Privacy policy

Effective Date: April 17, 2026

Last Updated: April 17, 2026

Shop Linna ("we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect when you visit shoplinna.com (the "Site") or purchase our hand-drawn greeting cards and paper goods, how we use it, who we share it with, and the rights you have over your information.

By using the Site, you agree to the practices described in this policy. If you do not agree, please do not use the Site.

1. Who We Are

Shop Linna is a California-based small business that designs and sells hand-drawn greeting cards and paper goods printed on 100% recycled materials with eco-friendly packaging.

For questions about this policy or your personal information, contact us at:
Email: info@shoplinna.com

2. Information We Collect

We collect the following categories of personal information:

Information you provide to us directly

  • Contact details (name, email address, phone number)
  • Shipping and billing addresses
  • Payment information (processed securely by our payment processors — we do not store full card numbers)
  • Account login credentials, if you create an account
  • Order history and customer service correspondence
  • Newsletter or marketing preferences
  • Any information you submit through contact forms, reviews, or surveys

Information we collect automatically

  • IP address and approximate location
  • Device type, browser type, operating system, and screen resolution
  • Pages viewed, links clicked, time spent on pages, and referring URLs
  • Session recordings and heatmap data reflecting how you interact with the Site (see Section 4)
  • Cookies and similar tracking technologies (see Section 5)

Information from third parties

  • Data from payment processors confirming transactions
  • Data from shipping carriers related to delivery status
  • Data from analytics and advertising partners, including audience and behavioral insights

3. How We Use Your Information

We use your information to:

  • Process, fulfill, and ship your orders
  • Communicate with you about orders, customer service inquiries, and account activity
  • Send marketing communications (only where permitted or where you have opted in)
  • Improve the Site, our products, and the customer experience
  • Analyze traffic sources, user behavior, and site performance
  • Detect and prevent fraud, abuse, and security incidents
  • Comply with legal obligations, including tax and consumer protection laws

Legal bases for processing (GDPR). If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal information on the following legal bases:

  • Contract: to fulfill your orders and provide customer service
  • Legitimate interests: to improve our Site, prevent fraud, and run our business, provided those interests are not overridden by your rights
  • Consent: for marketing communications and non-essential cookies, which you may withdraw at any time
  • Legal obligation: to comply with applicable laws and regulations

4. Analytics, Session Recording, and Site Optimization Tools

We rely on a small number of trusted third-party tools to understand how visitors use the Site and to improve our products and content.

Google Analytics 4 (GA4). We use Google Analytics 4 to understand user acquisition, traffic sources, and on-site behavior. GA4 uses cookies and similar identifiers to collect information such as the pages you visit, how you arrived at the Site, your approximate location, device information, and the actions you take. This information helps us measure the effectiveness of our content and marketing. You can learn more about Google's practices at policies.google.com/privacy and opt out of GA4 tracking using the Google Analytics Opt-out Browser Add-on.

Microsoft Clarity. We use Microsoft Clarity to capture session recordings and heatmaps that show how visitors navigate the Site — including mouse movements, clicks, scrolls, and pages visited. This helps us identify usability issues and improve the shopping experience. Clarity data is shared with Microsoft and may be used by Microsoft for analytics and advertising purposes, including to improve Microsoft's products and services. For details on how Microsoft uses this data, see the Microsoft Privacy Statement.

Google Search Console. We use Google Search Console and related Google services to monitor and optimize the Site's presence in Google search results. These services provide aggregated data about search queries and site performance and do not identify individual users to us.

We do not sell your personal information to these providers, but under the CCPA/CPRA the sharing of personal information with analytics and advertising partners may be considered "sharing" for cross-context behavioral advertising purposes. See Section 8 for your opt-out rights.

