This Privacy Policy describes how Crown of Milk and Honey ("we," "us," or "our") collects, uses, discloses and protects personal information obtained through our website (www.crownofmilkandhoney.com) and related services.  It applies to personal information provided by customers, website visitors and other individuals who interact with us.

Crown of Milk and Honey follows the principles of transparency and accountability when processing personal data.  Guidance on creating a privacy policy recommends checking which data privacy laws apply, outlining what personal information is collected, explaining how it is obtained and used, identifying who has access, describing security measures, informing users how to opt out, indicating retention periods, addressing data disputes, describing processes for children’s data, communicating user rights and sharing administrative contact details.  The company endeavors to address these elements in the sections below.

We may collect and process the following categories of personal information:

1. Contact and account details. Name, email address, billing and shipping address, phone number and account credentials.
    
2. Order and payment information. Products ordered, transaction totals, order history and payment details.  Payment information is processed by third‑party payment processors; we do not store complete credit card numbers.
    
3. Device and usage data. IP address, browser type, operating system, referral URLs, pages viewed and interactions with the website.  This data may be collected through cookies or similar tracking technologies.
    
4. Communications. Records of emails, messages or support inquiries.
    

We do not knowingly collect information from children under 13.  If we learn that a child under 13 has provided personal information, we will delete it.

Personal information is collected:

• Directly from you. When you place an order, create an account, subscribe to a newsletter or contact us via email or forms.
   
• Automatically. Through cookies, web beacons and similar technologies that collect device and usage data when you visit our site.  Users can manage cookie preferences through browser settings.
   
• From third parties. Payment processors, shipping carriers and analytics providers may send us information related to your transactions or site usage.
   

We process personal information for the following purposes:

1. Order fulfillment and account management. To process your orders, deliver products, provide order confirmations and manage your account.
    
2. Customer service. To respond to inquiries, requests or complaints.
    
3. Marketing and communications. To send promotional emails or newsletters (with your consent) and notify you about product updates or events.  You can opt out of marketing communications at any time by following the unsubscribe instructions or contacting us.
    
4. Website operation and analytics. To maintain and improve our website, understand user behavior and enhance our services.
    
5. Legal and compliance obligations. To comply with applicable laws, regulations, tax obligations and to protect the rights and safety of Crown of Milk and Honey, our customers and others.
    

Where required by law (e.g., under the GDPR for EU residents), we rely on your consent, our contractual obligations (to process your orders), our legitimate interests (to improve services and communicate with customers) or our legal obligations as the lawful basis for processing personal data.

We may share personal information with:

• Service providers. Third‑party vendors who perform services on our behalf, such as payment processors, shipping carriers, email service providers, marketing platforms and analytics providers.  We require these providers to use personal information only to provide services to us and to safeguard it.
   
• Business partners. If we collaborate with partners to offer promotions or joint products, we may share limited information with them where permitted by law.
   
• Legal authorities. Where required by law or to protect our rights, safety or property or those of others.
   
• Business transfers. In the event of a merger, acquisition, sale of assets or similar transaction, personal information may be transferred as part of the business assets.
   

We do not sell personal information to third parties.

Our service providers and business operations may be located in countries other than your own.  When personal information is transferred outside of the United States, we take steps to ensure it receives an adequate level of protection, such as entering into data‑processing agreements with recipients.

Cookies are small text files that are stored on your device when you visit a website.  We use cookies and similar technologies to:

• Enable core site functionality and security;
• Remember your preferences and settings; 
• Analyses website traffic and user behavior to improve our services;
• Provide relevant marketing.
   

You can manage or disable cookies through your browser settings.  Some cookies are essential for the site to function; blocking these may affect your experience.

We implement administrative, technical and physical security measures designed to protect personal information from unauthorized access, loss, misuse or alteration.  Despite these measures, no method of transmission or storage is completely secure.  We retain personal information only as long as necessary for the purposes described in this Policy, to comply with legal obligations or to resolve disputes.

Depending on your jurisdiction, you may have rights regarding your personal information, including:

• Access and portability. Request a copy of personal information we hold about you.
   
• Correction. Request that we correct inaccurate or incomplete personal information.
   
• Deletion. Request deletion of personal information, subject to certain exceptions (for example, records required for legal compliance).
   
• Opt‑out of marketing. Opt-out of receiving marketing emails by using the unsubscribe link in our emails or contacting us.
   
• Do‑not‑sell/Do‑not‑share requests. If applicable under state law (e.g., the CCPA/CPRA), request that we do not sell or share your personal information.
   
• Withdraw consent. Where we rely on consent, withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
   

To exercise these rights, please contact us using the details in section 13.  We may need to verify your identity before processing your request and will respond within the timeframe required by law.

Our website is not intended for children under 13 years of age, and we do not knowingly collect personal information from children.  If you believe that a child has provided us with personal information, please contact us so that we can delete the information.

Guidance on privacy policies recommends sharing administrative and contact information and keeping the policy up to date.  State laws like the California Consumer Privacy Act require businesses to update their privacy policies at least once every 12 months.  We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or other factors.  We encourage you to review the policy periodically.  When we make material changes, we will post the updated policy on our website and revise the "Last updated" date at the top of the policy.

If you have questions or requests regarding this Privacy Policy or our data practices, please contact us:

Crown of Milk and Honey
Website: www.crownofmilkandhoney.com
Email: customerservice@crownofmilkandhoney.com
Mailing Address: 99 Hudson Street, 5th Floor, Suite 7294, New York, 10013

If you have a concern about our use of personal information, please contact us first.  If we are unable to resolve your concern, you may have the right to lodge a complaint with your local data protection authority or attorney general’s office.

Summary of Key Points

Section Key points

Guidelines followed

Our policy is structured around widely recognized steps for privacy compliance: identify applicable laws, disclose data collection, explain data uses, identify recipients, ensure security, provide opt‑out options, define retention periods, address disputes, outline children’s data processes, articulate user rights and share contact details.

Information collected

We collect contact details, order and payment information, device data via cookies and communications. We do not store full payment card numbers.

Uses of data

Information is used to fulfil orders, provide customer service, send marketing communications (with consent), improve the website and comply with legal obligations.

User rights

Depending on jurisdiction, users can access, correct or delete their data, opt out of marketing and withdraw consent; requests may require identity verification.

Policy updates

This policy will be updated as laws and practices change. Laws like the CCPA require updates at least annually.