Privacy Policy

GDPR

As our company conducts business in Europe, we will collect, use and disclose personal data in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (“GDPR”). In general, before we collect any personal data from you, we will notify you of the purposes for which your personal data may be collected, used, and disclosed, as well as obtain consent for the intended purposes. However, the Brazilian General Data Protection Law (“LGPD”) may apply to those circumstances where Brazilian citizens are involved and the rights to them granted have been extended to all our users. The same applies to the processing that falls within the scope of the California Consumer Privacy Act (CCPA), whose effects are also extraterritorial. Other regulations may apply depending on your location.

1. What personal data do we collect and for which purposes?
The Administrator may collect the following data:

Location.
IP address.
Date and time of access.
Browser, language settings, version of browser software operating system, and surface.
Hardware data.

Information that you may share with the service providers or when you get in contact with us.
We may use the information for the following purposes:

To communicate news and promotions about our services (including newsletters which you must signup for), as well as to provide, improve, test, and monitor the effectiveness of our service.
Monitor performance indicators and enhance the functioning of the site.
Administering and managing your relationship as a user of the platform.
Respond to questions that may arise in the normal use of the platform.
For any other purpose indicated to you at the time you provide the information.
Complying with legal requirements.

2. What is our legal basis for gathering and processing this personal data?
Our legal basis for collecting and using your personal data will depend on the personal data concerned and the specific context in which we collect it. Under the data protection regulations, we may lawfully process your personal data on one or more of the following lawful basis:

In the performance of a contract for the provision of goods or services.
Consent of the user.

3. Who do we share your data with?
We will not share your personal information with a third party outside of My Granny's Attic Antiques except in limited circumstances, including if required by law or regulation, by a competent court or authority, or if we believe that such action is necessary to prevent fraud or crime or to protect our Services or the rights, property or personal safety of any person.

The third-party data management platforms or advertising and analytics partners we work with are:

Facebook.
Google Ads.
Paypal.
WordPress.
Google Cloud.
Google Analytics.
You may go to the websites of these third parties to access their privacy policies.

We respect your privacy and we will not sell your personal information to any third party. We may disclose data and aggregate statistics about users of our Services to prospective partners, advertisers, sponsors, and other reputable third parties in order to describe our Services, deliver targeted advertisements, or for other lawful purposes, but these data and statistics will not include information which can be used to identify you.

We do not sell, trade, or otherwise transfer to outside parties your personal information. 

4. International transfers
We operate globally and may transfer your personal information to third parties in locations around the world for the purposes described in this privacy policy. Wherever your personal information is transferred, stored or processed by us, we will take reasonable steps to safeguard the privacy of your personal information.

To those to whom the GDPR applies, we inform you that some of the above-mentioned providers are located in territories outside the European Economic Area that do not offer a level of data protection comparable to that of the European Union. In such cases, we transfer your data with adequate safeguards and always keep your data safe, using the most convenient international data transfer tools, for example, the Standard Contractual Clauses and any relevant supplementary measures.

Our only use of this clause is to fill out customs forms and shipping labels.

5. Your Rights as a Data Subject
You have various rights in relation to your personal information. In particular, you have the right to:

Obtain confirmation that we are processing your personal information and request a copy of the personal information we hold about you.
Ask that we update the personal information we hold about you or correct such personal information that you think is incorrect or incomplete.
Ask that we delete personal information that we hold about you, or restrict the way in which we use such personal information.
Wherever we rely on your consent, you will always be able to withdraw that consent.
To exercise any of these rights, you can get in touch with us or our data protection responsible using the details set out in Section 14.

You have also the right to launch a complaint with the competent authority should you be of the opinion that we have not complied with applicable privacy obligations.

6. How do we protect and secure your Personal Data?
Protecting the information that we receive about you is our priority. We take appropriate security measures to protect your information from loss, misuse, and unauthorized access, alteration, disclosure, or destruction. We have taken measures to ensure the ongoing confidentiality, integrity, availability and resiliency of systems and services that process personal information and will restore the availability and access to information in the event of a physical or technical incident in a timely manner.

My Granny's Attic Antiques has adopted the Data Protection security levels legally required and contained in Royal Decree 1720/2007 of the PDPL Directive. However, it provides other additional means, such as state-of-the art firewalls, apart from technical measures such as software for the encryption of confidential information and control of access to personal information, restricted users, security policies, users and passwords that expire as required by the LOPD, and other systems aimed to prevent misuse, alteration, unauthorized access and theft of personal data provided to My Granny's Attic Antiques.

My Granny's Attic Antiques uses the SSL/TLS protocol to establish secure connections between users and our servers over the internet, ensuring that the information relayed is encrypted and unable to be read by an external third party, making your transaction on our website much more secure.

Unfortunately, no organization can guarantee the absolute security of information, especially information transmitted over the internet. However, if you have reason to believe that your interaction with us is no longer secure (for example, if your personal information might have been compromised), please contact us immediately at admin@mygrannysatticantiques.com.

