Privacy Policy

Effective date: July 22, 2026
Last updated: July 22, 2026

This Privacy Policy explains how Made in Golden Isles collects, uses, stores, shares, and protects information about customers, website visitors, and other individuals who interact with our products and services.

By using our website, products, or services, you acknowledge the practices described in this Privacy Policy.

1. Information We Collect

We may collect the following categories of information:

Information You Provide

• Contact information, such as your name, email address, telephone number, billing address, and shipping address.
• Account information, such as your username, password, preferences, and account settings.
• Transaction information, such as products or services purchased, order history, and payment status.
• Communications, including messages, support requests, survey responses, reviews, and other correspondence.
• Content you submit, such as documents, photographs, comments, or other material uploaded through our services.

Payment Information

Payments may be processed by third-party payment providers. We may receive limited payment-related information, such as the card type, billing address, transaction identifier, and the last four digits of a payment card. We do not store complete payment-card details unless expressly disclosed and handled using applicable security standards.

Information Collected Automatically

When you use our website or services, we may automatically collect:

• IP address and approximate location.
• Device, browser, and operating-system information.
• Pages viewed, links selected, and features used.
• Access dates, times, referring pages, and session duration.
• Cookie identifiers and similar technical data.
• Diagnostic, security, error, and performance logs.

Information From Other Sources

We may receive information from service providers, business partners, social-media platforms, fraud-prevention services, publicly available sources, or organizations that direct you to our services. We handle this information in accordance with this Policy and any restrictions imposed by its source.

2. How We Use Information

We may process personal information to:

• Provide, operate, maintain, and improve our services.
• Create and manage customer accounts.
• Process payments, orders, refunds, and deliveries.
• Respond to questions and provide customer support.
• Personalize content and remember user preferences.
• Send service notices, security alerts, and administrative messages.
• Send marketing communications where permitted by law.
• Measure performance and understand how our services are used.
• Detect, investigate, and prevent fraud, abuse, security incidents, and unlawful activity.
• Enforce our agreements and protect our customers, business, and legal rights.
• Meet tax, accounting, regulatory, and other legal obligations.
• Carry out another purpose disclosed when the information is collected.

Where required, we rely on an appropriate legal basis, such as your consent, performance of a contract, compliance with law, or our legitimate interests when those interests are not overridden by your rights.

3. Data-Minimization Principles

We seek to protect customer information by:

• Collecting only information reasonably necessary for a stated business purpose.
• Limiting employee and contractor access according to role and business need.
• Using information only for disclosed or compatible purposes.
• Retaining information only as long as reasonably necessary.
• Reviewing the service providers that handle personal information for us.
• Deleting, anonymizing, or securely disposing of information when it is no longer needed, subject to legal requirements.

4. Cookies and Similar Technologies

We may use cookies, pixels, local storage, and similar technologies to operate our website, remember preferences, maintain sessions, analyze usage, prevent fraud, and support advertising where permitted.

You may be able to control non-essential cookies through our cookie settings or your browser. Blocking some technologies may affect the operation of certain features. Where required by law, we obtain consent before using non-essential cookies.

5. When We Share Information

We do not sell personal information for money. If we use data for targeted or cross-context behavioral advertising in a way legally treated as a "sale" or "sharing," we will provide any notices and opt-out rights required by law.

We may disclose information to:

• Service providers that perform functions such as hosting, payment processing, order fulfillment, analytics, customer support, security, and email delivery.
• Professional advisers, including lawyers, auditors, accountants, and insurers.
• Business partners, when needed to provide a requested product or service or when you have authorized the disclosure.
• Government authorities or other parties, when reasonably necessary to comply with law, respond to valid legal process, protect rights and safety, or investigate suspected misconduct.
• Parties to a business transaction, such as a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets.
• Other recipients at your direction or with your consent.

Service providers are authorized to process personal information only for specified purposes and are expected to protect it appropriately.

We may also use and disclose aggregated or de-identified information that cannot reasonably identify an individual. We will not attempt to re-identify such information except where permitted to test our security or privacy controls.

6. Data Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information. These may include:

• Encryption in transit and, where appropriate, at rest.
• Access controls and authentication measures.
• Secure development, monitoring, backup, and vulnerability-management practices.
• Employee confidentiality and security training.
• Incident-detection and response procedures.
• Periodic reviews of our safeguards and vendors.

No method of storage or transmission is completely secure. We therefore cannot guarantee absolute security. Customers should use strong, unique passwords and notify us promptly of suspected unauthorized account activity.

7. Data Retention

We retain personal information only for as long as reasonably necessary to provide services, fulfill the purposes described in this Policy, resolve disputes, enforce agreements, and comply with legal, tax, accounting, and security requirements.

Retention periods depend on the information's nature, sensitivity, purpose, and applicable legal obligations. When retention is no longer necessary, we delete, anonymize, or securely dispose of the information.

8. Your Privacy Rights

Depending on where you live, you may have the right to:

• Request access to personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of eligible information.
• Receive certain information in a portable format.
• Object to or restrict certain processing.
• Withdraw consent where processing relies on consent.
• Opt out of targeted advertising or certain data sales or sharing.
• Opt out of marketing emails by using the unsubscribe link.
• Appeal our decision on a privacy request.
• Lodge a complaint with an appropriate data-protection authority.

To submit a request, contact us using the information below. We may need to verify your identity before fulfilling it. An authorized agent may submit a request where permitted by law, subject to verification of the agent's authority.

We will not unlawfully discriminate against you for exercising a privacy right.

9. Children's Privacy

Our services are not directed to children under [13/16, as applicable], and we do not knowingly collect personal information from children below the applicable age without legally required parental consent. If you believe a child has provided information to us improperly, contact us so we can investigate and delete it where appropriate.

10. International Data Transfers

We and our service providers may process information in countries other than the country where it was collected. Those countries may have different data-protection laws. Where required, we use recognized safeguards for international transfers, such as approved contractual protections or an adequacy mechanism.

11. Third-Party Services

Our services may contain links to websites, applications, or services operated by others. Their privacy practices are governed by their own policies, and we are not responsible for their content or handling of personal information.

12. Marketing Communications

You may opt out of promotional emails using the unsubscribe link in the message or by contacting us. We may still send non-promotional communications concerning transactions, account security, legal notices, or service changes.

We send text-message marketing only with any consent required by applicable law. Instructions for opting out will be included in those messages.

13. Automated Decision-Making

If we use personal information to make solely automated decisions that produce legal or similarly significant effects, we will provide any notice, explanation, human-review option, or opt-out right required by applicable law.

14. Security Incidents

If a security incident affects personal information, we will investigate, take reasonable steps to contain and remediate it, and notify affected individuals or authorities when required by law.

15. Changes to This Policy

We may update this Privacy Policy to reflect changes to our services, practices, or legal obligations. We will post the updated version with a revised "Last updated" date. If changes are material, we will provide additional notice when required.

16. Contact Us

Questions, complaints, and privacy requests may be directed to:

Made in Golden Isles
St. Simons Island, GA 31522
Email: Info@madeingoldenisles.com