Privacy Policy
Effective Date: October 27, 2026. Replaces the version dated June 24, 2026.
CookieMart ("we," "us," or "our") is committed to protecting the privacy of our clients and website visitors. This Privacy Policy explains what information we collect, how we use it, and how we protect it. By using our website or purchasing any CookieMart product or service, you agree to the practices described in this policy.
1. Information We Collect
When you place an order, request a call, or fill out our onboarding form, we collect the following personal information:
- Full name
- Email address
- Phone number
- Business name and type
- Business address (if provided)
- Shipping address — required to ship your NFC cards and acrylic pads to you
- Instagram handle and existing website (if provided)
- Uploaded photos, logos, or other files you share with us
- Notes, service descriptions, and any other details you voluntarily submit
We also collect NFC item preferences (card vs. pad selection, design details) and style preferences you provide during onboarding.
Shipping Address: We collect your shipping address solely for the purpose of delivering your NFC business cards and/or acrylic menu pads. This address is not sold, shared with third parties for marketing purposes, or used for any purpose beyond fulfillment of your physical order.
2. How We Use Your Information
We use the information you provide to:
- Confirm your subscription plan
- Build, launch, and maintain your custom website
- Design and program your NFC cards or acrylic pads
- Ship physical NFC products to your provided shipping address
- Communicate with you about your order, updates, and changes
- Process payments via Stripe
- Respond to inquiries and schedule calls with prospective clients
- Comply with legal obligations
3. Payment Processing
All payments are processed through Stripe. CookieMart does not collect, store, or have access to your payment card details. Stripe's privacy policy governs how your payment information is handled. You can review it at stripe.com/privacy.
4. Hosting & Technical Infrastructure
Your website is hosted on Netlify. Netlify may collect standard server logs including IP addresses and browser information as part of normal hosting operations. This data is governed by Netlify's privacy policy and is not shared with CookieMart beyond what is necessary to maintain your hosted site.
This website also uses Google reCAPTCHA to block spam on its forms and Google Fonts to display text. Google may collect device and usage information through these services, as described in Google's privacy policy.
5. NFC Tap Data
CookieMart does not collect data on individual NFC tap events. When a customer taps your NFC card or pad, they are directed to your hosted website URL. Any analytics associated with that visit are subject to the hosting provider's standard logging, not any tracking system operated by CookieMart.
6. Data Retention
We retain your personal information for as long as you are an active CookieMart subscriber. Upon cancellation of your subscription, we will retain your data for up to 90 days before deletion, unless you request earlier removal by contacting us directly.
Shipping addresses and order details may be retained for longer periods as required by applicable tax and business record laws.
7. Data Sharing
We do not sell, rent, or trade your personal information to third parties. We do not use your information for advertising purposes. The only circumstances under which your information may be shared are:
- With service providers necessary to fulfill your order (e.g., shipping carriers for physical product delivery)
- With Stripe for payment processing
- With Netlify for website hosting
- When required by law or legal process
8. Your Rights
You have the right to request access to, correction of, or deletion of the personal information we hold about you. To exercise any of these rights, contact us at cookiemart001@gmail.com or via Instagram @cookiemartnfc.
9. Security
We take reasonable precautions to protect your personal information. Onboarding data is transmitted via EmailJS to our Gmail inbox using encrypted connections. We do not store your personal data in any third-party database beyond the services described in this policy.
10. Children's Privacy
Our services are intended for businesses and adults. We do not knowingly collect personal information from anyone under the age of 18.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the effective date above. Continued use of our website or services after changes are posted constitutes your acceptance of the updated policy.
12. Contact
If you have any questions about this Privacy Policy, please contact us:
- Email: cookiemart001@gmail.com
- Instagram: @cookiemartnfc