Privacy Policy

Effective date: 2026-03-29

This Privacy Policy explains how www.hugsfromheaven.net (the “Site") collects, uses, discloses, and protects your personal information when you visit our website, contact us, subscribe to our newsletter, or purchase digital wall art.

The Site is operated by Hugs From Heaven L.L.C. (“Hugs From Heaven,” "Company", “we,” "I", “us,” “our”).

By accessing or using the Site, you agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, you must not access or use the Site or services.

1) What we collect

We may collect the following categories of personal information, depending on how you interact with our Site:

• Contact Information:
  When you submit a contact form or otherwise communicate with us, we collect personal information such as your name, email address, and the content of your message.

• Newsletter and Marketing Information:
  When you subscribe to our newsletter or marketing communications, we collect your name and email address. Where required by applicable law, we will obtain your consent before sending marketing communications, and you may opt out at any time.

• Transaction Information:
  When you purchase digital wall art from our Site, we collect information necessary to process your transaction, including order details, billing information, and payment status. Payments are processed securely through Stripe. We do not collect or store full payment card numbers; such information is handled directly by our payment processor in accordance with their privacy and security practices.

• Automatically Collected Information (Usage and Device Data):
  When you access or use our Site, we may automatically collect certain information about your device and browsing activity. This may include your IP address, browser type, device identifiers, operating system, referring URLs, pages viewed, dates and times of visits, and approximate geographic location derived from your IP address.

  We collect this information using cookies, pixels, and similar tracking technologies, including analytics services such as Google Analytics, to help us understand how users interact with our Site, improve functionality, and support our marketing efforts.

2) How we use your information

We use your personal information for the following purposes, in accordance with applicable data protection laws:

• To Provide and Deliver Services:
  To process and fulfill your orders, provide access to digital products you purchase, and deliver related services.

• To Process Payments and Ensure Security:
  To process transactions, verify payment information, detect and prevent fraud, unauthorized access, and other security-related issues. Payments are processed through Stripe.

• To Communicate with You:
  To respond to your inquiries, provide customer support, send service-related communications (such as order confirmations or updates), and notify you about changes to our services or policies.

• To Send Marketing and Promotional Communications:
  To send newsletters, promotional materials, and other marketing communications, where permitted by applicable law or based on your consent.

  If you submit a contact form or subscribe through our newsletter form, we may collect your name, email address (and message content, if provided), and add you to our email list to receive emails, including free resources, updates, and promotional content. Your information may be processed through a third-party email marketing service provider for the purpose of managing and delivering these communications.

  You may opt out at any time by clicking the “unsubscribe” link in our emails or by contacting us directly at contact@hugsfromheaven.net.

• To Improve and Analyze Our Services:
  To understand how users interact with our Site, analyze usage trends, improve functionality and user experience, and develop new products or services. We may use analytics tools such as Google Analytics for these purposes.

• To Comply with Legal Obligations:
  To comply with applicable laws, regulations, legal processes, and tax or accounting requirements, and to enforce our terms and policies.

3) How we share information

We may share your personal information with third parties in the following circumstances:

• Service Providers:
  We may share personal information with trusted third-party service providers that perform services on our behalf and help us operate our business. These service providers are contractually obligated to process your information only as necessary to provide their services and in accordance with applicable data protection laws.

  These may include:

  • Hostinger for website hosting and operation

  • Stripe for secure payment processing

  • MailerLite for email marketing and communications

  • Google Analytics for website analytics and performance monitoring

• Legal Compliance and Protection:

  
  We may disclose your personal information where required to do so by law, regulation, legal process, or governmental request. We may also disclose information where we believe it is necessary to:

  • enforce our terms, agreements, or policies

  • protect our rights, property, or safety, or that of our users or others

  • detect, prevent, or address fraud, security, or technical issues

4) Legal Bases for Processing (GDPR)

If you are located in the European Economic Area (“EEA”) or the United Kingdom (“UK”), we process your personal data only where we have a valid legal basis under applicable data protection laws. These legal bases include:

• Performance of a Contract:
  We process your personal data where it is necessary to enter into or perform a contract with you, including to process your purchases, provide access to digital products, and deliver related services.

• Legitimate Interests:
  We process your personal data where it is necessary for our legitimate business interests, provided that such interests are not overridden by your fundamental rights and freedoms. This includes activities such as maintaining website security, preventing fraud, improving our services, and analyzing Site usage.

• Consent:
  We rely on your consent to process your personal data in certain circumstances, including for sending marketing communications and, where required, for the use of non-essential cookies and similar tracking technologies. You have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

• Legal Obligations:
  We may process your personal data where necessary to comply with applicable legal and regulatory obligations, including accounting, tax, and reporting requirements.

5) Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, as described in this Privacy Policy, including to provide our services, comply with legal, accounting, tax, and reporting obligations, resolve disputes, enforce our agreements, and maintain security.

The specific retention period for personal information may vary depending on the nature of the information and the purposes for which it is processed. In determining appropriate retention periods, we consider factors such as the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure, and applicable legal requirements.

Where your personal information is no longer required, we will securely delete, anonymize, or de-identify it in accordance with applicable laws.

You may have the right to request deletion of your personal information, subject to certain exceptions under applicable law. For more information, please refer to the “Your Rights” section below.

