Who we are
We are Pop Vultures and our website address is: https://popvultures.xyz. We sell enamel pins and various pop culture collectibles on our website. The Pop Vultures include Chris Sasich, Eli Sasich, and Pat Thompson. You can contact us at firstname.lastname@example.org or through the contact page on our website. We also host a podcast that can be found at https://popvultures.xyz/podcast.
What personal data we collect and why we collect it
Shop & Orders
When a customer places an order on our site, we employ PayPal to handle payment and processing. In return, PayPal provides us with the customer’s name, shipping address, and their phone number (if the user has provided it). We also collect the order date and item details when an order is placed to allow for order fulfillment.
We keep and use this data to calculate shipping costs, to manage any customer service requirements such as providing order and shipping information or providing refunds and cancelling orders. This information will also be used to comply with any legal requirements we have. We may also use this information to improve our store offerings and checkout flow.
If a user chooses to create an account at the time of checkout, we will store the provided username and password to allow for access to their account in the future. As with any WordPress website, your password is stored as a hash and never as plaintext.
We do not interact nor store any credit card or other payment information of any kind as that is handled by PayPal through their service.
When a visitor fills out the contact form on our contact page, we collect the individual’s name, email address, comment, and their IP address and browser user agent string to help with spam detection. A visitor may choose not to provide their name, however. This information is not used for marketing purposes, only for customer service purposes.
We use both session and persistent cookies. The information that we may collect with these automated methods may include, for example, your IP address, cookie information, a unique device or user ID, browser type, system type, the content and pages that you access on our website, the frequency and duration of your visits to our website, and the “referring URL” (i.e., the page from which you navigated to our website). With this information, we can distinguish you from other users of the website and complete transactions.
If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
Analytics data is stored and processed by Google Analytics. Google Analytics provides us with aggregated data in order to help us make informed business decisions. Ultimately, Google, as a third party, controls information collected through Google Analytics and you should check and be comfortable with its privacy practices prior to using the Pop Vultures website. You may review information about Google’s privacy practices with respect to Google Analytics at http://www.google.com/analytics/learn/privacy.html.
Log data that includes the IP address a user accessed the site with, the user’s user-agent, and what area or content the user accessed is analyzed for malicious activity and used as an additional means to collect analytics. This data is not sent to a third-party nor sold to any other business or individual. This data is archived.
Who we share your data with
We do not sell or rent email addresses and other personal information that we collect directly through our website. Please be aware, however, that any information that you voluntarily choose to display on any publicly available portion of our website (i.e. comments), becomes publicly available and may be collected and used by us or others without restriction.
We use Google for website analytics to improve our business processes, offerings, and make website design changes. This data is passed from our website to Google for further analysis.
Order data is passed to PayPal for payment processing prior to completion. This includes what you ordered, when, and the total for that order. Your shipping information is also passed to USPS from PayPal for shipping of any product you have ordered on our site.
Who on our team has access
Members of our team have access to the information you provide us. For example, Administrators can access:
- Order information like what was purchased, when it was purchased and where it should be sent, and
- Customer information like your name, email address, and billing and shipping information.
Our team members have access to this information to help fulfill orders, process refunds, and support you.
As of this moment in time, there are three members of our team and they include the Pop Vultures (Chris, Eli, and Pat).
How long we retain your data
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
If a user completes an order through our website, we generally store information about you for as long as we need the information for the purposes for which we collect and use it, and we are not legally required to continue to keep it. For example, we will store order information for six years for tax and accounting purposes. This includes your name, email address and billing and shipping addresses. We store order information and provided personal details indefinitely for a user who has created an account to assist in the checkout process and provide feedback and order history to users.
If a visitor uses the contact form on our site, we retain the provided personal information for a maximum of one year to provide follow up capabilities. After this time, this information is deleted from our website and database.
Analytics data shared with Google is retained for 26 months before being deleted.
We retain raw log data for one year. We retain aggregate and anonymous log data indefinitely.
What rights you have over your data
You may, as a visitor to our website, choose not to provide us with personal information. If you have an account on this site, have left comments, or have placed an order, you may also, at any time, access your personal information to update, correct, or delete certain personal information about you by contacting us at email@example.com. You can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Please be aware that even if you update or remove personal information that you have provided to us, your personal information may be retained in our backup files and archives for a reasonable period of time for legal purposes.
Where we send your data
Analytics data is sent to Google for processing and reporting.
A user’s order details are passed to PayPal for order processing and shipment. The user’s contact information and shipping address is also passed to the USPS for order fulfillment.
The Pop Vultures website is hosted in the United States, and we may use service providers in the United States and elsewhere to process personal information on our behalf. If you use the Pop Vultures website outside the U.S., please note that your personal data may be transferred outside of your home jurisdiction to the United States and to other jurisdictions where our affiliates and service providers are located. Some of these jurisdictions, including the United States, do not have equivalent data protection laws as the European Union and other jurisdictions. By using our website, you are agreeing that your personal data may be transferred to the United States and other jurisdictions electronically.
How we protect your data
The security of your information is important to us, including, but not limited to, the personal information collected via the Pop Vultures website. We use reasonable security measures to protect against the loss, misuse, and alteration of personal information under our control, both during the transmission and once we receive it. This includes, but is not limited to, the use of firewalls, encryption, and authentication. Although we make good faith efforts to maintain the security of such personal information, no method of transmission over the Internet or method of electronic storage, is 100% secure and we cannot guarantee that it will remain free from unauthorized access, use, disclosure, or alteration. You are advised to use caution when determining what personal information to disclose to us.
Our website employs industry standard authentication and encryption of data while it is in transit using Transport Layer Security (TLS). We store personal information only on servers with limited access that are located in controlled facilities. Additionally, our website is protected and actively monitored for any potential vulnerabilities or active threats.
What data breach procedures we have in place
For contact information that is still stored within our database, we may attempt to notify any affected users via email if a data breach occurs so they may take the appropriate steps to protect their information. By using our site and providing us with your personal information, you agree that we may contact you electronically in the event of a data breach.
What third parties we receive data from
When processing order payments, we receive a customer’s name, shipping address, and at times, phone number from PayPal. This data allows us to process, track, and support customer orders.