Privacy Policy
DRAFT for lawyer review. Not legal advice and not in effect. Have a lawyer check it before launch. Highlighted items need Jenn's decision.
Effective date: [Jenn decides: launch date] · Last updated: October 31, 2026
This Privacy Policy explains how Jennifer Hightower, doing business as Almost Fiction ("Almost Fiction," "we," "us"), collects, uses and shares personal information when you visit shopalmostfiction.com (the "Site"), create an account, join our email list, or buy from us. Questions or requests: hello@shopalmostfiction.com.
Information we collect
Information you give us
- Orders: name, email, shipping and billing address, phone number (if provided), and what you bought.
- Orders: your email and order number let you look up your order (Find my order). If password accounts are turned on: email, password (stored by our account provider, never visible to us), and order history.
- Email list: your email address and first name (if provided) when you sign up.
- Messages: anything you send through our contact form or by email.
Payment information. Card details are entered on Stripe's secure checkout page and processed by Stripe. We never receive or store your full card number. Stripe shares with us limited details such as the last four digits, card brand, and billing ZIP so we can match payments and handle refunds.
Information collected automatically
- Basic technical information our hosting provider records when you visit, such as IP address, browser type, pages requested and time of visit, used for security and keeping the Site running.
- Device storage (cookies and localStorage): the Site stores a few small items on your device: your shopping basket, whether music is on or off, and whether you have already walked through the shop door. Your account login uses a token stored by Netlify Identity so you stay signed in. Stripe sets its own cookies on its checkout page to prevent fraud.
- We do not use advertising cookies or sell your browsing data. [Jenn decides: if analytics (e.g., Netlify Analytics, Google Analytics) or ad pixels (Meta, TikTok, Pinterest) are added later, this section must be updated before they go live]
How we use your information
- To process, ship and support your orders, including returns and refunds.
- To create and manage your account and show your order history and downloads.
- To send transactional emails (order confirmations, receipts, shipping updates, download links).
- To send marketing emails only if you sign up for our list. Every email has an unsubscribe link.
- To calculate and pay sales tax, keep business records, and meet legal obligations.
- To prevent fraud and keep the Site secure.
- To understand what customers like and improve the shop.
Who we share it with
We share personal information only with service providers that help us run the shop, and only what they need:
| Provider | What they do | Their policy |
|---|---|---|
| Stripe | Payments, fraud prevention, receipts, sales tax calculation | stripe.com/privacy |
| Netlify | Site hosting, order and inventory storage, customer accounts if turned on (Netlify Identity) | netlify.com/privacy |
| Kit (formerly ConvertKit) | Email list and newsletters (only if you subscribe) | kit.com/privacy |
| Order email provider [Jenn decides: e.g., Resend] | Sending order confirmation emails and download links | Provider's own policy |
| Shipping carriers (e.g., USPS) | Delivering your order | Carrier's own policy |
We may also share information if required by law, to protect our rights or someone's safety, or with a successor if the business is reorganized or sold (for example, if Almost Fiction moves into a company we own), in which case this policy would continue to apply.
We do not sell your personal information, and we do not share it for cross-context behavioral (targeted) advertising.
How long we keep it
We keep order records for as long as needed for taxes and accounting (generally up to 7 years). Account information is kept until you delete your account. Email-list information is kept until you unsubscribe or ask us to delete it.
Your choices and rights
Wherever you live, you can ask us to:
- Access the personal information we have about you, and get a copy;
- Correct information that's wrong;
- Delete your information (we may keep what the law requires, like tax records);
- Opt out of marketing emails at any time with the unsubscribe link;
- Opt out of any sale of personal information or targeted advertising (we don't do either).
To make a request, email hello@shopalmostfiction.com from the email address on your account or order. We'll confirm your request and respond within 45 days. If we deny your request, you may appeal by replying to our decision with "Appeal" in the subject line, and we'll respond within 60 days. If your appeal is denied, Texas residents may contact the Texas Attorney General.
Texas residents (Texas Data Privacy and Security Act) and California residents (CCPA/CPRA): the rights above are designed to meet these laws. We do not process sensitive personal data, sell personal data, or use it for targeted advertising or profiling. You may use an authorized agent to make a request, and we won't discriminate against you for using your rights. We honor browser Global Privacy Control signals as an opt-out of any future sale or targeted advertising.
Children's privacy
The Site is intended for adults and is not directed to children under 13. We don't knowingly collect personal information from children under 13. If you believe a child has given us personal information, email us and we'll delete it.
Security
We use reputable providers (Stripe, Netlify, Kit) that encrypt data in transit, and we limit who can access customer information. No method of storage or transmission is 100% secure, so we can't guarantee absolute security.
Changes
We may update this policy. The "Last updated" date shows the latest version. If we make important changes, we'll post a notice on the Site or email account holders.
Contact
Jennifer Hightower dba Almost Fiction · hello@shopalmostfiction.com · Texas, USA
Questions: hello@shopalmostfiction.com