6) Cookies and Tracking Technologies

We use cookies, pixels, and similar tracking technologies (“Cookies”) to collect and store certain information when you visit our Site. These technologies help us operate our website, enhance user experience, and analyze how our services are used.

We use Cookies for the following purposes:

• Essential Cookies:
  These Cookies are necessary for the operation, functionality, and security of our Site, including enabling core features such as page navigation and access to secure areas. These Cookies cannot be disabled through our systems.

• Analytics Cookies:
  We use analytics tools, including Google Analytics, to collect information about how visitors interact with our Site. This may include information such as pages visited, time spent on pages, referring links, and general usage patterns. This information helps us improve our website performance and user experience.

Where required by applicable law, we will obtain your prior consent before placing or using non-essential Cookies on your device. You may manage or withdraw your consent at any time through our cookie banner (if available) or by adjusting your browser settings.

In addition, you may opt out of Google Analytics by using Google’s opt-out tool available at: https://tools.google.com/dlpage/gaoptout

Please note that disabling certain Cookies may affect the functionality and performance of the Site.

7) Children’s Privacy

Our Site and services are intended for individuals who are at least 18 years of age. We do not knowingly collect, use, or solicit personal information from individuals under the age of 18.

If you are under 18, you must not use our Site, submit any personal information, or make purchases through our services.

If we become aware that we have inadvertently collected personal information from a minor without appropriate consent, we will take reasonable steps to delete such information as soon as practicable.

If you believe that a minor has provided personal information to us, please contact us so that we can take appropriate action.

8) Your Rights (GDPR)

If you are located in the European Economic Area (“EEA”) or the United Kingdom (“UK”), you have certain rights under applicable data protection laws, subject to applicable conditions and limitations. These rights may include:

• Right of Access:
  The right to request access to the personal data we hold about you and to receive a copy of that data.

• Right to Rectification:
  The right to request that we correct or update any inaccurate or incomplete personal data.

• Right to Erasure (“Right to Be Forgotten”):
  The right to request the deletion of your personal data, subject to certain legal exceptions.

• Right to Restrict Processing:
  The right to request that we limit the processing of your personal data in certain circumstances.

• Right to Object:
  The right to object to the processing of your personal data where such processing is based on our legitimate interests or for direct marketing purposes.

• Right to Withdraw Consent:
  Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

• Right to Data Portability:
  The right to request a copy of your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller, where technically feasible.

To exercise any of these rights, please contact us at legal@hugsfromheaven.net with the subject line: “Privacy Request.”

We may need to verify your identity before responding to your request. We will respond in accordance with applicable data protection laws.

You also have the right to lodge a complaint with your local data protection authority if you believe that our processing of your personal data violates applicable law.

9) California Privacy Rights (CCPA/CPRA)

If you are a resident of California, you have certain rights under the California Consumer Privacy Act (“CCPA”), as amended by the California Privacy Rights Act (“CPRA”), subject to applicable limitations and exceptions. These rights may include:

• Right to Know:
  The right to request information about the personal information we collect, use, disclose, “sell,” or “share,” including the categories of personal information, the sources from which it is collected, the purposes for which it is used, and the categories of third parties to whom it is disclosed.

• Right to Delete:
  The right to request deletion of your personal information that we have collected from you, subject to certain legal exceptions (such as where retention is required to complete a transaction or comply with legal obligations).

• Right to Correct:
  The right to request correction of inaccurate personal information that we maintain about you.

• Right to Opt Out of Sale or Sharing:
  The right to opt out of the “sale” or “sharing” of your personal information, as those terms are defined under California law.

• Right to Non-Discrimination:
  The right not to receive discriminatory treatment for exercising your privacy rights.

Exercising Your Rights

To submit a request, please contact us at legal@hugsfromheaven.net with the subject line: “California Privacy Request.”

We may need to verify your identity before processing your request, which may include confirming your request through the email address associated with your purchase or subscription, or requesting additional information where necessary.

Authorized agents may submit requests on your behalf, subject to verification and proof of authorization as required by law.

Sale or Sharing of Personal Information

We do not sell your personal information for monetary consideration.

We also do not “share” personal information for purposes of cross-context behavioral advertising, as defined under applicable California law.

We use Google Analytics solely to understand how visitors interact with our Site and to improve our services. We do not use advertising or remarketing features that track users across third-party websites for targeted advertising purposes.

If our use of analytics tools changes in the future, we will update this Privacy Policy accordingly.

10) Data Security

We implement appropriate technical and organizational measures designed to protect your personal information from unauthorized access, disclosure, alteration, and destruction.

Our Site is hosted by Hostinger, which provides security features such as encryption (SSL/HTTPS), firewalls, malware protection, and regular system monitoring.

Payments are processed securely through Stripe, a third-party payment processor that is certified to PCI DSS Level 1, the highest standard for payment security. Stripe uses advanced encryption and security measures to protect payment information, and we do not store your full payment card details.

However, no method of transmission over the Internet or method of electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security.

11) Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or our services.

When we make material changes, we will update the “Effective Date” at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your personal information.

Your continued use of the Site following any updates constitutes your acceptance of the revised Privacy Policy.

12) Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal information, you may contact us using the information below:

Hugs From Heaven L.L.C.

Website: www.hugsfromheaven.net
Contact: legal@hugsfromheaven.net

Mailing Address: 1400 Van Buren Street, Suite 200 PMB 1004 Minneapolis, MN 55413