name

• Email address associated with your account or orders

• Order number(s) (if available)

• Possibly a declaration under penalty of perjury (for deletion requests)

Authorized Agent: You may designate an authorized agent to make a request on your behalf. The agent must provide written permission from you, and we may verify your identity directly.

California Shine the Light (Cal. Civ. Code § 1798.83): California residents may request information about our disclosure of personal information to third parties for direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing.

C. GDPR Rights (European Economic Area, United Kingdom, Switzerland)

If you are in the European Economic Area (EEA), the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) applies.

Lawful Basis for Processing: As noted in Section III, our lawful bases are:

• Performance of a contract (order fulfillment)

• Legitimate interests (customer service, analytics, fraud prevention)

• Legal obligations (tax records)

• Consent (marketing emails)

Your Rights under GDPR:

Withdrawing Consent: For processing based on your consent (e.g., marketing emails), you may withdraw consent at any time by clicking “unsubscribe” or emailing us.

Lodging a Complaint: You have the right to lodge a complaint with your local supervisory authority (e.g., the ICO in the UK, the CNIL in France). However, we ask that you contact us first so we can try to resolve the issue.

Data Protection Officer (DPO): MC Craft LLC does not have a statutory DPO because we are a small business. However, for GDPR-related inquiries, please email minhchichu655@gmail.com with “GDPR” in the subject line, and we will direct your request to the appropriate person.

D. Other U.S. State Privacy Laws

If you reside in Colorado, Connecticut, Utah, or Virginia, you have similar rights to those under California and GDPR. Please contact us at minhchichu655@gmail.com to exercise your rights.

E. How to Exercise Your Rights (All Regions)

Email: minhchichu655@gmail.com with the subject line: “Privacy Request – [Your Right]”

Phone: +84968161295

Mail:
MC Craft LLC
Attn: Privacy Request
1001 Bishop St STE 2685A
Honolulu, HI 96813

Information needed to process your request:

• Full name

• Email address associated with your account/orders

• Specific right you wish to exercise

• Any additional verification information we may reasonably request

Response time: We will respond within 30 days (GDPR) or 45 days (CCPA). Complex requests may take an additional 30-45 days, and we will notify you of the extension.

No fee: We do not charge a fee for exercising your rights, except for excessive or repetitive requests.

---

X. Children’s Privacy

Our website and products are not intended for children under the age of 16. We do not knowingly collect personal information from children under 16.

What We Do

• We do not target marketing to children

• Our products (leather hats, whiskey glasses) are designed for adults

• Our checkout process requires affirmation that you are at least 18 years old

If We Learn of a Child’s Data

If we discover that we have inadvertently collected personal information from a child under 16, we will:

1. Delete that information from our systems immediately

2. If a purchase was made, we will cancel the order and refund the payment

3. Notify the parent or guardian (if contact information is available)

Parental Requests

If you are a parent or guardian and believe your child under 16 has provided us with personal information, please contact us at minhchichu655@gmail.com immediately.

---

XI. International Data Transfers

MC Craft LLC is based in the United States (Hawaii). If you are accessing our website from outside the United States, please be aware that your personal information will be transferred to, stored in, and processed in the United States.

Data Transfer Mechanisms

For customers in the European Economic Area (EEA), the United Kingdom, or Switzerland, we ensure that appropriate safeguards are in place for data transfers, including:

• Standard Contractual Clauses (SCCs): We use SCCs approved by the European Commission for transfers of personal data to our service providers in the US.

• Data Processing Agreements (DPAs): We have DPAs with all third-party service providers that process personal data on our behalf.

Risks of International Transfer

The United States may have data protection laws that are different from (and potentially less protective than) those in your country. By using our website and providing your information, you consent to the transfer of your data to the United States.

Storage Location

Your data is primarily stored on servers located in the United States (specific data centers may vary by provider). Backups may be stored in additional locations.

---

XII. Email Communications and Marketing

Transactional Emails (Always Sent)

We send emails necessary for your order, including:

• Order confirmation

• Design proof notifications (for custom items)

• Shipping confirmation with tracking

• Delivery confirmation

• Returns and refund updates

• Customer service responses

You cannot opt out of transactional emails because they are essential to fulfilling your order.

Marketing Emails (Opt-In Required)

If you opt in (by checking a box during checkout or signing up via our website), we may send you:

• News about new products and collections

• Exclusive discount codes and promotions

• Gift guides and styling tips

• Surveys and feedback requests (incentivized)

How to Unsubscribe:

• Click the “unsubscribe” link at the bottom of any marketing email

• Email minhchichu655@gmail.com with “UNSUBSCRIBE” in the subject line

• Log into your account and adjust email preferences

Processing time: Unsubscribe requests are processed immediately. However, you may receive one additional email that was already queued before your request.