5. Cookies and Tracking Technologies

Cookies are small text files placed on your device that help websites function, remember preferences, and measure usage. We use the following types of cookies:

  • Strictly necessary cookies — required for the Site to function (e.g., shopping cart, checkout, security). These cannot be disabled.
  • Analytics cookies — used by GA4 and Microsoft Clarity to understand site usage.
  • Functional cookies — remember preferences such as language or region.
  • Marketing cookies — used to measure the effectiveness of marketing campaigns and, where applicable, to deliver relevant ads.

Cookie consent. When you first visit the Site, you will see a cookie consent banner that allows you to accept all cookies, decline non-essential cookies, or customize your choices through "Manage preferences." You can change your cookie preferences at any time by clicking the "Manage preferences" option in the cookie banner or the cookie preferences icon on the Site. You may also block or delete cookies through your browser settings, though doing so may affect how the Site functions.

6. How We Share Your Information

We share your information only with parties who help us run our business or as required by law. These include:

  • Service providers, including Shopify (e-commerce platform), payment processors, shipping carriers, email marketing platforms, and customer service tools
  • Analytics and advertising providers, including Google and Microsoft as described above
  • Professional advisors such as lawyers and accountants, where needed
  • Government authorities, where required by law, subpoena, or legal process
  • A successor entity in the event of a merger, acquisition, or sale of business assets

We do not sell your personal information for money. However, certain sharing with analytics and advertising partners may qualify as "sharing" or "sale" under California law. See Section 8 to exercise your opt-out rights.

7. Data Retention and Security

We retain your personal information only for as long as necessary to fulfill the purposes described in this policy, comply with legal obligations (such as tax and accounting requirements), resolve disputes, and enforce our agreements. When information is no longer needed, we securely delete or anonymize it.

We use reasonable administrative, technical, and physical safeguards to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Rights as a California Resident (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (as amended by the California Privacy Rights Act) gives you the following rights:

  • Right to Know. You may request that we disclose the categories and specific pieces of personal information we have collected about you, the sources of that information, the business or commercial purpose for collecting or sharing it, and the categories of third parties with whom we share it.
  • Right to Delete. You may request that we delete personal information we have collected from you, subject to certain legal exceptions.
  • Right to Correct. You may request that we correct inaccurate personal information we maintain about you.
  • Right to Opt-Out of Sale or Sharing. You have the right to opt out of the "sale" or "sharing" of your personal information, including for cross-context behavioral advertising. We do not sell your information for money, but our use of analytics and advertising cookies may qualify as "sharing" under California law.
  • Right to Limit Use of Sensitive Personal Information. You may request that we limit the use of sensitive personal information to what is necessary to provide the goods and services you request.
  • Right to Non-Discrimination. We will not discriminate against you for exercising any of these rights.

How to exercise your rights. Submit a request by emailing info@shoplinna.com or using the "Do Not Sell or Share My Personal Information" link in the Site footer. We will verify your request using information we already have on file, such as your email address or order history. You may also designate an authorized agent to submit a request on your behalf, subject to verification.

We will respond to verified requests within 45 days as required by law.

9. Your Rights Under GDPR (EEA and UK Residents)

If you are located in the EEA or the UK, you have the following rights under the General Data Protection Regulation:

  • The right to access your personal data
  • The right to correct inaccurate or incomplete data
  • The right to request deletion ("right to be forgotten")
  • The right to restrict or object to processing
  • The right to data portability
  • The right to withdraw consent at any time where processing is based on consent
  • The right to lodge a complaint with your local data protection authority

To exercise any of these rights, contact us at info@shoplinna.com. We may ask you to verify your identity before fulfilling the request.

10. International Data Transfers

We are based in California, United States. If you access the Site from outside the United States, your information may be transferred to, stored in, and processed in the United States or other countries where our service providers operate. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.

11. Children's Privacy

The Site is not directed to children under 13 (or under 16 in the EEA/UK), and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last Updated" date at the top and, where appropriate, provide additional notice (such as an email or banner on the Site).

13. Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your personal information, please contact us:

Shop Linna
Email: info@shoplinna.com