Last updated: August 4, 2026
Nifty Den (“Nifty Den”, “we”, “us”) operates https://niftyden.com. This policy explains what we collect, why, who we share it with, and what you can make us do about it.
We do not sell your personal information. We never have.
Information you give us
- Order information — name, shipping address, billing address, email address, phone number.
- Payment information — processed directly by Stripe and PayPal. Card numbers never touch our servers and we cannot see them. We receive only a transaction reference, the card brand, and the last four digits.
- Account information — if you create an account, your email and a hashed password.
- Communications — anything you send to hello@niftyden.com or through a form on this site.
- Reviews — the name and rating you choose to publish on a product page.
Information collected automatically
- IP address, browser type, device type, operating system and referring page
- Pages viewed, items added to cart, and time on site
- Cookies and similar technologies (see below)
Why we use it
| Purpose | What it covers |
|---|---|
| Fulfilling your order | Payment, packing, shipping, tracking, returns |
| Customer support | Answering your emails, resolving delivery problems |
| Fraud prevention | Screening high-risk transactions, protecting cardholders |
| Improving the store | Understanding which products and pages work |
| Marketing | Only if you opted in, and only until you opt out |
| Legal obligations | Tax records, accounting, responding to lawful requests |
Cookies
We use:
- Strictly necessary cookies — cart contents, checkout session, security. The store cannot function without these.
- Analytics cookies — aggregate traffic measurement.
- Marketing cookies — only set after you consent, used to measure ad performance.
You can clear or block cookies in your browser settings. Blocking strictly necessary cookies will break the cart.
Who we share it with
We share the minimum necessary with:
- Payment processors — Stripe, Inc. and PayPal, Inc., to take payment
- Fulfilment partners — to pick, pack and ship your order (they receive your name, address and phone number, nothing else)
- Carriers — USPS, UPS, FedEx, DHL and regional partners, for delivery
- Our hosting and email providers — to run the site and send order emails
- Analytics providers — in aggregated or pseudonymised form
- Professional advisers and authorities — where we are legally required to
We do not sell or rent your personal information to data brokers, advertisers, or anyone else.
International transfers
Some fulfilment partners are located outside the United States. When we send them a shipping address, that transfer is limited to what is required to deliver your order.
How long we keep it
- Order and transaction records: 7 years (US tax and accounting requirements)
- Account data: until you ask us to delete it
- Support emails: 24 months
- Analytics data: 26 months
Security
Traffic to this site is encrypted with TLS. Payment data is handled by PCI-DSS Level 1 certified processors. Administrative access is restricted and protected by two-factor authentication.
No system is perfect. If we ever suffer a breach affecting your data, we will notify you and the relevant authorities as required by applicable state law.
Your California privacy rights
If you are a California resident, the CCPA as amended by the CPRA gives you the right to:
- Know what personal information we have collected about you, and its sources, purposes and recipients
- Delete personal information we hold about you
- Correct inaccurate personal information
- Opt out of the sale or sharing of personal information — we do not sell or share it, so there is nothing to opt out of
- Limit the use of sensitive personal information — we do not collect any
- Non-discrimination — exercising any of these rights will never change the price you pay or the service you get
To exercise any of these, email hello@niftyden.com with the subject line “Privacy Request”. We will verify your identity against your order history and respond within 45 days.
Other US state rights
Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana and other states with comprehensive privacy laws have broadly equivalent rights of access, correction, deletion and portability. Use the same email address and we will handle your request under whichever law applies to you.
If you are in the UK or EEA
We do not target the UK or EEA, but if you contact us from there you may request access, rectification, erasure, restriction, portability or object to processing. Our lawful bases are contract performance (fulfilling your order), legitimate interests (fraud prevention, improving the store) and consent (marketing).
Children
This store is not directed at anyone under 18, and we do not knowingly collect information from children under 13. If you believe a child has given us personal information, email hello@niftyden.com and we will delete it.
Do Not Track
Browsers send Do Not Track signals inconsistently and there is no agreed standard for honouring them. We do not respond to DNT signals — but we also do not sell your data, which is what DNT was created to prevent.
Marketing emails
We only send marketing email to people who asked for it. Every message has a one-click unsubscribe link, and unsubscribing is instant. Order confirmations, shipping notices and refund notices are transactional — you will keep receiving those as long as you have an open order.
Changes
If we change this policy we will update the date at the top. Material changes affecting how we use your data will be announced by email to account holders.
Contact
Privacy questions, requests and complaints: hello@niftyden.com
Nifty Den