Privacy
This is what we collect when you use the site, why we collect it, who else sees it, and how you can see, change or delete it.
Effective date
This notice is effective October 8, 2026. It applies to enchantedearthtx.com and to any email we send you.
Who we are
Enchanted Earth is a small retail business in Texas, United States. Our legal business name, mailing address and contact email are shown at checkout and at the bottom of every email we send. For anything about this notice, email us at the address on the contact page.
What we collect
Identifiers and contact details: your name, email address, shipping address, and anything else you type into a form on the site.
Account and profile records, if you create an account: an account ID, your saved addresses, your role, and authentication records such as a scrambled password, a Google sign-in identifier if you use it, verification status, login sessions and login history.
Order, cart, payment and fulfilment records: the items you bought or put in a cart, quantities, prices, discounts, sales tax, shipping and delivery address, order status, tracking numbers, the type of payment method and the card brand and last four digits, our payment processor's reference numbers, the policies you agreed to when you ordered, and any refunds or disputes. Your full card number is entered directly with our payment processor and never reaches our servers.
Preferences and personalization: favorites, recently viewed items, and any favorite color, star sign or note you give us to guide a Scoop.
Device, browser and network records: your IP address, browser type (user agent), the pages requested, information about visits and how quickly pages load, and security records such as failed sign-in attempts, fraud checks and rate-limit events.
Support and customer service records: your name, email address, order number, and the messages and correspondence you send us. Messages sent through the contact form are forwarded to our support mailbox, which is run by an email provider, so a copy also lives there.
Why we use it
To provide and operate the site, your account, your cart, search and recently viewed items. To authenticate you when you log in and to protect account security. To process orders, take payments, arrange fulfilment and delivery, and issue refunds. To personalize the items you asked us to personalize. To communicate with you about your orders and to provide support when you contact us. For security, to prevent fraud and abuse, to apply rate limits, and to respond to payment disputes. And to keep the accounting, tax and other records the law requires and to establish or defend legal claims. To understand site traffic and improve how quickly pages load.
We do not sell your personal information. If you choose the optional filming service, we may share a video of your order on our website and social media accounts, as explained under 'Optional packing videos.' We do not send marketing email. If we start a newsletter, it will be opt-in only, and we will update this notice first.
Cookies, browser storage and tracking signals
We use a small number of functional cookies: one to keep you signed in, one to keep track of your cart if you are not signed in, one for the checkout details you are typing, and short-lived ones for sign-in security and for showing you your order confirmation. Some hold a random or signed token; the checkout one holds the address you typed. Session records on our server may include your IP address and browser type.
We use browser storage to remember up to 12 recently viewed products. The list updates as you browse and has no automatic expiry. You can remove it by clearing this website's stored data in your browser. Clearing cookies and stored data may also sign you out, reset an unfinished checkout or remove access to your guest cart. It does not delete your account or orders.
We do not use advertising trackers or share your browsing activity for targeted advertising across other websites. The site does not change these practices in response to Do Not Track (DNT) or Global Privacy Control signals. Our hosting, content delivery, payment and email providers receive the request and transaction information needed to provide their services.
When you use our payment features, Stripe may use cookies and similar technologies to process payments and help detect and prevent fraud. Stripe explains these technologies in its Cookie Policy: https://stripe.com/legal/cookies-policy.
Our website provider measures visits and page-loading times to help us improve the site.
Who we share it with
We share personal information with the following service providers and other recipients as needed to run the shop: our payment processor, Stripe (including Link, its saved-payment service, if you choose to use it), and, through it, banks and card issuers; Google, if you choose to sign in with Google; our email provider and the support mailbox provider; our hosting, content delivery, database, storage, security and website measurement providers; shipping carriers and delivery providers, who receive your name and address to deliver your order; and, when needed, professional advisers such as an accountant, auditors or insurers.
We may also disclose information to government authorities, courts or other parties when required by law or legal process, such as a court order or subpoena, or when it is necessary to protect someone's safety or to establish or defend legal claims. If the business is ever sold or merged, customer records may transfer to the new owner under this same notice.
If you choose the optional filming service, your first name, order number and the items in your order may also be shared with the public and with the platforms where we post the footage. See 'Optional packing videos' for details.
Optional packing videos
If you choose filming, we record your items being selected and packed and post the video on our social media when your order ships. Your first name, order number and items may appear publicly. We may also use the video, clips or photos on our website and social media to promote the shop. We do not email the video or a link.
We do not show your last name, notes, address, email address or payment details. Social media platforms receive the content we post, and other people may copy or share it. Filming is optional and must be selected when you order. You must be at least 18. If you leave it unchecked, we do not film or post your order.
To withdraw permission, email enchantedearthtx@earthfulfillments.com. We will stop using the footage and remove it from our website and accounts we control within 3 business days. We cannot remove copies other people have downloaded or shared. Withdrawing permission does not refund the filming fee once your order has been filmed.
These permissions apply only when you select the filming option that explains the use of your first name and order number. Earlier orders and filming selections keep their original permissions.
Your choices and requests
If you have an account you can review your orders and update your name, email address, password and saved addresses from your account page at any time. You can also delete your account from the same page. To cancel an order that has not shipped, email us with the order number.
Whether or not you have an account, you can contact us to access a copy of the personal information we hold about you, to correct it, or to ask us to delete it. Send the request by email or through the contact form. To protect you, we may need to verify your identity before we act, usually by confirming the request from the email address on the account or order.
Deleting your account removes your login, saved addresses, favorites and cart. Order, payment, support, security and backup records may be kept for the reasons in the next section, with the account detached from them. Deleting your account does not remove the recently viewed list stored in your browser or messages already held in our support mailbox. You can clear the browser list yourself. To ask us to delete support messages, email enchantedearthtx@earthfulfillments.com. We may need to keep some records for the reasons explained under 'How long we keep it.'
Residents of some states have additional rights under state privacy law. Where a law applies to us, we will honor it; use the same contact details to make a request and tell us which state you live in. Nevada residents: we do not sell personal information. To send us a request about it, email enchantedearthtx@earthfulfillments.com.
How long we keep it
How long we keep a record depends on the type of record, the purpose we need it for, and the legal obligation that applies to it. Sign-in sessions and temporary security records are deleted within days or weeks. Order, payment, refund, support and dispute records are kept for as long as we need them to complete your order, handle returns and disputes, and meet accounting and tax rules, which is generally up to 7 years, and for the limitation period for legal claims.
If a record is subject to a legal hold or litigation hold, an active dispute or an investigation, we keep it until that matter is finished. When no purpose or requirement remains, we delete the record or strip it of anything that identifies you.
Children
The site is not directed at children and you must be 18 or older to place an order or hold an account. We do not knowingly collect personal information from anyone under 18. If you think a child has given us personal information, email us and we will delete it.
Security
We use HTTPS everywhere, store passwords only as salted hashes, keep card numbers off our servers entirely, and limit who can reach customer records. We will tell you if a breach affects your information, as the law requires.
Changes to this notice
When we update this notice, we change the effective date above. If we make a material change to how we collect, use or share personal information, we will explain the change in a notice on this website or by email before it takes effect. We will ask for your consent where the law requires it.
Contact
Questions or requests about privacy: use the contact form or the email address on the contact page. Please do not email us passwords or full card numbers.