Privacy Policy

This Privacy Policy describes how hannahcarroll.net, which is owned by Hannah Carroll, (the “Site” or “we”) collects, uses, and discloses your Personal Information when you visit or make a purchase from the Site.

Collecting Personal Information

When you visit the Site, we collect certain information about your device, your interaction with the Site, and information necessary to process forms you submit and similar actions on the Site. We may also collect additional information if you contact us for customer support. In this Privacy Policy, we refer to any information that can uniquely identify an individual (including the information below) as “Personal Information”. See the list below for more information about what Personal Information we collect and why.

Device information

· Examples of Personal Information collected: web browser information, IP address, timestamps, what sites or pages you view, searches, and how you interact with the Site.

· Purpose of collection: to load the Site accurately for you, and to perform analytics on Site usage to optimize our Site and our service to you.

· Source of collection: Collected automatically when you access our Site and/or after you have configured your cookie settings on the Site. We use cookies, log files, web beacons, tags, or pixels to do these actions.

· Disclosure for a business purpose: shared with our website analytics provider, Squarespace.

Forms and customer support information

· Examples of Personal Information collected: name, email address, and message.

· Purpose of collection: to provide visitor and customer support and when in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.

· Source of collection: collected from you.

· Disclosure for a business purpose: shared with our content management system Squarespace and our communication platform Drip and if necessary, our communication platform Google Workspace.

Newsletter subscription information

· Examples of Personal Information collected: name, email address, and message.

· Purpose of collection: to communicate with you and to provide you with information or advertising relating to our products or services.

· Source of collection: collected from you.

· Disclosure for a business purpose: shared with our content management system Squarespace and our communication platform Drip and if necessary, our communication platform Google Workspace.

· Notice: We do not intentionally share or make your Personal Information visible to third parties for their independent advertising purposes or communication with you. See the section “Sharing Personal Information” to learn about how the service providers listed above use your Personal Information. We do not use co-registration.

Fonts

· Examples of Personal Information collected: browser information, network information, device information, and IP address

· Purpose of collection: to properly display the Site to you

· Source of collection: collected automatically when you access our Site

· Disclosure for a business purpose: shared with servers where the font files are stored. Our content management system is Squarespace and the font files are from Google Fonts and/or Adobe Fonts.

Minors

The Site is not intended for individuals who are under the legal age of majority in your state or province of residence. We do not intentionally collect Personal Information from children. If you are the parent or guardian and believe your child has provided us with Personal Information, please contact us at the address below to request deletion.

Sharing Personal Information

We share your Personal Information with service providers to help us provide our services to you, as described above. For example:

· We use Squarespace to power our online site. Squarespace collects personal data when you visit this website, including:

o Information about your browser, network and device

o Web pages you visited prior to coming to this website

o Your IP address

Squarespace needs the data to run this website, and to protect and improve its platform and services. Squarespace analyzes the data in a de-personalized form.You can read more about how Squarespace uses your Personal Information here: https://www.squarespace.com/privacy.

· We may share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

· We use Drip to power our online communication. You can read more about how Drip uses your Personal Information here: https://www.drip.com/privacy.

· We also use Google Workspace to power our online communication. You can read more about how Google uses your Personal Information here: https://policies.google.com/privacy?hl=en-US.

Behavioural Advertising

We do not use your Personal Information collected from the Site to engage in behavioral advertising.

Using Personal Information

We use your personal Information to provide our services to you, which includes: offering opportunities to visit and purchase from our shop, informing you about Hannah Carroll, and keeping you up to date on new products, services, and offers.

Lawful basis

Pursuant to the General Data Protection Regulation (“GDPR”), if you are a resident of the European Economic Area (“EEA”), we process your personal information under the following lawful bases:

· Your consent;

· The performance of the contract between you and the Site;

· Compliance with our legal obligations;

· To protect your vital interests;

· To perform a task carried out in the public interest;

· For our legitimate interests, which do not override your fundamental rights and freedoms.

Retention

When you contact us or register through a form, we will retain your Personal Information for our records unless and until you ask us to erase this information. For more information on your right of erasure, please see the ‘Your rights’ section below.

Automatic decision-making

If you are a resident of the EEA, you have the right to object to processing based solely on automated decision-making (which includes profiling), when that decision-making has a legal effect on you or otherwise significantly affects you.

We do not engage in fully automated decision-making that has a legal or otherwise significant effect using customer data.

Your rights

GDPR

If you are a resident of the EEA, you have the right to access the Personal Information we hold about you, to port it to a new service, and to ask that your Personal Information be corrected, updated, or erased. If you would like to exercise these rights, please contact us through the contact information provided in the section “Contact” below.

For information on how Squarespace transfers data in a manner that complies with the GDPR, you can read the section “How does Squarespace transfer customer and visitor data outside the EU?” in the following article: https://support.squarespace.com/hc/en-us/articles/360000851908-GDPR-and-Squarespace#toc-how-does-squarespace-transfer-customer-and-visitor-data-outside-the-eu-

Cookies

A cookie is a small amount of information that’s downloaded to your computer or device when you visit our Site. We use a number of different cookies and similar technologies, including functional, performance, and required cookies. Cookies make your browsing experience better by allowing the website to remember your actions and preferences (such as if you dismiss an announcement bar or if you “liked” a blog post). This means you don’t have to re-enter this information each time you return to the site or browse from one page to another. Cookies also provide information on how people use the website, for instance whether it’s their first time visiting or if they are a frequent visitor.

We use the following cookies to optimize your experience on our Site and to provide our services.

Cookies Necessary for the Functioning of the Store

The following list is a list of the applicable cookies and similar technologies and their descriptions as detailed by Squarespace:

Name: Crumb

Function: Prevents cross-site request forgery (CSRF). CSRF is an attack vector that tricks a browser into taking unwanted action in an application when someone’s logged in.

Type: Cookie

Duration: Session

Name: Locked

Function: Prevents the password-protected screen from displaying if a visitor enters the correct site-wide password.

Type: Cookie

Duration: Session

Name: siteUserCrumb

Function: Prevents cross-site request forgery (CSRF) for logged in site users. CSRF is an attack vector that tricks a browser into taking unwanted action in an application when someone’s logged in.

Type: Cookie

Duration: 3 years

Name: squarespace-likes

Function: Shows when you've already "liked" a blog post.

Type: localstorage

Duration: Persistent

Name: squarespace-popup-overlay

Function: Prevents the promotional pop-up from displaying if a visitor dismisses it

Type: localstorage

Duration: Persistent

Name: Test

Function: Investigates if the browser supports cookies and prevents errors.

Type: Cookie

Duration: Session

Analytics and Performance Cookies

We use analytics and performance cookies to understand how visitors engage with the Site. The following list is a list of the applicable cookies and similar technologies and their descriptions as detailed by Squarespace:

Name: ss_cid