Privacy Policy

Introduction

At Risen Grace Marketplace, we are committed to protecting your privacy and being transparent about how we handle your personal information. This Privacy Policy explains what information we collect, how we use it, and the choices you have regarding your data.

By using our website and services, you agree to the practices described in this policy. If you have any questions, please contact us at support@risengrace.shop.

Information We Collect

Information You Provide

When you create an account, place an order, or contact us, we may collect:

• Contact details: name, email address, phone number
• Shipping address: street, city, state, ZIP code
• Account credentials: email and password (stored as a secure hash)
• Order details: products purchased, quantities, payment confirmation
• Messages: content of emails or form submissions you send us

Information Collected Automatically

When you visit our website, we may automatically collect:

• Technical data: IP address, browser type, device information
• Usage data: pages visited, time spent, referring URLs
• Cookies: session tokens for authentication and site functionality

How We Use Your Information

We use the information we collect to:

• Process and fulfill your orders, including shipping and tracking
• Communicate with you about your orders, account, and inquiries
• Provide customer service and process returns or refunds
• Send promotional emails and newsletters (only if you opt in)
• Improve our website, products, and services
• Detect, prevent, and address fraud or security issues
• Comply with legal obligations and tax requirements

How We Share Your Information

We do not sell your personal information. We may share your information with the following parties only as necessary to operate our business:

• Shipping carriers to deliver your orders (name, address, tracking)
• Payment processors to process transactions securely
• Email service providers to send order confirmations and responses
• Legal authorities when required by law or to protect our rights

If you purchase Risen Grace products through Amazon, Amazon's privacy policy also applies to the information collected during that transaction.

Data Security

We take the security of your personal information seriously. Our protective measures include:

• Encrypted passwords using PBKDF2 with SHA-256 hashing
• HMAC-signed session tokens to prevent tampering
• HTTPS encryption for all data transmitted between your browser and our servers
• Strict security headers including CSP, HSTS, and X-Frame-Options
• Rate limiting on authentication endpoints to prevent abuse
• Role-based access control to restrict administrative functions

While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but we are committed to using industry best practices.

Cookies & Session Data

We use cookies to maintain your login session and provide site functionality. Specifically:

• Session cookie: keeps you logged in between page visits (7-day expiration)
• HttpOnly & Secure: cookies are protected against cross-site scripting and transmitted only over HTTPS

We do not use third-party advertising or tracking cookies. You can disable cookies in your browser settings, but this may affect your ability to log in and use certain features.

Your Privacy Rights

You have the following rights regarding your personal information:

• Access: request a copy of the personal data we hold about you
• Correction: request that we correct inaccurate or incomplete information
• Deletion: request that we delete your account and associated data
• Opt-out: unsubscribe from promotional emails at any time
• Data portability: request your data in a structured, machine-readable format

To exercise any of these rights, please contact us at support@risengrace.shop.

Children's Privacy

Our website is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. We will post the updated policy on this page and update the "Last updated" date at the top. We encourage you to review this page periodically.

Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your personal information, please reach out to us: