Privacy policy

Last updated: 【DATE】

Patina & Grace, LLC is a family-run flea market and antique store at 17186 Highway 70, Benton, Arkansas. This page explains what we do with your information when you contact us, sign up for our emails, create an account, or place an order on this website. We have tried to write it in plain English and to describe only what we actually do.

The short version

We collect very little.
We never see or store your full card number. Payments run through Shopify's checkout.
We do not sell your information, and we do not share it with our booth vendors for their own marketing.
If you want to know what we hold about you, or want it corrected or deleted, email or call us and we will do it.

What we collect

When you use our vendor enquiry or contact form. We collect your name, email address, phone number, and whatever you write in the message, along with a note of which page the form was sent from. It is emailed to us at png@patinangrace.com and we use it only to answer you.

When you sign up for our emails. We collect your email address, so we can send you news about the store. You can unsubscribe at any time using the link in any email we send.

If you create an account. Our accounts are run by Shopify. You sign in with a one-time six-digit code sent to your email address — there is no password, and we never create, receive, or store one for you. Your account holds your email address, your name if you give it, any addresses you save, and a record of any orders you place.

If you place an order on this website. We collect the items ordered, the amount, your name, your billing address, your shipping address if the order is being shipped, and your email address and phone number so we can reach you about it.

Payment information — please read this part. We do not collect or store your full payment card number, debit card number, or bank account number. When you pay for an order on this website, your card details go directly into Shopify's checkout and on to its payment processors. They are not transmitted to us and we could not store them if we wanted to. What we do receive and keep is limited information about the payment: the type and brand of card, the first and last few digits of the card number, its expiry date, the name on the card, the company that issued it, the result of the address and security-code checks, and confirmation of whether the payment went through. If you pay in person at our store, your card is handled by our in-store payment terminal and its processor on the same basis.

Automatically, when you visit. Like almost every website, ours records technical information about your visit — your IP address, your browser and device type, the pages you look at, and what you put in your cart. This comes from cookies set by Shopify. See "Cookies" below.

How we use it

To answer your questions and reply to enquiries about booth space.
To process and fulfil orders you place, keep you updated on them, arrange delivery or pickup, and sort out any problem with an item.
To keep our inventory accurate and to pay the booth vendor whose item sold.
To send you our newsletter, if you asked for it.
To protect our forms and accounts from spam and automated abuse.
To keep the business records we are required to keep, and to comply with the law.

Who we share it with

First, a word about a word. Throughout this website, "booth vendor" means one of the independent sellers who rents space in our store. Below, "service provider" means a company that provides a service to us. They are not the same thing, and we do not sell your personal information to anyone, and we do not share it with our booth vendors for their own marketing.

We share information with these service providers:

Shopify, which hosts this website and provides our online store, checkout, customer accounts, and analytics. Card payments are handled by Shopify and its payment processors.
hCaptcha (Intuition Machines, Inc.), which protects our contact and account forms from automated abuse. It receives information about the connection making the request, including your IP address and the date and time.
Traxia, Inc. (SimpleConsign), our point-of-sale and inventory system. Our online listings come from it, and order and inventory information is exchanged with it so that our stock stays accurate and the right booth vendor is paid.
Other service providers we may use from time to time for things like email delivery, accounting, or shipping an item to you. We only give them what they need to do the job.

We may also share information if the law requires it — a subpoena, a warrant, a tax or regulatory obligation — or if the business is ever sold or transferred.

Cookies

When you visit this website, Shopify sets a small number of cookies on your device. Some are strictly necessary to make the site work at all — remembering your cart, your currency, and your session. Others help us understand how visitors use the site, such as which pages get looked at. We do not run advertising pixels for Facebook, Google, or any other ad network on this site. You can block or delete cookies in your browser settings, though parts of the site may stop working if you do.

How long we keep things

Contact and vendor enquiries: we keep the email for up to 【2 YEARS — CONFIRM】 and then delete it.
Newsletter: until you unsubscribe.
Orders and account records: as long as we need them for tax, accounting, and vendor-payment purposes.

When we no longer need records that contain personal information, we destroy them — shredding paper, deleting files.

Your choices

Whoever you are and wherever you live: if you ask us what information we hold about you, we will tell you. If you ask us to correct it or delete it, we will. Email png@patinangrace.com or call 501-545-3977 and we will get back to you within 45 days. We may need to keep some records — a completed sale, for instance — where the law requires it.

You can unsubscribe from our emails at any time using the link in any email. Unsubscribing does not stop us replying to a question you asked us or contacting you about an order.

Security

We take reasonable steps to protect the information we hold, and we keep it to a minimum on purpose. But no website and no business is perfectly secure, and we cannot promise otherwise. If we ever have a breach affecting information the law requires us to report, we will tell the people affected as quickly as we can.

Children

Our store and this website are meant for adults. We do not direct this website to children or teenagers, we do not ask anyone's age, and we do not knowingly collect personal information from anyone under 18. If you believe a child has given us their information, email png@patinangrace.com and we will delete it.

Other websites

This site links out to a few other places, such as our Facebook page and Google Maps for directions. Once you follow one of those links you are on someone else's website, under their privacy policy, not ours.

About Shopify

This store is hosted by Shopify, and Shopify collects and processes personal data about our customers in order to provide the store, the checkout, and payment processing. You can read Shopify's Consumer Privacy Policy, and you can exercise certain rights over the information Shopify holds through the Shopify Privacy Portal.