Janet Andersen Enterprises, LLC

Data Security and Privacy Policy

At Janet Andersen Enterprises, we are committed to protecting your personal and payment information. This Data Security and Privacy Policy outlines how we collect, use, protect, and share your data when you visit our website (janetandersen.com) or make purchases from our online store. As a sole proprietorship operating as an LLC, we prioritize transparency and security in all our operations.

1. Information We Collect:

We collect the following types of information to provide you with a seamless shopping experience:

• Personal Information: When you make a purchase, create an account, or contact us, we may collect your name, email address, shipping address, phone number, and other details you provide.

• Payment Information: We collect payment details necessary to process your orders, such as billing address and order details, but we do not store sensitive cardholder data (e.g., credit card numbers).

• Website Usage Data: We may collect non-personal information, such as your IP address, browser type, device information, and browsing behavior, to improve our website and services.

2. How We Use Your Information

We use your information to:

• Process and fulfill your orders, including shipping physical and digital products.

• Communicate with you about your orders, account, or customer service inquiries.

• Improve our website, products, and services based on usage data.

• Send promotional emails or newsletters (only with your consent, and you may opt out at any time).

• Comply with legal obligations and prevent fraud or unauthorized activities.

3. Payment Processing with Stripe

We use Stripe, a PCI DSS Level 1-certified payment processor, to securely handle all payment transactions. When you make a purchase:

• Your payment information (e.g., credit card details) is collected directly by Stripe through their secure, hosted payment forms (Stripe Checkout or Elements).

• We do not store or process sensitive cardholder data on our servers. Instead, Stripe uses tokenization to replace card details with a secure token, ensuring your payment information remains protected.

• All payment data is transmitted using industry-standard encryption (TLS/HTTPS) to prevent unauthorized access.

• Stripe’s security practices comply with the Payment Card Industry Data Security Standard (PCI DSS), and we maintain our own PCI compliance through annual self-assessments to ensure a secure shopping environment.

4. How We Protect Your Data

We take the following measures to safeguard your information:

• Encryption: Our website uses HTTPS with SSL/TLS encryption to secure data transmission between your browser and our servers.

• Access Controls: Access to your personal information is restricted to authorized personnel only, and we use strong passwords and secure authentication methods.

• No Storage of Sensitive Data: We do not store credit card numbers or other sensitive payment details on our systems.

• Regular Updates: We keep our website software, plugins, and systems updated to address security vulnerabilities.

• Fraud Prevention: We use Stripe Radar and other tools to detect and prevent fraudulent transactions.

• Compliance: We adhere to PCI DSS requirements and applicable data protection laws to ensure your data is handled responsibly.

5. Sharing Your Information

We only share your information as necessary to provide our services or comply with legal requirements:

• With Stripe: We share payment-related data with Stripe to process transactions securely. Stripe’s Privacy Policy https://stripe.com/privacy governs their use of your data.

• With Shipping Partners: We share your name, shipping address, and contact details with trusted shipping carriers to deliver your orders.

• With Legal Authorities: We may disclose your information if required by law, such as to comply with a subpoena or prevent fraud.

• No Third-Party Marketing: We do not sell or share your personal information with third parties for marketing purposes without your explicit consent.

6. Your Rights and Choices

You have the following rights regarding your personal information:

• Access and Update: You may access or update your account information by logging into your account or contacting us.

• Opt-Out: You can opt out of promotional emails by clicking the “unsubscribe” link in any email or contacting us directly.

• Data Deletion: You may request the deletion of your personal information, subject to legal or contractual obligations (e.g., retaining order records for tax purposes).

• Regional Rights: If you are in the EU (under GDPR), California (under CCPA), or other regions with data protection laws, you may have additional rights, such as requesting a copy of your data or restricting its use. Contact us to exercise these rights.

7. Cookies and Tracking

Our website uses cookies and similar technologies to enhance your experience, analyze site performance, and personalize content. You can manage cookie preferences through your browser settings. Essential cookies required for website functionality (e.g., shopping cart) cannot be disabled, but non-essential cookies (e.g., analytics) can be opted out of.

8. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes outlined in this policy, such as processing orders or complying with legal obligations (e.g., tax records). Payment tokens and transaction details are retained as required by Stripe and applicable laws.

9. Third-Party Links

Our website may contain links to third-party sites (e.g., Stripe’s payment page). We are not responsible for the privacy or security practices of these external sites. Please review their policies before providing personal information.

10. Security Incident Response

In the unlikely event of a data breach, we will:

• Notify affected customers promptly, as required by law.

• Take immediate steps to contain and mitigate the breach.

• Cooperate with authorities and Stripe to investigate and resolve the issue.

11. Contact Us

If you have questions about this policy, your data, or our security practices, please contact us at:

• Email: info@janetandersen.com

• Phone: 253-242-3139

12. Policy Updates

We may update this Data Security and Privacy Policy to reflect changes in our practices or legal requirements. The updated policy will be posted on our website with the effective date. Please review it periodically.

Effective Date: [Insert Date, e.g., May 29, 2025]Write your text here...