Last updated: 1 September 2026
Who we are
Hidden Grove Creations is a small handmade goods workshop based in California, United States. We make laser-engraved, woodworking and crochet pieces and sell them at hiddengrovecreations.com and on Etsy.
This policy explains what personal information this website collects, why, who else sees it, and what you can do about it. If anything here is unclear, please get in touch and ask.
The short version
We collect what we need to send you what you bought and to answer your messages. We do not sell your personal information for money. We do use advertising and marketing tools that may share limited browsing information with third parties — how to opt out is explained below. We do not offer customer accounts, so there is nothing to sign up for.
What we collect, and when
When you place an order
To take and fulfil an order we collect your name, billing address, shipping address, email address, phone number if you give one, the items and options you chose, and any notes you add to the order. We also record the date and time of the order and the IP address the order came from, which helps us detect fraud.
We do not see or store your full card number. Card and payment details are handled directly by our payment processors (below). We receive only a confirmation that payment succeeded, along with the last few digits and card type.
When you contact us
If you use our contact form, we collect your name, your email address, the topic you select and whatever you write in your message. That submission is emailed to us and also stored in this website’s database so we do not lose it.
When you just browse
Like almost every website, our server and the services listed below record technical information automatically: IP address, browser and device type, the pages you viewed, and the site you arrived from. Adding an item to your cart also stores a cookie in your browser so the cart still exists when you come back.
Who we share information with
We are a one-person operation and rely on outside services to run the shop. Each of these receives some of your information, and each has its own privacy policy governing what it does with it.
Payments
- PayPal — processes payments made through PayPal, and receives your name, address, email and order total.
- WooPayments (Automattic, using Stripe) — processes card payments and receives the same order and payment information.
Shipping and tax
- WooCommerce Shipping and WooCommerce Tax (Automattic) — receive your shipping address to produce labels and calculate tax.
- The carrier that delivers your parcel receives your name and shipping address.
Marketing and advertising
These services are connected to our store and may receive information about what you view or buy, and may set cookies or tracking pixels in your browser:
- Mailchimp — email marketing. Receives your email address and order history, including carts you started but did not complete. You only receive marketing email if you opt in.
- Pinterest — product listings and advertising measurement.
- TikTok — advertising measurement.
- Google (Listings & Ads) — product listings and advertising measurement.
Analytics and site security
- Jetpack (Automattic) — provides visitor statistics, store analytics, spam filtering and brute-force login protection. It receives IP addresses and page-view information.
- Akismet (Automattic) — spam filtering.
- Our web host — stores the website and its database, including everything described above.
We do not sell your personal information for money, and we do not hand your details to anyone beyond the services above except where the law requires it.
Cookies
Cookies are small files stored by your browser. This site uses them to keep your shopping cart between visits, to remember your progress through checkout, to measure visits, and — through the advertising services above — to measure the effect of advertising. You can block or delete cookies in your browser settings, though the cart and checkout will not work properly without them.
How long we keep it
- Orders — kept for at least seven years, because tax and accounting rules require it.
- Contact form messages — kept while they are useful to us and deleted when they are not.
- Analytics and log data — kept according to each service’s own retention schedule.
Your choices
You can ask us to tell you what personal information we hold about you, correct it if it is wrong, or delete it. We will do so unless we are legally required to keep it — order records being the main example. You can unsubscribe from marketing email using the link at the bottom of any message we send.
To make any of these requests, use our contact form. We may need to ask for information that confirms the request is really from you.
California privacy rights
If you live in California, the California Consumer Privacy Act as amended by the CPRA gives you the right to know what personal information we collect and who we disclose it to, the right to have it deleted, the right to have it corrected, and the right not to be treated differently for exercising those rights.
We do not sell personal information for money. However, the advertising services listed above may receive information about your visit in a way California law treats as sharing for cross-context behavioural advertising. To opt out, you can send us a request through our contact form, or enable Global Privacy Control in a browser that supports it, which we treat as an opt-out signal.
You may use an authorised agent to make a request on your behalf.
Children
This shop is intended for adults. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, contact us and we will delete it.
Buying from us on Etsy
This policy covers this website only. If you order from our Etsy shop, Etsy collects and handles your information under its own privacy policy, and we see only what Etsy passes to us in order to fulfil your order.
Changes to this policy
If we change how we handle personal information, we will update this page and change the date at the top.
How to reach us
For anything to do with privacy or your personal information, please use the contact form and choose “Something else” as the topic. We aim to respond to privacy requests within 45 days, as California law requires.