7. How long do we store Personal Data?

We will retain your personal information for as long as needed or permitted in light of the purpose(s) for which it was obtained. The criteria used to determine our retention periods include: (i) the length of time we have an ongoing relationship with you and provide the Service to you; (ii) whether there is a legal obligation to which we are subject; and (iii) whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation, or regulatory investigations).

8. Responsibility for the accuracy and truthfulness of personal data.

The user is solely responsible for the accuracy and correctness of the data provided through any of the forms on the web, exonerating My Granny's Attic Antiques from any responsibility in this regard. Users guarantee and respond, in any case, the accuracy, validity, and authenticity of the personal data provided, and undertake to keep them updated. The user agrees to provide complete and correct information in the forms you fill out.

My Granny's Attic Antiques is not responsible for the veracity of the information that is not of its own elaboration and of which another source is indicated, so it does not assume any responsibility for hypothetical damages that may arise from the use of such information.

My Granny's Attic Antiques is exonerated from liability for any loss or damage that the user may suffer as a result of errors, defects, or omissions in the information provided by My Granny's Attic Antiques provided that comes from outside sources.

9. Data of minors.

As a general rule, My Granny's Attic Antiques will not process data of minors for the realization of the treatment and services provided by My Granny's Attic Antiques. If a user provides data of children under 14 years (or under 16 for Californian Residents), the user guarantees the prior consent of their parents or guardians. If My Granny's Attic Antiques requires it, the user will have to prove having obtained such consent.

10. How do we use Cookies?

We use cookies to optimize and personalize your browsing experience. Cookies are physical information files that are stored in the user’s own computer or other browsing device. The information collected through cookies serves to facilitate the user’s navigation of the portal and to optimize the browsing experience. If the user does not wish to have cookies installed on his or her hard drive, he or she has the possibility of configuring the browser in such a way as to prevent the installation of these files. You can even review right now your cookie preferences for this website at the following link: Cookie preferences

11. Information for California Residents
This notice to California residents is provided under California law, including the California Online Privacy Protection Act (“CalOPPA”), and the California Consumer Act (“CCPA”), Cal. Civil Code 1798.100, et. seq. This notice supplements our privacy policy by explaining your California privacy rights if you are a California resident and provides certain mandated disclosures about our treatment of California residents’ information, both online and offline.

In the last 12 months, we collected the following categories of personal information: identifiers (such as name, contact information, and device identifiers), approximate geolocation data, inferences (such as approximate location or product interests). The sources of personal information from whom we collected are directly from our users.

For more details about the personal information we collect, including the categories of information and sources, please see “What personal data do we collect and for which purposes?” section above. The business or commercial purposes of collecting personal information are described in more detail in “What personal data do we collect and for which purposes?” section above.

We share this information with the categories of third parties described in “With whom do we share your personal data with?” section above.

Subject to certain limitations and exceptions, the CCPA provides California consumers the right to request to know, up to two times each year, more details about the categories and specific pieces of personal information about you that we collect, use, disclose, and sell WE DO NOT SELL ANY INFORMATION ON OUR CUSTOMERS; the right to delete their personal information; the right to opt-out of any “sales” that may be occurring; and the right to not be discriminated against for exercising these rights.

We do not “sell” the personal information we collect or any personal information of known minors under 16 years of age. (and will not sell it in the future without providing a right to opt-out).

Do Not Track (“DNT”) is a privacy preference that users can set in certain web browsers. DNT is a way for users to inform websites and services that they do not want certain information about their webpage visits collected over time. 

12. Information for Brazilian Residents
This notice to Brazilian Residents is provided under Brazilian General Data Protection Law (LGPD). This notice supplements our privacy policy by explaining your Brazilian privacy rights if you are a Brazilian resident and provides certain mandated disclosures about our treatment of Brazilian residents’ information, both online and offline.

If you, a user residing in Brazil, visit one of our pages, your personal data is controlled by My Granny's Attic Antiques.

Your personal data is primarily used to provide you with the My Granny's Attic Antiques products or services you request. It may also be used to comply with legal obligations we are subject to or to fulfill our legitimate interests, such as to personalize your experience, develop and improve our services or to detect illegal activities. My Granny's Attic Antiques may also process personal data for purposes of complying with applicable local laws and regulations in the territory where our products and services are offered. With your prior consent or whenever there is a legitimate interest at stake, it may also be used to send you offers and promotions ONLY if you sign up for our newsletter.

You have several rights set forth in Brazil’s data protection legislation including but not limited to the right to confirm the existence of the processing of your personal data, request access to, change, or remove your personal data, or change your marketing preferences (including withdrawing your consent at any time) – please read our entire Privacy Policy to learn more about managing your marketing preferences or deleting your personal data.

13. Updates to this Privacy Policy
We reserve the right to modify or amend this Policy. For instance, we may need to change this Policy as new privacy legislation is introduced or as existing regulations are amended. Changes to this Policy will be posted on the website. The Administrator will communicate relevant changes as far as possible.

Bottom Line:
My Granny's Attic Antiques does not sell or give away any of your information. If you signup to receive our newsletter we will keep your name and email address on file and you can unsubscribe at any time. All payments are processed through a secure third party and we cannot see your payment information.

All of the above is required information if one does business with individuals in Europe, Brazil or California.