Privacy Policy

Data We Collect

Peggy Fallin Law collects name, email address, shipping address, and payment method when you place an order. Browsing data — pages viewed, time on site, device type — is collected automatically via cookies.

We also collect any customization preferences submitted during the order process. These are retained solely to fulfill your order and provide post-purchase support.

How We Use Your Data

Your data is used to process orders, send shipping notifications, respond to support queries, and improve site performance. We do not use personal data for profiling or targeted advertising. We do not sell your information to third parties.

Cookies

This site uses session cookies to maintain your cart and preferences, and analytics cookies to measure page performance. Cookies do not contain payment data or personally identifiable shipping information.

You can disable cookies in your browser settings. Disabling analytics cookies does not affect your ability to browse or purchase on our site.

Data Sharing

We share your shipping address and order details with our factory partners and logistics providers solely to fulfill your order. These parties are contractually prohibited from using your data for any other purpose.

Data Security

All personal and payment data is encrypted with AES-256 in transit and at rest. Access to order data is restricted to authorized staff only, with role-based permissions and audit logging.

We conduct annual security reviews and notify affected customers within 72 hours of any confirmed data breach.

Your Rights

You have the right to access, correct, or delete your personal data at any time. To submit a request, email our support team with subject line 'Privacy Request'. info@peggyfallinlaw.com We respond within 5 business days.

Third-Party Processors

Payment processing on our site is handled by PCI-DSS certified providers. Analytics are processed by a privacy-compliant provider under a data processing agreement. No data leaves these controlled relationships.

Data Retention

Order records are retained for 7 years to meet financial reporting requirements. Account data is deleted within 30 days of account closure upon request. Anonymized analytics data may be retained indefinitely.

Policy Updates

This Privacy Policy may be updated to reflect changes in law or our data practices. Updates are posted on this page with a revised effective date. Continued use of our site after updates constitutes acceptance. Effective from: 2026.