Privacy Policy
Kason's Mimi Handcrafted Soaps operates this website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). Kason's Mimi Handcrafed Soaps is powered by Ionos which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.
Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.
Data Controller Information
The entity responsible for the collection, processing, and use of your personal data under applicable data protection laws is:
- Business Name: Kason's Mimi Handcrafted Soaps
- Contact Email: kasonsmimihs@gmail.com
- Mailing Address: 9221 Steel St., Detroit, MI 48228
As the Data Controller, we ensure that your personal information—such as your name, shipping address, and email—is collected solely to fulfill your orders for our handmade soaps and body butters, communicate updates about your purchases, and provide a secure shopping experience.
Core Data Processors
To run our online shop safely and efficiently, we securely share necessary customer data with trusted third-party service providers who act as Data Processors on our behalf. Your financial and shipping details are processed strictly by the following partners:
- Website Hosting & Infrastructure: IONOS Inc. handles our secure storefront infrastructure, website security, and baseline analytics traffic.
- Payment Processing: Stripe securely manage all payment data. We do not store or see your credit card numbers on our servers; your transactions are handled entirely through their encrypted, PCI-compliant gateways.
- Order Fulfillment & Shipping: The United States Postal Service (USPS) receives your name, delivery address, and tracking details strictly to transport and safely deliver your orders.
Personal Information We Collect or Process
When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been de-identified, so that it cannot identify or be reasonably linked to you. We may collect or process the following categories of personal information, including inferences drawn from this personal information, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:
Contact details including your name, address, billing address, shipping address, phone number, and email address.
Financial information including credit card, debit card, and financial account numbers, payment card information, financial account information, transaction details, form of payment, payment confirmation and other payment details.
Account information including your username, password, security questions, preferences and settings.
Transaction information including the items you view, put in your cart, add to your wish list, or purchase, return, exchange or cancel and your past transactions.
Communications with us including the information you include in communications with us, for example, when sending a customer support inquiry.
Device information including information about your device, browser, or network connection, your IP address, and other unique identifiers.
Usage information including information regarding your interaction with the Services, including how and when you interact with or navigate the Services.
Health and Adverse Event Information: Any health-related details, skin allergy descriptions, or physical symptoms you provide to us when reporting an adverse reaction to our products, as required to fulfill our regulatory recordkeeping obligations.
Personal Information Sources
We may collect personal information from the following sources:
Directly from you including when you create an account, visit or use the Services, communicate with us, or otherwise provide us with your personal information;
Automatically through the Services including from your device when you use our products or services or visit our websites, and through the use of cookies and similar technologies;
From our service providers including when we engage them to enable certain technology and when they collect or process your personal information on our behalf;
From our partners or other third parties.
How We Use Your Personal Information
Depending on how you interact with us or which of the Services you use, we may use personal information for the following purposes:
Provide, Tailor, and Improve the Services. We use your personal information to provide you with the Services, including to perform our contract with you, to process your payments, to fulfill your orders, to remember your preferences and items you are interested in, to send notifications to you related to your account, to process purchases, returns, exchanges or other transactions, to create, maintain and otherwise manage your account, to arrange for shipping, to facilitate any returns and exchanges, to enable you to post reviews, and to create a customized shopping experience for you, such as recommending products related to your purchases. This may include using your personal information to better tailor and improve the Services.
Marketing and Advertising. We use your personal information for marketing and promotional purposes, such as to send marketing, advertising and promotional communications by email, text message or postal mail, and to show you online advertisements for products or services on the Services or other websites, including based on items you previously have purchased or added to your cart and other activity on the Services.
Security and Fraud Prevention. We use your personal information to authenticate your account, to provide a secure payment and shopping experience, detect, investigate or take action regarding possible fraudulent, illegal, unsafe, or malicious activity, protect public safety, and to secure our services. If you choose to use the Services and register an account, you are responsible for keeping your account credentials safe. We highly recommend that you do not share your username, password or other access details with anyone else.
Communicating with You. We use your personal information to provide you with customer support, to be responsive to you, to provide effective services to you and to maintain our business relationship with you.
Legal Reasons. We use your personal information to comply with applicable law or respond to valid legal process, including requests from law enforcement or government agencies, to investigate or participate in civil discovery, potential or actual litigation, or other adversarial legal proceedings, and to enforce or investigate potential violations of our terms or policies.
Regulatory Compliance: We use your personal information and any submitted health or adverse event data to comply with our mandatory federal obligations under the Modernization of Cosmetics Regulation Act (MoCRA), which includes maintaining a secure adverse event log and reporting serious adverse health events to the Food and Drug Administration (FDA).
Security and Retention of Sensitive Adverse Event Data
Any health-related data or information regarding skin sensitivities provided to us through customer support channels is treated with strict confidentiality. For your protection and in compliance with federal MoCRA safety regulations, health-related communications and adverse event records are securely archived and retained for a mandatory period of three (3) years to comply with cosmetic safety tracking laws. This data is processed strictly for regulatory reporting purposes and is never utilized or shared for marketing or advertising purposes.