This Privacy Policy explains how Daily.Hodgepodge ("we," "us," "our") collects, uses, shares, and protects information when you visit our website, place an order, subscribe to the Mission Club, sign up for emails, or otherwise interact with our products and services (collectively, the "Services"). By using the Services, you agree to this Policy.
1. Information We Collect
We collect information in three ways:
- Information you provide: name, shipping & billing address, email, phone, payment card details (processed by our payment processor), recipient/gift info, account credentials, child's first name or age range (if you choose to share it for personalization), survey responses, reviews, photos, and customer service correspondence.
- Automatically collected: IP address, device type, browser, operating system, referring URL, pages viewed, time on page, clicks, and similar usage data collected via cookies, pixels, and analytics tools.
- From third parties: payment processors, shipping carriers, fraud-prevention providers, analytics & advertising partners, and social platforms (e.g., when you tag us or log in via a third-party service).
2. How We Use Information
- Process and fulfill orders, subscriptions, gift wrapping, and refills.
- Provide customer support and respond to inquiries.
- Manage accounts and the Mission Club.
- Send transactional emails (receipts, shipping updates, subscription notices).
- Send marketing emails about new boxes, drops, and promotions (you can unsubscribe at any time).
- Personalize the Services and recommend products.
- Detect, prevent, and investigate fraud, abuse, and security incidents.
- Improve our products, website performance, and customer experience.
- Comply with legal obligations and enforce our Terms.
3. Legal Bases (EEA / UK)
If you are in the EEA or UK, we process your data based on: contract performance (orders), legitimate interests (improving our Services, fraud prevention, direct marketing where permitted), consent (cookies, marketing emails where required), and legal obligations (tax/accounting).
4. Cookies & Tracking Technologies
We use cookies, local storage, and similar technologies for essential site function (cart, checkout, login), analytics (e.g., understanding page performance), and marketing (e.g., retargeting and conversion measurement). You can control cookies through your browser settings and, where applicable, our cookie preferences tool. Disabling cookies may break checkout or account features.
5. How We Share Information
We do not sell your personal information for money. We share data with:
- Service providers — payment processors, ecommerce platform, shipping carriers, email service providers, analytics, customer support tools, cloud hosting, fraud prevention.
- Advertising partners — for measurement and targeted advertising; in some U.S. states this may be considered a "sale" or "sharing" for cross-context behavioral advertising. You may opt out (see "Your Rights").
- Legal & safety — to comply with law, subpoenas, or to protect rights, property, or safety of Daily.Hodgepodge, users, or others.
- Business transfers — in connection with a merger, acquisition, financing, or sale of assets.
- With your consent — for any other purpose disclosed at collection.
6. Children's Privacy
Our Services are intended for adults purchasing on behalf of children. We do not knowingly collect personal information directly from children under 13. If you believe a child under 13 has provided us personal information, please contact us and we will delete it. Parents are responsible for any information they choose to share about their child (such as first name or age) for personalization.
7. Data Retention
We retain personal information for as long as needed to fulfill the purposes described above, including to comply with tax, accounting, warranty, dispute-resolution, and other legal obligations. Account data is retained while your account is active; order records are typically retained for 7 years for tax/accounting purposes.
8. Security
We use commercially reasonable administrative, technical, and physical safeguards to protect personal information (TLS encryption in transit, PCI-DSS-compliant payment processing, access controls). No system is 100% secure; we cannot guarantee absolute security.
9. Your Rights & Choices
Depending on your location, you may have the right to:
- Access, correct, or delete your personal information.
- Object to or restrict certain processing.
- Request portability of your data.
- Opt out of marketing emails (unsubscribe link in every email).
- Opt out of "sale" or "sharing" of personal information / targeted advertising (California, Colorado, Connecticut, Virginia, and similar U.S. state laws).
- Withdraw consent where processing is based on consent.
- Lodge a complaint with your local data protection authority.
To exercise these rights, email privacy@dailyhodgepodge.com. We may need to verify your identity. We will not discriminate against you for exercising your rights.
10. California Notice (CCPA/CPRA)
In the last 12 months we may have collected identifiers, commercial information (orders), internet/network activity, geolocation (general), and inferences. We disclose this data to the categories of recipients listed in Section 5. California residents may request access, deletion, correction, and to opt out of sale/sharing. Submit requests via the email above or any "Do Not Sell or Share My Personal Information" link on the site.
11. International Transfers
We are based in the United States and process data there. If you access the Services from outside the U.S., your information will be transferred to and processed in the U.S., which may have different data protection laws than your jurisdiction. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses).
12. Third-Party Links
Our site may link to third-party sites we do not control. Their privacy practices are governed by their own policies.
13. Do Not Track
Our Services do not currently respond to "Do Not Track" browser signals but do honor recognized opt-out preference signals (e.g., Global Privacy Control) where required by law.
14. Changes to This Policy
We may update this Policy from time to time. The "Last updated" date reflects the most recent version. Material changes will be communicated via the Services or by email.
15. Contact Us
Questions, requests, or complaints? Email privacy@dailyhodgepodge.com.