Privacy policy

ICraftPuzzles, operated by MAZIGH LLC

Effective date: 13 September 2026

This Privacy Policy explains how MAZIGH LLC, trading as ICraftPuzzles ("we", "us", "our"), collects, uses, shares and protects personal information when you visit icraftpuzzles.com, place an order, or interact with us on social media.

By using our website you agree to the practices described below.

1. Information we collect

Information you give us

Name, email address, phone number
Billing and shipping address
Order history and cart contents
Messages you send to customer support
Newsletter and marketing preferences

Information collected automatically

IP address, approximate location derived from it, and time zone
Browser type, operating system, device identifiers
Pages and products viewed, referring website, session duration
Cookies and similar technologies (see section 4)

Payment information

We do not collect, see or store your full card number. Payments are processed directly by Shopify Payments and other payment providers under their own privacy terms and PCI-DSS standards. We receive only a transaction confirmation and the last four digits of the card.

We do not knowingly collect sensitive personal information such as health data, biometric identifiers, precise geolocation, or information revealing racial or ethnic origin, religious beliefs or sexual orientation.

2. How we use your information

Process, fulfil and deliver your orders
Send order confirmations, shipping updates and tracking information
Handle returns, refunds and customer support requests
Detect and prevent fraud, abuse and chargebacks
Send marketing emails, where you have opted in
Measure advertising performance on Google and Meta
Improve our products, our site and our service
Meet legal, tax and accounting obligations

3. Who we share your information with

We do not sell your personal information for money. We share it only with:

Recipient	Purpose
Shopify Inc.	Hosting our store, processing orders and payments
Payment providers	Taking payment, fraud screening, chargebacks
Suppliers and shipping carriers	Packing, dispatch and delivery
Google and Meta	Analytics, advertising measurement and targeted advertising
Email and support tools	Sending transactional and marketing messages
Legal and regulatory authorities	Where required by law or to protect our rights

Under certain US state privacy laws, our use of advertising cookies and pixels may be classed as a "sale" or "sharing" of personal information for cross-context behavioural advertising. You can opt out at any time -(see section 6).

4. Cookies and tracking technologies

We use cookies, pixels and similar technologies in four categories:

Strictly necessary: cart, checkout, login, security. These cannot be switched off.
Functional: remembering your preferences.
Analytics: understanding how the site is used.
Advertising: Google Ads and the Meta Pixel, to measure campaigns and show relevant ads.

You can manage your choices through our cookie banner and in your browser settings. Blocking strictly necessary cookies will prevent checkout from working.

5. Global Privacy Control

We recognise the Global Privacy Control (GPC) signal. If your browser sends a GPC signal, we treat it as a valid request to opt out of the sale and sharing of your personal information for targeted advertising, for that browser and device.

6. Your privacy rights

Depending on where you live, you may have the right to:

Know and access the personal information we hold about you
Correct inaccurate personal information
Delete your personal information
Obtain a copy of your data in a portable format
Opt out of targeted advertising and of the sale or sharing of your personal information
Not be discriminated against for exercising any of these rights

Residents of California, Colorado, Connecticut, Texas, Virginia and other states with comprehensive privacy laws have these rights under their state legislation.

To exercise a right, email privacy@icraftpuzzles .com with the subject "Privacy Request". We respond within 45 days and may extend once by a further 45 days where the request is complex. We may ask you to verify your identity first.

Appeals. If we decline your request, reply with the subject "Privacy Appeal". We respond in writing within 45 days. If we deny your appeal, you may contact your state Attorney General.

7. Authorised agents

You may use an authorised agent to submit a request on your behalf. We will ask for written proof of authorisation and may still verify your identity directly.

8. How long we keep your data

Order and transaction records: 7 years, for tax and accounting
Customer support messages: 3 years from last contact
Marketing contacts: until you unsubscribe, then removed within 30 days
Analytics and advertising data: up to 26 months

9. Data security

Our store runs over HTTPS with TLS encryption, and payment data is handled by PCI-DSS compliant processors. Access to customer data is limited to people who need it. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

10. International transfers

We operate from the United States and work with suppliers and service providers located in other countries. Your personal information may therefore be transferred to, stored in and processed in countries whose data protection laws differ from those of your state. We take reasonable steps to ensure it remains protected in line with this policy.

11. Children's privacy

Our store is intended for adults. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, contact us and we will delete it promptly.

12. Third-party links

Our site may link to other websites and social media platforms. We are not responsible for their privacy practices and encourage you to read their policies.

13. Changes to this policy

We may update this policy to reflect changes in our practices or in the law. The date at the top always shows the current version. Material changes will be announced on this page.