Effective Date: 10.17.2025

1. Introduction

Welcome to Tiny Treasures (“we,” “us,” or “our”). We value your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, share, and protect your personal data when you visit our website, make a purchase, or otherwise interact with us.

​

We operate in compliance with the General Data Protection Regulation (GDPR) and applicable U.S. privacy laws.

​

By using our website or providing your personal information, you consent to this Privacy Policy.

​

2. Information We Collect

We collect personal information in order to process your orders, improve our services, and communicate with you. The types of data we may collect include:

a. Personal Information

• Name

• Shipping and billing address

• Email address

• Phone number

b. Payment Information

We accept payments via PayPal and credit/debit cards.
Your payment details (such as card number) are processed securely by our payment processors and are not stored on our servers.

c. Technical Information

• IP address

• Browser type and version

• Device information

• Pages visited and time spent on our website

d. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Improve your browsing experience

• Analyze website traffic

• Remember your preferences

• Facilitate checkout and account login

​

You can manage or disable cookies through your browser settings.

​

3. How We Use Your Information

We use your personal data for the following purposes:

• To process and fulfill your orders

• To communicate with you about orders, products, and updates

• To provide customer support

• To improve our website and marketing efforts

• To comply with legal and tax obligations

​

We do not sell or rent your personal data to third parties.

​

4. Sharing Your Information

We may share your information with trusted third parties only as necessary to operate our business, including:

a. Dropshipping Suppliers

Your name, shipping address, and order details are shared with our third-party suppliers and fulfillment partners to deliver your order.

b. Payment Processors

We use PayPal and secure credit card gateways to process payments. These providers collect and process your payment information in accordance with their own privacy policies.

c. Website Platform

Our store is hosted on Wix.com Ltd., which provides the online e-commerce platform that allows us to sell our products. Wix stores your data securely and may transfer data internationally (see Section 7).

d. Legal Requirements

We may disclose information if required to comply with applicable laws, regulations, or legal requests.

​

5. Data Retention

We retain personal data only as long as necessary to:

• Fulfill the purposes outlined in this policy

• Comply with legal, accounting, and tax obligations

• Resolve disputes

​

When personal data is no longer needed, it will be securely deleted or anonymized.

​

6. Your Rights Under the GDPR

If you are located in the European Economic Area (EEA), you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.

• Right to Rectification: Request corrections to inaccurate or incomplete data.

• Right to Erasure (“Right to Be Forgotten”): Request deletion of your data under certain conditions.

• Right to Restrict Processing: Request that we limit processing of your data.

• Right to Data Portability: Receive your data in a structured, machine-readable format.

• Right to Object: Object to processing based on legitimate interests or direct marketing.

• ​

To exercise any of these rights, please contact us at tinytr.co@gmail.com.
We will respond to all requests in accordance with GDPR requirements.

​

7. International Data Transfers

As we are based in the United States and use third-party service providers such as Wix, PayPal, and international suppliers, your personal data may be transferred to and processed outside the European Economic Area (EEA).

We ensure that any such transfers comply with applicable data protection laws, using safeguards such as Standard Contractual Clauses (SCCs) or providers certified under recognized privacy frameworks.

​

8. Data Security

We implement appropriate technical and organizational measures to protect your data from:

• Unauthorized access

• Disclosure

• Alteration

• Destruction

​

Although no method of transmission over the Internet is 100% secure, we continuously update our security practices to ensure your information remains safe.

​

9. Third-Party Links

Our website may contain links to third-party websites (such as PayPal or product suppliers).

We are not responsible for the privacy practices or content of these external sites. Please review their privacy policies before providing personal information.

​

10. Children’s Privacy

Our website and products are intended for general audiences and not directed toward children under the age of 13.

We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us to have it removed.

​

11. Your Right to Lodge a Complaint

If you are an EU resident and believe we have not handled your data lawfully, you have the right to lodge a complaint with your local data protection authority (DPA).

​

For contact details of national data protection authorities, visit:
https://edpb.europa.eu/about-edpb/board/members_en

​

12. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.
The updated version will be posted on this page with a new “Effective Date.”