Privacy Policy

1. Who We Are

ShopSmart is operated by House of Pain Tattoo LLC, Rockford, Winnebago County, Illinois. This Privacy Policy explains how we collect, use, disclose, and protect your personal information in compliance with the Illinois Personal Information Protection Act (815 ILCS 530/), Illinois Internet Security and Privacy Act (5 ILCS 179/), and applicable federal law including the FTC Act.

2. Information We Collect

• Account information: Name, email address, phone number, password (SHA-256 encrypted — we never store plaintext passwords)
• Order information: Shipping address, items purchased, order amounts, order history
• Payment information: Last 4 digits and card brand only. Full card numbers are processed by our payment processor and are never stored on our servers
• Device & technical data: IP address, browser type, device type, pages visited, time stamps
• Communications: Messages you send to us for support or refund requests

We do NOT collect: Social Security numbers, government ID numbers, biometric data, or full financial account numbers.

3. How We Use Your Information

• Process and fulfill your orders and send order confirmations
• Send shipping and tracking notifications
• Respond to customer service inquiries and refund requests
• Send administrative communications (account updates, policy changes)
• Detect and prevent fraud and unauthorized access
• Comply with legal obligations
• With your consent: send promotional emails (you may opt out at any time)

4. Information Sharing & Disclosure

We do not sell, trade, or rent your personal information. We may share your information only:

• With wholesale suppliers: Your name and shipping address are shared with our suppliers solely to fulfill your order
• With shipping carriers: Name and address for delivery
• With payment processors: Payment data is processed by PCI-DSS compliant processors; we do not receive or store full card numbers
• As required by law: To comply with legal process, court orders, or government requests
• To protect rights: To enforce our Terms, protect safety, or prevent fraud
• In a business transfer: If House of Pain Tattoo LLC is sold or merges with another entity, your data may transfer with appropriate notice

5. Data Security

We implement industry-standard security measures including SHA-256 password hashing with cryptographic salt, HTTPS/TLS encryption for all data in transit, and restricted access controls. However, no internet transmission is 100% secure.

Illinois Data Breach Notification: In the event of a data breach that compromises your personal information as defined under 815 ILCS 530/5, we will notify affected Illinois residents within 45 days of discovery, as required by the Illinois Personal Information Protection Act.

6. Cookies & Tracking

We use essential cookies and local/session storage for shopping cart persistence, session management, and user preference storage. We do not use third-party advertising tracking cookies. You can disable cookies in your browser settings, though this may affect Platform functionality.

7. Your Rights (Illinois & Federal)

• Access: You may request a copy of the personal information we hold about you
• Correction: You may request correction of inaccurate information through your account
• Deletion: You may request deletion of your account and associated personal data, subject to our legal retention obligations
• Opt-out: You may opt out of promotional emails at any time via the unsubscribe link or by emailing us
• Data Portability: You may request a copy of your data in a portable format

To exercise any of these rights, contact us at shopsmarterhere@hotmail.com.

8. Children's Privacy (COPPA)

ShopSmart is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we discover we have collected information from a child under 13, we will delete it immediately. If you believe we have collected such information, contact us immediately.

9. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services, comply with legal obligations, resolve disputes, and enforce our agreements. Order records are retained for a minimum of 5 years as required for tax and accounting purposes.

10. Contact Us

House of Pain Tattoo LLC — Privacy Officer
Rockford, Winnebago County, Illinois
Email: shopsmarterhere@hotmail.com