Email Tracking

Our marketing emails may contain pixel tags that track:

• Whether you opened the email

• Which links you clicked

• Your device type and location (approximate)

We use this data to measure campaign effectiveness and improve our content. You cannot opt out of tracking within emails except by not opening them.

---

XIII. Text Messaging/SMS

If you provide your mobile phone number and opt in to receive SMS notifications, we may send:

• Order updates (shipped, out for delivery, delivered)

• Delivery exceptions (e.g., “address issue, please contact carrier”)

• Two-factor authentication codes (if you enable this feature)

Opting Out: Reply “STOP” to any text message from us. You will receive a confirmation of opt-out, and no further messages will be sent.

Message and data rates: Standard rates from your mobile carrier apply. MC Craft LLC is not responsible for any charges.

Frequency: We will send no more than 5 SMS messages per order (for order updates) and 1-2 promotional SMS per month (if you opt in to promotional texts).

Privacy: We do not share your phone number with third parties for their own marketing. We use a trusted SMS gateway provider that is contractually bound to protect your data.

---

XIV. Social Media and Public Information

Social Media Interactions

If you interact with MC Craft LLC on social media platforms (Instagram, Facebook, Pinterest, etc.):

• We may see your public profile information (name, profile picture, comments)

• If you send us a direct message, we will treat that communication as confidential

• We may repost or share your public posts (e.g., photos of our products) if you tag us – we will always credit you

Please do not share sensitive information on public social media posts.

Customer Reviews and Testimonials

When you submit a product review on mccraft.store, your name (or username) and review content will be publicly visible. You may use a pseudonym if you prefer. We may also feature your review on our website, social media, or marketing materials – always with attribution to your name/pseudonym (never your email or address).

If you wish to remove a review you have posted, please email minhchichu655@gmail.com.

---

XV. Third-Party Links

Our website may contain links to third-party websites (e.g., payment provider documentation, shipping carrier tracking, social media). We are not responsible for the privacy practices of those websites. We encourage you to read the privacy policies of every website you visit.

Embedded Content

Some pages may include embedded content (e.g., YouTube videos, Instagram posts). Embedded content from other websites behaves as if you visited that website directly. Those websites may collect your data, use cookies, and track your interaction.

---

XVI. Do Not Track Signals

As noted in Section VI, our website does not currently respond to “Do Not Track” (DNT) signals because there is no consistent industry standard. However, you can control tracking through cookie settings and browser extensions.

---

XVII. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons.

How We Notify You

• Minor changes (clarifications, grammar, non-material updates): Updated policy posted to website with new “Last Updated” date. No individual notice.

• Material changes (new data collection, new sharing practices, changes to your rights): We will:

  • Post a prominent notice on our homepage for at least 30 days

  • Send an email to the address associated with your account (if you have an account)

  • For customers without accounts, we rely on website notice

Your Continued Use

Your continued use of our website or purchase of products after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. If you do not agree, please stop using the site and contact us to close your account and request deletion of your data.

Reviewing Changes

We encourage you to review this Privacy Policy periodically. The “Last Updated” date at the top indicates when the most recent changes were made.

---

XVIII. Contact Information for Privacy Questions

If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or need to report a privacy concern:

Email: minhchichu655@gmail.com
(For privacy-specific requests, please include “PRIVACY” in the subject line.)

Phone: +84968161295

Mail:
MC Craft LLC
Attn: Privacy Officer
1001 Bishop St STE 2685A
Honolulu, HI 96813
United States

Response Commitment

We will acknowledge receipt of your privacy-related communication within 5 business days. Substantive responses will be provided within 30 days (or as required by applicable law).

If You Are Not Satisfied

If you believe we have not adequately addressed your privacy concern, you may file a complaint with:

• For California residents: The California Attorney General’s office: https://oag.ca.gov/privacy

• For EU/UK residents: Your local Data Protection Authority (e.g., ICO in the UK: https://ico.org.uk)

• For other U.S. states: The Federal Trade Commission (FTC): https://www.ftc.gov

We ask that you give us the opportunity to resolve your issue before contacting a regulatory authority.

---

Summary: Key Privacy Facts

---

Final Note

MC Craft LLC is committed to respecting your privacy and protecting your personal information. We believe that trust is earned through transparency and consistent action. If you ever have questions or concerns about how we handle your data, please reach out. We are real people, and we take your privacy personally.

Thank you for trusting MC Craft LLC with your personal information and your business.

MC Craft LLC
1001 Bishop St STE 2685A Honolulu, HI, 96813
📧 minhchichu655@gmail.com
📞 +84968161295
🌐 mccraft.store

Privacy is not just a policy. It’s a promise.